last executing test programs: 23m50.500355924s ago: executing program 32 (id=469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}], 0x1c) read$snapshot(r4, 0x0, 0xffffffbf) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) read$FUSE(r4, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 15m27.302258785s ago: executing program 33 (id=1581): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x9a000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x10, 0x8dae, 0x0, 0x100}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) syz_emit_ethernet(0xae, &(0x7f0000000240)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaaabb86dd6012000800783afffe880000000000000000000000000001ef02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffff6e196e3d06d972ffffffff22732494eefa45ad96579269748e254c1e4a8a68e20ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18030001a280ffffff0000000000000000"], 0x0) 15m6.267744969s ago: executing program 34 (id=1792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m41.557252686s ago: executing program 35 (id=2166): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) write$binfmt_elf64(r1, 0x0, 0xfffffe3e) 14m31.846734377s ago: executing program 8 (id=2326): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xc02, 0x0, 0x3, 0xea}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x74}) 14m30.787688581s ago: executing program 8 (id=2344): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8ed, &(0x7f0000000100)) 14m30.446242404s ago: executing program 8 (id=2348): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 14m30.333225008s ago: executing program 8 (id=2351): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 14m30.294655749s ago: executing program 8 (id=2352): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xf, 0x9, 0x800, 0x1, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x18, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x24, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0xc2, 0x1, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xb7, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 14m29.844239139s ago: executing program 8 (id=2355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xb0000014}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x4, 0x6, 0x2, 0x3, 0x19, "ba37193477192400"}) 14m29.564655658s ago: executing program 36 (id=2355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xb0000014}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x4, 0x6, 0x2, 0x3, 0x19, "ba37193477192400"}) 14m17.697432415s ago: executing program 4 (id=2517): pwrite64(0xffffffffffffffff, &(0x7f0000000080)="4d64805d3d0b13c9955574c5e3c10a3159573f5afa1d35136b987b432bf8ed82e141e15d", 0x24, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m17.559959564s ago: executing program 4 (id=2519): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80802, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$sock(r0, 0x0, 0x4008001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x3, 0x7fff, 0x5}, 0x8}, 0x20, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 14m16.450267276s ago: executing program 4 (id=2532): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mlock(&(0x7f0000e38000/0x1000)=nil, 0x1000) 14m16.291850948s ago: executing program 4 (id=2535): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 14m15.867123901s ago: executing program 4 (id=2539): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffc) setxattr$incfs_metadata(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), &(0x7f0000000240)="5ad0a947b51d1b9ef37f3195ab2dd76593bf7f4bc3d7a24af7cb44b5f7", 0x1d, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 14m15.669435911s ago: executing program 4 (id=2542): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000002c000/0x4000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)="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", 0x10a, 0x8012, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 14m11.549604258s ago: executing program 6 (id=2589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x100003) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r2, 0x0) 14m11.483805763s ago: executing program 6 (id=2590): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0xe4}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 14m10.143870092s ago: executing program 6 (id=2595): r0 = io_uring_setup(0x79c4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000700000000000000000000000000020000000d0001"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 14m10.035814592s ago: executing program 6 (id=2596): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 14m9.889175635s ago: executing program 6 (id=2597): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000006a00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4cf2ed7, @mcast2, 0x4}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000000c0)="4eb57bf9173afa05fbf6b59102e1a9c924b09f9bbb000015f8a39e4d2dc59cdbe02baff17c328e77fc2f", 0x5dc}], 0x1}}], 0x1, 0x40408c0) 14m9.595428141s ago: executing program 6 (id=2598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3a", 0x8f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x1d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000001200)="d6f6dacf04429cad2fbb765e446f21813f95f0a10a80cff62212060000000000", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="ee", 0x1}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m9.298405299s ago: executing program 37 (id=2598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3a", 0x8f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x1d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000001200)="d6f6dacf04429cad2fbb765e446f21813f95f0a10a80cff62212060000000000", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="ee", 0x1}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m0.29697668s ago: executing program 38 (id=2542): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000002c000/0x4000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)="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", 0x10a, 0x8012, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 10m36.226180715s ago: executing program 2 (id=3531): getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x3, 0xa1b, 0x8, 0x1000, 0x58, 0x3, 0x5, 0x80000000], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 10m34.651208454s ago: executing program 2 (id=3538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0x3) 10m34.424846137s ago: executing program 2 (id=3541): iopl(0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r3, 0x2004, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10m33.123860414s ago: executing program 2 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 10m32.888323916s ago: executing program 2 (id=3561): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x41) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 10m31.275319092s ago: executing program 2 (id=3569): r0 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x44000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0xc}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x18, 0x29, 0x32, {0x4}}}], 0x18}}], 0x2, 0x20000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0xb27, 0x5948, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x803, 0x3, 0x4, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x80000001, 0x3fe, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xba, 0x3, 0xa, 0x7, 0x80000080, 0x81, 0x10004, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x1e2, 0x7, 0x4, 0x1, 0x8, 0xffffeffd, 0x10002, 0x1, 0x4, 0x0, 0xcbe, 0x0, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0x0, 0x7, 0x2, 0x1, 0x2ba, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x1007, 0x6, 0x200ff]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 10m31.039736927s ago: executing program 39 (id=3569): r0 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x44000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0xc}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x18, 0x29, 0x32, {0x4}}}], 0x18}}], 0x2, 0x20000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0xb27, 0x5948, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x803, 0x3, 0x4, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x80000001, 0x3fe, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xba, 0x3, 0xa, 0x7, 0x80000080, 0x81, 0x10004, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x1e2, 0x7, 0x4, 0x1, 0x8, 0xffffeffd, 0x10002, 0x1, 0x4, 0x0, 0xcbe, 0x0, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0x0, 0x7, 0x2, 0x1, 0x2ba, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x1007, 0x6, 0x200ff]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 7m47.124439641s ago: executing program 5 (id=4244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x14000012) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 7m45.769994128s ago: executing program 5 (id=4249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 7m44.699815761s ago: executing program 5 (id=4253): socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 7m44.340065731s ago: executing program 5 (id=4255): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', 0x0, 0x0, 0x1005848, 0x0) 7m44.066830894s ago: executing program 5 (id=4259): read(0xffffffffffffffff, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f00000002c0)=""/112) 7m39.916976458s ago: executing program 5 (id=4271): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x100c8a1, 0xc000, 0x8, 0xf0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 7m39.462333555s ago: executing program 40 (id=4271): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x100c8a1, 0xc000, 0x8, 0xf0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 34.586685464s ago: executing program 3 (id=7085): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac", 0x185}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 34.516543216s ago: executing program 3 (id=7087): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 34.4634194s ago: executing program 3 (id=7089): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) read(0xffffffffffffffff, 0x0, 0x0) 34.018514579s ago: executing program 9 (id=7100): socket$packet(0x11, 0x2, 0x300) close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) 33.85861526s ago: executing program 3 (id=7102): socket(0x22, 0x2, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x200, 0x3, 0x164}, 0x0, &(0x7f0000000300)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 33.821755655s ago: executing program 9 (id=7103): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 33.648775595s ago: executing program 7 (id=7104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 33.360955796s ago: executing program 3 (id=7106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r2, 0x0) 33.147401493s ago: executing program 7 (id=7108): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRES8, @ANYRESDEC]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 32.662796043s ago: executing program 0 (id=7113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 32.384172802s ago: executing program 1 (id=7114): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000000280)) 31.711795439s ago: executing program 1 (id=7115): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.435183841s ago: executing program 0 (id=7116): socket(0x22, 0x2, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x200, 0x3, 0x164}, 0x0, &(0x7f0000000300)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 31.421540123s ago: executing program 1 (id=7117): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@local, 0x81}, 0x1}) 31.222796133s ago: executing program 1 (id=7118): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 31.080291142s ago: executing program 1 (id=7119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x4}}}}}}}, 0x0) 30.875438539s ago: executing program 3 (id=7120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'macsec0\x00', 0x4}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000240)="12", 0x1}], 0x2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/241, 0xf1}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 30.651730046s ago: executing program 9 (id=7121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 29.695417523s ago: executing program 7 (id=7122): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 29.339066959s ago: executing program 0 (id=7123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 29.328826075s ago: executing program 9 (id=7124): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x1a) open_tree(r0, 0x0, 0x81000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') 29.16393745s ago: executing program 0 (id=7125): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="1400c7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 28.98735226s ago: executing program 7 (id=7126): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04080400c8"], 0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f0000000040)=0x7fffffffffffffff}) 28.745413229s ago: executing program 1 (id=7127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 28.651799992s ago: executing program 0 (id=7128): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000240)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local, 0x81}, 0x1}) 28.554415658s ago: executing program 7 (id=7129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) truncate(0x0, 0x4) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 28.280574247s ago: executing program 0 (id=7130): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e80)="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", 0x1ec}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f2", 0x145}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9", 0xc2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 28.150894928s ago: executing program 9 (id=7131): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @mcast2, 0x8}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3514, 0x9141, 0x69, 0x0, 0x0) 27.485384638s ago: executing program 9 (id=7132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 25.417923067s ago: executing program 7 (id=7133): socket(0x22, 0x2, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x200, 0x3, 0x164}, 0x0, &(0x7f0000000300)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 41 (id=7120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'macsec0\x00', 0x4}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000240)="12", 0x1}], 0x2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/241, 0xf1}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): ets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.768052][T25247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.813026][ T1142] IPVS: stop unused estimator thread 0... [ 1430.935122][T13093] Bluetooth: hci2: unexpected event for opcode 0x2000 [ 1430.971661][T25247] hsr_slave_0: entered promiscuous mode [ 1430.980743][T25247] hsr_slave_1: entered promiscuous mode [ 1431.023157][T25247] debugfs: 'hsr0' already exists in 'hsr' [ 1431.028913][T25247] Cannot create hsr debugfs directory [ 1431.830870][T20386] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1432.392447][T20386] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1432.402300][T20386] Bluetooth: hci2: Injecting HCI hardware error event [ 1432.413230][T13093] Bluetooth: hci2: hardware error 0x00 [ 1434.510577][T13093] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1435.134183][T25504] Cannot find add_set index 65532 as target [ 1437.805665][T25247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1437.839436][T25247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1437.953977][T25247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1438.904656][T25247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1440.046390][T13093] Bluetooth: