last executing test programs: 4m19.467835886s ago: executing program 3 (id=492): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4m14.134574962s ago: executing program 3 (id=503): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/150, 0x96}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) 4m12.947711999s ago: executing program 3 (id=505): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 4m9.59772841s ago: executing program 3 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022405000000000009040000000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x7323, 0x0, 0x5, 0x0, 0x0) 4m1.424467336s ago: executing program 3 (id=534): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 3m59.185234977s ago: executing program 3 (id=536): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1f7482, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) 3m43.164214577s ago: executing program 32 (id=536): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r5, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1f7482, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) 17.637645991s ago: executing program 2 (id=1094): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)=@v2={0x2000000, [{0xed2, 0x2}, {0x5, 0x8}]}, 0x14, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x81) 17.575025667s ago: executing program 2 (id=1095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) landlock_restrict_self(0xffffffffffffffff, 0x0) 17.470873077s ago: executing program 2 (id=1096): syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x27) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 14.245126735s ago: executing program 2 (id=1107): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 9.854483918s ago: executing program 4 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x400, 0x0, 0x229, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 8.734657488s ago: executing program 0 (id=1125): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 7.887401872s ago: executing program 4 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xf2558000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket(0x10, 0x3, 0x0) unshare(0x2c020400) r4 = getpid() syz_open_procfs$userns(r4, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x0, 0x0) 7.061216034s ago: executing program 1 (id=1131): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef6d, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6.972540782s ago: executing program 1 (id=1132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x80, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x100042, 0x100) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) 6.867544973s ago: executing program 0 (id=1133): syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x4000054, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x3, 0x9, 0x96, 0x1000000000005, 0x50}}], 0x58, 0x20008011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x387}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0x5}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5.500781867s ago: executing program 1 (id=1135): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.493506548s ago: executing program 5 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 5.283763879s ago: executing program 4 (id=1137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.230760674s ago: executing program 2 (id=1138): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x400, 0x0, 0x229, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 4.409241265s ago: executing program 5 (id=1139): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00030300ffffffff00000000000000000700000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.346303322s ago: executing program 5 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000010101030000000000000000020000000c00198008000100ad040000240001800c000280050001001100000014000180"], 0x44}}, 0x0) 4.338656902s ago: executing program 0 (id=1141): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 4.215723084s ago: executing program 4 (id=1142): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) 4.121506994s ago: executing program 0 (id=1143): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@dev, @empty}, &(0x7f0000000440)=0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a", 0x11, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 4.120802734s ago: executing program 5 (id=1144): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 2.12855892s ago: executing program 2 (id=1145): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.079778435s ago: executing program 0 (id=1146): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x80, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x100042, 0x100) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) 2.022793251s ago: executing program 1 (id=1147): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42800) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) 1.870710256s ago: executing program 1 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xf2558000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket(0x10, 0x3, 0x0) unshare(0x2c020400) r4 = getpid() syz_open_procfs$userns(r4, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x0, 0x0) 1.845094298s ago: executing program 4 (id=1149): socket$inet_udp(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.52532507s ago: executing program 4 (id=1150): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 1.393655993s ago: executing program 5 (id=1151): syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x4000054, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x3, 0x9, 0x96, 0x1000000000005, 0x50}}], 0x58, 0x20008011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x387}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0x5}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.11782632s ago: executing program 0 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xf2558000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x3, 0x0) unshare(0x2c020400) r5 = getpid() syz_open_procfs$userns(r5, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x0, 0x0) 1.054082736s ago: executing program 5 (id=1153): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) uname(0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000006693010820505008800000203010902"], 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060400", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r0, @ANYBLOB], 0x40}}, 0x0) 0s ago: executing program 1 (id=1154): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 73.240556][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.265142][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.276159][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.286843][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.326006][ T4189] device veth1_vlan entered promiscuous mode [ 73.343020][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.365729][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.374589][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.392080][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.427898][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.438301][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.454201][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.463822][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.472540][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.481282][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.491843][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.504498][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.518824][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.531632][ T4189] device veth0_macvtap entered promiscuous mode [ 73.546130][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.554940][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.566325][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.575759][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.584750][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.597646][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.607302][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616238][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625779][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646208][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.657711][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.669854][ T4189] device veth1_macvtap entered promiscuous mode [ 73.696207][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.733409][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.746272][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.757833][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.780285][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.791437][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.803200][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.812811][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.821910][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.830697][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.839989][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.851683][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.863932][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.875005][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.884633][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.900642][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.909950][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.936583][ T4188] device veth0_vlan entered promiscuous mode [ 73.951831][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.966902][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.976531][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.986009][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.995641][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.005260][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.037015][ T4188] device veth1_vlan entered promiscuous mode [ 74.078666][ T4183] device veth0_vlan entered promiscuous mode [ 74.112390][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.124045][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.137443][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.146377][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.155732][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.164522][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.196105][ T4183] device veth1_vlan entered promiscuous mode [ 74.205133][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.214037][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.223086][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.239733][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.253252][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.265154][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.270588][ T4194] device veth0_vlan entered promiscuous mode [ 74.280553][ T4251] Bluetooth: hci1: command 0x040f tx timeout [ 74.287193][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 74.287556][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.308694][ T4188] device veth0_macvtap entered promiscuous mode [ 74.316532][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 74.334466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.345230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.354981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.363348][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 74.366643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.369576][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 74.411339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.420113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.428706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.439055][ T4188] device veth1_macvtap entered promiscuous mode [ 74.455019][ T4183] device veth0_macvtap entered promiscuous mode [ 74.465247][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.476895][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.485679][ T4194] device veth1_vlan entered promiscuous mode [ 74.489291][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.500689][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.510617][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.518757][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.524957][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.536109][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.544471][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.556671][ T4183] device veth1_macvtap entered promiscuous mode [ 74.577398][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.589301][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.603943][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.614634][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625889][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.639715][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.647888][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.656993][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.666440][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.700497][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.717072][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.732015][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.749462][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.762984][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.782331][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.785113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.798372][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.803876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.821454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.862550][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.872774][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.882412][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.891506][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065716][ T4194] device veth0_macvtap entered promiscuous mode [ 75.076272][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.089497][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.100083][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.110765][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.121202][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.132750][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.424684][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.558657][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623238][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.800362][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.820916][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.837628][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.849167][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.866989][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.942780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.960874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.989129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.081843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.168380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.184504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.350231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.530675][ T4194] device veth1_macvtap entered promiscuous mode [ 76.596006][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 76.605457][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.613992][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 76.628684][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.647981][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 76.654856][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.669246][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670794][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 76.697783][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.731419][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 76.885958][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.952804][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.065795][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.147687][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.159717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.169417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.178562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.187914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.197271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.206567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.215871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 77.225249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 77.234865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 77.244366][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 77.299218][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.340757][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.385056][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.454955][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.714838][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.742022][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.808015][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.832050][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.842426][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.853809][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.864366][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.875849][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.888785][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.901018][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.052518][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.114473][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.141748][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.164371][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.936218][ T4315] Zero length message leads to an empty skb [ 79.081358][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.137960][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171828][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.494104][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.528233][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.572361][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.635835][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.690919][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.732622][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.756760][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.768597][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.778969][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.800493][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.858062][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.877364][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.904470][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.925510][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.941089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.961809][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.978115][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.994838][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.017881][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.263176][ T4323] syz.1.11 (4323) used greatest stack depth: 21192 bytes left [ 81.449502][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.749964][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 84.609361][ T21] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 84.639015][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.669054][ T21] usb 3-1: Product: syz [ 84.673284][ T21] usb 3-1: Manufacturer: syz [ 84.702140][ T21] usb 3-1: SerialNumber: syz [ 84.748353][ T21] usb 3-1: config 0 descriptor?? [ 85.029253][ T21] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71 [ 85.060593][ T21] usb 3-1: USB disconnect, device number 2 [ 86.868250][ T1108] cfg80211: failed to load regulatory.db [ 90.126807][ T4426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.409035][ T4365] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.704366][ T4432] orangefs_mount: mount request failed with -4 [ 93.169024][ T4365] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 93.176962][ T4365] usb 3-1: can't read configurations, error -71 [ 93.228082][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.467073][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 98.389266][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.669215][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 98.789188][ T4229] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 98.879305][ T4229] usb 1-1: config 0 has no interface number 0 [ 98.885677][ T4229] usb 1-1: config 0 interface 196 has no altsetting 0 [ 99.143221][ T4229] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 99.171845][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.211909][ T4229] usb 1-1: Product: syz [ 99.216220][ T4229] usb 1-1: Manufacturer: syz [ 99.264114][ T4229] usb 1-1: SerialNumber: syz [ 99.405734][ T4229] usb 1-1: config 0 descriptor?? [ 99.851621][ T4229] ipheth 1-1:0.196: Unable to find endpoints [ 99.900126][ T4229] usb 1-1: USB disconnect, device number 2 [ 100.533969][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 104.574628][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 108.788655][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 112.739534][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.764668][ T26] audit: type=1326 audit(1761041736.512:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 112.825990][ T26] audit: type=1326 audit(1761041736.512:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 113.184754][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 113.389274][ T21] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.396848][ T21] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.429134][ T21] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.559223][ T21] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.578894][ T21] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.601679][ T21] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.704717][ T21] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.728216][ T21] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.752000][ T21] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.710815][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.722090][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.730676][ T21] usb 5-1: Product: syz [ 114.734876][ T21] usb 5-1: Manufacturer: syz [ 114.920233][ T21] usb 5-1: SerialNumber: syz [ 115.079235][ T21] usb 5-1: can't set config #168, error -71 [ 115.237530][ T21] usb 5-1: USB disconnect, device number 2 [ 115.477729][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 122.020509][ T26] audit: type=1326 audit(1761041745.772:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 122.898040][ T26] audit: type=1326 audit(1761041746.642:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 123.348071][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 132.922044][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929405][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.941168][ T26] audit: type=1326 audit(1761041757.692:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 133.964092][ T26] audit: type=1326 audit(1761041757.712:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 134.003507][ T26] audit: type=1326 audit(1761041757.752:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 134.053875][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 134.392806][ T26] audit: type=1326 audit(1761041757.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 136.126944][ T4770] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.812521][ T26] audit: type=1326 audit(1761041757.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 136.894622][ T26] audit: type=1326 audit(1761041757.752:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74dc4d810 code=0x7ffc0000 [ 137.792358][ T26] audit: type=1326 audit(1761041757.752:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74dc4d810 code=0x7ffc0000 [ 139.313047][ T26] audit: type=1326 audit(1761041757.752:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.337766][ T26] audit: type=1326 audit(1761041757.752:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.338579][ T4784] loop6: detected capacity change from 0 to 7 [ 139.360382][ T26] audit: type=1326 audit(1761041757.752:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360427][ T26] audit: type=1326 audit(1761041757.752:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360462][ T26] audit: type=1326 audit(1761041757.752:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360500][ T26] audit: type=1326 audit(1761041757.782:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360535][ T26] audit: type=1326 audit(1761041757.782:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360569][ T26] audit: type=1326 audit(1761041757.782:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360603][ T26] audit: type=1326 audit(1761041757.792:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 139.360637][ T26] audit: type=1326 audit(1761041757.792:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 140.076440][ T4784] Dev loop6: unable to read RDB block 7 [ 140.090625][ T4784] loop6: unable to read partition table [ 140.103041][ T4784] loop6: partition table beyond EOD, truncated [ 140.119204][ T4784] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.110397][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 143.189029][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.609330][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.633167][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.685310][ T7] usb 3-1: config 1 has no interface number 0 [ 143.725229][ T7] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.989403][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.011713][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.193120][ T7] usb 3-1: Product: syz [ 144.197917][ T7] usb 3-1: Manufacturer: syz [ 144.203062][ T7] usb 3-1: SerialNumber: syz [ 144.520074][ T7] usb 3-1: selecting invalid altsetting 1 [ 144.559130][ T7] cdc_ncm 3-1:1.1: bind() failure [ 144.572361][ T7] usb 3-1: USB disconnect, device number 5 [ 147.711317][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 148.022286][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 148.022324][ T26] audit: type=1326 audit(1761041771.762:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 148.653424][ T26] audit: type=1326 audit(1761041771.762:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 152.287687][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 155.622782][ T4941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 155.812969][ T26] audit: type=1326 audit(1761041779.562:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319096afc9 code=0x7ffc0000 [ 156.795581][ T26] audit: type=1326 audit(1761041779.632:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319096afc9 code=0x7ffc0000 [ 156.818203][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.486017][ T5006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.661127][ T5006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.506624][ T5006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.478415][ T5046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 165.670943][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 