last executing test programs: 15m44.054501419s ago: executing program 0 (id=3239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x8000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x5143fad7b81663e7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 15m43.102105881s ago: executing program 0 (id=3244): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket(0x1f, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) io_setup(0x9, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) 15m41.210379766s ago: executing program 0 (id=3251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x40) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 15m36.13415217s ago: executing program 0 (id=3265): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 15m34.986491146s ago: executing program 0 (id=3267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15m33.211741638s ago: executing program 32 (id=3271): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x203104, 0xc, 0x7, 0x401, 0x7, 0x0, 0x0, 0x80, 0x8}}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f6ecc35ecff6796100f236f757cafe08f02725ce04c090dbe747d4f5ce27aa6ea4f3f92515cc63e09c8467", 0x2b}, {&(0x7f00000006c0)="18f89e083e27335464a5949d5156aee5e53e38bd8afbacaabec07d4ff6c529ca562906", 0x23}, {&(0x7f0000000580)="3af36ffe5ae18eefcc87a228", 0xc}, {&(0x7f0000000600)="daf6a865dbdb0d44bfbe44ec87978e934809ec890a060a6fb55e1c0eec", 0x1d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)="7cfb74fafe0b9e8b30b676d3abdbc0549b80acb76934c3e8d06f4ac0f0d7dcef56f47a6add8f7718f363c0268e04d2ff1cf2c0cc0a5f74989ada9091559af4bc5ec45c82cfcc1cbeeac788f505a76727124ad9c506087c7ef86c640519ceb3729f9077c8b5a02dbaabae2a8cb7967598fac0f9e7f5e78a895908c51bd0958125d9b75db3dc99236260d8a16188d18ab7", 0x90}], 0x1}}], 0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.455151236s ago: executing program 5 (id=6389): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c040091) socket$inet6_tcp(0xa, 0x1, 0x0) 8.060409862s ago: executing program 5 (id=6391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000001b00)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.725930074s ago: executing program 5 (id=6392): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.574167927s ago: executing program 5 (id=6394): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x802, 0x2}, 0x18, 0x3) landlock_restrict_self(r2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) 7.038470757s ago: executing program 5 (id=6395): syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c09240202080001800209240201090108095909050109400206100507250100010700090402000001020000090402010101"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c833, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b0174949173", 0x80, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20401) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001740)={0x53, 0xfffffffffffffffc, 0x6, 0x6, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="938b56d7acbb", 0x0, 0x2, 0x1, 0x1, 0x0}) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.18267966s ago: executing program 5 (id=6399): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) 3.135895914s ago: executing program 3 (id=6419): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.998504459s ago: executing program 1 (id=6421): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') 2.984348573s ago: executing program 3 (id=6422): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f0000000440)="15ecc6fd0e30c5041fef7d99ee21daeb5197225a4a16003a31931a9f19fbab6c6939422695abc18d783df36829816cdbe4efc48cf1ec87dcb4465439363cbf33c94bbd801fab9bf0d5d6db9f8e60bbb836ed81922e78a34483e90c08817ea2982da70ea81a2b272daf42c94185ee86d0a8f60ac3a271e45301", 0x79, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 2.841803832s ago: executing program 1 (id=6423): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x3, 0x5, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000002c0)={0xb, 0x0, 0x0, &(0x7f0000000100)}, 0x20) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.34603963s ago: executing program 2 (id=6427): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.209931691s ago: executing program 2 (id=6429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2.178423343s ago: executing program 2 (id=6431): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.054145962s ago: executing program 3 (id=6432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="3447fb20a1a181647979cfa792a1d69e60b28f9af6f433b770eca292926eb316e5455ec9d0a73ac728fed6707fbdb297c62b78182f9b53", 0x37}], 0x1}}], 0x1, 0x80) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x11) 2.040087272s ago: executing program 2 (id=6433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 1.903715083s ago: executing program 1 (id=6434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000001b00)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.75786562s ago: executing program 1 (id=6435): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x5, 0x414202) dup(r4) openat(0xffffffffffffff9c, 0x0, 0x1e3442, 0x0) r5 = socket(0x15, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0xd0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 1.011016584s ago: executing program 3 (id=6436): openat$comedi(0xffffffffffffff9c, 0x0, 0x800, 0x0) unshare(0x40280) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r0, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) setns(r0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 910.822987ms ago: executing program 3 (id=6437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(r1, &(0x7f0000000600), 0x0, 0x80) 807.957065ms ago: executing program 1 (id=6439): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xc, 0x2, 0x40000000b, 0xfffffffffffffc01, 0x4000002}, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) 753.870233ms ago: executing program 4 (id=6440): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='qrtr_ns_service_announce_del\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 753.132405ms ago: executing program 1 (id=6441): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f0000000440)="15ecc6fd0e30c5041fef7d99ee21daeb5197225a4a16003a31931a9f19fbab6c6939422695abc18d783df36829816cdbe4efc48cf1ec87dcb4465439363cbf33c94bbd801fab9bf0d5d6db9f8e60bbb836ed81922e78a34483e90c08817ea2982da70ea81a2b272daf42c94185ee86d0a8f60ac3a271e45301", 0x79, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 513.922169ms ago: executing program 2 (id=6442): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 512.981202ms ago: executing program 4 (id=6443): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 356.014664ms ago: executing program 4 (id=6444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000001b00)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 354.926067ms ago: executing program 2 (id=6445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setresuid(0xee00, 0xee00, 0xee00) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2000, @empty}, 0x1c) r4 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) dup2(r2, r4) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000040), 0x4001) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e646af483", 0xe1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec29b8416714cab16f748d946c85b66802f01", 0x8b}, {&(0x7f0000001a80)}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) 269.847641ms ago: executing program 4 (id=6446): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 82.750109ms ago: executing program 4 (id=6447): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) 27.823761ms ago: executing program 3 (id=6448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x37, 0x0, 0x10000009, 0xffffffff, 0x0, 0x1000, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04130d03c8000800c9"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=6449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): 7.560513][T25563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.640160][T25563] team0: Port device team_slave_0 added [ 1827.734351][T25563] team0: Port device team_slave_1 added [ 1828.046273][T25563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.127365][T25563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.153364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1828.269047][T25563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.332896][T25563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.350347][T25563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.512387][T25563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1828.722740][T25635] kAFS: No cell specified [ 1828.854773][T25563] hsr_slave_0: entered promiscuous mode [ 1828.881191][T25563] hsr_slave_1: entered promiscuous mode [ 1828.896170][T25563] debugfs: 'hsr0' already exists in 'hsr' [ 1828.938993][T25563] Cannot create hsr debugfs directory [ 1829.145472][T25563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.278658][T25563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.295388][T17425] Bluetooth: hci0: command tx timeout [ 1830.235077][T25563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.353442][T25563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.168288][T25563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1831.177922][T25563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1831.193652][T25563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1831.722714][T25563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1832.108665][T25674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4890'. [ 1832.117710][T25674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4890'. [ 1832.518356][T25563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.665916][T25563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.807665][T19018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.814799][T19018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.850939][T19018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.858015][T19018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.396470][T25685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4892'. [ 1833.615663][T25563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.671892][T25563] veth0_vlan: entered promiscuous mode [ 1834.184891][T25563] veth1_vlan: entered promiscuous mode [ 1834.235400][T25563] veth0_macvtap: entered promiscuous mode [ 1834.478106][T25563] veth1_macvtap: entered promiscuous mode [ 1835.105582][T25563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.243790][T25563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.272854][ T6560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.312241][ T6560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.745438][ T6560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.779407][ T6560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.403154][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.592436][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1836.601488][T25718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1836.772041][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.815772][T19020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.926737][T19020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.020393][T25722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4898'. [ 1839.062495][T25512] syz_tun (unregistering): left promiscuous mode [ 1839.608871][ T1084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.677481][ T1084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.203165][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1840.215679][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1840.229051][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1840.238954][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1840.250633][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1840.283973][T25743] lo speed is unknown, defaulting to 1000 [ 1840.452082][T25743] lo speed is unknown, defaulting to 1000 [ 1841.210834][ T1084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.238760][ T1084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1841.454220][T25745] lo speed is unknown, defaulting to 1000 [ 1842.356561][T17425] Bluetooth: hci4: command tx timeout [ 1842.390794][ T1084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.541118][ T1084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1843.720406][ T1084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.821457][ T1084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1843.850578][T25775] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1843.862788][T25775] bond0: (slave lo): Error: Device can not be enslaved while up [ 1843.871615][T25745] lo speed is unknown, defaulting to 1000 [ 1844.676695][T17425] Bluetooth: hci4: command tx timeout [ 1844.765594][T25787] kAFS: No cell specified [ 1845.231358][T25745] chnl_net:caif_netlink_parms(): no params data found [ 1845.304434][T25795] overlayfs: overlapping lowerdir path [ 1845.846949][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4916'. [ 1845.856001][T25797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4916'. [ 1846.729222][ T5844] Bluetooth: hci4: command tx timeout [ 1846.949847][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 1846.958762][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 1846.993948][ T1084] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1847.052885][T25809] kAFS: No cell specified [ 1847.928115][ T1084] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1848.284220][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.294517][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1848.306052][ T1084] bond0 (unregistering): (slave team0): Releasing backup interface [ 1848.315305][ T1084] bond0 (unregistering): Released all slaves [ 1848.408900][ T1084] bond1 (unregistering): (slave vlan3): Releasing active interface [ 1848.418049][ T1084] bond1 (unregistering): Released all slaves [ 1848.431268][ T1084] bond2 (unregistering): Released all slaves [ 1848.530683][ T1084] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 1848.538666][ T1084] vcan1: left promiscuous mode [ 1848.545307][ T1084] bond3 (unregistering): Released all slaves [ 1848.611681][ T5843] syz0: Port: 1 Link DOWN [ 1848.696697][ T1084] : left promiscuous mode [ 1848.754970][T25828] team_slave_0: entered promiscuous mode [ 1848.760872][T25828] team_slave_1: entered promiscuous mode [ 1848.770160][T25828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1848.789582][ T5844] Bluetooth: hci4: command tx timeout [ 1848.850174][ T1084] tipc: Disabling bearer [ 1848.875862][ T1084] tipc: Disabling bearer [ 1848.897196][ T1084] tipc: Left network mode [ 1848.905052][T25837] kAFS: No cell specified [ 1848.927749][T25745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.959601][T25745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.045318][T25745] bridge_slave_0: entered allmulticast mode [ 1849.097624][T25745] bridge_slave_0: entered promiscuous mode [ 1849.159976][T25745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.233406][T25745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.357467][T25745] bridge_slave_1: entered allmulticast mode [ 1849.373923][T25745] bridge_slave_1: entered promiscuous mode [ 1849.801780][T25745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.192527][T25745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.208369][T25843] syz_tun: entered allmulticast mode [ 1850.248893][T25842] syz_tun: left allmulticast mode [ 1850.328000][T25745] team0: Port device team_slave_0 added [ 1850.420957][T25745] team0: Port device team_slave_1 added [ 1850.534601][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4931'. [ 1850.554854][T25745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.571272][T25745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.659679][T25745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.804006][T25745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.836866][T25745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.916623][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1850.916639][ T30] audit: type=1400 audit(1737779972.970:1059): avc: denied { name_bind } for pid=25863 comm="syz.1.4935" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1850.975852][T25745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.603587][T25745] hsr_slave_0: entered promiscuous mode [ 1851.617885][T25745] hsr_slave_1: entered promiscuous mode [ 1851.629116][T25745] debugfs: 'hsr0' already exists in 'hsr' [ 1851.650716][T25745] Cannot create hsr debugfs directory [ 1851.683446][ T1084] batadv_slave_1: left promiscuous mode [ 1851.721811][ T1084] hsr_slave_0: left promiscuous mode [ 1851.741421][ T1084] hsr_slave_1: left promiscuous mode [ 1851.873418][ T1084] veth1_macvtap: left promiscuous mode [ 1851.883187][ T1084] veth0_macvtap: left promiscuous mode [ 1851.892670][ T1084] veth1_vlan: left promiscuous mode [ 1851.901176][ T1084] veth0_vlan: left promiscuous mode [ 1852.587540][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 1852.638544][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 1852.703315][T19007] smc: removing ib device syz0 [ 1852.714105][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.001970][T25890] netlink: 'syz.5.4946': attribute type 25 has an invalid length. [ 1853.027888][T25890] netlink: 'syz.5.4946': attribute type 1 has an invalid length. [ 1853.051056][T25890] bridge0: port 1(bridge_slave_0) entered learning state [ 1853.187106][ T30] audit: type=1400 audit(1737779975.270:1060): avc: denied { execute } for pid=25891 comm="syz.4.4947" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1853.695440][T25912] netlink: 'syz.4.4952': attribute type 10 has an invalid length. [ 1854.335383][T25912] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1854.468923][T25914] bridge_slave_0: default FDB implementation only supports local addresses [ 1855.224025][T25941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.880524][T25745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1855.922628][T25745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1856.002207][T25745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1856.089651][T25745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1856.124297][ T1084] IPVS: stop unused estimator thread 0... [ 1856.169560][T11960] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1856.339439][T11960] usb 3-1: Using ep0 maxpacket: 16 [ 1856.347922][T11960] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1856.356574][T11960] usb 3-1: config 8 has no interface number 0 [ 1856.366210][T11960] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1856.405342][T25745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.429189][T11960] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1856.475157][T25745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.475165][T11960] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1856.531165][T19020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.538271][T19020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.552718][T11960] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1856.563535][T11960] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1856.572759][T11960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.582714][T11960] usb 3-1: Product: syz [ 1856.589110][T11960] usb 3-1: Manufacturer: syz [ 1856.594803][T11960] usb 3-1: SerialNumber: syz [ 1856.604249][T19007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.611385][T19007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.650169][T25962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1856.662392][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1856.999819][ T5900] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1857.189345][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 1857.250418][ T5900] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1857.258655][ T5900] usb 2-1: config 0 has no interface number 0 [ 1857.361481][T25745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.369488][ T918] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1857.394645][ T5900] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1857.447488][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1857.456745][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.516743][ T5900] usb 2-1: Product: syz [ 1857.542278][ T5900] usb 2-1: Manufacturer: syz [ 1857.555722][T25745] veth0_vlan: entered promiscuous mode [ 1857.583139][ T918] usb 5-1: Using ep0 maxpacket: 8 [ 1857.593455][ T5900] usb 2-1: SerialNumber: syz [ 1857.623217][T25745] veth1_vlan: entered promiscuous mode [ 1857.664271][ T918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1857.682057][ T5900] usb 2-1: config 0 descriptor?? [ 1857.694022][T25745] veth0_macvtap: entered promiscuous mode [ 1857.727544][T25745] veth1_macvtap: entered promiscuous mode [ 1857.745749][ T918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1857.888391][T25976] lo speed is unknown, defaulting to 1000 [ 1857.945476][ T918] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1857.966121][T25745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.023286][T25965] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1858.253403][ T5900] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1858.265160][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.277178][T25745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.297229][ T5900] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1858.308308][ T918] usb 5-1: Product: syz [ 1858.339534][ T918] usb 5-1: Manufacturer: syz [ 1858.344144][ T918] usb 5-1: SerialNumber: syz [ 1858.362505][ T5900] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1858.382901][T19018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.400870][ T5900] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1858.417601][T19018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.430682][ T918] usb 5-1: config 0 descriptor?? [ 1858.438389][ T5900] usb 2-1: USB disconnect, device number 44 [ 1858.457369][ T918] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1858.474090][T19018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.538277][T19018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.601285][T25976] lo speed is unknown, defaulting to 1000 [ 1858.644613][ T918] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1858.659647][ T918] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1858.670747][ T918] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1858.902676][T19018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.937073][T19018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.495279][T19017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.507810][T19017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.583022][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.599477][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.667030][T25999] random: crng reseeded on system resumption [ 1860.869456][ T30] audit: type=1400 audit(1737779982.950:1061): avc: denied { setattr } for pid=26011 comm="syz.5.4979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1861.527947][T11960] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1861.541034][T11960] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 1861.560660][T11960] usb 3-1: USB disconnect, device number 51 [ 1862.224071][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1862.289211][ T30] audit: type=1326 audit(1737779984.350:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.1.4983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f3138ebe9 code=0x0 [ 1862.354666][T11960] usb 5-1: USB disconnect, device number 71 [ 1862.929744][ T5956] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1862.974145][T25115] syz_tun (unregistering): left promiscuous mode [ 1863.358969][T19020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.548808][T19020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.689325][ T918] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1863.706796][T17425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1863.719683][T17425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1863.728041][T17425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1863.738102][T17425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1863.745680][T17425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1863.810348][T26048] lo speed is unknown, defaulting to 1000 [ 1863.851175][T19020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.941961][ T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.963743][T19020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.055706][ T918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1864.098808][T26048] lo speed is unknown, defaulting to 1000 [ 1864.174772][ T918] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1864.212338][T19020] veth3: left allmulticast mode [ 1864.217704][T19020] bridge1: port 2(veth3) entered disabled state [ 1864.252554][T19020] ip6gretap1: left allmulticast mode [ 1864.257963][T19020] ip6gretap1: left promiscuous mode [ 1864.263742][T19020] bridge1: port 1(ip6gretap1) entered disabled state [ 1864.328220][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.463797][ T918] usb 4-1: config 0 descriptor?? [ 1864.472638][ T918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1864.479557][ T918] dvb-usb: bulk message failed: -22 (3/0) [ 1864.503780][ T918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1864.552830][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4991'. [ 1864.721410][ T918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1864.738472][ T918] usb 4-1: media controller created [ 1864.785724][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1864.896482][ T918] dvb-usb: bulk message failed: -22 (6/0) [ 1864.902522][ T918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1864.941331][ T918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 1865.100569][ T918] dvb-usb: schedule remote query interval to 150 msecs. [ 1865.110182][ T918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1865.272381][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1865.279110][ T918] dvb-usb: error while querying for an remote control event. [ 1865.439219][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1865.444997][ T918] dvb-usb: error while querying for an remote control event. [ 1865.490134][T19020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.503084][T19020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.518673][T19020] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1865.541382][T19020] bond0 (unregistering): Released all slaves [ 1865.619237][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1865.625436][ T918] dvb-usb: error while querying for an remote control event. [ 1865.632987][ T5956] usb 2-1: device descriptor read/64, error -71 [ 1865.657936][T19020] bond1 (unregistering): Released all slaves [ 1865.758534][T19020] bond2 (unregistering): Released all slaves [ 1865.799378][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1865.810413][ T918] dvb-usb: error while querying for an remote control event. [ 1865.829382][ T5844] Bluetooth: hci1: command tx timeout [ 1865.889990][ T5956] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1865.895983][T19020] tipc: Disabling bearer [ 1865.912448][T19020] tipc: Disabling bearer [ 1865.925121][T19020] tipc: Left network mode [ 1865.952116][T19020] IPVS: stopping master sync thread 9821 ... [ 1865.990586][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1865.998946][ T918] dvb-usb: error while querying for an remote control event. [ 1866.019612][T26048] chnl_net:caif_netlink_parms(): no params data found [ 1866.077290][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 1866.118783][ T5956] usb 2-1: config 6 has an invalid interface number: 227 but max is 0 [ 1866.133315][ T5956] usb 2-1: config 6 has no interface number 0 [ 1866.146011][ T5956] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 1866.158517][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.169751][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1866.170967][T26048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.175783][ T918] dvb-usb: error while querying for an remote control event. [ 1866.188769][ T5956] usb 2-1: Product: syz [ 1866.248856][ T5956] usb 2-1: Manufacturer: syz [ 1866.253682][ T5956] usb 2-1: SerialNumber: syz [ 1866.263647][ T5956] kalmia 2-1:6.227: probe with driver kalmia failed with error -22 [ 1866.303480][T26048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.319461][T26048] bridge_slave_0: entered allmulticast mode [ 1866.326724][T26048] bridge_slave_0: entered promiscuous mode [ 1866.333176][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 1866.353711][ T5956] dvb-usb: error while querying for an remote control event. [ 1866.353881][T26048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1866.368879][T26048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.383890][T26048] bridge_slave_1: entered allmulticast mode [ 1866.395771][T26048] bridge_slave_1: entered promiscuous mode [ 1866.466041][T26048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.524209][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 1866.534183][ T5956] dvb-usb: error while querying for an remote control event. [ 1866.541941][T24705] usb 2-1: USB