hci0: unexpected event for opcode 0x2000 [ 1440.074720][T25247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.365763][T25247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.392388][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.399461][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.552232][T20424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.559409][T20424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.564611][T25247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1442.710906][T25247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1444.101404][T13093] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1444.111132][T13093] Bluetooth: hci0: Injecting HCI hardware error event [ 1444.119825][T13093] Bluetooth: hci0: hardware error 0x00 [ 1444.240674][T25247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.801017][T20386] Bluetooth: hci0: unexpected event for opcode 0x2000 [ 1446.160654][T13093] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1447.776344][T25247] veth0_vlan: entered promiscuous mode [ 1447.827642][T25247] veth1_vlan: entered promiscuous mode [ 1448.556729][T25247] veth0_macvtap: entered promiscuous mode [ 1448.566157][T25247] veth1_macvtap: entered promiscuous mode [ 1448.599599][T25247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.635122][T25247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.711173][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.737200][ T5812] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1448.763478][T20424] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.790100][T20424] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.070712][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.146552][ T5812] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1449.155765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.190902][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.222931][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.235459][ T5812] usb 8-1: config 0 descriptor?? [ 1449.262890][ T5812] cp210x 8-1:0.0: cp210x converter detected [ 1449.328337][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.347971][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.357875][ T30] audit: type=1326 audit(2000000078.710:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1449.410380][ T30] audit: type=1326 audit(2000000078.710:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1449.492634][ T5812] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1449.500635][ T30] audit: type=1326 audit(2000000078.710:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1449.503120][ T5812] cp210x 8-1:0.0: querying part number failed [ 1449.605410][ T5812] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1449.725325][ T30] audit: type=1326 audit(2000000078.710:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1450.210940][ T30] audit: type=1326 audit(2000000078.710:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1450.706764][ T30] audit: type=1326 audit(2000000078.710:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1451.820830][ T29] usb 8-1: USB disconnect, device number 14 [ 1451.892322][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1451.968563][ T29] cp210x 8-1:0.0: device disconnected [ 1452.055903][ T30] audit: type=1326 audit(2000000078.760:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1452.332924][ T30] audit: type=1326 audit(2000000078.760:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83e195cfce code=0x7ffc0000 [ 1452.405225][ T30] audit: type=1326 audit(2000000078.760:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1452.525870][ T30] audit: type=1326 audit(2000000078.760:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.3.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x7ffc0000 [ 1455.258310][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1455.258327][ T30] audit: type=1400 audit(2000000084.610:2768): avc: denied { setattr } for pid=25748 comm="syz.1.5382" name="SCTPv6" dev="sockfs" ino=96967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1455.534341][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1456.970629][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1456.988988][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1457.197117][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1457.360730][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.911083][ T29] usb 8-1: config 0 descriptor?? [ 1458.280841][ T29] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1458.460664][ T30] audit: type=1400 audit(2000000087.810:2769): avc: denied { remount } for pid=25766 comm="syz.9.5388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1459.697524][T25778] fuse: Bad value for 'fd' [ 1459.976771][T14825] usb 8-1: USB disconnect, device number 15 [ 1460.242243][ T30] audit: type=1400 audit(2000000089.590:2770): avc: denied { connect } for pid=25808 comm="syz.7.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1460.997755][ T5812] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1461.215172][ T5812] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.304818][ T5812] usb 10-1: config 0 has no interfaces? [ 1461.399839][ T5812] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1461.491425][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.714123][ T5812] usb 10-1: config 0 descriptor?? [ 1462.335088][ T9] usb 10-1: USB disconnect, device number 14 [ 1462.466364][ T30] audit: type=1400 audit(2000000091.820:2771): avc: denied { write } for pid=25844 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1463.169892][T25860] 9p: Bad value for 'rfdno' [ 1464.634642][T25870] loop5: detected capacity change from 0 to 7 [ 1464.643082][ T5812] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1464.830711][ T5812] usb 8-1: Using ep0 maxpacket: 16 [ 1464.863166][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.514990][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1465.644590][ T30] audit: type=1400 audit(2000000094.960:2772): avc: denied { read } for pid=25876 comm="syz.3.5421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1465.664288][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1465.828607][ T5812] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1465.855983][T25870] Dev loop5: unable to read RDB block 7 [ 1465.861668][T25870] loop5: unable to read partition table [ 1465.867411][T25870] loop5: partition table beyond EOD, truncated [ 1465.873678][T25870] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1465.946906][ T5812] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.970057][ T5812] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1466.006468][ T5812] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1466.036994][ T5812] usb 8-1: Manufacturer: syz [ 1466.053601][ T5812] usb 8-1: config 0 descriptor?? [ 1466.180746][ T5812] usb 8-1: can't set config #0, error -71 [ 1467.156292][ T5812] usb 8-1: USB disconnect, device number 16 [ 1467.934833][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1468.222271][ T9] usb 10-1: device descriptor read/64, error -71 [ 1469.729496][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1470.808843][ T9] usb 10-1: device descriptor read/64, error -71 [ 1471.213889][ T9] usb usb10-port1: attempt power cycle [ 1473.489446][T25981] openvswitch: netlink: Message has 16 unknown bytes. [ 1473.689998][ T30] audit: type=1800 audit(2000000103.040:2773): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5459" name="nullb0" dev="tmpfs" ino=2243 res=0 errno=0 [ 1476.380536][ T29] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1476.426556][T26017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.446576][T26017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.633267][T26017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.641638][T26017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.631307][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 1477.728360][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1478.136816][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1478.157773][ T29] usb 10-1: string descriptor 0 read error: -71 [ 1478.176078][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1478.185507][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.212117][ T29] usb 10-1: can't set config #1, error -71 [ 1478.238360][ T29] usb 10-1: USB disconnect, device number 18 [ 1478.508773][ T30] audit: type=1800 audit(2000000107.860:2774): pid=26042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5475" name="nullb0" dev="tmpfs" ino=2243 res=0 errno=0 [ 1479.494996][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.501705][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.735417][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1479.964020][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5482'. [ 1481.813977][T26087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1482.058342][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1485.676810][T20386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1485.717367][T26145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5508'. [ 1485.768137][T20386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1485.778224][T20386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1485.790311][T20386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1485.806405][T20386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1486.412524][T26141] chnl_net:caif_netlink_parms(): no params data found [ 1486.489029][T19642] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.518873][T26141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.526960][T26141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.535853][T26141] bridge_slave_0: entered allmulticast mode [ 1486.549142][T26141] bridge_slave_0: entered promiscuous mode [ 1486.561709][T19642] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.574957][T26141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.582184][T26141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.589417][T26141] bridge_slave_1: entered allmulticast mode [ 1486.598193][T26141] bridge_slave_1: entered promiscuous mode [ 1486.606746][T19642] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.633039][T26141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.643800][T26141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.668390][T19642] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.682869][T26141] team0: Port device team_slave_0 added [ 1486.689907][T26141] team0: Port device team_slave_1 added [ 1486.712502][T26141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.719647][T26141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.745825][T26141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.757701][T26141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.765065][T26141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.791698][T26141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.835810][T26141] hsr_slave_0: entered promiscuous mode [ 1486.841955][T26141] hsr_slave_1: entered promiscuous mode [ 1486.847805][T26141] debugfs: 'hsr0' already exists in 'hsr' [ 1486.853744][T26141] Cannot create hsr debugfs directory [ 1486.947806][T19642] bridge_slave_1: left allmulticast mode [ 1486.953877][T19642] bridge_slave_1: left promiscuous mode [ 1486.959554][T19642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.968484][T19642] bridge_slave_0: left allmulticast mode [ 1486.974315][T19642] bridge_slave_0: left promiscuous mode [ 1486.980108][T19642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.356780][T19642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.358617][T19642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.359790][T19642] bond0 (unregistering): Released all slaves [ 1487.538856][T19642] tipc: Disabling bearer [ 1487.539069][T19642] tipc: Left network mode [ 1487.662921][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5528'. [ 1487.917273][T20386] Bluetooth: hci5: command tx timeout [ 1488.184029][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1488.721500][T19642] hsr_slave_0: left promiscuous mode [ 1488.740879][T19642] hsr_slave_1: left promiscuous mode [ 1488.789921][T19642] veth1_macvtap: left promiscuous mode [ 1488.807324][T19642] veth0_macvtap: left promiscuous mode [ 1489.169847][T19642] team0 (unregistering): Port device team_slave_1 removed [ 1489.217172][T19642] team0 (unregistering): Port device team_slave_0 removed [ 1489.990482][T20386] Bluetooth: hci5: command tx timeout [ 1490.801303][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1490.940534][T19642] IPVS: stop unused estimator thread 0... [ 1491.124546][T26141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1491.137963][T26141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1491.153671][T26141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1491.168980][T26141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1491.435790][T26141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.444184][T26141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.675582][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.675669][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.687014][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.687099][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.080834][T20386] Bluetooth: hci5: command tx timeout [ 1492.530600][T26295] netlink: 120 bytes leftover after parsing attributes in process `syz.9.5550'. [ 1492.560202][T26295] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5550'. [ 1494.038517][ T30] audit: type=1326 audit(2000000123.390:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26323 comm="syz.9.5560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f735579c799 code=0x0 [ 1494.199256][T20386] Bluetooth: hci5: command tx timeout [ 1494.475868][T26332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1495.026621][T26141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.501449][T26141] veth0_vlan: entered promiscuous mode [ 1495.704338][T26141] veth1_vlan: entered promiscuous mode [ 1495.736418][T26141] veth0_macvtap: entered promiscuous mode [ 1496.752948][T26141] veth1_macvtap: entered promiscuous mode [ 1496.786317][T26141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.950401][T26141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.978852][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.988658][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.016896][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.045900][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.060302][ T30] audit: type=1400 audit(2000000126.410:2776): avc: denied { create } for pid=26348 comm="syz.7.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1497.088098][ T30] audit: type=1400 audit(2000000126.440:2777): avc: denied { bind } for pid=26348 comm="syz.7.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1497.128034][T26351] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1497.134690][T26351] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1497.136460][ T30] audit: type=1400 audit(2000000126.440:2778): avc: denied { listen } for pid=26348 comm="syz.7.