167.508026][ T5085] capability: warning: `syz.2.212' uses deprecated v2 capabilities in a way that may be insecure [ 167.865526][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 171.962927][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 178.412402][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 179.868920][ C1] sched: RT throttling activated [ 182.979057][ T4244] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.071776][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 184.406960][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.421188][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.432261][ T4244] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.447304][ T4244] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 184.457649][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.166240][ T4244] usb 5-1: config 0 descriptor?? [ 185.505135][ T5270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 188.915106][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 189.557360][ T4244] usbhid 5-1:0.0: can't add hid device: -71 [ 189.564438][ T4244] usbhid: probe of 5-1:0.0 failed with error -71 [ 189.573876][ T4244] usb 5-1: USB disconnect, device number 3 [ 191.475039][ T4244] Bluetooth: hci4: command 0x0406 tx timeout [ 191.583967][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 191.590258][ T4236] Bluetooth: hci3: command 0x0406 tx timeout [ 191.615518][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 191.671724][ T4236] Bluetooth: hci1: command 0x0406 tx timeout [ 191.687433][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 194.374305][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380961][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.429508][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 196.238794][ T26] audit: type=1326 audit(1761041819.852:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 196.875289][ T26] audit: type=1326 audit(1761041819.852:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 197.149159][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.102042][ T1108] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 199.149068][ T1108] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 199.199449][ T1108] usb 5-1: config 1 interface 0 has no altsetting 0 [ 199.379271][ T1108] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 199.398426][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.410569][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 199.423957][ T1108] usb 5-1: Product: syz [ 199.438064][ T1108] usb 5-1: Manufacturer: syz [ 199.448655][ T1108] usb 5-1: SerialNumber: syz [ 199.509415][ T5372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.527624][ T5372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.666503][ T5392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.240247][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 200.372830][ T1110] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.640886][ T1108] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:2f:23:86:d5:bf [ 200.842740][ T1108] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 201.130951][ T1108] usb 5-1: USB disconnect, device number 4 [ 201.270227][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.313534][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.395037][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.475114][ T1110] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.510352][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.568555][ T1110] usb 3-1: config 0 descriptor?? [ 202.634085][ T1110] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 203.271730][ T1110] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.649941][ T1110] usb 3-1: USB disconnect, device number 6 [ 203.809699][ T26] audit: type=1326 audit(1761041827.562:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319096afc9 code=0x7ffc0000 [ 203.833212][ T26] audit: type=1326 audit(1761041827.582:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319096afc9 code=0x7ffc0000 [ 204.093940][ T5429] fido_id[5429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 204.285273][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 204.346120][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 210.354016][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 211.696394][ T5510] syz.3.331 uses obsolete (PF_INET,SOCK_PACKET) [ 211.926717][ T26] audit: type=1326 audit(1761041835.672:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5502 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e655fc9 code=0x7ffc0000 [ 211.949482][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.264637][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.389026][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 213.639197][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 213.709233][ T13] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.721914][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.768066][ T13] usb 1-1: config 0 descriptor?? [ 213.846161][ T13] cp210x 1-1:0.0: cp210x converter detected [ 213.915293][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 213.924925][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 214.169248][ T1108] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.184229][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.211658][ T1108] usb 5-1: Product: syz [ 214.226508][ T1108] usb 5-1: Manufacturer: syz [ 214.236729][ T1108] usb 5-1: SerialNumber: syz [ 214.273438][ T1108] usb 5-1: config 0 descriptor?? [ 214.362089][ T13] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 214.399049][ T13] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 214.410345][ T13] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 214.451086][ T13] usb 1-1: cp210x converter now attached to ttyUSB0 [ 214.482731][ T13] usb 1-1: USB disconnect, device number 3 [ 214.504279][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.625904][ T13] cp210x 1-1:0.0: device disconnected [ 214.938957][ T4244] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.204595][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 215.343131][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.372004][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.399358][ T4244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.469667][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 215.545513][ T4244] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.653983][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.850730][ T4244] usb 3-1: config 0 descriptor?? [ 216.396871][ T1108] usb 5-1: USB disconnect, device number 5 [ 216.447700][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x1 [ 216.490314][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 216.505321][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 216.540239][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 216.606496][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 216.623044][ T4244] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 216.675165][ T4244] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 216.784374][ T4244] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 216.911876][ T13] usb 3-1: USB disconnect, device number 7 [ 217.528082][ T5577] program syz.0.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.540380][ T5573] fido_id[5573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 217.900190][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 218.675771][ T26] audit: type=1326 audit(1761041842.422:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 218.698332][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.773717][ T26] audit: type=1326 audit(1761041842.422:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1528afc9 code=0x7ffc0000 [ 218.796369][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.097014][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 219.951644][ T5604] binder: 5603:5604 unknown command 1074553619 [ 219.995180][ T5604] binder: 5603:5604 ioctl c0306201 200000000040 returned -22 [ 223.101351][ T5628] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 223.785495][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 223.989056][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 224.607151][ T5665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.662349][ T26] audit: type=1804 audit(1761041848.412:39): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.369" name="/newroot/64/file1" dev="fuse" ino=1 res=1 errno=0 [ 227.694163][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 228.464350][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 229.419104][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.489044][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 229.497013][ T21] usb 3-1: can't read configurations, error -71 [ 230.177816][ T5729] fuse: Bad value for 'rootmode' [ 231.406279][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 231.412029][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 232.979737][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 234.286503][ T5769] fuse: Bad value for 'rootmode' [ 235.648160][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 236.056423][ T5780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.134626][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 238.329575][ T5817] fuse: Bad value for 'rootmode' [ 240.152505][ T5829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 241.984512][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 242.401617][ T5852] device syzkaller0 entered promiscuous mode [ 244.739028][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.299403][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.320873][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.341369][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.393213][ T21] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.407642][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 245.417831][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.451567][ T21] usb 3-1: config 0 descriptor?? [ 245.660105][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 245.702940][ T5869] udc-core: couldn't find an available UDC or it's busy [ 245.755680][ T5869] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 245.779052][ T4236] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 245.794258][ T4236] usb 4-1: config 0 has no interface number 0 [ 245.999262][ T4236] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 246.040971][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.061791][ T21] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 246.094446][ T4236] usb 4-1: Product: syz [ 246.102765][ T21] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 246.115461][ T4236] usb 4-1: Manufacturer: syz [ 246.120525][ T4236] usb 4-1: SerialNumber: syz [ 246.139137][ T4236] usb 4-1: config 0 descriptor?? [ 246.241056][ T4236] redrat3 4-1:0.31: Couldn't find all endpoints [ 246.489491][ T4236] usb 4-1: USB disconnect, device number 2 [ 248.486239][ T5911] kvm: pic: non byte read [ 248.501286][ T5911] kvm: pic: level sensitive irq not supported [ 248.501431][ T5911] kvm: pic: non byte read [ 248.585860][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 249.179711][ T5911] kvm: pic: level sensitive irq not supported [ 249.179779][ T5911] kvm: pic: non byte read [ 249.261973][ T4251] usb 3-1: USB disconnect, device number 10 [ 249.280234][ T5911] kvm: pic: level sensitive irq not supported [ 249.280303][ T5911] kvm: pic: non byte read [ 250.819540][ T5935] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 251.269406][ T5944] loop7: detected capacity change from 0 to 7 [ 251.333308][ T5944] Dev loop7: unable to read RDB block 7 [ 251.659472][ T5944] loop7: unable to read partition table [ 251.666619][ T5944] loop7: partition table beyond EOD, truncated [ 252.361320][ T5944] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 252.549508][ T5950] loop7: detected capacity change from 7 to 0 [ 252.832888][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 255.802496][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809205][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.804723][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 258.912813][ T6024] 8021q: VLANs not supported on caif0 [ 259.561792][ T1110] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.829195][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 259.950078][ T1110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.994768][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 260.029378][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.063118][ T1110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.100661][ T1110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.126364][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.439446][ T1110] usb 5-1: GET_CAPABILITIES returned 0 [ 260.445030][ T1110] usbtmc 5-1:16.0: can't read capabilities [ 260.568964][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.671140][ T13] usb 5-1: USB disconnect, device number 6 [ 260.839002][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 260.939253][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 260.979206][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.995098][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.007772][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.027300][ T4229] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.037169][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.053899][ T4229] usb 1-1: config 0 descriptor?? [ 261.409282][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.438339][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.493623][ T1110] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 