disconnect, device number 46 [ 1866.601761][T26048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1866.735775][ T918] dvb-usb: bulk message failed: -22 (1/0) [ 1866.742789][ T918] dvb-usb: error while querying for an remote control event. [ 1866.768299][T26048] team0: Port device team_slave_0 added [ 1866.794375][T26048] team0: Port device team_slave_1 added [ 1866.919384][T24705] dvb-usb: bulk message failed: -22 (1/0) [ 1866.919459][T16830] usb 4-1: USB disconnect, device number 57 [ 1866.925134][T24705] dvb-usb: error while querying for an remote control event. [ 1867.151540][T16830] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1867.241056][T26048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.286779][T26048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.358672][T26048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.388861][T19020] batadv_slave_0: left promiscuous mode [ 1867.488230][T19020] hsr_slave_0: left promiscuous mode [ 1867.522134][T19020] hsr_slave_1: left promiscuous mode [ 1867.562892][T19020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1867.579850][T19020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.632630][T19020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1867.667976][T19020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1867.841043][T19020] team_slave_0: left promiscuous mode [ 1867.846816][T19020] team_slave_1: left promiscuous mode [ 1867.876219][T19020] veth1_macvtap: left promiscuous mode [ 1867.896348][T19020] veth0_macvtap: left promiscuous mode [ 1867.904787][T19020] veth1_vlan: left promiscuous mode [ 1867.911222][ T5844] Bluetooth: hci1: command tx timeout [ 1868.035946][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'. [ 1868.192559][T26101] program syz.5.5003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1868.276032][T26102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1869.086669][T26114] netlink: 'syz.2.5007': attribute type 10 has an invalid length. [ 1869.279345][T19020] team0 (unregistering): Port device team_slave_1 removed [ 1869.369109][T19020] team0 (unregistering): Port device team_slave_0 removed [ 1869.474663][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5010'. [ 1869.991093][ T5844] Bluetooth: hci1: command tx timeout [ 1870.076582][ T1084] smc: removing ib device sz1 [ 1870.082489][T26048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.089611][T26048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.119666][T26048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1870.134316][T16830] lo speed is unknown, defaulting to 1000 [ 1870.156189][T16830] sz1: Port: 1 Link DOWN [ 1870.204741][T26114] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1870.688885][ T30] audit: type=1400 audit(1737779992.690:1063): avc: denied { append } for pid=26130 comm="syz.2.5015" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1871.145198][T26048] hsr_slave_0: entered promiscuous mode [ 1871.335955][T26048] hsr_slave_1: entered promiscuous mode [ 1872.077607][ T5844] Bluetooth: hci1: command tx timeout [ 1872.839727][T26161] tipc: Started in network mode [ 1872.846263][T26161] tipc: Node identity eafdb447c863, cluster identity 4711 [ 1872.855534][T26161] tipc: Enabled bearer , priority 0 [ 1872.893311][T26158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5021'. [ 1872.912839][T26158] tipc: Resetting bearer [ 1873.095476][T26163] syzkaller0: entered promiscuous mode [ 1873.102459][T26163] syzkaller0: entered allmulticast mode [ 1873.298412][T26152] tipc: Resetting bearer [ 1873.326561][T26152] tipc: Disabling bearer [ 1874.001277][T26048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1874.080348][T26048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1874.411845][T26048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1874.465413][T26048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1874.500001][T19020] IPVS: stop unused estimator thread 0... [ 1875.247091][T26048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1875.274486][T26048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.295845][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.302971][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.344373][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.351528][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.233518][T26206] veth2: entered allmulticast mode [ 1876.258734][T26206] veth3: entered promiscuous mode [ 1876.264716][T26206] veth3: entered allmulticast mode [ 1876.339277][T26208] input: syz0 as /devices/virtual/input/input55 [ 1876.367797][T26048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1877.815243][T26048] veth0_vlan: entered promiscuous mode [ 1877.853295][T26048] veth1_vlan: entered promiscuous mode [ 1878.115958][T26048] veth0_macvtap: entered promiscuous mode [ 1878.167531][T26048] veth1_macvtap: entered promiscuous mode [ 1878.370440][T26048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1878.412430][T26048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1878.481287][T19003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.514457][T19003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.526746][T19003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.776586][T26233] hub 9-0:1.0: USB hub found [ 1878.788359][T26233] hub 9-0:1.0: 1 port detected [ 1878.877441][T19003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.196682][T19007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.392857][T19007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.547673][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.560583][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.709339][ T5843] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1881.861437][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1881.905326][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.929563][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.954255][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1881.995476][ T5843] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1882.019240][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.097878][ T5843] usb 4-1: config 0 descriptor?? [ 1882.522097][ T5843] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1882.529529][ T5843] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1882.536452][ T5843] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1882.589940][ T5843] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1882.612361][ T5843] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1882.638051][ T5843] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 1882.724294][T26267] random: crng reseeded on system resumption [ 1882.835272][ T5843] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 1882.888667][ T5843] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1882.967598][ T5843] usb 4-1: USB disconnect, device number 58 [ 1882.977488][T25819] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1883.000099][T25819] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1883.019024][T25819] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1883.039636][T25819] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1883.076975][T26293] netlink: 'syz.1.5055': attribute type 10 has an invalid length. [ 1883.093322][T26293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.103007][T26293] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1883.112950][T26295] veth1_to_bond: entered allmulticast mode [ 1883.121018][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5056'. [ 1883.168244][T26295] bond0: (slave bond_slave_1): Releasing backup interface [ 1883.207735][T26295] veth1_to_bond (unregistering): left allmulticast mode [ 1883.399995][ T30] audit: type=1400 audit(1737780005.490:1064): avc: denied { getopt } for pid=26296 comm="syz.1.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1883.859323][ T5843] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1884.061651][ T5843] usb 2-1: no configurations [ 1884.076744][ T5843] usb 2-1: can't read configurations, error -22 [ 1884.249376][ T5843] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1884.816554][ T5843] usb 2-1: no configurations [ 1884.821434][ T5843] usb 2-1: can't read configurations, error -22 [ 1884.923240][ T5843] usb usb2-port1: attempt power cycle [ 1885.379369][ T5843] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1885.517922][ T5843] usb 2-1: no configurations [ 1885.532209][ T5843] usb 2-1: can't read configurations, error -22 [ 1885.699314][ T5843] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1885.769352][ T5843] usb 2-1: no configurations [ 1885.774008][ T5843] usb 2-1: can't read configurations, error -22 [ 1885.806718][ T5843] usb usb2-port1: unable to enumerate USB device [ 1886.844378][T26388] binder_alloc: 26387: binder_alloc_buf, no vma [ 1887.008020][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1887.103343][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1887.388489][T26404] bond0: (slave bond_slave_1): Releasing backup interface [ 1889.006674][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'. [ 1889.211909][T26456] netlink: 'syz.1.5113': attribute type 29 has an invalid length. [ 1889.232294][T26456] netlink: 'syz.1.5113': attribute type 29 has an invalid length. [ 1889.699105][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5117'. [ 1889.837653][T26471] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1890.026417][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1890.113852][T26479] lo speed is unknown, defaulting to 1000 [ 1890.149815][ T30] audit: type=1400 audit(1737780012.230:1065): avc: denied { write } for pid=26484 comm="syz.5.5125" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1890.230331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.948094][ T30] audit: type=1400 audit(1737780013.030:1066): avc: denied { node_bind } for pid=26502 comm="syz.1.5130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1892.465691][T26538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5137'. [ 1892.616396][T26540] loop2: detected capacity change from 0 to 7 [ 1892.666478][T26540] Dev loop2: unable to read RDB block 7 [ 1892.682661][T26540] loop2: unable to read partition table [ 1892.839379][T26540] loop2: partition table beyond EOD, truncated [ 1893.140536][T26540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1893.193323][T26552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1893.264076][T26552] hsr_slave_1 (unregistering): left promiscuous mode [ 1894.339256][T16830] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1894.534275][T26581] netlink: 'syz.3.5153': attribute type 23 has an invalid length. [ 1894.612614][T16830] usb 3-1: Using ep0 maxpacket: 16 [ 1894.656948][T16830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.687149][T16830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1894.727518][T16830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1894.770124][T16830] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1894.822931][T16830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.893661][T16830] usb 3-1: config 0 descriptor?? [ 1895.081486][T26590] raw_sendmsg: syz.5.5157 forgot to set AF_INET. Fix it! [ 1895.599627][T26575] random: crng reseeded on system resumption [ 1896.166199][T26615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5164'. [ 1897.158907][T16830] usbhid 3-1:0.0: can't add hid device: -71 [ 1897.177453][T16830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1897.212190][T16830] usb 3-1: USB disconnect, device number 52 [ 1897.340673][T26632] veth1_to_bond: entered allmulticast mode [ 1897.347659][T26632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1897.423769][T26632] bond0: (slave bond_slave_1): Releasing backup interface [ 1897.484583][T26632] veth1_to_bond (unregistering): left allmulticast mode [ 1897.860875][T26654] netlink: 'syz.3.5179': attribute type 23 has an invalid length. [ 1897.869341][ T5956] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1898.023126][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 1898.040054][ T5956] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1898.050222][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1898.086640][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1898.109389][ T5843] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1898.199951][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1898.247728][ T5956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1898.279266][ T5956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1898.297348][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.411122][ T5843] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1898.424499][ T5843] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1898.445866][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5185'. [ 1898.456369][ T5843] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1898.660239][ T5956] usb 5-1: GET_CAPABILITIES returned 0 [ 1898.664205][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.665737][ T5956] usbtmc 5-1:16.0: can't read capabilities [ 1898.686748][T26647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1898.743070][ T5843] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1898.923061][ T5956] usb 5-1: USB disconnect, device number 72 [ 1899.141055][T16830] usb 3-1: USB disconnect, device number 53 [ 1899.786520][T26690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1899.795646][T26690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1899.899607][T26694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1899.968766][ T30] audit: type=1400 audit(1737780022.040:1067): avc: denied { lock } for pid=26681 comm="syz.1.5188" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1900.021576][T26700] netlink: 'syz.4.5192': attribute type 23 has an invalid length. [ 1900.849224][ T5956] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1901.014425][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 1901.024977][ T5956] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1901.047508][ T5956] usb 4-1: config 8 has no interface number 0 [ 1901.100432][ T5956] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1901.319506][ T5956] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1901.366769][ T5956] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1901.419814][ T5956] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1901.432804][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1901.443510][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.516860][ T5956] usb 4-1: Product: syz [ 1901.527007][ T5956] usb 4-1: Manufacturer: syz [ 1901.553927][ T5956] usb 4-1: SerialNumber: syz [ 1903.482834][T26781] binder: 26776:26781 ioctl 