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1497.176849][T19642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.198156][T19642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.235566][T19642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.261183][T19642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.291121][T26410] fuse: Bad value for 'fd' [ 1503.246287][T26443] fuse: Bad value for 'fd' [ 1503.490543][T13090] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1504.670483][T13090] usb 10-1: Using ep0 maxpacket: 32 [ 1504.692333][T13090] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1504.704032][T13090] usb 10-1: config 0 has no interface number 0 [ 1504.710231][T13090] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1504.722337][T13090] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1504.731648][T13090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.740064][T13090] usb 10-1: Product: syz [ 1504.765489][T13090] usb 10-1: Manufacturer: syz [ 1504.770199][T13090] usb 10-1: SerialNumber: syz [ 1504.794513][T26471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1504.795743][T13090] usb 10-1: config 0 descriptor?? [ 1504.808887][T26471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1504.849281][T26475] fuse: Bad value for 'fd' [ 1504.850890][T26471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1504.876181][T26471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1505.407107][T26499] netlink: 'syz.1.5629': attribute type 2 has an invalid length. [ 1505.660211][T13090] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1505.676878][T13090] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1505.690210][T13090] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1505.700738][ T30] audit: type=1400 audit(2000000135.060:2779): avc: denied { audit_write } for pid=26516 comm="syz.3.5635" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1505.737168][T13090] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1505.755027][T13090] usb 10-1: USB disconnect, device number 19 [ 1505.834619][T26525] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1506.643415][T26549] netlink: 'syz.1.5649': attribute type 1 has an invalid length. [ 1507.021794][ T30] audit: type=1400 audit(2000000136.380:2780): avc: denied { ioctl } for pid=26564 comm="syz.9.5657" path="socket:[101388]" dev="sockfs" ino=101388 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1507.142590][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5660'. [ 1508.103170][T26599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1509.345085][T26621] netlink: 'syz.0.5682': attribute type 2 has an invalid length. [ 1509.372297][T13093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1509.380875][T26621] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1509.392742][T13093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1509.408335][T13093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1509.412994][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5684'. [ 1509.435560][T13093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1509.445946][T13093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1509.970260][T26623] chnl_net:caif_netlink_parms(): no params data found [ 1510.069682][T26623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.074170][T26667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1510.076902][T26623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.093350][T26623] bridge_slave_0: entered allmulticast mode [ 1510.100826][T26623] bridge_slave_0: entered promiscuous mode [ 1510.111491][T26623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.118628][T26623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.129132][T26623] bridge_slave_1: entered allmulticast mode [ 1510.141897][T26623] bridge_slave_1: entered promiscuous mode [ 1510.184153][T26623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.197620][T26623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.228656][T26623] team0: Port device team_slave_0 added [ 1510.238029][T26623] team0: Port device team_slave_1 added [ 1510.294740][T26623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.307938][T26623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.341639][T26623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.352127][T26681] netlink: 'syz.7.5701': attribute type 3 has an invalid length. [ 1510.361672][T26623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.368763][T26623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.451280][T26623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.580926][T26623] hsr_slave_0: entered promiscuous mode [ 1510.593835][T26623] hsr_slave_1: entered promiscuous mode [ 1510.619720][T26623] debugfs: 'hsr0' already exists in 'hsr' [ 1510.631746][T26623] Cannot create hsr debugfs directory [ 1511.306006][T26623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.511063][T20386] Bluetooth: hci2: command tx timeout [ 1511.555110][T26722] netlink: 'syz.3.5721': attribute type 10 has an invalid length. [ 1511.805739][T26734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5727'. [ 1511.841424][T26623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.921778][T26722] team0 (unregistering): Port device team_slave_0 removed [ 1511.935872][T26722] team0 (unregistering): Port device team_slave_1 removed [ 1512.139628][T26623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.337933][T26623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.124583][T26787] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5738'. [ 1513.146633][T26623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1513.307871][T26623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1513.515246][T26812] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5742'. [ 1513.541850][T26623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1513.554914][T26623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1513.593243][T20386] Bluetooth: hci2: command tx timeout [ 1513.669945][T26623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.687433][T26623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.747128][T26623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1513.758464][T26623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1513.783516][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.790694][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.813178][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.820310][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.510626][T26623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.549670][T26623] veth0_vlan: entered promiscuous mode [ 1514.564911][T26623] veth1_vlan: entered promiscuous mode [ 1514.657549][T26843] syzkaller0: entered promiscuous mode [ 1514.663529][T26843] syzkaller0: entered allmulticast mode [ 1514.699843][T26623] veth0_macvtap: entered promiscuous mode [ 1515.014766][T26623] veth1_macvtap: entered promiscuous mode [ 1515.183494][T26854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5753'. [ 1515.219188][T26623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.241656][T26623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.276126][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.288690][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.309298][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.391564][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.545865][T12095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.571014][T12095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.647407][T12095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.664557][T12095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.675535][T20386] Bluetooth: hci2: command tx timeout [ 1515.795990][T26878] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5764'. [ 1517.029159][T26924] syzkaller0: entered promiscuous mode [ 1517.048277][T26924] syzkaller0: entered allmulticast mode [ 1517.179618][T26927] overlayfs: failed to clone upperpath [ 1517.575571][T26955] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5793'. [ 1517.765274][T20386] Bluetooth: hci2: command tx timeout [ 1518.432089][T26989] netlink: 'syz.3.5800': attribute type 29 has an invalid length. [ 1518.484881][T26989] netlink: 'syz.3.5800': attribute type 29 has an invalid length. [ 1520.364667][T27053] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5819'. [ 1523.073927][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5854'. [ 1523.105302][T27138] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1523.255700][T27143] netlink: 'syz.0.5855': attribute type 10 has an invalid length. [ 1523.263603][T27143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5855'. [ 1523.339300][T27145] syzkaller0: entered promiscuous mode [ 1523.345552][T27145] syzkaller0: entered allmulticast mode [ 1523.862034][ T5930] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1524.020490][ T5930] usb 10-1: Using ep0 maxpacket: 32 [ 1524.071197][ T5930] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.086924][ T5930] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.121372][ T5930] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1524.171299][ T5930] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1524.180133][ T5930] usb 10-1: Product: syz [ 1524.194623][ T5930] usb 10-1: Manufacturer: syz [ 1524.244573][ T5930] hub 10-1:4.0: USB hub found [ 1524.430495][T15234] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1524.441502][ T5930] hub 10-1:4.0: 2 ports detected [ 1524.590556][T15234] usb 2-1: Using ep0 maxpacket: 16 [ 1524.615354][T15234] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1524.629277][T15234] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1524.642978][T15234] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1524.659578][T15234] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1524.669484][T15234] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1524.679656][T15234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.692475][T15234] usb 2-1: Product: syz [ 1524.696679][T15234] usb 2-1: Manufacturer: syz [ 1524.705812][T15234] usb 2-1: SerialNumber: syz [ 1524.946299][T15234] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1525.164078][ T29] usb 2-1: USB disconnect, device number 59 [ 1525.196812][ T29] usblp0: removed [ 1525.711016][ T5930] hub 10-1:4.0: activate --> -90 [ 1526.435647][ T5930] usb 10-1-port2: cannot reset (err = -71) [ 1526.521174][ T5930] usb 10-1-port2: cannot reset (err = -71) [ 1526.527031][ T5930] usb 10-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1526.535577][T13090] usb 10-1: USB disconnect, device number 20 [ 1526.598533][T27204] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1526.610282][ T5930] usb 10-1-port2: attempt power cycle [ 1526.761094][T27205] tipc: Started in network mode [ 1526.769242][T27205] tipc: Node identity ac1414aa, cluster identity 4711 [ 1526.807547][T27205] tipc: Enabled bearer , priority 10 [ 1527.753174][T27248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1527.922298][ T5930] tipc: Node number set to 2886997162 [ 1528.142375][T27258] pimreg: entered allmulticast mode [ 1528.461494][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1528.540585][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5905'. [ 1528.560830][T27278] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1528.609319][T27285] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5908'. [ 1528.660480][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1528.668189][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1528.688571][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1528.733857][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1528.751201][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.769429][ T29] usb 8-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 1528.823340][ T29] usb 8-1: Manufacturer: ⠉ [ 1528.827989][ T29] usb 8-1: SerialNumber: ࠵ [ 1528.903693][T27264] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1528.921442][T27264] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1529.181289][ T29] usb 8-1: USB disconnect, device number 17 [ 1530.053618][ T30] audit: type=1400 audit(2000000159.400:2781): avc: denied { accept } for pid=27330 comm="syz.7.5927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1530.541560][ T30] audit: type=1326 audit(2000000159.900:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.9.5933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735579c799 code=0x0 [ 1530.927852][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5935'. [ 1531.500556][ T29] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1531.523402][T27370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5940'. [ 1531.799205][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 1531.876712][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1531.889474][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1531.912463][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1531.936675][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.944963][ T29] usb 2-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 1532.069278][ T30] audit: type=1400 audit(2000000161.420:2783): avc: denied { append } for pid=27365 comm="syz.9.5938" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1532.111985][ T30] audit: type=1400 audit(2000000161.470:2784): avc: denied { map } for pid=27365 comm="syz.9.5938" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1532.253848][ T30] audit: type=1400 audit(2000000161.470:2785): avc: denied { execute } for pid=27365 comm="syz.9.5938" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1532.277725][ T29] usb 2-1: Manufacturer: ⠉ [ 1532.349337][ T29] usb 2-1: SerialNumber: ࠵ [ 1532.378563][T27361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1532.390191][T27361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1532.572949][T27390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5946'. [ 1532.698253][ T29] usb 2-1: USB disconnect, device number 60 [ 1532.901539][T27398] netlink: 'syz.9.5950': attribute type 3 has an invalid length. [ 1532.935096][T27400] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5951'. [ 1533.743046][T27410] random: crng reseeded on system resumption [ 1534.621570][ T9] IPVS: starting estimator thread 0... [ 1534.916225][T27434] IPVS: using max 39 ests per chain, 93600 per kthread [ 1535.612960][T27440] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5963'. [ 1536.038879][T27453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1536.666408][T27473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1536.878765][T27483] netlink: 'syz.9.5981': attribute type 1 has an invalid length. [ 1536.927188][T27483] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1536.939993][T27483] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1536.981351][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5981'. [ 1537.205355][ T30] audit: type=1400 audit(2000000166.560:2786): avc: denied { write } for pid=27482 comm="syz.9.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1537.288707][T27487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1537.427054][T27489] bond1: (slave gretap1): making interface the new active one [ 1537.450146][T27489] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1538.160977][T27508] overlayfs: failed to clone upperpath [ 1538.790723][T13093] Bluetooth: hci1: command 0x2016 tx timeout [ 1538.938612][T27519] syzkaller0: entered promiscuous mode [ 1539.007154][T27519] syzkaller0: entered allmulticast mode [ 1539.431581][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1539.442505][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1539.591120][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6004'. [ 1539.637623][T27551] openvswitch: netlink: IP tunnel TTL not specified. [ 1540.336292][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.342678][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.819344][T27567] fuse: Bad value for 'fd' [ 1540.870736][T13093] Bluetooth: hci1: command 0x2016 tx timeout [ 1541.956239][ T30] audit: type=1400 audit(2000000171.310:2787): avc: denied { create } for pid=27580 comm="syz.7.