261.513507][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.599908][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 261.623518][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x1 [ 261.641906][ T1110] usb 2-1: config 0 descriptor?? [ 261.725866][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 261.894896][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 261.991205][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 262.132234][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 262.222251][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 262.271235][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.289227][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.296355][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.319046][ T4229] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 262.338981][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.346261][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.357639][ T4229] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 262.370810][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.378311][ T1110] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 262.392140][ T1110] cp2112 0003:10C4:EA90.0005: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 262.436929][ T13] usb 1-1: USB disconnect, device number 4 [ 262.559080][ T1110] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 262.682336][ T6059] fido_id[6059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.190868][ T6046] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38 [ 263.229458][ T1110] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 263.281155][ T1110] usb 2-1: USB disconnect, device number 2 [ 264.150932][ T6064] fido_id[6064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 264.675242][ T6073] fuse: Unknown parameter 'user_i00000000000000000000' [ 265.740031][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 266.321315][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 272.229027][ T6129] fuse: Unknown parameter 'user_i00000000000000000000' [ 274.154323][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.385455][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.403612][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.461303][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 274.777530][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.056381][ T6148] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 275.083258][ T6148] bond0: (slave wlan1): Opening slave failed [ 275.155652][ T6145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.789227][ T2286] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.068986][ T2286] usb 4-1: Using ep0 maxpacket: 16 [ 277.119214][ T2286] usb 4-1: config index 0 descriptor too short (expected 1316, got 36) [ 277.180427][ T6177] fuse: Unknown parameter 'user_i00000000000000000000' [ 277.968977][ T2286] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 277.977188][ T2286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.987897][ T2286] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 277.997463][ T2286] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 278.017067][ T2286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.068482][ T2286] usb 4-1: config 0 descriptor?? [ 278.680387][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 280.343109][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 280.660207][ T26] audit: type=1326 audit(1761041904.412:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 280.779188][ T26] audit: type=1326 audit(1761041904.492:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7ffc0000 [ 281.518955][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 282.116656][ T6230] fuse: Unknown parameter 'user_id00000000000000000000' [ 283.624249][ T13] usb 4-1: USB disconnect, device number 3 [ 283.739376][ T6236] orangefs_mount: mount request failed with -4 [ 286.258477][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 287.370618][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 288.900491][ T6270] fuse: Unknown parameter 'user_id00000000000000000000' [ 291.162043][ T6282] orangefs_mount: mount request failed with -4 [ 292.590247][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 293.542191][ T26] audit: type=1804 audit(1761041917.292:42): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.549" name="/newroot/140/file1" dev="fuse" ino=1 res=1 errno=0 [ 293.563170][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.655515][ T26] audit: type=1804 audit(1761041917.382:43): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.552" name="/newroot/112/file1" dev="fuse" ino=1 res=1 errno=0 [ 294.115486][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 302.073849][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 302.382589][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 303.476389][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 304.834760][ T4189] syz-executor (4189) used greatest stack depth: 21184 bytes left [ 304.920014][ T4365] Bluetooth: hci5: command 0x0409 tx timeout [ 305.356093][ T4301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.431160][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 305.479130][ T6384] fuse: Bad value for 'fd' [ 306.242053][ T4301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.221352][ T4244] Bluetooth: hci5: command 0x041b tx timeout [ 307.332018][ T4301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.296787][ T4301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.452218][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.461246][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.485653][ T6356] device bridge_slave_0 entered promiscuous mode [ 308.508780][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.532979][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.576797][ T6356] device bridge_slave_1 entered promiscuous mode [ 308.680146][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.739815][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.945845][ T6356] team0: Port device team_slave_0 added [ 309.019440][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 309.089990][ T6356] team0: Port device team_slave_1 added [ 309.260235][ T4251] Bluetooth: hci5: command 0x040f tx timeout [ 309.664284][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.722531][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.807612][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.838005][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.865378][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.892161][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.989070][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.076589][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 310.228781][ T6356] device hsr_slave_0 entered promiscuous mode [ 310.377461][ T6356] device hsr_slave_1 entered promiscuous mode [ 310.433531][ T6356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.466102][ T6356] Cannot create hsr debugfs directory [ 311.405056][ T4251] Bluetooth: hci5: command 0x0419 tx timeout [ 311.531065][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 312.647164][ T6451] fuse: Bad value for 'fd' [ 315.488466][ T6356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.498459][ T6356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.508509][ T6356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.518805][ T6356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.243666][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 317.349380][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355941][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.523545][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 317.604260][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.696396][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.758555][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.770160][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.492148][ T6510] fuse: Bad value for 'fd' [ 319.168987][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.204790][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.287378][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.294840][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.379546][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.431634][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.480033][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.487235][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.496228][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.665856][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.833610][ T4301] device hsr_slave_0 left promiscuous mode [ 319.861834][ T4301] device hsr_slave_1 left promiscuous mode [ 319.879267][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.887068][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.912601][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.928961][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.939981][ T4301] device bridge_slave_1 left promiscuous mode [ 319.948151][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.986684][ T4301] device bridge_slave_0 left promiscuous mode [ 320.019263][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.250139][ T4301] device veth1_macvtap left promiscuous mode [ 320.257100][ T4301] device veth0_macvtap left promiscuous mode [ 320.275155][ T4301] device veth1_vlan left promiscuous mode [ 320.323281][ T4301] device veth0_vlan left promiscuous mode [ 323.502511][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 323.548522][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 323.568113][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.586717][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.696772][ T4301] bond0 (unregistering): Released all slaves [ 323.833673][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.847582][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.878440][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.887964][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.981757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.035805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.236765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.389697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.418526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.427864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.438588][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.473704][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 326.272531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.310907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.454092][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.845214][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 330.170726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.180640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.224816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.250091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.421901][ T6356] device veth0_vlan entered promiscuous mode [ 330.437470][ T6356] device veth1_vlan entered promiscuous mode [ 330.477277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.512203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.522736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.541694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.559056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.575194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.597597][ T6356] device veth0_macvtap entered promiscuous mode [ 330.616118][ T6356] device veth1_macvtap entered promiscuous mode [ 330.644610][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.673344][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.690676][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.705326][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.727104][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.745650][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.756315][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.775404][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.801332][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.810464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.820339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.834743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.919802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.983804][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.034790][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.101497][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.112737][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.122934][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.168945][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.189811][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.390359][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.636533][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 332.183752][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.286275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.319364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.516231][ T6356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.526124][ T6356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.535240][ T6356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.551218][ T6356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.822999][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.871912][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.913354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.009117][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.038457][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.115725][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.407641][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 