4018620d 0 returned -22 [ 1903.586875][T26786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5226'. [ 1904.936491][T26813] veth1_to_bond: entered allmulticast mode [ 1904.965987][T26812] veth1_to_bond: left allmulticast mode [ 1905.437857][T26827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1907.212177][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5249'. [ 1908.207659][ T5956] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -32 [ 1908.219411][ T5956] ipheth 4-1:8.39: probe with driver ipheth failed with error -32 [ 1908.593683][T26886] netlink: 'syz.5.5256': attribute type 23 has an invalid length. [ 1908.789205][ T5956] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1908.815614][T26894] geneve2: entered promiscuous mode [ 1908.950542][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 1909.014088][ T5956] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1909.023246][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.034082][ T5956] usb 5-1: Product: syz [ 1909.038227][ T5956] usb 5-1: Manufacturer: syz [ 1909.045467][ T5956] usb 5-1: SerialNumber: syz [ 1909.057327][T26901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5264'. [ 1909.083083][ T5956] usb 5-1: config 0 descriptor?? [ 1909.107973][T26904] veth1_to_bond: entered allmulticast mode [ 1909.136147][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1909.208378][T26904] bond0: (slave bond_slave_1): Releasing backup interface [ 1909.258005][T26904] veth1_to_bond (unregistering): left allmulticast mode [ 1909.763833][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5269'. [ 1910.614821][T24705] usb 4-1: USB disconnect, device number 59 [ 1911.114780][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5279'. [ 1911.551693][ T30] audit: type=1326 audit(1737780033.640:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26951 comm="syz.2.5281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ac78ebe9 code=0x0 [ 1911.832523][ T5956] usb 5-1: USB disconnect, device number 73 [ 1911.839737][T26958] syz_tun: entered allmulticast mode [ 1911.863232][T26958] dvmrp1: entered allmulticast mode [ 1911.889360][T24705] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1912.566298][T26972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5288'. [ 1912.659264][ T5956] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1912.814634][T26968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.840831][T26968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.867850][T26968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.906092][T26968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.959646][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1912.969097][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1912.987530][ T5956] usb 5-1: can't read configurations, error -71 [ 1914.153322][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.589949][T26998] syz_tun: entered allmulticast mode [ 1914.617467][T27004] Lens A: ================= START STATUS ================= [ 1914.629406][T26998] dvmrp1: entered allmulticast mode [ 1914.731921][T27004] Lens A: Focus, Absolute: 0 [ 1914.737017][T27004] Lens A: ================== END STATUS ================== [ 1915.977616][ T30] audit: type=1400 audit(1737780038.060:1069): avc: denied { accept } for pid=27016 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1916.104959][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 1916.278694][T27032] mmap: syz.2.5308 (27032): VmData 37470208 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 1916.315488][T27036] syz_tun: entered allmulticast mode [ 1916.342558][T27036] dvmrp1: entered allmulticast mode [ 1917.783171][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5321'. [ 1918.419225][ T30] audit: type=1400 audit(1737780040.490:1070): avc: denied { map } for pid=27092 comm="syz.3.5331" path="socket:[95800]" dev="sockfs" ino=95800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1918.547641][ T30] audit: type=1400 audit(1737780040.500:1071): avc: denied { read } for pid=27092 comm="syz.3.5331" path="socket:[95800]" dev="sockfs" ino=95800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1919.519253][T19873] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1919.614060][T27130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5346'. [ 1919.734578][T19873] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1919.744436][T19873] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1919.779865][T19873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1919.805470][T19873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1919.835077][T19873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1919.903084][T19873] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1919.919146][T19873] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1919.940552][T19873] usb 2-1: Product: syz [ 1919.947031][T19873] usb 2-1: Manufacturer: syz [ 1919.968031][T19873] cdc_wdm 2-1:1.0: skipping garbage [ 1919.976412][T19873] cdc_wdm 2-1:1.0: skipping garbage [ 1920.040224][T19873] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1920.063032][T19873] cdc_wdm 2-1:1.0: Unknown control protocol [ 1920.150855][T27144] nftables ruleset with unbound chain [ 1920.159338][ T5843] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1920.321732][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 1920.343534][ T5843] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1920.355938][ T5843] usb 3-1: config 8 has no interface number 0 [ 1920.372548][ T5843] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1920.421539][ T5843] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1920.438513][ T5843] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1920.458121][ T5843] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1920.512595][ T5843] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1920.527149][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.543562][ T5843] usb 3-1: Product: syz [ 1920.547779][ T5843] usb 3-1: Manufacturer: syz [ 1920.558120][ T5843] usb 3-1: SerialNumber: syz [ 1920.624551][T19873] usb 2-1: USB disconnect, device number 51 [ 1921.238778][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1921.311746][T27178] bond0: (slave bond_slave_1): Releasing backup interface [ 1921.429449][T17425] Bluetooth: hci2: command 0x0406 tx timeout [ 1921.869250][T25819] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1922.053222][T25819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.172303][T25819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1922.196668][T25819] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1922.209211][T25819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.224677][T25819] usb 5-1: config 0 descriptor?? [ 1922.624995][T27203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1923.302117][T27184] sctp: [Deprecated]: syz.4.5369 (pid 27184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1923.302117][T27184] Use struct sctp_sack_info instead [ 1924.113414][ T5843] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1924.153678][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5382'. [ 1924.175911][ T5843] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 1924.242198][ T5843] usb 3-1: USB disconnect, device number 55 [ 1924.344076][T27229] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5384'. [ 1924.692609][T27231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5383'. [ 1924.705333][T27231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5383'. [ 1925.109773][T19873] usb 5-1: USB disconnect, device number 76 [ 1925.269464][ T30] audit: type=1326 audit(1737780047.350:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.3.5390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfa638ebe9 code=0x0 [ 1925.719231][ T5956] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1926.439313][T24705] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1926.611178][T24705] usb 2-1: config 0 has no interfaces? [ 1926.638685][T24705] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1926.648113][T24705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.656342][T24705] usb 2-1: Product: syz [ 1926.660706][T24705] usb 2-1: Manufacturer: syz [ 1926.665400][T24705] usb 2-1: SerialNumber: syz [ 1926.672746][T24705] usb 2-1: config 0 descriptor?? [ 1926.961869][T27262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.970653][T27262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.031594][ T30] audit: type=1400 audit(1737780049.080:1073): avc: denied { accept } for pid=27255 comm="syz.1.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1927.097754][T27285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5404'. [ 1929.129301][ T5956] usb 4-1: device descriptor read/64, error -71 [ 1929.148605][ T5843] usb 2-1: USB disconnect, device number 52 [ 1929.169403][T11960] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1929.207300][T27321] random: crng reseeded on system resumption [ 1929.379383][T11960] usb 3-1: Using ep0 maxpacket: 16 [ 1929.380045][ T5956] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1929.385977][T11960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1929.403639][T11960] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1929.416744][T11960] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1929.447057][T11960] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1929.456751][T11960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.470508][T11960] usb 3-1: Product: syz [ 1929.474676][T11960] usb 3-1: Manufacturer: syz [ 1929.484511][T11960] usb 3-1: SerialNumber: syz [ 1929.492017][T11960] usb 3-1: config 0 descriptor?? [ 1929.498254][T27310] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1929.546442][T11960] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 1929.553251][T11960] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 1929.566371][T11960] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 1929.575466][T11960] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 1929.583551][T11960] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1929.753474][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 1929.778661][ T5956] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1929.796890][ T5956] usb 4-1: config 8 has no interface number 0 [ 1929.887940][T27310] netlink: 'syz.2.5410': attribute type 5 has an invalid length. [ 1929.903083][ T5956] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1929.915052][T27310] ip6erspan0: entered promiscuous mode [ 1930.048782][T27310] bridge0: port 3(macsec0) entered blocking state [ 1930.057061][T27310] bridge0: port 3(macsec0) entered disabled state [ 1930.068922][T27310] macsec0: entered allmulticast mode [ 1930.075082][T27310] veth1_macvtap: entered allmulticast mode [ 1930.104143][T27310] macsec0: entered promiscuous mode [ 1930.112473][T27310] bridge0: port 3(macsec0) entered blocking state [ 1930.119253][T27310] bridge0: port 3(macsec0) entered forwarding state [ 1930.292707][ T5956] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1930.302931][ T5956] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1930.803175][ T5956] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1930.816116][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1930.825333][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.833415][ T5956] usb 4-1: Product: syz [ 1930.839366][ T5956] usb 4-1: Manufacturer: syz [ 1930.845026][ T5956] usb 4-1: SerialNumber: syz [ 1931.739825][ T5900] usb 3-1: USB disconnect, device number 56 [ 1931.747478][ T5900] mcba_usb 3-1:0.0 can0: device disconnected [ 1934.558514][ T5956] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1934.593106][ T5956] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 1934.633027][ T5956] usb 4-1: USB disconnect, device number 61 [ 1934.872678][T27410] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5442'. [ 1935.377718][T27431] usb usb8: usbfs: process 27431 (syz.1.5445) did not claim interface 0 before use [ 1935.674629][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1936.172188][T11960] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1936.352245][T11960] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1936.361001][T11960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.382847][T11960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1936.409271][T11960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.473444][T11960] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1936.482703][T11960] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1936.511645][T11960] usb 3-1: Product: syz [ 1936.515885][T11960] usb 3-1: Manufacturer: syz [ 1936.548230][T11960] cdc_wdm 3-1:1.0: skipping garbage [ 1936.569228][T11960] cdc_wdm 3-1:1.0: skipping garbage [ 1936.599195][T11960] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1936.619186][T11960] cdc_wdm 3-1:1.0: Unknown control protocol [ 1936.772856][T27463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5463'. [ 1937.110112][T27479] usb usb8: usbfs: process 27479 (syz.5.5466) did not claim interface 0 before use [ 1937.373767][ T5843] usb 3-1: USB disconnect, device number 57 [ 1938.292239][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1938.792681][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1939.025224][T27522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27522 comm=syz.4.5480 [ 1939.501444][T11960] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1939.659201][T11960] usb 2-1: Using ep0 maxpacket: 8 [ 1939.949550][T11960] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1939.959402][T11960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1939.972921][T11960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1939.983015][T11960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1939.993969][T11960] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1940.015833][T11960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1940.029230][T11960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.292805][T11960] usb 2-1: GET_CAPABILITIES returned 0 [ 1940.300622][T11960] usbtmc 2-1:16.0: can't read capabilities [ 1940.504454][T25819] usb 2-1: USB disconnect, device number 53 [ 1940.629363][ T5956] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1940.840650][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 1940.877217][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.891560][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.931586][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1940.960043][ T5956] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1941.034764][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.243529][ T5956] usb 4-1: config 0 descriptor?? [ 