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1542.800527][T15234] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1542.960485][T15234] usb 2-1: Using ep0 maxpacket: 8 [ 1543.250408][T15234] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 1543.290445][T15234] usb 2-1: config 0 has no interface number 0 [ 1543.296718][T15234] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1543.309326][T15234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.335678][T15234] usb 2-1: config 0 descriptor?? [ 1543.359600][T27601] syzkaller0: entered promiscuous mode [ 1543.379685][T27601] syzkaller0: entered allmulticast mode [ 1543.399162][T15234] usb-storage 2-1:0.99: USB Mass Storage device detected [ 1543.449211][T15234] usb-storage 2-1:0.99: device ignored [ 1543.637378][T20386] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1545.064393][T27632] syzkaller0: entered promiscuous mode [ 1545.083294][T27632] syzkaller0: entered allmulticast mode [ 1545.515934][T27650] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1545.736811][T15234] usb 2-1: USB disconnect, device number 61 [ 1545.788337][T27660] syzkaller0: entered promiscuous mode [ 1545.793851][T27660] syzkaller0: entered allmulticast mode [ 1546.501088][T27674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6042'. [ 1547.333368][T27691] syzkaller0: entered promiscuous mode [ 1547.339089][T27691] syzkaller0: entered allmulticast mode [ 1547.518715][T20386] Bluetooth: hci1: command 0x2016 tx timeout [ 1547.835250][T27705] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6058'. [ 1547.935409][T27711] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6057'. [ 1549.011440][T27734] overlayfs: failed to clone upperpath [ 1549.442739][T27733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1551.850592][ T30] audit: type=1400 audit(2000000181.170:2788): avc: denied { bind } for pid=27781 comm="syz.3.6086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1552.031808][T27800] syzkaller0: entered promiscuous mode [ 1552.037301][T27800] syzkaller0: entered allmulticast mode [ 1552.868273][ T30] audit: type=1400 audit(2000000182.060:2789): avc: denied { getopt } for pid=27802 comm="syz.9.6093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1554.178785][T27841] syzkaller0: entered promiscuous mode [ 1554.195859][T27841] syzkaller0: entered allmulticast mode [ 1554.573671][T27860] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1554.660513][T27860] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1555.640174][T27875] syz_tun: entered allmulticast mode [ 1555.730598][ T5812] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1555.894443][ T5812] usb 10-1: Using ep0 maxpacket: 32 [ 1555.902127][ T5812] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.913430][ T5812] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.926052][ T5812] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1555.943607][ T5812] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1555.952946][ T5812] usb 10-1: Product: syz [ 1555.957195][ T5812] usb 10-1: Manufacturer: syz [ 1555.967045][ T5812] hub 10-1:4.0: USB hub found [ 1555.982890][T15234] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1556.080494][ T5930] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1556.143808][T15234] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1556.152999][T15234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.161009][T15234] usb 8-1: Product: syz [ 1556.165206][T15234] usb 8-1: Manufacturer: syz [ 1556.169797][T15234] usb 8-1: SerialNumber: syz [ 1556.172454][ T5812] hub 10-1:4.0: 2 ports detected [ 1556.176423][T15234] usb 8-1: config 0 descriptor?? [ 1556.192590][T15234] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1556.230806][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 1556.239883][ T5930] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1556.248602][ T5930] usb 2-1: config 0 has no interface number 0 [ 1556.255225][ T5930] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1556.264300][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1556.273552][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.282014][ T5930] usb 2-1: Product: syz [ 1556.286253][ T5930] usb 2-1: Manufacturer: syz [ 1556.291246][ T5930] usb 2-1: SerialNumber: syz [ 1556.301654][ T5930] usb 2-1: config 0 descriptor?? [ 1556.572670][T27909] overlayfs: failed to resolve './file2': -2 [ 1556.716544][T15234] gspca_stk1135: reg_w 0x2 err -110 [ 1556.987416][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.004265][T15234] gspca_stk1135: Sensor write failed [ 1557.011563][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.023050][T15234] gspca_stk1135: Sensor write failed [ 1557.033926][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.051494][T15234] gspca_stk1135: Sensor read failed [ 1557.067366][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.082160][T15234] gspca_stk1135: Sensor read failed [ 1557.087735][T15234] gspca_stk1135: Detected sensor type unknown (0x0) [ 1557.098039][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.111026][T15234] gspca_stk1135: Sensor read failed [ 1557.119164][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.128902][T15234] gspca_stk1135: Sensor read failed [ 1557.143256][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.220555][T15234] gspca_stk1135: Sensor write failed [ 1557.225882][T15234] gspca_stk1135: serial bus timeout: status=0x00 [ 1557.263122][T15234] gspca_stk1135: Sensor write failed [ 1557.268475][T15234] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 1557.459861][ T5930] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1557.491179][ T5930] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1557.683733][ T9] hub 10-1:4.0: activate --> -90 [ 1558.493666][ T9] hub 10-1:4.0: hub_ext_port_status failed (err = -71) [ 1558.501855][T13090] usb 10-1: USB disconnect, device number 25 [ 1558.509489][ T9] usb 10-1-port2: attempt power cycle [ 1558.520882][ T5930] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1558.532129][ T5930] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 1558.545445][ T5930] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1558.557738][ T5930] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1558.576494][ T5930] usb 2-1: USB disconnect, device number 62 [ 1559.090808][ T30] audit: type=1400 audit(2000000188.370:2790): avc: denied { mounton } for pid=27962 comm="syz.3.6148" path="/file0" dev="ramfs" ino=105030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1559.328401][T27967] syzkaller0: entered promiscuous mode [ 1559.343037][T27967] syzkaller0: entered allmulticast mode [ 1559.397907][T27972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6150'. [ 1559.417093][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6150'. [ 1559.630519][ T5930] usb 8-1: USB disconnect, device number 18 [ 1561.131427][T13328] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1561.206391][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1561.210539][T13090] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1561.231513][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1561.297234][T13328] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1561.327807][T13328] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1561.337888][T13328] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1561.346975][T13328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.361864][T28001] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1561.372313][T13090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1561.375035][T13328] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1561.383527][T13090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1561.407270][T13090] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1561.426934][T13090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.460374][T13090] usb 2-1: config 0 descriptor?? [ 1561.758098][ T30] audit: type=1400 audit(2000000191.110:2791): avc: denied { bind } for pid=28023 comm="syz.9.6168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1561.933059][T13090] hid_parser_main: 90 callbacks suppressed [ 1561.933078][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1561.971630][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1561.986827][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1561.997576][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1562.005946][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1562.013386][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1562.020330][T13090] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 1562.059013][T13090] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1562.159708][T13090] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 1562.209672][T13090] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 1562.250224][T13090] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -71 [ 1562.273472][T13090] usb 2-1: USB disconnect, device number 63 [ 1562.356186][T28038] fido_id[28038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1562.876202][T28061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1563.002510][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1563.577320][T28069] tipc: Started in network mode [ 1563.582671][T28069] tipc: Node identity ac1414aa, cluster identity 4711 [ 1563.589951][T28069] tipc: Enabled bearer , priority 10 [ 1563.792085][T28081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1563.839989][T15234] usb 8-1: USB disconnect, device number 19 [ 1564.026477][T28084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1564.082741][T28090] netlink: 260 bytes leftover after parsing attributes in process `syz.7.6189'. [ 1564.589972][T15234] tipc: Node number set to 2886997162 [ 1565.049718][T28110] tipc: Enabled bearer , priority 10 [ 1565.962888][T13090] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1566.050600][ T5866] tipc: Node number set to 55303691 [ 1566.143153][T13090] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1566.158738][T13090] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1566.283572][T13090] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1566.359305][T13090] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.378007][T13090] usb 8-1: Product: syz [ 1566.393085][T13090] usb 8-1: Manufacturer: syz [ 1566.412174][T13090] usb 8-1: SerialNumber: syz [ 1566.427791][T13090] usb 8-1: config 0 descriptor?? [ 1566.471435][T13090] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1566.504723][T28148] fuse: Bad value for 'fd' [ 1567.464962][ T30] audit: type=1400 audit(2000000196.820:2792): avc: denied { read } for pid=28191 comm="syz.9.6236" path="socket:[106918]" dev="sockfs" ino=106918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1567.699087][T28203] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1568.255285][T28215] fuse: Bad value for 'fd' [ 1568.355521][ T5866] usb 8-1: USB disconnect, device number 20 [ 1568.839134][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1571.766870][ T30] audit: type=1400 audit(2000000201.120:2793): avc: denied { accept } for pid=28276 comm="syz.9.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1573.860192][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6287'. [ 1574.809580][T28355] 9pnet_virtio: no channels available for device /dev/loop1 [ 1575.906581][T28393] 9pnet_virtio: no channels available for device /dev/loop9 [ 1577.771081][ T5866] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1578.000584][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 1578.578528][ T5866] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1578.613692][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.635227][ T5866] usb 2-1: config 0 has no interface number 0 [ 1578.649158][ T5866] usb 2-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.665910][ T5866] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1578.679034][ T5866] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1578.688006][ T5866] usb 2-1: Product: syz [ 1578.692487][ T5866] usb 2-1: Manufacturer: syz [ 1578.697081][ T5866] usb 2-1: SerialNumber: syz [ 1578.720986][ T5866] usb 2-1: config 0 descriptor?? [ 1578.731840][ T5866] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 1578.740217][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 1578.759734][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 88 [ 1578.769364][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 1578.779546][T28457] syz_tun: entered promiscuous mode [ 1578.785142][T28457] vlan2: entered promiscuous mode [ 1578.792546][ T5866] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1578.802511][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 1578.819591][ T5866] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1578.830020][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 1578.881111][ T5866] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1578.902456][ T5866] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 1578.921152][ T5866] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1578.930290][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1578.960619][ T5866] usb 2-1: USB disconnect, device number 64 [ 1578.981219][ T5866] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1579.053701][T28462] overlayfs: missing 'lowerdir' [ 1579.295029][ T5866] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1579.445573][ T5866] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1579.470780][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1579.484023][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1579.494292][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1579.504855][ T5866] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1579.520784][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1579.531407][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.541581][ T5866] keyspan 2-1:0.107: device disconnected [ 1579.571545][ T9] usb 10-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 1579.732696][ T9] usb 10-1: Manufacturer: ⠉ [ 1579.748494][ T9] usb 10-1: SerialNumber: ࠵ [ 1579.782079][T28442] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1579.789256][T28442] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1580.019756][ T9] usb 10-1: USB disconnect, device number 30 [ 1580.190533][ T5812] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1580.340480][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 1580.347617][ T5812] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 1580.356351][ T5812] usb 2-1: config 0 has no interface number 0 [ 1580.363142][ T5812] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1580.372352][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.384090][ T5812] usb 2-1: config 0 descriptor?? [ 1580.393989][ T5812] usb-storage 2-1:0.99: USB Mass Storage device detected [ 1580.413867][ T5812] usb-storage 2-1:0.99: device ignored [ 1580.622049][T13093] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1581.238893][T28507] overlayfs: missing 'lowerdir' [ 1581.244251][T14825] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1581.420739][T14825] usb 10-1: Using ep0 maxpacket: 32 [ 1581.583834][T14825] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.633277][T14825] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.667685][T14825] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1581.695174][T14825] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1581.710498][T14825] usb 10-1: Product: syz [ 1581.716643][T14825] usb 10-1: Manufacturer: syz [ 1581.736621][T14825] hub 10-1:4.0: USB hub found [ 1581.951511][T14825] hub 10-1:4.0: 2 ports detected [ 1582.100184][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6356'. [ 