346.592368][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 347.519731][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 354.325481][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 356.410031][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 367.533427][ T6986] orangefs_mount: mount request failed with -4 [ 368.253763][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 370.014399][ T26] audit: type=1326 audit(1761041993.762:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 370.065517][ T26] audit: type=1326 audit(1761041993.782:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 378.709470][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715813][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.379766][ T26] audit: type=1804 audit(1761042009.122:46): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.719" name="/newroot/177/file1" dev="fuse" ino=1 res=1 errno=0 [ 388.799268][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 389.188903][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 389.309182][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.359061][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.396367][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.460227][ T1108] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.498105][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.547879][ T1108] usb 5-1: config 0 descriptor?? [ 390.168467][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x1 [ 390.218490][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 390.331306][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 390.444671][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 390.661557][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 390.669515][ T1108] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 390.697748][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input9 [ 390.794671][ T1108] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 390.968736][ T4251] usb 5-1: USB disconnect, device number 7 [ 391.323878][ T7259] fido_id[7259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 392.122732][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 392.191709][ T26] audit: type=1326 audit(1761042015.942:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e655fc9 code=0x7ffc0000 [ 392.298346][ T26] audit: type=1326 audit(1761042015.962:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e655fc9 code=0x7ffc0000 [ 400.949494][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 402.413997][ T7351] orangefs_mount: mount request failed with -4 [ 403.098987][ T26] audit: type=1326 audit(1761042026.732:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 403.099037][ T26] audit: type=1326 audit(1761042026.732:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 407.681841][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 407.758050][ T26] audit: type=1326 audit(1761042031.502:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 407.874972][ T26] audit: type=1326 audit(1761042031.502:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 408.054797][ T7423] device syzkaller0 entered promiscuous mode [ 410.792570][ T26] audit: type=1326 audit(1761042034.442:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb803be3fc9 code=0x7ffc0000 [ 410.900317][ T26] audit: type=1326 audit(1761042034.442:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb803be3fc9 code=0x7ffc0000 [ 413.779198][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 414.309361][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.337010][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.422049][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.467103][ T1108] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 414.506217][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.527642][ T1108] usb 1-1: config 0 descriptor?? [ 414.879154][ T7504] tipc: Started in network mode [ 414.884446][ T7504] tipc: Node identity f2604da7507d, cluster identity 4711 [ 414.903788][ T7504] tipc: Enabled bearer , priority 0 [ 414.967086][ T7506] device syzkaller0 entered promiscuous mode [ 415.079243][ T7504] tipc: Resetting bearer [ 415.149237][ T7503] tipc: Resetting bearer [ 415.205822][ T7503] tipc: Disabling bearer [ 415.393674][ T26] audit: type=1804 audit(1761042039.142:55): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.792" name="/newroot/148/file1" dev="fuse" ino=1 res=1 errno=0 [ 419.519096][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 419.525154][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 419.756890][ T1108] usb 1-1: USB disconnect, device number 5 [ 420.038995][ T4251] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 420.389004][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 420.689344][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.708862][ T4251] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 420.720473][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.768388][ T4251] usb 5-1: config 0 descriptor?? [ 421.862477][ T4251] usb 5-1: can't set config #0, error -71 [ 421.899059][ T4251] usb 5-1: USB disconnect, device number 8 [ 425.348155][ T26] audit: type=1804 audit(1761042049.092:56): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.822" name="/newroot/173/file1" dev="fuse" ino=1 res=1 errno=0 [ 426.460466][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.272880][ T4251] Bluetooth: hci5: command 0x0406 tx timeout [ 428.580607][ T7660] device syzkaller0 entered promiscuous mode [ 429.079144][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 429.102087][ T26] audit: type=1804 audit(1761042052.852:57): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.836" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 429.558942][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 429.646973][ T7678] raw_sendmsg: syz.2.837 forgot to set AF_INET. Fix it! [ 429.909079][ T4229] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 429.926831][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.936963][ T4229] usb 5-1: Product: syz [ 429.947134][ T4229] usb 5-1: Manufacturer: syz [ 429.953432][ T4229] usb 5-1: SerialNumber: syz [ 429.975214][ T4229] usb 5-1: config 0 descriptor?? [ 430.122225][ T4229] gspca_main: se401-2.14.0 probing 047d:5003 [ 431.348021][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.438056][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.448209][ T4229] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 431.470630][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.659060][ T4229] usb 5-1: device descriptor read/64, error -32 [ 431.898069][ T7703] device syzkaller0 entered promiscuous mode [ 431.939123][ T4236] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 432.359370][ T4236] usb 6-1: Using ep0 maxpacket: 16 [ 432.479149][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.521191][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.556975][ T4236] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.644902][ T4229] gspca_se401: read req failed req 0x06 error -19 [ 432.670450][ T4229] usb 5-1: USB disconnect, device number 9 [ 432.679778][ T4236] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.814569][ T4236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.920245][ T4236] usb 6-1: config 0 descriptor?? [ 434.221227][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x1 [ 434.249183][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 434.288570][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 434.323705][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 434.359165][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 434.366739][ T4236] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 434.407683][ T4236] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input10 [ 434.503250][ T4236] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 434.576651][ T4236] usb 6-1: USB disconnect, device number 2 [ 434.812500][ T7738] fido_id[7738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 435.024838][ T7744] device syzkaller0 entered promiscuous mode [ 435.189129][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.268252][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.322229][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.056588][ T7780] tipc: Started in network mode [ 438.068892][ T4365] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 438.086968][ T7780] tipc: Node identity 8eab4d3039b6, cluster identity 4711 [ 438.149481][ T7780] tipc: Enabled bearer , priority 0 [ 438.240696][ T7780] device syzkaller0 entered promiscuous mode [ 438.335949][ T7780] tipc: Resetting bearer [ 438.379721][ T7779] tipc: Resetting bearer [ 438.427262][ T7779] tipc: Disabling bearer [ 438.820495][ T4365] usb 3-1: Using ep0 maxpacket: 16 [ 438.965823][ T7792] device syzkaller0 entered promiscuous mode [ 439.088363][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.109004][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.215707][ T4365] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.248426][ T4365] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.415768][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.448550][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.448752][ T4365] usb 3-1: config 0 descriptor?? [ 439.659773][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.123352][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.133510][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.273186][ T7796] device ipvlan2 entered promiscuous mode [ 440.285533][ T7796] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 440.392431][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x1 [ 440.410703][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 440.424566][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 440.445114][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 440.484831][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 440.497464][ T4365] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 440.542032][ T4365] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input11 [ 440.593504][ T4365] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 441.184952][ T4236] usb 3-1: USB disconnect, device number 11 [ 441.462445][ T7828] tipc: Started in network mode [ 441.510624][ T7828] tipc: Node identity daaf5978afd9, cluster identity 4711 [ 441.521775][ T7825] fido_id[7825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 441.544098][ T7828] tipc: Enabled bearer , priority 0 [ 441.556871][ T7830] device syzkaller0 entered promiscuous mode [ 441.594795][ T7828] tipc: Resetting bearer [ 441.639787][ T7827] tipc: Resetting bearer [ 441.679852][ T7827] tipc: Disabling bearer [ 441.689239][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 442.119573][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 443.109658][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.982671][ T4229] usb 1-1: config 4 interface 0 has no altsetting 0 [ 444.279133][ T4229] usb 1-1: string descriptor 0 read error: -22 [ 444.286367][ T4229] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 444.303509][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.320385][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.332157][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.439479][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.508964][ T4229] usb 1-1: can't set config #4, error -71 [ 444.528018][ T4229] usb 1-1: USB disconnect, device number 6 [ 444.539972][ T7857] device syzkaller0 entered promiscuous mode [ 444.581735][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 445.060721][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 446.331441][ T4244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 446.908964][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 447.039254][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.082470][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.115272][ T4244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.133665][ T4244] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.145400][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.168371][ T4244] usb 3-1: config 0 descriptor?? [ 447.208365][ T7897] device syzkaller0 entered promiscuous mode [ 447.721327][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x1 [ 447.739257][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 447.747060][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 447.815758][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 448.494907][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 448.609899][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 448.649202][ T4244] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 448.826416][ T4244] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input12 [ 448.843562][ T4244] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 448.863104][ T4244] usb 3-1: USB disconnect, device number 12 [ 449.008028][ T7911] fido_id[7911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 449.020521][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.172072][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.960438][ T23] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 450.170276][ T7925] mmap: syz.4.911 (7925) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 450.195805][ T7935] device syzkaller0 entered promiscuous mode [ 450.278634][ T26] audit: type=1804 audit(1761042074.022:58): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.914" name="/newroot/177/file1" dev="fuse" ino=1 res=1 errno=0 [ 450.379380][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 450.389558][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 450.400939][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 450.411001][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.425363][ T23] usb 3-1: config 0 