1941.839514][T27578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1942.055317][T27550] random: crng reseeded on system resumption [ 1942.337780][T27593] @: renamed from vlan0 (while UP) [ 1943.225835][T27607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1943.539262][ T5956] usbhid 4-1:0.0: can't add hid device: -71 [ 1943.545653][ T5956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1943.585153][ T5956] usb 4-1: USB disconnect, device number 62 [ 1943.717045][T27619] bond_slave_0: entered promiscuous mode [ 1943.729246][ T5900] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1943.743800][T27619] macsec1: entered promiscuous mode [ 1943.745227][T27621] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1943.748998][T27619] bond0: entered promiscuous mode [ 1943.805029][T27619] macsec1: entered allmulticast mode [ 1943.825379][T27619] bond0: entered allmulticast mode [ 1943.843255][T27619] bond_slave_0: entered allmulticast mode [ 1943.944273][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 1943.965817][ T5900] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1944.026776][ T5900] usb 3-1: config 8 has no interface number 0 [ 1944.052842][ T5900] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1944.087994][ T5900] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1944.133340][ T5900] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1944.162741][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5520'. [ 1944.187957][ T5900] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1944.532690][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1944.559264][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1944.563560][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.596623][ T5900] usb 3-1: Product: syz [ 1944.604427][ T5900] usb 3-1: Manufacturer: syz [ 1944.636923][ T5900] usb 3-1: SerialNumber: syz [ 1945.006846][T27659] netlink: 'syz.3.5526': attribute type 25 has an invalid length. [ 1945.826290][T27675] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5530'. [ 1945.970926][ T5900] ipheth 3-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 1945.991444][ T5900] ipheth 3-1:8.39: Apple iPhone USB Ethernet device attached [ 1946.954273][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 1947.178813][T27709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5546'. [ 1948.469729][T27738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5557'. [ 1948.614617][ T30] audit: type=1326 audit(1737780070.700:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27742 comm="syz.4.5559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaac78ebe9 code=0x0 [ 1949.537935][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1949.567957][T25819] usb 3-1: USB disconnect, device number 58 [ 1949.792082][T25819] ipheth 3-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1950.449251][ T5900] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1950.649169][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1950.656531][ T5900] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1950.665074][ T5900] usb 2-1: config 179 has no interface number 0 [ 1950.674187][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1950.686021][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1950.697982][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1950.709335][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1950.755175][ T5900] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1950.802650][ T5900] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1950.825134][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.857103][T27789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1951.133956][ T5900] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input58 [ 1951.548679][T25819] usb 2-1: USB disconnect, device number 54 [ 1951.548689][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1951.565540][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1952.319356][T11960] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1952.320645][ T5956] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1952.394990][T27825] netlink: 768 bytes leftover after parsing attributes in process `syz.5.5589'. [ 1952.492632][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 1952.501829][ T5956] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1952.513703][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1952.549413][T11960] usb 3-1: Using ep0 maxpacket: 16 [ 1952.604896][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1952.605247][T11960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.626190][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1952.628631][T11960] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1952.755739][T11960] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1952.769203][T11960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.782788][T11960] usb 3-1: Product: syz [ 1952.786929][T11960] usb 3-1: Manufacturer: syz [ 1952.793583][T11960] usb 3-1: SerialNumber: syz [ 1952.802095][T11960] usb 3-1: config 0 descriptor?? [ 1952.844954][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1952.858379][ T5956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1952.882888][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.142414][ T5956] usb 4-1: usb_control_msg returned -71 [ 1953.148088][ T5956] usbtmc 4-1:16.0: can't read capabilities [ 1953.164468][ T5956] usb 4-1: USB disconnect, device number 63 [ 1953.246096][T27844] program syz.4.5597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1954.738970][ T918] usb 3-1: USB disconnect, device number 59 [ 1955.094787][ T30] audit: type=1400 audit(1737780077.130:1075): avc: denied { read } for pid=27881 comm="syz.4.5610" lport=36849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1955.913556][T27904] binder: 27903:27904 ioctl c0306201 2000000000c0 returned -14 [ 1956.410027][T27935] usb usb8: usbfs: process 27935 (syz.1.5619) did not claim interface 0 before use [ 1957.291002][T27940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'. [ 1957.501499][ T30] audit: type=1326 audit(1737780079.580:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27943 comm="syz.2.5631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ac78ebe9 code=0x0 [ 1957.694014][T27956] Lens A: ================= START STATUS ================= [ 1957.727410][T27956] Lens A: Focus, Absolute: 0 [ 1957.740786][T27956] Lens A: ================== END STATUS ================== [ 1959.989264][ T918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1960.192968][ T918] usb 3-1: Using ep0 maxpacket: 16 [ 1960.222714][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.254663][ T918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1960.337846][ T918] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1960.377262][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.404834][ T918] usb 3-1: Product: syz [ 1960.409013][ T918] usb 3-1: Manufacturer: syz [ 1960.418234][ T918] usb 3-1: SerialNumber: syz [ 1960.430061][ T918] usb 3-1: config 0 descriptor?? [ 1960.716217][T28013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1960.993246][T28030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1961.367140][T28039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1961.419249][T28039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1961.426989][T28039] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1961.789244][T25819] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1961.949225][T25819] usb 5-1: Using ep0 maxpacket: 8 [ 1961.964963][T25819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1961.980544][T25819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1961.990919][T25819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1962.000865][T25819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1962.013950][T25819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1962.024491][T25819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.238826][T28048] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1962.254130][T25819] usb 5-1: GET_CAPABILITIES returned 0 [ 1962.259809][T25819] usbtmc 5-1:16.0: can't read capabilities [ 1962.711830][T25819] usb 3-1: USB disconnect, device number 60 [ 1962.751503][T28060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5671'. [ 1962.919883][T28062] binder: BINDER_SET_CONTEXT_MGR already set [ 1962.938022][T28062] binder: 28058:28062 ioctl 4018620d 200000000040 returned -16 [ 1963.171646][ T918] usb 5-1: USB disconnect, device number 77 [ 1963.350671][ T5956] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1963.632138][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 1963.640955][ T5956] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1963.651687][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1963.666762][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1963.728780][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1963.728809][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1963.728854][ T5956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1963.728875][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.973899][T28081] tipc: Started in network mode [ 1963.973924][T28081] tipc: Node identity 42990adde603, cluster identity 4711 [ 1963.975746][T28081] tipc: Enabled bearer , priority 0 [ 1963.999599][T28081] syzkaller0: entered promiscuous mode [ 1963.999620][T28081] syzkaller0: entered allmulticast mode [ 1964.005907][T28081] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1964.039994][ T5956] usb 4-1: GET_CAPABILITIES returned 0 [ 1964.071819][T28086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1964.082138][ T5956] usbtmc 4-1:16.0: can't read capabilities [ 1964.086775][T28081] tipc: Resetting bearer [ 1964.210380][T28079] tipc: Resetting bearer [ 1964.228647][T28079] tipc: Disabling bearer [ 1964.256305][T24705] usb 4-1: USB disconnect, device number 64 [ 1964.538995][ T30] audit: type=1326 audit(1737780086.620:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28098 comm="syz.5.5685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6e038ebe9 code=0x0 [ 1965.712087][T28122] tipc: Enabled bearer , priority 0 [ 1965.730315][T28122] syzkaller0: entered promiscuous mode [ 1965.752352][T28122] syzkaller0: entered allmulticast mode [ 1965.883366][T28122] tipc: Resetting bearer [ 1965.921211][T28121] tipc: Resetting bearer [ 1965.978493][T28121] tipc: Disabling bearer [ 1966.178940][ T30] audit: type=1400 audit(1737780088.240:1078): avc: denied { map } for pid=28137 comm="syz.2.5701" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1967.069354][ T918] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1967.429582][ T918] usb 2-1: Using ep0 maxpacket: 8 [ 1967.462926][ T918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 1967.474145][ T918] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1967.509740][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 1967.531530][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5706'. [ 1967.738124][ T918] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1967.756989][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.765112][ T918] usb 2-1: Product: syz [ 1967.776308][ T918] usb 2-1: Manufacturer: syz [ 1967.790238][ T918] usb 2-1: SerialNumber: syz [ 1967.907547][ T30] audit: type=1400 audit(1737780089.990:1079): avc: denied { map } for pid=28140 comm="syz.2.5702" path="/proc/537/net/fib_trie" dev="proc" ino=4026534116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1968.493798][T28165] usb usb8: usbfs: process 28165 (syz.4.5709) did not claim interface 0 before use [ 1968.629222][T16830] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1968.769174][T16830] usb 3-1: device descriptor read/64, error -71 [ 1969.069320][T16830] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1969.095998][T28174] tipc: Started in network mode [ 1969.101435][T28174] tipc: Node identity 0656b12ff686, cluster identity 4711 [ 1969.108737][T28174] tipc: Enabled bearer , priority 0 [ 1969.117277][T28174] syzkaller0: entered promiscuous mode [ 1969.126849][T28174] syzkaller0: entered allmulticast mode [ 1969.136761][T28174] tipc: Resetting bearer [ 1969.145396][T28173] tipc: Resetting bearer [ 1969.176052][T28173] tipc: Disabling bearer [ 1969.199171][T16830] usb 3-1: device descriptor read/64, error -71 [ 1969.317299][T16830] usb usb3-port1: attempt power cycle [ 1969.503518][T28188] netlink: 'syz.4.5716': attribute type 12 has an invalid length. [ 1969.512518][T28188] netlink: 'syz.4.5716': attribute type 28 has an invalid length. [ 1969.520714][T28188] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1969.659390][T16830] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1969.709702][T16830] usb 3-1: device descriptor read/8, error -71 [ 1969.809279][T25819] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1969.949249][T16830] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1969.969208][T25819] usb 5-1: Using ep0 maxpacket: 16 [ 1969.975056][T16830] usb 3-1: device descriptor read/8, error -71 [ 1969.983334][T25819] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 1969.994532][T25819] usb 5-1: config 8 has no interface number 0 [ 1970.001837][T25819] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1970.021225][T25819] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1970.031230][T25819] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1970.041229][T25819] usb 5-1: config 8 interface 39 has no altsetting 0 [ 1970.089955][T16830] usb usb3-port1: unable to enumerate USB device [ 1970.132730][T25819] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1970.133235][ T918] usbhid 2-1:1.0: can't add hid device: -71 [ 1970.169681][T25819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.179306][ T918] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1970.194058][ T918] usb 2-1: USB disconnect, device number 55 [ 1970.199242][T25819] usb 5-1: Product: syz [ 1970.206240][T25819] usb 5-1: Manufacturer: syz [ 1970.274892][T25819] usb 5-1: SerialNumber: syz [ 1971.097210][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5721'. [ 1971.862301][T28221] tipc: Enabled bearer , priority 0 [ 1971.888094][T28221] syzkaller0: entered promiscuous mode [ 1971.977603][T28221] syzkaller0: entered allmulticast mode [ 1972.047922][T28225] tipc: Resetting bearer [ 1972.135399][T28219] tipc: Resetting bearer [ 1972.392429][T28219] tipc: Disabling bearer [ 1972.502662][T28233] Lens A: ================= START STATUS ================= [ 1972.510278][T28233] Lens A: Focus, Absolute: 0 [ 1972.514876][T28233] Lens A: ================== END STATUS ================== [ 1973.659599][ T5843] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1973.819248][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 