1582.368032][T28525] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1582.997146][ T30] audit: type=1400 audit(2000000212.350:2794): avc: denied { bind } for pid=28530 comm="syz.3.6359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1583.057953][ T30] audit: type=1400 audit(2000000212.350:2795): avc: denied { map } for pid=28530 comm="syz.3.6359" path="socket:[107978]" dev="sockfs" ino=107978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1583.094458][ T29] usb 2-1: USB disconnect, device number 65 [ 1583.145429][ T30] audit: type=1400 audit(2000000212.350:2796): avc: denied { read accept } for pid=28530 comm="syz.3.6359" path="socket:[107978]" dev="sockfs" ino=107978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1583.170864][T14825] hub 10-1:4.0: activate --> -90 [ 1583.621160][T14825] hub 10-1:4.0: hub_ext_port_status failed (err = -71) [ 1583.622305][ T9] usb 10-1: USB disconnect, device number 31 [ 1583.637500][T14825] usb 10-1-port2: attempt power cycle [ 1584.049004][ T5812] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1584.323098][ T5812] usb 8-1: Using ep0 maxpacket: 8 [ 1584.332430][ T5812] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1584.403743][ T5812] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1584.441430][ T5812] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1584.470852][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.494052][ T5812] usb 8-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 1584.753144][ T5812] usb 8-1: Manufacturer: ⠉ [ 1584.800522][ T5812] usb 8-1: SerialNumber: ࠵ [ 1584.823169][T28558] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1584.830373][T28558] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1584.894988][T28567] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1584.894988][T28567] program syz.9.6372 not setting count and/or reply_len properly [ 1585.096143][ T5812] usb 8-1: USB disconnect, device number 21 [ 1586.170823][T28612] random: crng reseeded on system resumption [ 1586.582872][T14825] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1586.995495][T14825] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.017528][T14825] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1587.028077][T14825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.045388][T14825] usb 8-1: Product: syz [ 1587.058303][T14825] usb 8-1: Manufacturer: syz [ 1587.063672][T14825] usb 8-1: SerialNumber: syz [ 1587.134243][T14825] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1587.377147][T14825] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1587.420918][T14825] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1587.440646][T14825] usb 8-1: media controller created [ 1587.509804][T14825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1587.799728][T14825] usb 8-1: USB disconnect, device number 22 [ 1588.272211][T28702] random: crng reseeded on system resumption [ 1589.320017][T28706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1589.426432][T15234] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1589.436054][T28706] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1589.613950][T15234] usb 10-1: Using ep0 maxpacket: 8 [ 1589.645515][T15234] usb 10-1: config 0 has an invalid interface number: 99 but max is 0 [ 1589.666957][T15234] usb 10-1: config 0 has no interface number 0 [ 1589.712603][T15234] usb 10-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1589.717207][T28706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1589.760722][T15234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.771789][T15234] usb 10-1: config 0 descriptor?? [ 1589.786536][T28706] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1589.791641][T15234] usb-storage 10-1:0.99: USB Mass Storage device detected [ 1589.911348][T15234] usb-storage 10-1:0.99: device ignored [ 1589.923806][T28753] Set syz1 is full, maxelem 1023 reached [ 1589.944813][T28706] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1589.986951][T28706] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1590.174999][T28706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1590.208885][T28706] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1591.370635][T15234] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1591.562022][T15234] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.590202][T15234] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1591.601646][T28811] random: crng reseeded on system resumption [ 1591.678642][T15234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.698934][T15234] usb 8-1: Product: syz [ 1591.709023][T15234] usb 8-1: Manufacturer: syz [ 1591.758274][T15234] usb 8-1: SerialNumber: syz [ 1591.809057][T15234] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1591.898814][T14825] usb 10-1: USB disconnect, device number 36 [ 1592.013765][T15234] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1592.053974][T15234] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1592.086898][T15234] usb 8-1: media controller created [ 1592.126952][T15234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1592.514745][T15234] usb 8-1: USB disconnect, device number 23 [ 1592.730553][ T29] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1592.881974][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 1592.899022][ T29] usb 10-1: config 0 has no interfaces? [ 1592.937418][ T29] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1592.970363][ T29] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1592.998824][ T29] usb 10-1: Manufacturer: syz [ 1593.022617][ T29] usb 10-1: config 0 descriptor?? [ 1593.050986][ T5812] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1593.200722][ T5812] usb 8-1: Using ep0 maxpacket: 16 [ 1593.217641][ T5812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.228211][ T5812] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1593.244472][ T5812] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1593.690708][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.698695][ T5812] usb 8-1: Product: syz [ 1593.800932][ T5812] usb 8-1: Manufacturer: syz [ 1593.816208][ T5812] usb 8-1: SerialNumber: syz [ 1594.012327][T28863] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1594.062471][ T5812] usb 8-1: 0:2 : does not exist [ 1594.089394][ T5812] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1594.115738][ T5812] usb 8-1: USB disconnect, device number 24 [ 1594.359541][T28443] udevd[28443]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1594.393826][T28870] tipc: Enabled bearer , priority 10 [ 1595.804350][ T9] usb 10-1: USB disconnect, device number 37 [ 1596.407816][T28905] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1596.417048][T28905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1597.682835][ T30] audit: type=1400 audit(2000000227.040:2797): avc: denied { write } for pid=28936 comm="syz.9.6453" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1597.730279][ T30] audit: type=1400 audit(2000000227.070:2798): avc: denied { open } for pid=28936 comm="syz.9.6453" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1597.880474][ T29] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1598.130552][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1598.138872][ T29] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1598.149122][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.158246][ T29] usb 2-1: Product: syz [ 1598.162659][ T29] usb 2-1: Manufacturer: syz [ 1598.167291][ T29] usb 2-1: SerialNumber: syz [ 1598.205783][ T29] usb 2-1: config 0 descriptor?? [ 1599.352125][ T29] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1599.862461][ T29] usb 2-1: reset high-speed USB device number 66 using dummy_hcd [ 1600.282173][ T29] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 1600.288280][ T29] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1600.485675][ T29] usb 2-1: USB disconnect, device number 66 [ 1600.576747][T28980] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6470'. [ 1601.755975][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.764089][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.341660][T15234] psmouse serio2: Failed to reset mouse on : -5 [ 1602.780660][ T29] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1602.942291][ T29] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1602.952792][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1602.964497][ T29] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1602.974448][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.982706][ T29] usb 8-1: Product: syz [ 1602.988096][ T29] usb 8-1: Manufacturer: syz [ 1602.996105][ T29] usb 8-1: SerialNumber: syz [ 1603.056102][ T29] usb 8-1: config 0 descriptor?? [ 1603.063435][ T29] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1603.564206][ T30] audit: type=1326 audit(2000000232.920:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29025 comm="syz.3.6485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83e199c799 code=0x0 [ 1603.730510][T13090] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1603.881439][T13090] usb 2-1: Using ep0 maxpacket: 16 [ 1603.890353][T13090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.900900][T13090] usb 2-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1603.927349][T13090] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1603.973960][T13090] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1603.983290][T13090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.991664][T13090] usb 2-1: Product: syz [ 1604.010766][T13090] usb 2-1: Manufacturer: syz [ 1604.015471][T13090] usb 2-1: SerialNumber: syz [ 1605.436649][ T29] gspca_sunplus: reg_r err -110 [ 1605.441956][ T29] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1605.575457][ T29] usb 8-1: USB disconnect, device number 25 [ 1606.220572][ T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1606.400491][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 1606.406967][ T29] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1606.415533][ T29] usb 8-1: config 0 has no interface number 0 [ 1606.421655][ T29] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1606.431530][ T29] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1606.439985][ T29] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1606.449250][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.457419][ T29] usb 8-1: Product: syz [ 1606.461697][ T29] usb 8-1: Manufacturer: syz [ 1606.466379][ T29] usb 8-1: SerialNumber: syz [ 1606.476810][ T29] usb 8-1: config 0 descriptor?? [ 1606.486766][ T29] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1606.496809][ T29] em28xx 8-1:0.89: Video interface 89 found: [ 1606.511736][T13090] usb 2-1: USB disconnect, device number 67 [ 1607.084519][T15234] misc userio: Buffer overflowed, userio client isn't keeping up [ 1607.121683][ T30] audit: type=1400 audit(2000000236.480:2800): avc: denied { lock } for pid=29074 comm="syz.1.6502" path="socket:[109242]" dev="sockfs" ino=109242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1607.502608][ T29] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1607.908585][T20386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1607.920187][T20386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1607.928138][T20386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1607.935932][T20386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1607.946392][T20386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1608.012208][T13093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1608.019457][T13093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1608.038391][T13093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1608.047500][T13093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1608.056999][T13093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1608.158622][ T29] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1608.200758][ T29] em28xx 8-1:0.89: board has no eeprom [ 1608.280664][ T29] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1608.287901][ T29] em28xx 8-1:0.89: analog set to bulk mode. [ 1608.302083][T14825] em28xx 8-1:0.89: Registering V4L2 extension [ 1608.322083][ T29] usb 8-1: USB disconnect, device number 26 [ 1608.335733][ T29] em28xx 8-1:0.89: Disconnecting em28xx [ 1608.354238][T14825] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1608.377661][T14825] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1608.396415][T14825] em28xx 8-1:0.89: No AC97 audio processor [ 1608.406599][T15234] input: PS/2 Generic Mouse as /devices/serio2/input/input24 [ 1608.431262][T14825] usb 8-1: Decoder not found [ 1608.435854][T14825] em28xx 8-1:0.89: failed to create media graph [ 1608.458566][T14825] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1608.460483][T13090] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1608.487355][T14825] em28xx 8-1:0.89: Registering snapshot button... [ 1608.500383][T14825] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input25 [ 1608.526224][T14825] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1608.536391][ T29] em28xx 8-1:0.89: Closing input extension [ 1608.546524][T29088] chnl_net:caif_netlink_parms(): no params data found [ 1608.554792][ T29] em28xx 8-1:0.89: Deregistering snapshot button [ 1608.588924][ T29] em28xx 8-1:0.89: Freeing device [ 1608.622154][T13090] usb 2-1: Using ep0 maxpacket: 16 [ 1608.639512][T13090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.651125][T15234] psmouse serio2: Failed to enable mouse on [ 1608.657239][T13090] usb 2-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1608.676757][T13090] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1608.693439][T13090] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1608.706466][T13090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.715583][T13090] usb 2-1: Product: syz [ 1608.721524][T13090] usb 2-1: Manufacturer: syz [ 1608.726641][T13090] usb 2-1: SerialNumber: syz [ 1608.764356][T29088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.792139][T29088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.821666][T29088] bridge_slave_0: entered allmulticast mode [ 1608.838545][T29088] bridge_slave_0: entered promiscuous mode [ 1608.853770][T29088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.861770][T29088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.868961][T29088] bridge_slave_1: entered allmulticast mode [ 1608.878045][T29088] bridge_slave_1: entered promiscuous mode [ 1608.925591][T29088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.041046][T29088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.086296][T29088] team0: Port device team_slave_0 added [ 1609.395866][T29088] team0: Port device team_slave_1 added [ 1609.502916][T29118] netlink: 'syz.7.6515': attribute type 27 has an invalid length. [ 1609.549129][T29088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.560091][T29088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.618495][T29088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.731953][T29088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.744189][T29088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.788361][T29088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.833885][T29088] hsr_slave_0: entered promiscuous mode [ 1609.843137][T29088] hsr_slave_1: entered promiscuous mode [ 1609.854966][T29088] debugfs: 'hsr0' already exists in 'hsr' [ 1609.861349][T29088] Cannot create hsr debugfs directory [ 1610.090271][T29088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.154269][T29088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.164807][T20386] Bluetooth: hci4: command tx timeout [ 1610.215294][T29088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.392924][T29088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.430511][T13090] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1610.601012][T13090] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1610.613519][ T5812] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1610.648192][T13090] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1610.684072][T13090] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 1610.725519][T13090] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1610.742598][T29088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1610.764038][T29088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1610.771950][ T5812] usb 8-1: Using ep0 maxpacket: 16 [ 1610.774413][T29088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1610.806489][T29088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1610.814220][T13090] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1610.824367][ T5812] usb 8-1: config 0 has no interfaces? [ 1610.829946][T13090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1610.844418][ T5812] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1610.863921][T13090] usb 10-1: SerialNumber: syz [ 1610.873117][ T5812] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1610.893652][T29129] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1610.928823][ T5812] usb 8-1: Manufacturer: syz [ 1610.930756][T29088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.947921][ T5812] usb 8-1: config 0 descriptor?? [ 1610.989128][T29088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1611.003945][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.011080][T20424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1611.031176][T26794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.038242][T26794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.128233][T13090] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1611.141126][T13090] usb 10-1: USB disconnect, device number 38 [ 1611.276036][ T30] audit: type=1400 audit(2000000240.590:2801): avc: denied { connect } for pid=29132 comm="syz.7.