descriptor?? [ 450.718985][ T23] ath6kl: Failed to submit usb control message: -71 [ 450.727164][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 450.897995][ T23] ath6kl: Unable to send get target info: -71 [ 450.973819][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 451.920627][ T23] ath6kl: Failed to init ath6kl core: -71 [ 452.000388][ T23] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 452.010729][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.033917][ T23] usb 3-1: USB disconnect, device number 13 [ 452.151763][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.245160][ T4229] wlan1: authenticate with 08:02:11:00:00:00 [ 452.288021][ T4229] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 452.474758][ T4399] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 452.578894][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 452.600198][ T4420] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 452.719699][ T4420] wlan1: authentication with 08:02:11:00:00:00 timed out [ 452.766345][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 452.828898][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 452.969306][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.006132][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.068883][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.124611][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.188848][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.236002][ T23] usb 3-1: config 0 descriptor?? [ 453.469627][ T26] audit: type=1804 audit(1761042077.222:59): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.926" name="/newroot/180/file1" dev="fuse" ino=1 res=1 errno=0 [ 453.676190][ T7977] device syzkaller0 entered promiscuous mode [ 453.757493][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x1 [ 453.793969][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 453.811689][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 453.838932][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 453.898852][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 453.906325][ T23] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 454.045456][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input13 [ 454.131417][ T23] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 454.153344][ T23] usb 3-1: USB disconnect, device number 14 [ 454.547403][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 455.215816][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 455.244840][ T7988] fido_id[7988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 455.651956][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.665177][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.676372][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.689897][ T7] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 455.700230][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.710680][ T7] usb 1-1: config 0 descriptor?? [ 456.638262][ T26] audit: type=1804 audit(1761042080.382:60): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.939" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 456.794178][ T8021] device syzkaller0 entered promiscuous mode [ 457.272898][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 457.881501][ T8031] program syz.4.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.238883][ T4244] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 459.009087][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.157561][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.179044][ T4244] usb 6-1: Using ep0 maxpacket: 16 [ 459.665751][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.677830][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.689682][ T4244] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.703235][ T4244] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.713278][ T4244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.738024][ T4244] usb 6-1: config 0 descriptor?? [ 459.759012][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 459.767644][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 459.819116][ T7] usb 1-1: USB disconnect, device number 7 [ 460.401355][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x1 [ 460.413196][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 460.421184][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 460.429105][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 460.436676][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 460.446754][ T4244] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 460.491471][ T4244] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input14 [ 460.551764][ T4244] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 460.856868][ T4251] usb 6-1: USB disconnect, device number 3 [ 461.128808][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 461.686664][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 462.709349][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.823421][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.938899][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 463.845823][ T26] audit: type=1804 audit(1761042087.592:61): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.964" name="/newroot/193/file1" dev="fuse" ino=1 res=1 errno=0 [ 464.069241][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.113166][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.148934][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.215497][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 464.227477][ T7] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 464.244105][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.268613][ T7] usb 3-1: config 0 descriptor?? [ 464.649103][ T4365] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 464.711178][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'. [ 464.889150][ T4365] usb 5-1: Using ep0 maxpacket: 16 [ 465.477950][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.498850][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.519034][ T4365] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 465.551117][ T4365] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 465.560783][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.571433][ T4365] usb 5-1: config 0 descriptor?? [ 466.340636][ T8122] orangefs_mount: mount request failed with -4 [ 466.861557][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x1 [ 466.875366][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 466.884682][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 466.909089][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 466.916509][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 467.359397][ T4365] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 467.385935][ T4365] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input15 [ 467.403313][ T4365] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 467.896941][ T4262] usb 5-1: USB disconnect, device number 10 [ 468.070015][ T26] audit: type=1804 audit(1761042091.822:62): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.977" name="/newroot/197/file1" dev="fuse" ino=1 res=1 errno=0 [ 468.305090][ T8152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.453843][ T8152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.458985][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 468.480799][ T8152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.554482][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 468.956182][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 469.270945][ T7] usb 3-1: USB disconnect, device number 15 [ 469.378512][ T8160] tipc: Enabled bearer , priority 0 [ 469.407716][ T8160] device syzkaller0 entered promiscuous mode [ 469.705707][ T8161] tipc: Resetting bearer [ 469.721409][ T8158] tipc: Resetting bearer [ 470.364258][ T8166] orangefs_mount: mount request failed with -4 [ 470.501001][ T8158] tipc: Disabling bearer [ 471.632504][ T26] audit: type=1326 audit(1761042095.382:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 471.740392][ T26] audit: type=1326 audit(1761042095.412:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.775804][ T26] audit: type=1326 audit(1761042095.412:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.800290][ T26] audit: type=1326 audit(1761042095.412:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.823035][ T26] audit: type=1326 audit(1761042095.412:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.849134][ T26] audit: type=1326 audit(1761042095.412:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.879075][ T26] audit: type=1326 audit(1761042095.422:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 473.901263][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.991952][ T26] audit: type=1326 audit(1761042095.422:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 474.089067][ T26] audit: type=1326 audit(1761042095.422:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 474.188865][ T26] audit: type=1326 audit(1761042095.422:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fab5dbfefc9 code=0x7ffc0000 [ 474.548983][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 474.658888][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 475.029751][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 475.624689][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 475.660130][ T8202] orangefs_mount: mount request failed with -4 [ 475.759121][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.790165][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.815255][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.839000][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.869604][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.883116][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.905755][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.934076][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.936544][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.957218][ T7] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 475.995866][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.004432][ T13] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.028645][ T7] usb 2-1: config 0 descriptor?? [ 476.033711][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.067048][ T13] usb 6-1: config 0 descriptor?? [ 476.711283][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x1 [ 476.723845][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 476.731422][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 476.739005][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 476.746736][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 476.770844][ T13] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 476.869307][ T13] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input16 [ 476.923045][ T13] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 477.004303][ T13] usb 6-1: USB disconnect, device number 4 [ 477.164872][ T8221] fido_id[8221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 479.767552][ T8236] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1005'. [ 480.299279][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 480.740523][ T8238] orangefs_mount: mount request failed with -4 [ 480.907515][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.920777][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1012'. [ 480.960054][ T8255] device macvlan2 entered promiscuous mode [ 480.967810][ T8255] device bond1 entered promiscuous mode [ 480.974520][ T8255] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.985285][ T8255] device bond1 left promiscuous mode [ 481.162345][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.182083][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.269253][ T7] usbhid 2-1:0.0: can't add hid device: -32 [ 481.275495][ T7] usbhid: probe of 2-1:0.0 failed with error -32 [ 481.354962][ T7] usb 2-1: USB disconnect, device number 3 [ 481.424590][ T8266] netlink: 'syz.5.1014': attribute type 6 has an invalid length. [ 481.470452][ T8268] device dummy0 entered promiscuous mode [ 481.476354][ T8268] device vlan2 entered promiscuous mode [ 483.567465][ T8301] orangefs_mount: mount request failed with -4 [ 483.972368][ T8300] tipc: Started in network mode [ 483.988908][ T8300] tipc: Node identity be59e6c2cf3d, cluster identity 4711 [ 484.067494][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 484.789404][ T8300] tipc: Enabled bearer , priority 0 [ 484.899460][ T8307] device syzkaller0 entered promiscuous mode [ 485.028898][ T4251] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 485.049407][ T8307] tipc: Resetting bearer [ 485.136453][ T8307] tipc: Disabling bearer [ 485.277798][ T8316] tipc: Enabled bearer , priority 0 [ 485.310382][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 485.388978][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.416940][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.435150][ T4251] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.461004][ T4251] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 485.462335][ T8316] device syzkaller0 entered promiscuous mode [ 485.485917][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.509686][ T4251] usb 5-1: config 0 descriptor?? [ 485.535660][ T8319] device macvlan2 entered promiscuous mode [ 485.610460][ T8319] device bond1 entered promiscuous mode [ 485.646969][ T8319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.687404][ T8319] device bond1 left promiscuous mode [ 485.744220][ T8320] tipc: Resetting bearer [ 485.791391][ T8320] tipc: Disabling bearer [ 488.769083][ T4251] usbhid 5-1:0.0: can't add hid device: -71 [ 488.775453][ T4251] usbhid: probe of 5-1:0.0 failed with error -71 [ 488.938113][ T4251] usb 5-1: USB disconnect, device number 11 [ 489.585622][ T8356] orangefs_mount: mount request failed with -4 [ 489.992998][ T8363] tipc: Enabled bearer , priority 0 [ 490.023120][ T8363] device syzkaller0 entered promiscuous mode [ 490.079535][ T8363] tipc: Resetting bearer [ 490.144361][ T8362] tipc: Resetting bearer [ 490.218713][ T8362] tipc: Disabling bearer [ 493.499907][ T4328] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 494.171308][ T8398] orangefs_mount: mount request failed with -4 [ 494.609116][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.642310][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.661941][ T4328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.824369][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 494.866011][ T4328] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 494.888837][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.939864][ T4328] usb 3-1: config 0 descriptor?? [ 495.307238][ T8411] batman_adv: Cannot find parent device [ 495.345025][ T8411] batman_adv: batadv0: Adding interface: ip6gretap1 [ 495.353978][ T8411] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.381787][ T8411] batman_adv: batadv0: Interface activated: ip6gretap1 [ 495.672733][ T8415] device syzkaller1 entered promiscuous mode [ 496.779099][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 496.779142][ T26] audit: type=1326 audit(1761042120.472:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.787176][ T26] audit: type=1326 audit(1761042120.472:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.787339][ T26] audit: type=1326 audit(1761042120.472:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.787502][ T26] audit: type=1326 audit(1761042120.472:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.787640][ T26] audit: type=1326 audit(1761042120.472:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.787778][ T26] audit: type=1326 audit(1761042120.472:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.788050][ T26] audit: type=1326 audit(1761042120.472:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.788181][ T26] audit: type=1326 audit(1761042120.472:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.788315][ T26] audit: type=1326 audit(1761042120.472:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 496.788448][ T26] audit: type=1326 audit(1761042120.472:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74dc4efc9 code=0x7fc00000 [ 498.014390][ T8439] orangefs_mount: mount request failed with -4 [ 498.659022][ T4328] usbhid 3-1:0.0: can't add hid device: -71 [ 498.665657][ T4328] usbhid: probe of 3-1:0.0 failed with error -71 [ 498.716119][ T4328] usb 3-1: USB disconnect, device number 16 [ 500.603496][ T8479] tipc: Enabled bearer , priority 0 [ 500.640377][ T8479] device syzkaller0 entered promiscuous mode [ 500.694136][ T8479] tipc: Resetting bearer [ 500.721891][ T8478] tipc: Resetting bearer [ 500.754721][ T8478] tipc: Disabling bearer [ 501.561023][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567708][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.158888][ T4236] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 503.302151][ T1325] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 503.599620][ T1325] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 503.689247][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.699072][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.711024][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.790074][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 503.809010][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.826035][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.839091][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.850271][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.861478][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.902517][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.948945][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.963059][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.965883][ T4236] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 503.988237][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.025680][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.179288][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 504.206660][ T4236] usb 3-1: config 0 descriptor?? [ 504.492399][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 504.534194][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.629092][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 504.638381][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 504.696559][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.829200][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 504.857414][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 504.874619][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.995263][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.021512][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.201136][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.559254][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.580228][ T1325] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 505.591818][ T1325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.800359][ T1325] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 505.820504][ T1325] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 505.958894][ T1325] usb 1-1: Product: syz [ 505.963125][ T1325] usb 1-1: Manufacturer: syz [ 506.011251][ T1325] usb 1-1: SerialNumber: syz [ 506.324135][ T1325] usb 1-1: config 0 descriptor?? [ 506.369097][ T1325] usb 1-1: can't set config #0, error -71 [ 506.385499][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 506.408038][ T1325] usb 1-1: USB disconnect, device number 8 [ 506.424150][ T8594] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1086'. [ 506.848913][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 507.219097][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.238090][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.258535][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.281089][ T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.298368][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.322723][ T23] usb 5-1: config 0 descriptor?? [ 507.355129][ T1325] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 507.429007][ T4236] usbhid 3-1:0.0: can't add hid device: -71 [ 507.435648][ T4236] usbhid: probe of 3-1:0.0 failed with error -71 [ 507.483533][ T4236] usb 3-1: USB disconnect, device number 17 [ 507.618966][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 507.789152][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.805953][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.807600][ T23] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 507.828818][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.911095][ T4236] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 507.989432][ T23] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 508.041538][ T1325] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.062998][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.107692][ T1325] usb 1-1: config 0 descriptor?? [ 508.267827][ T4244] usb 5-1: USB disconnect, device number 12 [ 508.660967][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x1 [ 508.832611][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 508.836398][ T8624] fido_id[8624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 508.856821][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 508.865571][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 508.880343][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 508.887794][ T1325] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 508.901412][ T1325] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input18 [ 508.916996][ T1325] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 508.929210][ T4236] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.929239][ T4236] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.994174][ T1325] usb 1-1: USB disconnect, device number 9 [ 509.009271][ T4236] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.028031][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.056981][ T4236] usb 3-1: SerialNumber: syz [ 509.448844][ T4244] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 510.192501][ T4236] usb 3-1: 0:2 : does not exist [ 510.204467][ T8640] fido_id[8640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 510.250011][ T4236] usb 3-1: USB disconnect, device number 18 [ 510.449217][ T4244] usb 5-1: Using ep0 maxpacket: 16 [ 510.510409][ T4306] udevd[4306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.582935][ T4244] usb 5-1: config 0 has no interfaces? [ 510.589261][ T4244] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 510.624588][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.650097][ T4244] usb 5-1: config 0 descriptor?? [ 510.708962][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 511.069125][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.124754][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.164897][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.199222][ T23] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 511.233551][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.255981][ T23] usb 6-1: config 0 descriptor?? [ 513.131098][ T4328] usb 5-1: USB disconnect, device number 13 [ 513.200615][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 513.259988][ T8673] device bond_slave_0 entered promiscuous mode [ 513.267131][ T8673] device bond_slave_1 entered promiscuous mode [ 513.309642][ T8673] device macvtap1 entered promiscuous mode [ 513.326056][ T8673] device bond0 entered promiscuous mode [ 513.356294][ T8673] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 513.388167][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 513.425016][ T8674] device bond0 left promiscuous mode [ 513.450805][ T8674] device bond_slave_0 left promiscuous mode [ 513.457316][ T8674] device bond_slave_1 left promiscuous mode [ 513.659044][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 513.665104][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 513.848642][ T23] usb 6-1: USB disconnect, device number 5 [ 513.951562][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 514.328914][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 514.599198][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 514.739158][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.755671][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.765912][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.780282][ T8697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 514.866732][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.890441][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.910509][ T23] usb 6-1: config 0 descriptor?? [ 514.924080][ T8695] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 514.932772][ T8695] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 515.715666][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x1 [ 516.099853][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 516.223594][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 516.231679][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 516.239245][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 516.247056][ T23] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 516.402635][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input19 [ 516.633789][ T23] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 516.797958][ T23] usb 6-1: USB disconnect, device number 6 [ 517.133131][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.189916][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.222603][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.246051][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.773692][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1130'. [ 517.797782][ T8731] fido_id[8731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 520.709061][ T1325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 520.772246][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1140'. [ 520.818948][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1140'. [ 520.958872][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 521.100378][ T1325] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 521.508964][ T1325] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 522.810754][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.857306][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.866062][ T1325] usb 2-1: Product: syz [ 522.870804][ T1325] usb 2-1: Manufacturer: syz [ 522.875897][ T1325] usb 2-1: SerialNumber: syz [ 522.914000][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.924388][ T1325] usb 2-1: can't set config #1, error -71 [ 522.932242][ T1325] usb 2-1: USB disconnect, device number 4 [ 522.950776][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.450621][ T8788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 523.628956][ T4262] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 524.069184][ T4262] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 524.078835][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.089576][ T4262] usb 3-1: config 0 descriptor?? [ 524.131691][ T4262] gspca_main: spca508-2.14.0 probing 8086:0110 [ 524.509849][ T4244] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 524.781933][ T4244] usb 6-1: Using ep0 maxpacket: 16 [ 524.858930][ T4262] gspca_spca508: reg_read err -110 [ 524.878928][ T4262] gspca_spca508: reg_read err -32 [ 524.968964][ T4262] gspca_spca508: reg_read err -32 [ 524.988936][ T4262] gspca_spca508: reg_read err -32 [ 525.010143][ T4262] gspca_spca508: reg write: error -32 [ 525.019322][ T4244] usb 6-1: config 0 has no interfaces? [ 525.032635][ T4262] spca508: probe of 3-1:0.0 failed with error -32 [ 525.446884][ T1325] usb 3-1: USB disconnect, device number 19 [ 525.478983][ T4244] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 525.506381][ T4244] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 525.519942][ T4244] usb 6-1: Product: syz [ 525.524281][ T4244] usb 6-1: SerialNumber: syz [ 525.554655][ T4244] usb 6-1: config 0 descriptor?? [ 525.586127][ T8809] ================================================================== [ 525.594723][ T8809] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 525.604070][ T8809] Read of size 1 at addr ffff88802ae81608 by task syz.1.1154/8809 [ 525.612436][ T8809] [ 525.614774][ T8809] CPU: 0 PID: 8809 Comm: syz.1.1154 Not tainted syzkaller #0 [ 525.622275][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.632730][ T8809] Call Trace: [ 525.636021][ T8809] [ 525.638959][ T8809] dump_stack_lvl+0x168/0x230 [ 525.643653][ T8809] ? show_regs_print_info+0x20/0x20 [ 525.648862][ T8809] ? load_image+0x3b0/0x3b0 [ 525.653579][ T8809] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 525.659076][ T8809] ? xfrm_pol_bin_obj+0x140/0x140 [ 525.664587][ T8809] print_address_description+0x60/0x2d0 [ 525.670372][ T8809] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 525.677310][ T8809] kasan_report+0xdf/0x130 [ 525.681889][ T8809] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 525.688509][ T8809] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 525.694949][ T8809] ? xfrm_policy_addr_delta+0x212/0x340 [ 525.700885][ T8809] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 525.707289][ T8809] ? xfrm_policy_alloc+0x75/0x2b0 [ 525.712831][ T8809] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 525.719540][ T8809] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 525.725653][ T8809] xfrm_policy_inexact_insert+0xe0/0x1460 [ 525.731524][ T8809] ? __get_hash_thresh+0x105/0x410 [ 525.737729][ T8809] ? policy_hash_bysel+0x10a/0x570 [ 525.743340][ T8809] xfrm_policy_insert+0x112/0x930 [ 525.749228][ T8809] xfrm_add_policy+0x4d6/0x860 [ 525.754135][ T8809] ? xfrm_dump_sa_done+0xc0/0xc0 [ 525.759503][ T8809] ? apparmor_capable+0x12c/0x190 [ 525.764709][ T8809] ? __nla_parse+0x3c/0x50 [ 525.769231][ T8809] xfrm_user_rcv_msg+0x58d/0x860 [ 525.774524][ T8809] ? xfrm_netlink_rcv+0x90/0x90 [ 525.779965][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 525.785005][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 525.789902][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 525.794923][ T8809] ? __mutex_lock_common+0x431/0x2390 [ 525.800622][ T8809] ? __copy_skb_header+0x417/0x5a0 [ 525.805796][ T8809] ? __skb_clone+0x480/0x790 [ 525.810799][ T8809] netlink_rcv_skb+0x1e0/0x430 [ 525.815694][ T8809] ? xfrm_netlink_rcv+0x90/0x90 [ 525.820855][ T8809] ? netlink_ack+0xb60/0xb60 [ 525.825593][ T8809] ? __lock_acquire+0x7c60/0x7c60 [ 525.830683][ T8809] xfrm_netlink_rcv+0x75/0x90 [ 525.835499][ T8809] netlink_unicast+0x774/0x920 [ 525.840939][ T8809] netlink_sendmsg+0x8ab/0xbc0 [ 525.845868][ T8809] ? netlink_getsockopt+0x560/0x560 [ 525.851099][ T8809] ? aa_sock_msg_perm+0x94/0x150 [ 525.856273][ T8809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 525.861840][ T8809] ? security_socket_sendmsg+0x7c/0xa0 [ 525.867352][ T8809] ? netlink_getsockopt+0x560/0x560 [ 525.872681][ T8809] ____sys_sendmsg+0x5a2/0x8c0 [ 525.877585][ T8809] ? memset+0x1e/0x40 [ 525.881601][ T8809] ? __sys_sendmsg_sock+0x30/0x30 [ 525.886843][ T8809] ? import_iovec+0x6f/0xa0 [ 525.891386][ T8809] ___sys_sendmsg+0x1f0/0x260 [ 525.896305][ T8809] ? __sys_sendmsg+0x250/0x250 [ 525.901332][ T8809] ? percpu_counter_add_batch+0x13b/0x160 [ 525.907488][ T8809] ? __fdget+0x18b/0x210 [ 525.911780][ T8809] __se_sys_sendmsg+0x190/0x250 [ 525.916857][ T8809] ? __x64_sys_sendmsg+0x80/0x80 [ 525.921911][ T8809] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 525.928131][ T8809] ? lockdep_hardirqs_on+0x94/0x140 [ 525.933376][ T8809] do_syscall_64+0x4c/0xa0 [ 525.937835][ T8809] ? clear_bhb_loop+0x30/0x80 [ 525.942550][ T8809] ? clear_bhb_loop+0x30/0x80 [ 525.947352][ T8809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.953908][ T8809] RIP: 0033:0x7fde1528afc9 [ 525.958649][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.978359][ T8809] RSP: 002b:00007fde134f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.986997][ T8809] RAX: ffffffffffffffda RBX: 00007fde154e1fa0 RCX: 00007fde1528afc9 [ 525.995348][ T8809] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 526.003425][ T8809] RBP: 00007fde1530df91 R08: 0000000000000000 R09: 0000000000000000 [ 526.011563][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.019666][ T8809] R13: 00007fde154e2038 R14: 00007fde154e1fa0 R15: 00007ffded8b4e88 [ 526.027941][ T8809] [ 526.030990][ T8809] [ 526.033330][ T8809] Allocated by task 8809: [ 526.037668][ T8809] __kasan_kmalloc+0xb5/0xf0 [ 526.042473][ T8809] sk_prot_alloc+0xe7/0x210 [ 526.047093][ T8809] sk_alloc+0x2f/0x310 [ 526.051444][ T8809] pfkey_create+0xd8/0x560 [ 526.056556][ T8809] __sock_create+0x47b/0x900 [ 526.061172][ T8809] __sys_socket+0xe2/0x170 [ 526.066228][ T8809] __x64_sys_socket+0x76/0x80 [ 526.071187][ T8809] do_syscall_64+0x4c/0xa0 [ 526.076059][ T8809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.082187][ T8809] [ 526.084785][ T8809] Last potentially related work creation: [ 526.091171][ T8809] kasan_save_stack+0x35/0x60 [ 526.096367][ T8809] kasan_record_aux_stack+0xb8/0x100 [ 526.102041][ T8809] call_rcu+0x182/0x930 [ 526.106631][ T8809] netlink_release+0x134f/0x1790 [ 526.111894][ T8809] sock_close+0xd5/0x240 [ 526.116243][ T8809] __fput+0x234/0x930 [ 526.120829][ T8809] task_work_run+0x125/0x1a0 [ 526.125680][ T8809] exit_to_user_mode_loop+0x10f/0x130 [ 526.131291][ T8809] exit_to_user_mode_prepare+0xee/0x180 [ 526.137239][ T8809] syscall_exit_to_user_mode+0x16/0x40 [ 526.142914][ T8809] do_syscall_64+0x58/0xa0 [ 526.147540][ T8809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.153727][ T8809] [ 526.156080][ T8809] Second to last potentially related work creation: [ 526.162785][ T8809] kasan_save_stack+0x35/0x60 [ 526.167688][ T8809] kasan_record_aux_stack+0xb8/0x100 [ 526.173158][ T8809] insert_work+0x54/0x3d0 [ 526.177658][ T8809] __queue_work+0x9c5/0xd50 [ 526.182190][ T8809] queue_work_on+0x11d/0x1d0 [ 526.187036][ T8809] tty_release_struct+0xb4/0xd0 [ 526.192081][ T8809] tty_release+0xd0c/0x16c0 [ 526.196699][ T8809] __fput+0x234/0x930 [ 526.201046][ T8809] task_work_run+0x125/0x1a0 [ 526.205734][ T8809] exit_to_user_mode_loop+0x10f/0x130 [ 526.211429][ T8809] exit_to_user_mode_prepare+0xee/0x180 [ 526.217040][ T8809] syscall_exit_to_user_mode+0x16/0x40 [ 526.222522][ T8809] do_syscall_64+0x58/0xa0 [ 526.227138][ T8809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.233303][ T8809] [ 526.235819][ T8809] The buggy address belongs to the object at ffff88802ae81000 [ 526.235819][ T8809] which belongs to the cache kmalloc-2k of size 2048 [ 526.250135][ T8809] The buggy address is located 1544 bytes inside of [ 526.250135][ T8809] 2048-byte region [ffff88802ae81000, ffff88802ae81800) [ 526.263926][ T8809] The buggy address belongs to the page: [ 526.269875][ T8809] page:ffffea0000aba000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae80 [ 526.280133][ T8809] head:ffffea0000aba000 order:3 compound_mapcount:0 compound_pincount:0 [ 526.288658][ T8809] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 526.296857][ T8809] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842000 [ 526.305547][ T8809] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 526.314412][ T8809] page dumped because: kasan: bad access detected [ 526.320927][ T8809] page_owner tracks the page as allocated [ 526.327041][ T8809] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20747534274, free_ts 0 [ 526.345400][ T8809] get_page_from_freelist+0x1b77/0x1c60 [ 526.350966][ T8809] __alloc_pages+0x1e1/0x470 [ 526.355650][ T8809] alloc_page_interleave+0x24/0x1e0 [ 526.360851][ T8809] new_slab+0xc0/0x4b0 [ 526.364933][ T8809] ___slab_alloc+0x81e/0xdf0 [ 526.369771][ T8809] __kmalloc+0x1cd/0x330 [ 526.374194][ T8809] __register_sysctl_table+0xe0/0x1230 [ 526.379811][ T8809] __devinet_sysctl_register+0x2c1/0x380 [ 526.385754][ T8809] devinet_sysctl_register+0x17c/0x1f0 [ 526.391245][ T8809] inetdev_init+0x28c/0x4d0 [ 526.395819][ T8809] inetdev_event+0x280/0x1360 [ 526.400500][ T8809] raw_notifier_call_chain+0xcb/0x160 [ 526.405939][ T8809] register_netdevice+0x1275/0x16b0 [ 526.411158][ T8809] __ip_tunnel_create+0x2bf/0x380 [ 526.416182][ T8809] ip_tunnel_init_net+0x232/0x6b0 [ 526.421403][ T8809] ops_init+0x357/0x600 [ 526.425687][ T8809] page_owner free stack trace missing [ 526.431053][ T8809] [ 526.433377][ T8809] Memory state around the buggy address: [ 526.439113][ T8809] ffff88802ae81500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.447359][ T8809] ffff88802ae81580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 526.455688][ T8809] >ffff88802ae81600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.464196][ T8809] ^ [ 526.468953][ T8809] ffff88802ae81680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.477041][ T8809] ffff88802ae81700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 526.485794][ T8809] ================================================================== [ 526.494171][ T8809] Disabling lock debugging due to kernel taint [ 526.500601][ T8809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 526.507897][ T8809] CPU: 0 PID: 8809 Comm: syz.1.1154 Tainted: G B syzkaller #0 [ 526.516771][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 526.527114][ T8809] Call Trace: [ 526.530419][ T8809] [ 526.533359][ T8809] dump_stack_lvl+0x168/0x230 [ 526.538076][ T8809] ? show_regs_print_info+0x20/0x20 [ 526.543289][ T8809] ? load_image+0x3b0/0x3b0 [ 526.547806][ T8809] panic+0x2c9/0x7f0 [ 526.551904][ T8809] ? bpf_jit_dump+0xd0/0xd0 [ 526.556434][ T8809] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 526.562368][ T8809] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 526.568277][ T8809] ? _raw_spin_unlock+0x40/0x40 [ 526.573139][ T8809] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 526.579829][ T8809] check_panic_on_warn+0x80/0xa0 [ 526.584880][ T8809] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 526.591500][ T8809] end_report+0x6d/0xf0 [ 526.595772][ T8809] kasan_report+0x102/0x130 [ 526.600292][ T8809] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 526.606901][ T8809] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 526.613522][ T8809] ? xfrm_policy_addr_delta+0x212/0x340 [ 526.619104][ T8809] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 526.625281][ T8809] ? xfrm_policy_alloc+0x75/0x2b0 [ 526.630350][ T8809] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 526.636516][ T8809] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 526.642415][ T8809] xfrm_policy_inexact_insert+0xe0/0x1460 [ 526.648251][ T8809] ? __get_hash_thresh+0x105/0x410 [ 526.653640][ T8809] ? policy_hash_bysel+0x10a/0x570 [ 526.658968][ T8809] xfrm_policy_insert+0x112/0x930 [ 526.664102][ T8809] xfrm_add_policy+0x4d6/0x860 [ 526.669064][ T8809] ? xfrm_dump_sa_done+0xc0/0xc0 [ 526.674185][ T8809] ? apparmor_capable+0x12c/0x190 [ 526.679379][ T8809] ? __nla_parse+0x3c/0x50 [ 526.683988][ T8809] xfrm_user_rcv_msg+0x58d/0x860 [ 526.688949][ T8809] ? xfrm_netlink_rcv+0x90/0x90 [ 526.693922][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 526.698975][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 526.704277][ T8809] ? xfrm_netlink_rcv+0x66/0x90 [ 526.709416][ T8809] ? __mutex_lock_common+0x431/0x2390 [ 526.715384][ T8809] ? __copy_skb_header+0x417/0x5a0 [ 526.720544][ T8809] ? __skb_clone+0x480/0x790 [ 526.725244][ T8809] netlink_rcv_skb+0x1e0/0x430 [ 526.730028][ T8809] ? xfrm_netlink_rcv+0x90/0x90 [ 526.734944][ T8809] ? netlink_ack+0xb60/0xb60 [ 526.739823][ T8809] ? __lock_acquire+0x7c60/0x7c60 [ 526.745277][ T8809] xfrm_netlink_rcv+0x75/0x90 [ 526.750269][ T8809] netlink_unicast+0x774/0x920 [ 526.755340][ T8809] netlink_sendmsg+0x8ab/0xbc0 [ 526.760127][ T8809] ? netlink_getsockopt+0x560/0x560 [ 526.765338][ T8809] ? aa_sock_msg_perm+0x94/0x150 [ 526.770396][ T8809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 526.775883][ T8809] ? security_socket_sendmsg+0x7c/0xa0 [ 526.781638][ T8809] ? netlink_getsockopt+0x560/0x560 [ 526.786999][ T8809] ____sys_sendmsg+0x5a2/0x8c0 [ 526.791959][ T8809] ? memset+0x1e/0x40 [ 526.795951][ T8809] ? __sys_sendmsg_sock+0x30/0x30 [ 526.801064][ T8809] ? import_iovec+0x6f/0xa0 [ 526.805572][ T8809] ___sys_sendmsg+0x1f0/0x260 [ 526.810405][ T8809] ? __sys_sendmsg+0x250/0x250 [ 526.815185][ T8809] ? percpu_counter_add_batch+0x13b/0x160 [ 526.821163][ T8809] ? __fdget+0x18b/0x210 [ 526.825519][ T8809] __se_sys_sendmsg+0x190/0x250 [ 526.830639][ T8809] ? __x64_sys_sendmsg+0x80/0x80 [ 526.835785][ T8809] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 526.841814][ T8809] ? lockdep_hardirqs_on+0x94/0x140 [ 526.847043][ T8809] do_syscall_64+0x4c/0xa0 [ 526.851472][ T8809] ? clear_bhb_loop+0x30/0x80 [ 526.856163][ T8809] ? clear_bhb_loop+0x30/0x80 [ 526.860858][ T8809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.867036][ T8809] RIP: 0033:0x7fde1528afc9 [ 526.871643][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.891744][ T8809] RSP: 002b:00007fde134f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.900175][ T8809] RAX: ffffffffffffffda RBX: 00007fde154e1fa0 RCX: 00007fde1528afc9 [ 526.908439][ T8809] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 526.916849][ T8809] RBP: 00007fde1530df91 R08: 0000000000000000 R09: 0000000000000000 [ 526.925288][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.933472][ T8809] R13: 00007fde154e2038 R14: 00007fde154e1fa0 R15: 00007ffded8b4e88 [ 526.941787][ T8809] [ 526.945071][ T8809] Kernel Offset: disabled [ 526.949425][ T8809] Rebooting in 86400 seconds..