1974.032743][T25819] ipheth 5-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1974.049702][T25819] ipheth 5-1:8.39: probe with driver ipheth failed with error -71 [ 1974.094623][T25819] usb 5-1: USB disconnect, device number 78 [ 1974.397885][ T918] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1974.496541][ T5843] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1974.529532][ T918] usb 4-1: device descriptor read/64, error -71 [ 1974.541809][ T5843] usb 2-1: config 0 has no interface number 0 [ 1974.562673][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1974.625904][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1974.651348][ T5843] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1974.675339][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1974.689185][ T5843] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1974.698216][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.708219][ T5843] usb 2-1: config 0 descriptor?? [ 1974.735191][ T5843] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1974.779789][ T918] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1974.941859][T28244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.955289][T28244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.009405][ T918] usb 4-1: device descriptor read/64, error -71 [ 1975.133996][ T918] usb usb4-port1: attempt power cycle [ 1975.509292][ T918] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1975.519159][T24705] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1975.552842][ T918] usb 4-1: device descriptor read/8, error -71 [ 1975.595959][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.693620][T24705] usb 3-1: Using ep0 maxpacket: 8 [ 1975.723236][T24705] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1975.732369][T24705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.768364][T24705] usb 3-1: Product: syz [ 1975.800339][ T918] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1975.810178][T24705] usb 3-1: Manufacturer: syz [ 1975.815612][T24705] usb 3-1: SerialNumber: syz [ 1975.823324][T24705] usb 3-1: config 0 descriptor?? [ 1975.843283][ T918] usb 4-1: device descriptor read/8, error -71 [ 1975.959404][ T918] usb usb4-port1: unable to enumerate USB device [ 1976.778941][ T5900] usb 2-1: USB disconnect, device number 56 [ 1976.787659][ T5900] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1977.382261][ T30] audit: type=1400 audit(1737780099.170:1080): avc: denied { listen } for pid=28285 comm="syz.3.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1977.809347][T25819] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1977.954187][T28294] program syz.5.5747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1977.969922][T25819] usb 2-1: Using ep0 maxpacket: 8 [ 1978.158739][T25819] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1978.170693][T25819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1978.199647][T25819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1978.424444][T25819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1978.450827][T25819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1978.487547][T25819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1978.537602][T25819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.565993][T24705] usb 3-1: USB disconnect, device number 65 [ 1978.744276][T28309] netlink: 'syz.4.5753': attribute type 41 has an invalid length. [ 1978.811418][T25819] usb 2-1: GET_CAPABILITIES returned 0 [ 1978.827919][T25819] usbtmc 2-1:16.0: can't read capabilities [ 1979.014534][T24705] usb 2-1: USB disconnect, device number 57 [ 1979.510971][ T5956] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1979.679484][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 1979.785592][ T5956] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1979.840022][ T5956] usb 5-1: config 0 has no interface number 0 [ 1980.021490][ T5956] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1980.068419][ T5956] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1980.242538][ T5956] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1980.423366][T28352] batman_adv: batadv0: Adding interface: dummy0 [ 1980.429685][T28352] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1980.469437][ T5956] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1980.520924][T28352] batman_adv: batadv0: Interface activated: dummy0 [ 1980.524474][ T5956] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1980.546228][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.549824][T28353] batadv0: mtu less than device minimum [ 1980.562634][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.574344][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.585213][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.596024][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.606834][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.617653][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.628460][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.639374][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.650170][T28353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1980.675494][ T5956] usb 5-1: config 0 descriptor?? [ 1980.713019][ T5956] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1980.932772][T28318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.949335][T28318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.859189][ T5956] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1982.101947][T25819] usb 5-1: USB disconnect, device number 79 [ 1982.131071][T25819] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1982.599135][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 1982.652541][ T5956] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1982.660835][ T5956] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1982.673574][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1982.683611][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1982.700235][ T5956] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1982.743632][ T5956] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1982.753231][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.455763][ T5956] usb 3-1: GET_CAPABILITIES returned 0 [ 1983.461322][ T5956] usbtmc 3-1:16.0: can't read capabilities [ 1983.470727][ T5956] usb 3-1: USB disconnect, device number 66 [ 1984.255186][T28410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5785'. [ 1984.369700][ T30] audit: type=1326 audit(1737780106.450:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28414 comm="syz.2.5786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ac78ebe9 code=0x0 [ 1985.513522][T28440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1985.526798][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1986.335895][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 1986.470160][T11960] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1986.477857][T25819] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1986.670423][T11960] usb 2-1: Using ep0 maxpacket: 8 [ 1986.689594][T25819] usb 3-1: Using ep0 maxpacket: 8 [ 1986.699613][T25819] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1986.708911][T11960] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1986.727073][T25819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1986.737866][T11960] usb 2-1: config 179 has no interface number 0 [ 1986.746972][T11960] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1986.758601][T25819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1986.768693][T11960] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1986.780138][T25819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1986.793646][T25819] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1986.807820][T11960] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1986.844141][T11960] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1986.943400][T25819] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1986.969845][T28472] kernel profiling enabled (shift: 9) [ 1987.091537][T25819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.219238][T11960] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1987.273749][T11960] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1987.312619][T11960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.350891][T28449] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1987.448977][T25819] usb 3-1: GET_CAPABILITIES returned 0 [ 1987.464889][T25819] usbtmc 3-1:16.0: can't read capabilities [ 1987.567838][T25819] usb 2-1: USB disconnect, device number 58 [ 1987.567873][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1987.567896][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1987.622679][T28480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1987.654657][T11960] usb 3-1: USB disconnect, device number 67 [ 1987.959162][ T918] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1988.137531][ T918] usb 4-1: Using ep0 maxpacket: 32 [ 1988.147670][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1988.160817][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 1988.172805][ T918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1988.174732][T28492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1988.195927][ T918] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1988.223348][ T918] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1988.247389][ T918] usb 4-1: Product: syz [ 1988.251629][ T918] usb 4-1: Manufacturer: syz [ 1988.256291][ T918] usb 4-1: SerialNumber: syz [ 1988.265858][ T918] usb 4-1: config 0 descriptor?? [ 1988.481739][T25819] usb 4-1: USB disconnect, device number 69 [ 1990.454008][T28529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1991.279499][ T5956] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1991.878686][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 1992.300543][ T5956] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1992.308760][ T5956] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1992.329442][ T5956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1992.366906][ T5956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1992.392317][ T5956] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.421265][ T5956] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1992.449132][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.547069][T28549] tipc: Enabled bearer , priority 0 [ 1992.585733][T28549] syzkaller0: entered promiscuous mode [ 1992.608623][T28549] syzkaller0: entered allmulticast mode [ 1992.673700][T28549] tipc: Resetting bearer [ 1992.688825][ T5956] usb 2-1: GET_CAPABILITIES returned 0 [ 1992.698350][T28548] tipc: Resetting bearer [ 1992.715953][T28548] tipc: Disabling bearer [ 1992.725419][ T5956] usbtmc 2-1:16.0: can't read capabilities [ 1992.908614][ T5956] usb 2-1: USB disconnect, device number 59 [ 1993.269299][ T5843] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1993.350369][T25819] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1993.442336][ T5843] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1993.491761][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.595798][ T5843] usb 3-1: Product: syz [ 1993.609151][T25819] usb 5-1: Using ep0 maxpacket: 16 [ 1993.666493][ T5843] usb 3-1: Manufacturer: syz [ 1993.677560][T25819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.688967][ T5843] usb 3-1: SerialNumber: syz [ 1993.693668][T25819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1993.795705][ T5843] usb 3-1: config 0 descriptor?? [ 1994.027386][ T5843] usb 3-1: USB disconnect, device number 68 [ 1994.582925][T25819] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1994.603869][T25819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.630505][T25819] usb 5-1: Product: syz [ 1994.647779][T25819] usb 5-1: Manufacturer: syz [ 1994.669042][T25819] usb 5-1: SerialNumber: syz [ 1994.753787][T25819] usb 5-1: config 0 descriptor?? [ 1994.754540][ T30] audit: type=1400 audit(1737780116.840:1082): avc: denied { map } for pid=28577 comm="syz.2.5839" path="socket:[102477]" dev="sockfs" ino=102477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1995.014711][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1995.026389][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1996.383295][T11960] usb 5-1: USB disconnect, device number 80 [ 1996.506109][T28609] random: crng reseeded on system resumption [ 1998.353920][T28651] usb usb8: usbfs: process 28651 (syz.1.5861) did not claim interface 0 before use [ 2002.612426][T28719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5885'. [ 2002.924143][T28737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5890'. [ 2002.971532][T28737] bridge_slave_1: left allmulticast mode [ 2003.013123][T28737] bridge_slave_1: left promiscuous mode [ 2003.031338][T28737] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.048962][T28737] bridge_slave_0: left allmulticast mode [ 2003.129611][T28737] bridge_slave_0: left promiscuous mode [ 2003.137397][T28737] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.238348][T28739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28739 comm=syz.5.5891 [ 2004.325339][T28749] netlink: 492 bytes leftover after parsing attributes in process `syz.1.5895'. [ 2004.603794][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5900'. [ 2004.709150][ T5956] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2004.959504][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 2005.397356][ T5956] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2005.409087][ T5956] usb 2-1: config 8 has no interface number 0 [ 2005.415237][ T5956] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2005.449129][ T5956] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2005.549291][ T5956] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2005.562742][ T5956] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2005.680974][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2005.690437][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.698492][ T5956] usb 2-1: Product: syz [ 2005.717906][ T5956] usb 2-1: Manufacturer: syz [ 2005.726176][ T5956] usb 2-1: SerialNumber: syz [ 2006.296028][T28796] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5909'. [ 2007.209195][T25819] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2007.359223][T25819] usb 5-1: Using ep0 maxpacket: 16 [ 2007.433115][T25819] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 2007.666349][T28815] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2007.693445][T28815] CIFS: Unable to determine destination address [ 2007.830799][T25819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.861272][T25819] usb 