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1611.315936][ T30] audit: type=1400 audit(2000000240.590:2802): avc: denied { shutdown } for pid=29132 comm="syz.7.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1611.362744][ T5812] usb 2-1: USB disconnect, device number 68 [ 1611.477701][T29088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.506947][T29088] veth0_vlan: entered promiscuous mode [ 1611.523577][T29088] veth1_vlan: entered promiscuous mode [ 1611.548764][T29088] veth0_macvtap: entered promiscuous mode [ 1611.556984][T29088] veth1_macvtap: entered promiscuous mode [ 1611.564605][T29088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.566222][T29088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.584799][ T7084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.584848][ T7084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.584886][ T7084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.584916][ T7084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.815796][T26802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.816439][T26802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.876833][T29163] overlayfs: failed to resolve './file2': -2 [ 1612.240621][T20386] Bluetooth: hci4: command tx timeout [ 1612.300502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.301067][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.544378][T29171] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1613.862143][T13328] usb 8-1: USB disconnect, device number 27 [ 1614.396399][T20386] Bluetooth: hci4: command tx timeout [ 1615.187662][T29206] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6541'. [ 1615.552436][T29214] hub 1-0:1.0: USB hub found [ 1615.594573][T29214] hub 1-0:1.0: 1 port detected [ 1616.073070][T29236] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6550'. [ 1616.491943][T20386] Bluetooth: hci4: command tx timeout [ 1617.011399][T29251] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6555'. [ 1619.063850][T29289] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6565'. [ 1619.370470][ T5812] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1619.506984][T29309] kernel read not supported for file /file1 (pid: 29309 comm: syz.1.6580) [ 1619.540693][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 1619.650648][ T30] audit: type=1800 audit(2000000249.010:2803): pid=29309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6580" name="file1" dev="mqueue" ino=110510 res=0 errno=0 [ 1619.687068][ T5812] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 1620.163188][ T5812] usb 4-1: config 0 has no interface number 0 [ 1620.170120][ T5812] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1620.244493][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.258164][ T5812] usb 4-1: config 0 descriptor?? [ 1620.435332][ T5812] usb-storage 4-1:0.99: USB Mass Storage device detected [ 1620.498567][ T5812] usb-storage 4-1:0.99: device ignored [ 1620.716843][T20386] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1620.845823][T29325] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6584'. [ 1620.864805][T29336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1620.873830][T29336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1620.900721][T29325] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6584'. [ 1623.551946][T13090] usb 4-1: USB disconnect, device number 63 [ 1624.040086][T29358] netlink: 'syz.0.6595': attribute type 27 has an invalid length. [ 1625.524896][T13090] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1626.827216][T29412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1626.845864][T13090] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1626.866169][T13090] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1626.877618][T13090] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 1627.149634][T13090] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1627.174141][T13090] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1627.183556][T13090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1627.191773][T13090] usb 8-1: SerialNumber: syz [ 1627.199371][T29380] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1627.553448][T13090] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1627.578592][T13090] usb 8-1: USB disconnect, device number 28 [ 1627.655479][ T30] audit: type=1400 audit(2000000257.010:2804): avc: denied { setopt } for pid=29425 comm="syz.7.6621" lport=49997 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1629.990636][T29456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1630.375749][ T29] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1630.556911][ T29] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1630.597900][ T29] usb 2-1: config 4 has an invalid interface number: 98 but max is 0 [ 1630.680468][ T29] usb 2-1: config 4 has no interface number 0 [ 1630.692084][ T29] usb 2-1: string descriptor 0 read error: -22 [ 1630.698580][ T29] usb 2-1: New USB device found, idVendor=0df6, idProduct=0077, bcdDevice=a1.db [ 1630.712274][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.885211][T29482] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1630.885211][T29482] The task syz.0.6640 (29482) triggered the difference, watch for misbehavior. [ 1630.957364][ T29] usb 2-1: USB disconnect, device number 69 [ 1631.780643][T15234] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1631.943427][T15234] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1631.972042][T15234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1631.998743][T15234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 1632.021086][T15234] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1632.049559][T15234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1632.079204][T15234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1632.097206][T15234] usb 4-1: SerialNumber: syz [ 1632.121057][T29495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1632.346603][T15234] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1632.384716][T15234] usb 4-1: USB disconnect, device number 64 [ 1634.330467][T15234] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1634.532332][T15234] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1634.543626][T15234] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1634.561024][T15234] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 1634.572806][T15234] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1634.589882][T15234] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.599743][T15234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.611597][T15234] usb 8-1: SerialNumber: syz [ 1634.618351][T29578] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1635.147497][T15234] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1635.157892][T15234] usb 8-1: USB disconnect, device number 29 [ 1635.203528][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6684'. [ 1635.356647][T29596] netlink: 'syz.0.6687': attribute type 29 has an invalid length. [ 1635.370637][T29596] netlink: 'syz.0.6687': attribute type 29 has an invalid length. [ 1635.845835][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1636.000560][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1636.010106][ T9] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1636.022183][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.035141][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1636.046284][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1636.057020][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.073671][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1636.085005][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1636.094595][ T9] usb 2-1: Manufacturer: syz [ 1636.105707][ T9] usb 2-1: config 0 descriptor?? [ 1636.382481][ T9] rc_core: IR keymap rc-hauppauge not found [ 1636.394108][ T9] Registered IR keymap rc-empty [ 1636.409567][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.440632][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.486805][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1636.511698][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 1636.532946][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.550929][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.573709][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.610604][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.631729][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.659394][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.683329][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.710561][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.732417][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.752264][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1636.785840][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1636.810494][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1636.832536][ T9] usb 2-1: USB disconnect, device number 70 [ 1637.244118][T29640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1639.611937][T29687] 9pnet_virtio: no channels available for device /dev/loop0 [ 1640.092589][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1640.409039][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1640.451095][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1640.459206][ T9] usb 4-1: config 0 has no interface number 0 [ 1640.467810][ T5812] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1640.487451][ T9] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1640.507811][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1640.530957][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1640.550539][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.559086][ T9] usb 4-1: Product: syz [ 1640.569414][ T9] usb 4-1: Manufacturer: syz [ 1640.579663][ T9] usb 4-1: SerialNumber: syz [ 1640.600045][ T9] usb 4-1: config 0 descriptor?? [ 1640.611536][ T9] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1640.621539][ T9] em28xx 4-1:0.89: Video interface 89 found: [ 1640.631079][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 1640.650221][ T5812] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1640.660358][ T5812] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1640.700495][T15234] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1640.713147][ T5812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1640.722515][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.731021][ T5812] usb 2-1: Product: ṣ﷧ḅ옽Մ丶铞癥쉏쩄냌쉏ᰈ珽晡쩅뻐榕಺䫏鼗㗣፲蘠읟஋럇ણ凌젋ަ㇡暡鸐⯎塔䞇䗏篾臨ꕖᶏ툗椳쐶㎷鷽̷肀骷ഗ빺醕꯳荪䎱멐ᇟ컕靓໗嵆⯐ [ 1640.753442][ T5812] usb 2-1: Manufacturer: ⠉ [ 1640.758080][ T5812] usb 2-1: SerialNumber: ࠵ [ 1640.780085][T29694] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1640.810600][T29694] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1640.900708][T15234] usb 8-1: Using ep0 maxpacket: 32 [ 1640.910148][T15234] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1640.930463][T15234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.938474][T15234] usb 8-1: Product: syz [ 1640.944876][T15234] usb 8-1: Manufacturer: syz [ 1640.949488][T15234] usb 8-1: SerialNumber: syz [ 1640.956350][T15234] usb 8-1: config 0 descriptor?? [ 1640.965009][T15234] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1641.071658][ T5812] usb 2-1: USB disconnect, device number 71 [ 1641.237877][ T9] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1641.865638][ T9] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1641.884484][ T9] em28xx 4-1:0.89: board has no eeprom [ 1641.950744][ T9] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1641.958314][ T9] em28xx 4-1:0.89: analog set to bulk mode. [ 1641.964638][ T5812] em28xx 4-1:0.89: Registering V4L2 extension [ 1642.001026][ T9] usb 4-1: USB disconnect, device number 65 [ 1642.014601][ T9] em28xx 4-1:0.89: Disconnecting em28xx [ 1642.444869][ T5812] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1642.453816][ T5812] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1642.461623][ T5812] em28xx 4-1:0.89: No AC97 audio processor [ 1642.478098][ T5812] usb 4-1: Decoder not found [ 1642.484397][ T5812] em28xx 4-1:0.89: failed to create media graph [ 1642.495562][ T5812] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1642.512259][ T5812] em28xx 4-1:0.89: Registering snapshot button... [ 1642.541077][ T5812] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input27 [ 1642.574321][ T5812] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1642.593384][ T9] em28xx 4-1:0.89: Closing input extension [ 1642.599240][ T9] em28xx 4-1:0.89: Deregistering snapshot button [ 1642.658612][ T9] em28xx 4-1:0.89: Freeing device [ 1642.894706][T15234] gspca_ov534_9: reg_w failed -71 [ 1643.249953][T15234] gspca_ov534_9: Unknown sensor 0000 [ 1643.250027][T15234] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1643.267262][T15234] usb 8-1: USB disconnect, device number 30 [ 1644.706685][T29767] netlink: 'syz.1.6747': attribute type 29 has an invalid length. [ 1644.809458][T29767] netlink: 'syz.1.6747': attribute type 29 has an invalid length. [ 1645.680690][T15234] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1645.843347][T15234] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.865167][T15234] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1645.882676][T15234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.915923][T15234] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1646.985905][T15234] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 1646.994797][T15234] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1647.003296][T15234] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 1647.767288][ T30] audit: type=1326 