5-1: config 0 has no interface number 0 [ 2007.926106][T25819] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2007.967433][T25819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.998171][T25819] usb 5-1: config 0 descriptor?? [ 2008.016914][T25819] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 2008.025204][T25819] usb 5-1: No valid video chain found. [ 2008.293578][ T5900] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2008.569105][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 2008.583080][T28824] lo speed is unknown, defaulting to 1000 [ 2008.588857][T28824] lo speed is unknown, defaulting to 1000 [ 2008.595052][T28824] lo speed is unknown, defaulting to 1000 [ 2008.605757][T28824] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2008.622782][T28824] lo speed is unknown, defaulting to 1000 [ 2008.629658][T28824] lo speed is unknown, defaulting to 1000 [ 2008.636938][T28824] lo speed is unknown, defaulting to 1000 [ 2008.636995][T28825] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5919'. [ 2008.644154][T28824] lo speed is unknown, defaulting to 1000 [ 2008.658274][T28824] lo speed is unknown, defaulting to 1000 [ 2008.664771][T28824] lo speed is unknown, defaulting to 1000 [ 2008.671234][T28824] lo speed is unknown, defaulting to 1000 [ 2008.687719][ T5900] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2008.699090][ T5900] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2008.714299][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2008.731439][ T5900] usb 3-1: config 1 has no interface number 0 [ 2008.849502][ T5900] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2008.900680][T28829] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5921'. [ 2008.926572][ T5900] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2008.970800][ T5900] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2008.991168][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.018960][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2009.285181][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2009.779386][T11960] usb 3-1: USB disconnect, device number 69 [ 2009.938772][T11960] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2010.000936][ T9] usb 5-1: USB disconnect, device number 81 [ 2010.136109][T28850] usb usb8: usbfs: process 28850 (syz.5.5929) did not claim interface 0 before use [ 2010.557017][T28862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2011.680985][ T5956] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -32 [ 2011.681095][ T5956] ipheth 2-1:8.39: probe with driver ipheth failed with error -32 [ 2012.593895][ T9] usb 2-1: USB disconnect, device number 60 [ 2015.048196][T28930] binder: 28929:28930 ioctl c0306201 200000000540 returned -22 [ 2015.109197][T28935] binder: 28929:28935 ioctl c0306201 200000000640 returned -22 [ 2015.973213][ T30] audit: type=1326 audit(1737780138.060:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2016.011479][ T30] audit: type=1326 audit(1737780138.090:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2016.340011][T28956] binder: 28953:28956 ioctl c0306201 0 returned -14 [ 2016.599705][ T30] audit: type=1326 audit(1737780138.090:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2016.646061][ T30] audit: type=1326 audit(1737780138.090:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2016.681798][ T30] audit: type=1326 audit(1737780138.090:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2016.725446][ T30] audit: type=1326 audit(1737780138.090:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.5961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac78ebe9 code=0x7ffc0000 [ 2017.114460][T28970] usb usb8: usbfs: process 28970 (syz.5.5966) did not claim interface 0 before use [ 2017.253277][ T5956] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2017.579120][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 2017.646536][ T5956] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2017.665363][ T5956] usb 2-1: config 0 has no interface number 0 [ 2017.796867][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2017.796897][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2017.796920][ T5956] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2017.796945][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2017.796981][ T5956] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2017.797001][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.822913][ T5956] usb 2-1: config 0 descriptor?? [ 2017.824957][T28986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5971'. [ 2017.826291][ T5956] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2018.072918][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.118754][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.408136][ T30] audit: type=1400 audit(1737780140.490:1089): avc: denied { append } for pid=28989 comm="syz.3.5973" name="file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2019.195550][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2019.960829][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2019.971448][T11960] usb 2-1: USB disconnect, device number 61 [ 2019.982093][ T9] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 2019.993606][T11960] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2020.002117][ T9] usb 4-1: config 8 has no interface number 0 [ 2020.014334][ T9] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2020.032663][ T9] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2020.045038][ T9] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2020.062057][ T9] usb 4-1: config 8 interface 39 has no altsetting 0 [ 2020.071758][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2020.086546][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.155713][ T9] usb 4-1: Product: syz [ 2020.165180][ T9] usb 4-1: Manufacturer: syz [ 2020.170168][ T9] usb 4-1: SerialNumber: syz [ 2020.645059][T29021] input: syz1 as /devices/virtual/input/input59 [ 2020.847991][T29022] Lens A: ================= START STATUS ================= [ 2020.857540][T29022] Lens A: Focus, Absolute: 0 [ 2020.869226][T29022] Lens A: ================== END STATUS ================== [ 2022.307237][ T9] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 2022.316795][ T9] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 2022.394891][ T9] usb 4-1: USB disconnect, device number 70 [ 2022.835914][ T30] audit: type=1400 audit(1737780144.820:1090): avc: denied { setattr } for pid=29036 comm="syz.4.5985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2022.926948][T29044] ptrace attach of "./syz-executor exec"[26048] was attempted by ""[29044] [ 2024.354003][T29048] delete_channel: no stack [ 2024.474627][ T30] audit: type=1400 audit(1737780146.560:1091): avc: denied { map } for pid=29064 comm="syz.4.5995" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2025.016682][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5998'. [ 2025.134834][T29090] usb usb8: usbfs: process 29090 (syz.1.6002) did not claim interface 0 before use [ 2025.716527][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6005'. [ 2025.763165][T29100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6005'. [ 2028.861987][T29151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6022'. [ 2029.248489][T29163] usb usb8: usbfs: process 29163 (syz.3.6026) did not claim interface 0 before use [ 2031.462821][T29192] net_ratelimit: 10 callbacks suppressed [ 2031.462838][T29192] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 2032.440977][T29200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2032.449370][T29200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6043'. [ 2033.232651][T29218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6046'. [ 2034.054840][T29230] binder: 29227:29230 ioctl 4018620d 0 returned -22 [ 2034.055509][T29230] binder: 29227:29230 ioctl c0306201 200000000540 returned -22 [ 2034.122695][T29233] binder: 29227:29233 ioctl c0306201 200000000640 returned -22 [ 2037.678858][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.744940][T29274] usb usb8: usbfs: process 29274 (syz.3.6063) did not claim interface 0 before use [ 2037.891531][T29278] input: syz1 as /devices/virtual/input/input60 [ 2040.763850][ T5843] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2041.022887][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 2041.105556][T29332] tipc: Enabled bearer , priority 0 [ 2041.141565][T29332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2041.168756][T29332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6081'. [ 2041.221891][T29332] tipc: Resetting bearer [ 2041.403059][ T5843] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 2041.429231][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.863339][ T5843] usb 5-1: Product: syz [ 2041.867520][ T5843] usb 5-1: Manufacturer: syz [ 2041.872197][ T5843] usb 5-1: SerialNumber: syz [ 2041.892570][ T5843] usb 5-1: config 0 descriptor?? [ 2041.933667][T29331] tipc: Disabling bearer [ 2045.089757][ T30] audit: type=1326 audit(1737780167.170:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29345 comm="syz.2.6085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ac78ebe9 code=0x0 [ 2045.271211][T29369] binder: 29364:29369 ioctl c0306201 0 returned -14 [ 2045.288315][T29369] binder: 29364:29369 ioctl 1 0 returned -22 [ 2046.434827][ T5843] usb 5-1: USB disconnect, device number 82 [ 2046.590661][T29387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2047.018674][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'. [ 2047.260370][T29410] tipc: Enabled bearer , priority 15 [ 2048.564291][ T5843] tipc: Node number set to 2761558749 [ 2049.307177][T29456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6126'. [ 2050.025745][ T30] audit: type=1326 audit(1737780172.110:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29467 comm="syz.3.6130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfa638ebe9 code=0x0 [ 2051.266925][T29482] netlink: 'syz.1.6133': attribute type 29 has an invalid length. [ 2051.589371][T29482] netlink: 'syz.1.6133': attribute type 29 has an invalid length. [ 2051.599819][T29480] delete_channel: no stack [ 2051.658447][ T30] audit: type=1400 audit(1737780173.740:1094): avc: denied { getopt } for pid=29490 comm="syz.5.6137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2051.851165][T11960] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2051.989099][ T5956] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2052.200716][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.216034][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2052.227425][T11960] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2052.228032][ T5956] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2052.245400][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2052.254518][T11960] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 2052.256436][ T5956] usb 5-1: SerialNumber: syz [ 2052.268393][T11960] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.278665][T11960] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 2052.287794][T11960] usb 2-1: config 13 has no interface number 0 [ 2052.294086][T11960] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2052.307161][T11960] usb 2-1: config 13 interface 50 has no altsetting 0 [ 2052.320808][T11960] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 2052.330011][T11960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.338068][T11960] usb 2-1: Product: syz [ 2052.343759][T11960] usb 2-1: Manufacturer: syz [ 2052.348419][T11960] usb 2-1: SerialNumber: syz [ 2052.496625][ T5956] usb 5-1: 0:2 : does not exist [ 2052.522608][ T5956] usb 5-1: USB disconnect, device number 83 [ 2052.578597][T11960] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2052.581581][ T6436] usb 2-1: Failed to submit usb control message: -71 [ 2052.598098][ T6436] usb 2-1: unable to send the bmi data to the device: -71 [ 2052.620383][T11960] usb 2-1: USB disconnect, device number 62 [ 2052.622935][ T6436] usb 2-1: unable to get target info from device [ 2052.637141][ T6436] usb 2-1: could not get target info (-71) [ 2052.647903][ T6436] usb 2-1: could not probe fw (-71) [ 2056.095010][T25819] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2056.320469][T25819] usb 2-1: Using ep0 maxpacket: 16 [ 2056.343128][T25819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2056.378905][T29577] binder: 29576:29577 ioctl c0306201 200000000540 returned -22 [ 2056.400345][T25819] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2056.536144][T29580] binder: 29576:29580 ioctl c0306201 200000000640 returned -22 [ 2056.555918][T25819] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2056.566955][T25819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.575011][T25819] usb 2-1: Product: syz [ 2056.579266][T25819] usb 2-1: Manufacturer: syz [ 2056.583910][T25819] usb 2-1: SerialNumber: syz [ 2056.593109][T25819] usb 2-1: config 0 descriptor?? [ 2057.131353][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6170'. [ 2057.596394][T29599] netlink: 'syz.4.6174': attribute type 83 has an invalid length. [ 2060.254280][ T5956] usb 2-1: USB disconnect, device number 63 [ 2060.358134][ T30] audit: type=1326 audit(1737780182.440:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29630 comm="syz.2.6186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ac78ebe9 code=0x0 [ 2061.166383][T29656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6188'. [ 2061.809448][T11960] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2062.377605][T25819] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2062.399557][T11960] usb 5-1: Using ep0 maxpacket: 16 [ 2062.408093][T11960] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 2062.417511][T11960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.428854][T11960] usb 5-1: Product: syz [ 2062.436039][T11960] usb 5-1: Manufacturer: syz [ 2062.473325][T11960] usb 5-1: SerialNumber: syz [ 2062.549186][T25819] usb 4-1: Using ep0 maxpacket: 16 [ 2062.558481][T25819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.568798][T25819] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2062.592681][T25819] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2062.601937][T25819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.610640][T11960] usb 5-1: config 0 descriptor?? [ 2062.615701][T25819] usb 4-1: Product: syz [ 2062.622985][T11960] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2062.637877][T25819] usb 4-1: Manufacturer: syz [ 2062.642555][T25819] usb 4-1: SerialNumber: syz [ 2062.737502][T25819] usb 4-1: config 0 descriptor?? [ 2062.904864][T11960] gp8psk: usb in 128 operation failed. [ 2062.941756][T11960] gp8psk: usb in 137 operation failed. [ 2062.947234][T11960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2062.965592][T11960] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 2062.978376][T11960] usb 5-1: media controller created [ 2063.013015][T11960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2063.034843][T11960] gp8psk_fe: Frontend revision 1 attached [ 2063.043502][T11960] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2063.077329][T11960] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2063.783286][T11960] gp8psk: usb in 138 operation failed. [ 2063.805694][T11960] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 2063.827761][T11960] gp8psk: found Genpix USB device pID = 201 (hex) [ 2063.989669][T11960] usb 5-1: USB disconnect, device number 84 [ 2064.367892][T11960] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 2066.023175][T25819] usb 4-1: USB disconnect, device number 71 [ 2067.755419][T29745] v: renamed from ip6_vti0 (while UP) [ 2069.542348][T29762] overlayfs: failed to clone upperpath [ 2070.947485][T29776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6231'. [ 2070.991464][T29776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6231'. [ 2071.613627][T29791] siw: device registration error -23 [ 2073.175017][T29810] team_slave_1: mtu greater than device maximum [ 2073.195014][T29810] team0: Device team_slave_1 failed to change mtu [ 2073.222807][ T30] audit: type=1326 audit(1737780195.310:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29814 comm="syz.3.6245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfa638ebe9 code=0x0 [ 2073.310387][T29822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6244'. [ 2074.356361][T29837] tipc: Enabling of bearer rejected, already enabled [ 2075.262966][T29853] binder: 29852:29853 ioctl 4018620d 0 returned -22 [ 2075.324932][T29858] binder: 29852:29858 ioctl c018620c 0 returned -14 [ 2076.409721][T25819] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2077.205514][T25819] usb 2-1: Using ep0 maxpacket: 8 [ 2077.227116][T25819] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2077.262824][T25819] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.293368][T25819] usb 2-1: config 179 has no interface number 0 [ 2077.375283][T29873] affs: No valid root block on device nullb0 [ 2077.636953][T25819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2077.648923][T29876] tipc: Enabled bearer , priority 15 [ 2077.725935][T25819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2077.757403][T25819] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2077.806411][T25819] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2077.936517][T25819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.951030][T29855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2078.198090][T25819] usb 2-1: USB disconnect, device number 64 [ 2078.759311][ T918] tipc: Node number set to 4040208687 [ 2079.809191][T11960] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2080.449078][T11960] usb 5-1: Using ep0 maxpacket: 8 [ 2080.461196][T11960] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2080.479142][T11960] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.494485][T11960] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2080.508868][T11960] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2080.541107][T11960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.563030][T11960] usbtmc 5-1:16.0: bulk endpoints not found [ 2080.799253][T16830] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2081.059099][T16830] usb 4-1: Using ep0 maxpacket: 8 [ 2081.065513][T16830] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2081.079036][T16830] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.305352][T16830] usb 4-1: config 179 has no interface number 0 [ 2081.312116][T16830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2081.324178][T16830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2081.335435][T16830] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2081.348607][T16830] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2081.357674][T16830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.368293][T29925] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2081.582887][ T918] usb 4-1: USB disconnect, device number 72 [ 2082.501561][T24705] usb 5-1: USB disconnect, device number 85 [ 2082.719233][T17425] Bluetooth: hci0: command 0x0406 tx timeout [ 2083.432256][T29978] binder: 29975:29978 ioctl c0306201 200000000640 returned -22 [ 2083.619170][ T918] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2083.794628][T29979] delete_channel: no stack [ 2083.960944][ T918] usb 2-1: config 0 has no interfaces? [ 2083.968541][ T918] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2083.989313][T29986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6302'. [ 2084.008754][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.022858][ T918] usb 2-1: Product: syz [ 2084.028953][ T918] usb 2-1: Manufacturer: syz [ 2084.034068][ T918] usb 2-1: SerialNumber: syz [ 2084.043590][ T918] usb 2-1: config 0 descriptor?? [ 2084.255321][ T918] usb 2-1: USB disconnect, device number 65 [ 2085.703028][T30021] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6313'. [ 2086.057143][T30025] tipc: Enabling of bearer rejected, already enabled [ 2087.206975][ T30] audit: type=1400 audit(1737780209.290:1097): avc: denied { remount } for pid=30053 comm="syz.1.6326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 2087.363645][T24705] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2087.547449][T24705] usb 5-1: config 0 has no interfaces? [ 2087.550823][T24705] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2087.550840][T24705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.550851][T24705] usb 5-1: Product: syz [ 2087.550860][T24705] usb 5-1: Manufacturer: syz [ 2087.550868][T24705] usb 5-1: SerialNumber: syz [ 2087.552127][T24705] usb 5-1: config 0 descriptor?? [ 2087.880699][ T5956] usb 5-1: USB disconnect, device number 86 [ 2090.508451][T30104] tipc: Enabling of bearer rejected, failed to enable media [ 2090.759142][ T918] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2091.052143][T30122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6346'. [ 2091.135154][ T918] usb 4-1: config 0 has no interfaces? [ 2091.145699][ T918] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2091.156525][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.164812][ T918] usb 4-1: Product: syz [ 2091.169237][ T918] usb 4-1: Manufacturer: syz [ 2091.173924][ T918] usb 4-1: SerialNumber: syz [ 2091.183813][ T918] usb 4-1: config 0 descriptor?? [ 2091.677076][ T5956] usb 4-1: USB disconnect, device number 73 [ 2091.771550][T30134] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2095.668745][T30197] delete_channel: no stack [ 2098.279062][T30249] delete_channel: no stack [ 2098.478832][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2101.338450][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2101.352469][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2101.360642][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2101.372733][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2101.384644][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2101.533940][T30288] lo speed is unknown, defaulting to 1000 [ 2101.554215][T30288] lo speed is unknown, defaulting to 1000 [ 2102.052016][T29660] syz_tun (unregistering): left allmulticast mode [ 2102.220588][T19011] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.281162][T30288] chnl_net:caif_netlink_parms(): no params data found [ 2102.640406][T19011] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.878670][T19011] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.016567][T19011] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.066740][T30288] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.078381][T30288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.086107][T30288] bridge_slave_0: entered allmulticast mode [ 2103.094381][T30288] bridge_slave_0: entered promiscuous mode [ 2103.102550][T30288] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.109948][T30288] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.118501][T30288] bridge_slave_1: entered allmulticast mode [ 2103.125971][T30288] bridge_slave_1: entered promiscuous mode [ 2103.191251][T30288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.227705][T30288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.368944][T30288] team0: Port device team_slave_0 added [ 2103.378159][T30288] team0: Port device team_slave_1 added [ 2103.398239][T19011] bridge_slave_1: left allmulticast mode [ 2103.410821][T19011] bridge_slave_1: left promiscuous mode [ 2103.416731][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.429706][T17425] Bluetooth: hci5: command tx timeout [ 2103.430440][T19011] bridge_slave_0: left allmulticast mode [ 2103.442102][T19011] bridge_slave_0: left promiscuous mode [ 2103.473205][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.485958][T19011] dvmrp1 (unregistering): left allmulticast mode [ 2104.816494][T19011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2104.832047][T19011] bond0 (unregistering): Released all slaves [ 2104.846426][T19011] bond1 (unregistering): Released all slaves [ 2104.876397][T30288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.883677][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.968004][T30288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.979678][T19011] tipc: Disabling bearer [ 2105.000486][T19011] tipc: Left network mode [ 2105.006156][T30288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.021420][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.090045][T30288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.187034][T30288] hsr_slave_0: entered promiscuous mode [ 2105.194268][T30288] hsr_slave_1: entered promiscuous mode [ 2105.204109][T30288] debugfs: 'hsr0' already exists in 'hsr' [ 2105.212681][T30288] Cannot create hsr debugfs directory [ 2105.487957][T30401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 2105.497554][T19011] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe005: 0000 [#1] SMP KASAN NOPTI [ 2105.509612][T19011] KASAN: probably user-memory-access in range [0x00000000ffff0028-0x00000000ffff002f] [ 2105.519143][T19011] CPU: 1 UID: 0 PID: 19011 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 2105.531104][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2105.541143][T19011] Workqueue: netns cleanup_net [ 2105.545900][T19011] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 2105.551781][T19011] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e c1 73 09 66 66 2e 0f 1f 84 00 00 00 [ 2105.571369][T19011] RSP: 0018:ffffc90003337890 EFLAGS: 00010286 [ 2105.577411][T19011] RAX: dffffc0000000000 RBX: 00000000ffff0028 RCX: 0000000000000000 [ 2105.585360][T19011] RDX: 0000000000000000 RSI: ffffffff8b95536e RDI: dffffc001fffe005 [ 2105.593314][T19011] RBP: 00000000ffff0028 R08: 0000000000000001 R09: 0000000000000000 [ 2105.601261][T19011] R10: 0000000000000000 R11: 0000000000002c10 R12: ffffffff8b95536e [ 2105.609213][T19011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2105.617171][T19011] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 2105.626088][T19011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2105.632657][T19011] CR2: 0000001b3011cff8 CR3: 00000000685cb000 CR4: 00000000003526f0 [ 2105.640611][T19011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003706 [ 2105.648562][T19011] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2105.656508][T19011] Call Trace: [ 2105.659767][T19011] [ 2105.662675][T19011] __kasan_check_byte+0x13/0x50 [ 2105.667510][T19011] lock_acquire+0xfc/0x350 [ 2105.671910][T19011] _raw_spin_lock+0x2e/0x40 [ 2105.676394][T19011] ? kobj_kset_leave+0x50/0x200 [ 2105.681220][T19011] kobj_kset_leave+0x50/0x200 [ 2105.685877][T19011] __kobject_del+0x11d/0x1f0 [ 2105.690443][T19011] kobject_del+0x3f/0x60 [ 2105.694664][T19011] ib_free_port_attrs+0x280/0x490 [ 2105.699673][T19011] rdma_dev_exit_net+0x2b5/0x590 [ 2105.704589][T19011] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2105.710023][T19011] ? __pfx___might_resched+0x10/0x10 [ 2105.715287][T19011] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 2105.720980][T19011] ? mutex_is_locked+0x17/0x60 [ 2105.725718][T19011] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2105.731155][T19011] ops_undo_list+0x2ee/0xab0 [ 2105.735722][T19011] ? __pfx_ops_undo_list+0x10/0x10 [ 2105.740815][T19011] ? cleanup_net+0x334/0x890 [ 2105.745381][T19011] ? idr_destroy+0x62/0x2e0 [ 2105.749868][T19011] cleanup_net+0x408/0x890 [ 2105.754262][T19011] ? __pfx_cleanup_net+0x10/0x10 [ 2105.759174][T19011] ? rcu_is_watching+0x12/0xc0 [ 2105.763916][T19011] process_one_work+0x9cc/0x1b70 [ 2105.768833][T19011] ? __pfx_process_one_work+0x10/0x10 [ 2105.774183][T19011] ? assign_work+0x1a0/0x250 [ 2105.778748][T19011] worker_thread+0x6c8/0xf10 [ 2105.783316][T19011] ? __pfx_worker_thread+0x10/0x10 [ 2105.788403][T19011] kthread+0x3c5/0x780 [ 2105.792448][T19011] ? __pfx_kthread+0x10/0x10 [ 2105.797014][T19011] ? rcu_is_watching+0x12/0xc0 [ 2105.801756][T19011] ? __pfx_kthread+0x10/0x10 [ 2105.806324][T19011] ret_from_fork+0x5d4/0x6f0 [ 2105.810890][T19011] ? __pfx_kthread+0x10/0x10 [ 2105.815456][T19011] ret_from_fork_asm+0x1a/0x30 [ 2105.820201][T19011] [ 2105.823195][T19011] Modules linked in: [ 2105.827883][T19011] ---[ end trace 0000000000000000 ]--- [ 2105.834043][T19011] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 2105.840237][T19011] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e c1 73 09 66 66 2e 0f 1f 84 00 00 00 [ 2105.859964][T19011] RSP: 0018:ffffc90003337890 EFLAGS: 00010286 [ 2105.866080][T19011] RAX: dffffc0000000000 RBX: 00000000ffff0028 RCX: 0000000000000000 [ 2105.874149][T19011] RDX: 0000000000000000 RSI: ffffffff8b95536e RDI: dffffc001fffe005 [ 2105.882191][T19011] RBP: 00000000ffff0028 R08: 0000000000000001 R09: 0000000000000000 [ 2105.890215][T19011] R10: 0000000000000000 R11: 0000000000002c10 R12: ffffffff8b95536e [ 2105.898310][T19011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2105.906403][T19011] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 2105.915459][T19011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2105.922102][T19011] CR2: 0000001b3011cff8 CR3: 00000000685cb000 CR4: 00000000003526f0 [ 2105.930123][T19011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003706 [ 2105.938145][T19011] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2105.946156][T19011] Kernel panic - not syncing: Fatal exception [ 2105.952374][T19011] Kernel Offset: disabled [ 2105.956668][T19011] Rebooting in 86400 seconds..