audit(2000000277.120:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29818 comm="syz.9.6766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735579c799 code=0x0 [ 1648.467604][T15234] usb 2-1: USB disconnect, device number 72 [ 1648.736929][T29847] xt_hashlimit: size too large, truncated to 1048576 [ 1651.450485][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1651.527108][ T30] audit: type=1326 audit(2000000280.880:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29868 comm="syz.0.6781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x0 [ 1651.636772][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1651.654635][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1651.689776][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1651.699157][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.707618][ T9] usb 4-1: Product: syz [ 1651.718364][ T9] usb 4-1: Manufacturer: syz [ 1651.729307][ T9] usb 4-1: SerialNumber: syz [ 1651.743825][ T9] usb 4-1: config 0 descriptor?? [ 1651.757603][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1652.360451][ T5930] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1652.510466][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 1652.520315][ T5930] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 1652.529838][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.545220][ T5930] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1652.562776][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.574756][ T9] gspca_zc3xx: reg_w_i err -71 [ 1652.585973][ T5930] usb 2-1: Product: syz [ 1652.593468][ T5930] usb 2-1: Manufacturer: syz [ 1652.602233][ T5930] usb 2-1: SerialNumber: syz [ 1652.613600][ T5930] usb 2-1: config 0 descriptor?? [ 1652.632398][ T5930] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1652.861210][T29907] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6796'. [ 1652.877880][ T30] audit: type=1400 audit(2000000282.230:2807): avc: denied { shutdown } for pid=29906 comm="syz.9.6796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1654.060457][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1654.068541][ T5930] gspca_sunplus: reg_r err -110 [ 1654.074488][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1654.102034][ T9] usb 4-1: USB disconnect, device number 66 [ 1654.546035][ T30] audit: type=1326 audit(2000000283.890:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1655.675585][ T30] audit: type=1326 audit(2000000283.890:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.549369][ T30] audit: type=1326 audit(2000000283.890:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.591898][ T30] audit: type=1326 audit(2000000283.890:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.726847][ T30] audit: type=1326 audit(2000000283.890:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.784807][ T30] audit: type=1326 audit(2000000283.890:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.894889][ T30] audit: type=1326 audit(2000000283.890:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1656.948373][ T30] audit: type=1326 audit(2000000283.890:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1657.126464][ T30] audit: type=1326 audit(2000000283.900:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29915 comm="syz.7.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc719f9c799 code=0x7ffc0000 [ 1657.700495][ T5930] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1657.712329][ T5930] usb 2-1: USB disconnect, device number 73 [ 1658.412797][T29962] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6811'. [ 1661.540970][T29996] input: syz0 as /devices/virtual/input/input28 [ 1663.308880][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.317855][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.414405][T29984] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1663.475716][T29984] netlink: 'syz.9.6817': attribute type 2 has an invalid length. [ 1663.483569][T29984] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6817'. [ 1664.112842][ T5930] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1664.960583][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.999178][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1665.044268][ T5930] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1665.062628][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.081442][ T5930] usb 4-1: config 0 descriptor?? [ 1665.166142][T30024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6826'. [ 1665.176173][T30024] Set syz1 is full, maxelem 1023 reached [ 1665.346473][T30013] pim6reg: entered allmulticast mode [ 1665.357727][T30013] pim6reg: left allmulticast mode [ 1665.406457][ T5930] usb 4-1: USB disconnect, device number 67 [ 1665.973280][T30038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6831'. [ 1666.081588][T30038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.212701][T30038] bridge_slave_1 (unregistering): left allmulticast mode [ 1666.220507][T30038] bridge_slave_1 (unregistering): left promiscuous mode [ 1666.227584][T30038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.944573][ T5812] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1668.772173][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 1668.778718][ T5812] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1668.794657][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1668.858571][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1668.868589][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1668.888978][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1668.932039][ T5812] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1668.964353][ T5812] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1668.972960][ T5812] usb 4-1: Manufacturer: syz [ 1668.992728][ T5812] usb 4-1: config 0 descriptor?? [ 1669.820990][ T5812] rc_core: IR keymap rc-hauppauge not found [ 1669.838168][ T5812] Registered IR keymap rc-empty [ 1669.849303][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1669.874276][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1669.919845][ T5812] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1670.024318][ T5812] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 1670.057403][T30070] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1670.074621][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.121926][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.140467][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.160524][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.180516][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.200695][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.310725][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.330505][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.353051][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.380565][ T5812] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1670.404156][T30082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1670.406417][ T5812] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1670.423463][ T5812] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1670.454547][ T5812] usb 4-1: USB disconnect, device number 68 [ 1670.484256][T30084] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6846' sets config #0 [ 1670.501472][T30084] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6846' sets config #1 [ 1671.445598][T30107] input: syz0 as /devices/virtual/input/input30 [ 1673.373323][T30112] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6857'. [ 1673.398078][T30112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.428079][T30112] bridge_slave_1 (unregistering): left allmulticast mode [ 1673.453870][T30112] bridge_slave_1 (unregistering): left promiscuous mode [ 1673.492707][T30112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.120317][T30152] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6869'. [ 1675.172315][T30152] binder_alloc: 30150: pid 30150 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1675.186236][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1675.186247][ T30] audit: type=1400 audit(2000000304.530:2843): avc: denied { call } for pid=30150 comm="syz.7.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1675.191153][T30152] binder_alloc: 30150: pid 30150 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1675.573406][T30168] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6873'. [ 1675.750708][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6872'. [ 1675.795746][T30172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.946866][T30172] bridge_slave_1 (unregistering): left allmulticast mode [ 1675.956298][T30172] bridge_slave_1 (unregistering): left promiscuous mode [ 1675.989153][T30172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.708015][T30202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6882'. [ 1677.940646][ T5812] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1678.120529][ T5812] usb 8-1: Using ep0 maxpacket: 8 [ 1678.127173][ T5812] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1678.143700][ T5812] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1678.155801][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.177212][ T5812] usb 8-1: Product: syz [ 1678.191573][ T5812] usb 8-1: Manufacturer: syz [ 1678.201703][ T5812] usb 8-1: SerialNumber: syz [ 1678.321714][ T5812] usb 8-1: config 0 descriptor?? [ 1678.332929][ T5812] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1678.471342][ T5930] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1678.621079][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 1678.638462][ T5930] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1678.656971][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1678.690848][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1678.711480][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1678.780980][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1678.871956][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1678.881376][ T5930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1678.891017][ T5930] usb 2-1: Manufacturer: syz [ 1678.900210][ T5930] usb 2-1: config 0 descriptor?? [ 1679.117924][T30239] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6890'. [ 1679.146632][ T5812] gspca_zc3xx: reg_w_i err -71 [ 1679.200488][ T5930] rc_core: IR keymap rc-hauppauge not found [ 1679.206419][ T5930] Registered IR keymap rc-empty [ 1679.211819][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1679.230573][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1679.251283][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1679.268339][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 1679.387709][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1679.890460][ T5812] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1679.896770][ T5812] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1679.916632][ T5812] usb 8-1: USB disconnect, device number 31 [ 1679.925703][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1679.963873][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.028897][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.060669][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.494742][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.542551][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.578911][T30262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1680.580499][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.651447][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.771072][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1680.801687][ T5930] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1680.879567][ T5930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1681.024541][ T5930] usb 2-1: USB disconnect, device number 74 [ 1681.063407][T30254] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6893'. [ 1682.200487][T15234] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1682.360428][T15234] usb 8-1: Using ep0 maxpacket: 8 [ 1682.415383][T15234] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1682.446077][T15234] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1682.479284][T15234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.508211][T15234] usb 8-1: Product: syz [ 1682.528481][T15234] usb 8-1: Manufacturer: syz [ 1682.564982][T15234] usb 8-1: SerialNumber: syz [ 1682.637169][T15234] usb 8-1: config 0 descriptor?? [ 1682.657539][T15234] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1683.362980][ T1142] wlan0: Trigger new scan to find an IBSS to join [ 1684.362829][T15234] gspca_zc3xx: reg_w_i err -110 [ 1684.882467][ T30] audit: type=1400 audit(2000000314.240:2844): avc: denied { getopt } for pid=30320 comm="syz.3.6911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1685.070507][T15234] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1685.076850][T15234] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1685.095846][T15234] usb 8-1: USB disconnect, device number 32 [ 1685.305548][T30328] random: crng reseeded on system resumption [ 1685.562830][T30335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1688.390711][ T49] wlan0: Trigger new scan to find an IBSS to join [ 1689.294910][T30382] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6937'. [ 1689.605446][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.712158][T30397] SET target dimension over the limit! [ 1690.136687][T30406] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6944'. [ 1691.734512][ T5930] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1692.102680][ T5930] usb 8-1: Using ep0 maxpacket: 16 [ 1692.111617][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.183812][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.241260][ T5930] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1692.276878][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.318773][ T5930] usb 8-1: config 0 descriptor?? [ 1692.790095][T30456] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6966'. [ 1692.829112][ T5930] ntrig 0003:1B96:0008.0005: item fetching failed at offset 3/7 [ 1692.845510][ T5930] ntrig 0003:1B96:0008.0005: parse failed [ 1692.855578][ T5930] ntrig 0003:1B96:0008.0005: probe with driver ntrig failed with error -22 [ 1693.174409][ T5822] usb 8-1: USB disconnect, device number 33 [ 1693.337784][T30479] pim6reg: entered allmulticast mode [ 1693.796529][ T30] audit: type=1400 audit(2000000323.150:2845): avc: denied { ioctl } for pid=30492 comm="syz.7.6981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1694.000790][ T30] audit: type=1326 audit(2000000323.320:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.087113][ T30] audit: type=1326 audit(2000000323.320:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.192546][ T30] audit: type=1326 audit(2000000323.320:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.252227][T30505] pim6reg: entered allmulticast mode [ 1694.297820][ T30] audit: type=1326 audit(2000000323.320:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.351759][T30510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.440714][ T30] audit: type=1326 audit(2000000323.320:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.479476][ T30] audit: type=1326 audit(2000000323.320:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.641381][ T30] audit: type=1326 audit(2000000323.320:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.680498][ T30] audit: type=1326 audit(2000000323.320:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1694.708609][T30513] tipc: Enabling of bearer rejected, failed to enable media [ 1694.811660][T30518] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6987'. [ 1694.891581][ T30] audit: type=1326 audit(2000000323.330:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.0.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5629d9c799 code=0x7ffc0000 [ 1695.434734][T30535] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6995'. [ 1695.508556][T30539] vlan2: entered promiscuous mode [ 1695.516139][T30539] vlan2: entered allmulticast mode [ 1695.530438][T30539] hsr_slave_1: entered allmulticast mode [ 1695.675222][T30539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6996'. [ 1696.902580][T30603] netlink: 'syz.3.7015': attribute type 34 has an invalid length. [ 1698.067294][T30651] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7029'. [ 1698.606307][T30680] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7037'. [ 1698.620514][T30680] bridge_slave_1: left allmulticast mode [ 1698.626223][T30680] bridge_slave_1: left promiscuous mode [ 1698.633066][T30680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.694777][T30680] bridge_slave_0: left allmulticast mode [ 1698.701157][T30680] bridge_slave_0: left promiscuous mode [ 1698.738431][T30680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.016700][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1701.016719][ T30] audit: type=1400 audit(2000000330.350:2894): avc: denied { create } for pid=30709 comm="syz.3.7045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1701.440077][T30734] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7055'. [ 1702.633671][ T30] audit: type=1400 audit(2000000331.990:2895): avc: denied { connect } for pid=30756 comm="syz.7.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1702.993332][ T30] audit: type=1400 audit(2000000332.050:2896): avc: denied { bind } for pid=30756 comm="syz.7.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1703.289932][ T30] audit: type=1400 audit(2000000332.050:2897): avc: denied { listen } for pid=30756 comm="syz.7.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1704.098236][ T30] audit: type=1400 audit(2000000332.090:2898): avc: denied { accept } for pid=30756 comm="syz.7.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1704.258873][T30771] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1704.278224][T30769] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1704.597949][T30781] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1705.409983][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7082'. [ 1706.113884][T30834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1706.903038][T30859] bridge0: port 2(syz_tun) entered blocking state [ 1706.964972][T30859] bridge0: port 2(syz_tun) entered disabled state [ 1706.980648][T30859] syz_tun: entered allmulticast mode [ 1707.009664][T30859] syz_tun: entered promiscuous mode [ 1707.038719][T30859] bridge0: port 2(syz_tun) entered blocking state [ 1707.045272][T30859] bridge0: port 2(syz_tun) entered forwarding state [ 1707.227746][T30864] bridge0: port 2(syz_tun) entered learning state [ 1707.570507][ T29] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1707.633254][T30884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7112'. [ 1707.740469][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 1707.776141][ T29] usb 8-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 1707.822191][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1707.851989][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1707.915197][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1707.939433][T30889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7113'. [ 1707.970546][T30860] bridge0: port 2(syz_tun) entered disabled state [ 1707.978414][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1708.095525][T30860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.406609][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1708.579134][ T29] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1708.646341][ T29] usb 8-1: Manufacturer: syz [ 1708.681082][ T29] usb 8-1: config 0 descriptor?? [ 1708.909046][T30860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.967158][T30860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.104324][ T29] rc_core: IR keymap rc-hauppauge not found [ 1709.132940][ T29] Registered IR keymap rc-empty [ 1709.137910][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.180678][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.213337][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1709.274340][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input32 [ 1709.342874][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.387783][T30860] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1709.395177][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.447282][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.480138][T30903] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1709.494687][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.534832][ T8792] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.548375][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.563188][ T8792] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.602663][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.615198][T30901] batman_adv: batadv0: Adding interface: dummy0 [ 1709.627662][T30901] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.671476][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.708231][T30901] batman_adv: batadv0: Interface activated: dummy0 [ 1709.717851][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1709.897495][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1710.269616][ T29] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1710.625012][T30902] batadv0: mtu less than device minimum [ 1710.685469][ T29] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1710.890535][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.902227][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.913558][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.924908][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.936231][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.947578][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.958915][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1710.970233][T30902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1711.038626][ T29] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1711.097923][ T29] usb 8-1: USB disconnect, device number 34 [ 1711.349447][ T8792] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.408156][ T8792] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.223660][T30931] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1716.090383][ C1] sched: DL replenish lagged too much [ 1725.330072][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1725.348827][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.167121][T13093] Bluetooth: hci4: command 0x0406 tx timeout [ 1786.245825][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.263923][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1850.405393][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1850.423385][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1911.245764][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1911.267332][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.520392][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.539424][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1997.200270][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1997.207237][ C1] rcu: (detected by 1, t=10502 jiffies, g=138385, q=1002068 ncpus=2) [ 1997.215392][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 7127 (4295136890-4295129763), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1997.228662][ C1] rcu: rcu_preempt kthread starved for 7128 jiffies! g138385 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1997.239852][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1997.249813][ C1] rcu: RCU grace-period kthread stack dump: [ 1997.255694][ C1] task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1997.269185][ C1] Call Trace: [ 1997.272457][ C1] [ 1997.275385][ C1] __schedule+0xfee/0x6120 [ 1997.279803][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1997.284754][ C1] ? __pfx___schedule+0x10/0x10 [ 1997.289599][ C1] ? find_held_lock+0x2b/0x80 [ 1997.294274][ C1] ? schedule+0x2bf/0x390 [ 1997.298606][ C1] schedule+0xdd/0x390 [ 1997.302670][ C1] schedule_timeout+0x127/0x280 [ 1997.307515][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1997.312882][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1997.318170][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1997.323973][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1997.329474][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1997.334246][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1997.339533][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1997.344476][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1997.349673][ C1] ? rcu_is_watching+0x12/0xc0 [ 1997.354432][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1997.360245][ C1] rcu_gp_kthread+0x179/0x230 [ 1997.364921][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1997.370117][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1997.375922][ C1] ? __kthread_parkme+0x18c/0x230 [ 1997.380948][ C1] ? kthread+0x13a/0x450 [ 1997.385192][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1997.390393][ C1] kthread+0x370/0x450 [ 1997.394454][ C1] ? __pfx_kthread+0x10/0x10 [ 1997.399038][ C1] ret_from_fork+0x754/0xd80 [ 1997.403624][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1997.408731][ C1] ? __switch_to+0x7b4/0x1120 [ 1997.413403][ C1] ? __pfx_kthread+0x10/0x10 [ 1997.417987][ C1] ret_from_fork_asm+0x1a/0x30 [ 1997.422757][ C1] [ 1997.425767][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1997.432083][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1997.442580][ C1] Tainted: [L]=SOFTLOCKUP [ 1997.446902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1997.456952][ C1] RIP: 0010:lock_acquire+0x10/0x380 [ 1997.462158][ C1] Code: e9 28 fc ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 89 f6 41 55 45 89 c5 <41> 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 4c 8b 3d a0 fc [ 1997.481768][ C1] RSP: 0018:ffffc90000a08138 EFLAGS: 00000246 [ 1997.487863][ C1] RAX: ffffffff81b7fe9d RBX: 0000000000000002 RCX: 0000000000000002 [ 1997.495836][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e75e0 [ 1997.503808][ C1] RBP: ffffc90000a08218 R08: 0000000000000000 R09: 0000000000000000 [ 1997.511777][ C1] R10: 0000000000000200 R11: 000000000000f349 R12: ffffffff81f34690 [ 1997.519746][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801e69a4c0 [ 1997.527717][ C1] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 1997.536648][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1997.543263][ C1] CR2: 00007f942781bff8 CR3: 00000000585a7000 CR4: 00000000003526f0 [ 1997.551233][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1997.559226][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1997.567199][ C1] Call Trace: [ 1997.570470][ C1] [ 1997.573308][ C1] unwind_next_frame+0xd1/0x1ea0 [ 1997.578292][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 1997.583436][ C1] ? kasan_save_stack+0x30/0x50 [ 1997.588308][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1997.594469][ C1] arch_stack_walk+0x94/0xf0 [ 1997.599095][ C1] ? kasan_save_stack+0x30/0x50 [ 1997.603953][ C1] stack_trace_save+0x8e/0xc0 [ 1997.608640][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1997.614017][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1997.618967][ C1] kasan_save_stack+0x30/0x50 [ 1997.623648][ C1] ? kasan_save_stack+0x30/0x50 [ 1997.628540][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1997.633741][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1997.639028][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1997.644936][ C1] dst_release+0x259/0x330 [ 1997.649355][ C1] skb_release_head_state+0x293/0x400 [ 1997.654729][ C1] consume_skb+0x8a/0x110 [ 1997.659085][ C1] nft_synproxy_do_eval+0xa7b/0xd50 [ 1997.664294][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1997.670031][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1997.675496][ C1] nft_do_chain+0x2e8/0x1930 [ 1997.680101][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1997.685127][ C1] ? ipt_do_table+0xd4f/0x1b00 [ 1997.689895][ C1] ? rcu_is_watching+0x12/0xc0 [ 1997.694658][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1997.699950][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1997.705236][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1997.710475][ C1] nft_do_chain_inet+0xee/0x340 [ 1997.715327][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1997.720789][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 1997.725818][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1997.731191][ C1] nf_hook_slow+0xbf/0x220 [ 1997.735611][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 1997.740718][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1997.746697][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1997.752323][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1997.757433][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1997.763413][ C1] ? ip_rcv_finish_core+0x80a/0x2220 [ 1997.768694][ C1] ip_local_deliver+0x163/0x1f0 [ 1997.773547][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 1997.778929][ C1] ip_rcv+0x33a/0x3c0 [ 1997.782911][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1997.787412][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 1997.793306][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1997.799725][ C1] ? lock_acquire+0x1cf/0x380 [ 1997.804406][ C1] ? process_backlog+0x32a/0x1580 [ 1997.809428][ C1] ? process_backlog+0x32a/0x1580 [ 1997.814444][ C1] __netif_receive_skb+0x1f/0x120 [ 1997.819466][ C1] process_backlog+0x37a/0x1580 [ 1997.824316][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 1997.829686][ C1] net_rx_action+0xa40/0xf20 [ 1997.834278][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1997.839387][ C1] ? lock_acquire+0x1cf/0x380 [ 1997.844068][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1997.849270][ C1] ? sched_clock+0x38/0x60 [ 1997.853684][ C1] ? sched_clock_cpu+0x6c/0x570 [ 1997.858546][ C1] ? rcu_is_watching+0x12/0xc0 [ 1997.863309][ C1] handle_softirqs+0x1eb/0x9e0 [ 1997.868073][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1997.873379][ C1] __irq_exit_rcu+0xef/0x150 [ 1997.877964][ C1] irq_exit_rcu+0x9/0x30 [ 1997.882201][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1997.887838][ C1] [ 1997.890788][ C1] [ 1997.893725][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1997.899709][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1997.905337][ C1] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 81 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1997.924947][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1997.931015][ C1] RAX: 0000000009a440a9 RBX: ffff88801e69a4c0 RCX: ffffffff8b900c75 [ 1997.938981][ C1] RDX: 0000000000000000 RSI: ffffffff8de76c00 RDI: ffffffff8c1b05a0 [ 1997.946946][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1997.954912][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3498 [ 1997.962905][ C1] R13: 0000000000000001 R14: ffffffff90d99010 R15: 0000000000000000 [ 1997.970879][ C1] ? ct_kernel_exit+0x125/0x180 [ 1997.975740][ C1] default_idle+0x9/0x10 [ 1997.979982][ C1] default_idle_call+0x6c/0xb0 [ 1997.984754][ C1] do_idle+0x43a/0x550 [ 1997.988825][ C1] ? __pfx_do_idle+0x10/0x10 [ 1997.993421][ C1] cpu_startup_entry+0x4f/0x60 [ 1997.998182][ C1] start_secondary+0x21d/0x2d0 [ 1998.003039][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1998.008330][ C1] common_startup_64+0x13e/0x148 [ 1998.013274][ C1]