last executing test programs: 16m23.835737105s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 16m22.203013646s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(0x0, 0xb) 16m20.165490144s ago: executing program 0 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3ff, 0x0, 0xff6f}}}}}}}, 0x0) 16m16.284956017s ago: executing program 0 (id=31): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x10) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, "3914562103c75f33885978ef17619c538f4437f409f8075517eda4fa59ab7e1157a52543018198c1badf70c61f9b86c67142427cb7f45825174c3e335dbafc", 0x2}, 0x60) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) gettid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 16m14.420612722s ago: executing program 32 (id=31): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x10) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, "3914562103c75f33885978ef17619c538f4437f409f8075517eda4fa59ab7e1157a52543018198c1badf70c61f9b86c67142427cb7f45825174c3e335dbafc", 0x2}, 0x60) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) gettid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 14m48.600095481s ago: executing program 1 (id=223): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r3, 0x0, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m48.02022557s ago: executing program 1 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) syz_open_dev$usbfs(0x0, 0x76, 0x160341) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 14m46.564194257s ago: executing program 1 (id=225): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m44.949947864s ago: executing program 1 (id=229): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408c4) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000340)={@host}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20740}, 0x50) 14m43.479781789s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x40000}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) r4 = mq_open(0x0, 0x8c2, 0x30, 0x0) ftruncate(r4, 0x20000000003) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8000, 0x0) 14m40.56538989s ago: executing program 1 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m24.878964689s ago: executing program 33 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 13m37.194184504s ago: executing program 4 (id=302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000004}}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = syz_open_dev$video(0x0, 0x4, 0x2a01) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 13m32.849941188s ago: executing program 4 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) getdents(r3, &(0x7f00000001c0)=""/49, 0x31) getdents(r3, 0xffffffffffffffff, 0x5a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x19c) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) pread64(r5, 0x0, 0x0, 0x2) 13m28.063056916s ago: executing program 4 (id=311): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') fdatasync(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) 13m26.692462996s ago: executing program 4 (id=312): r0 = fsopen(0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(0x0, 0x0, 0x244) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 13m25.999462202s ago: executing program 4 (id=315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) listen(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) fsmount(0xffffffffffffffff, 0x0, 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 13m23.609008262s ago: executing program 4 (id=317): r0 = syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r4 = pidfd_getfd(r0, r0, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) listen(0xffffffffffffffff, 0x7e5a) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x800) umount2(&(0x7f0000000040)='.\x00', 0x2) 13m8.501313752s ago: executing program 34 (id=317): r0 = syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r4 = pidfd_getfd(r0, r0, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) listen(0xffffffffffffffff, 0x7e5a) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x800) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m8.988171354s ago: executing program 3 (id=3524): setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}}, 0x20) 5m6.410825247s ago: executing program 3 (id=3532): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mq_open(&(0x7f0000000040)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[\x87\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9]\xd4\xfe\x9e\xb6u\x11O\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\x7f\x00\x00\x00\x00\x00\x00\x00{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x05\x90-\x15\x16K\xdc\xecC\x1f\x0e[\xfb\x1f\x00\x00\x00\x00\x00\x00\x19\x93\xfa\xa0\x96h\xff\xb4x\x92\x99\xee\xed\x15\x02\x87\xec\x1f>\x05\x9b%\x97/+\x1a\x0e\x8f\xdd{', 0x42, 0x13, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000001c0)) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x4}]}, 0x18}}, 0x200441c0) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200026bd7000fddbdf674704f286264c250b000000050005000600000008000300010000001c000180060005004e2100010800060010", @ANYRES32=r3, @ANYBLOB="0500050009000000"], 0x48}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) 5m5.040321736s ago: executing program 3 (id=3538): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) unshare(0x22020400) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ppoll(&(0x7f0000000180)=[{r1, 0x80}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, 0xffffffffffffffff, 0xb8013000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) 5m3.644915164s ago: executing program 3 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 5m1.854058409s ago: executing program 3 (id=3548): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100033060000000000000000fc000000000000000000000000000000ffffffff0000000000000000000000000000400000008001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000"], 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x100401, 0x1003, 0x4, {0xa, @pix_mp={0x5, 0xffffffff, 0x56595559, 0x3, 0xa, [{0x700}, {0xa, 0x20ae4}, {0x0, 0x4}, {0x4, 0x8}, {0x8fe, 0x8}, {0x5}, {0x4, 0x7a}, {0x1ff, 0x9}], 0x6, 0x8, 0x7, 0x2, 0x1}}, 0x9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x2, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x6a, 0x10, 0x260b268f, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x9, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000003c0)='GPL\x00', 0x6, 0x6b, &(0x7f0000000400)=""/107, 0x40f00, 0x4f, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000000780)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x5, 0x7f, 0xffa3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 4m58.936490845s ago: executing program 3 (id=3556): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m43.276139031s ago: executing program 35 (id=3556): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m27.679868921s ago: executing program 6 (id=3615): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20281, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m24.798839503s ago: executing program 6 (id=3623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x181000, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4m22.759154829s ago: executing program 6 (id=3627): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x6e1341eef700e64, 0xffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002e722a4987832591820ec7f00000100000000edffffff"], 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x40) unshare(0xc040480) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x8004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x6}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x162) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x87) fchdir(r7) lseek(r5, 0xffffffffffffbff8, 0x1) 4m20.960372804s ago: executing program 6 (id=3632): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x2, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0x2, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1006, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x8001, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x8, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x5, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0xffffffff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="0f050f060fc71abaf80c66b88eb5558166efbafc0ced0f070f01ca660f38812b3e7a000f08362e0f21ce", 0x2a}], 0x1, 0x11, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xa, 0x9, 0x2, 0x56, 0x9, 0x0, 0xed2}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m18.903706686s ago: executing program 6 (id=3642): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4m14.227482671s ago: executing program 6 (id=3653): symlink(&(0x7f0000000080)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x80001) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, 0x0) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 3m58.669332605s ago: executing program 36 (id=3653): symlink(&(0x7f0000000080)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x80001) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, 0x0) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 34.409563759s ago: executing program 9 (id=5477): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 33.608201238s ago: executing program 9 (id=5485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) 32.871952182s ago: executing program 9 (id=5490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="08006b00ff0000032c00238006001600b83a3534050013000100000005000f0005040000000000000000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x854}, 0x8000000) 32.551985721s ago: executing program 9 (id=5497): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18e101a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 32.296081596s ago: executing program 9 (id=5501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3806, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x6, 0xfe}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.242145209s ago: executing program 9 (id=5530): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x561a]}, 0x8) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 28.921453437s ago: executing program 37 (id=5530): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x561a]}, 0x8) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 10.843529202s ago: executing program 7 (id=5689): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/153, 0x99}], 0x1}, 0x0) 10.675528135s ago: executing program 7 (id=5691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x8010, 0xfffffffc, 0x4, 0xce024d, 0xffffffff}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10.301140865s ago: executing program 7 (id=5695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10) 10.148950145s ago: executing program 7 (id=5698): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)=""/38}, {&(0x7f0000000540)=""/102}, {&(0x7f0000000500)=""/39}, {&(0x7f0000000700)=""/4096}, {&(0x7f00000000c0)=""/20}, {&(0x7f0000001740)=""/254}, {&(0x7f0000001840)=""/159}, {&(0x7f0000001900)=""/22}], 0x0, &(0x7f00000019c0)=""/212}, 0x2}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.156968845s ago: executing program 5 (id=5737): r0 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000280)={0x28, 0x2, 0x0, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 3.867021238s ago: executing program 5 (id=5740): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r0, 0xffffe000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 3.586549848s ago: executing program 5 (id=5742): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x5baa, 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) 2.71404705s ago: executing program 8 (id=5747): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x440e0) 2.505677154s ago: executing program 8 (id=5749): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x12}, r1}, 0x14) 2.208102133s ago: executing program 8 (id=5751): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000380)={0x300a, r0}, 0x0) landlock_restrict_self(r1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.970596003s ago: executing program 8 (id=5753): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x2, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.661806881s ago: executing program 8 (id=5756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180)) 1.232582656s ago: executing program 2 (id=5759): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xdd) 1.226751224s ago: executing program 7 (id=5760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.045860446s ago: executing program 5 (id=5761): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}, 0x4}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 982.183009ms ago: executing program 2 (id=5762): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x2000000, 0xfffffffc], [0x1, 0x0, 0x10]}) 765.301943ms ago: executing program 5 (id=5763): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x62) 765.190515ms ago: executing program 2 (id=5764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090) 741.665426ms ago: executing program 7 (id=5765): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 484.362971ms ago: executing program 8 (id=5766): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x5, 0x2) 407.921563ms ago: executing program 2 (id=5767): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x0, 0x10001}) 298.729775ms ago: executing program 2 (id=5768): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 59.966725ms ago: executing program 5 (id=5769): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=5770): r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): 3363'. [ 741.111423][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3363'. [ 741.990009][T15145] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3372'. [ 742.460821][T15155] bridge0: entered promiscuous mode [ 742.461268][T15155] macvlan3: entered allmulticast mode [ 742.461288][T15155] bridge0: entered allmulticast mode [ 742.463248][T15155] bridge0: port 3(macvlan3) entered blocking state [ 742.463366][T15155] bridge0: port 3(macvlan3) entered disabled state [ 742.507949][T15155] bridge0: left allmulticast mode [ 742.508114][T15155] bridge0: left promiscuous mode [ 743.472254][T15164] vivid-007: kernel_thread() failed [ 743.944709][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 744.031929][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 744.054612][T15173] syz_tun: entered promiscuous mode [ 744.113614][T15173] macvtap1: entered promiscuous mode [ 744.113833][T15173] macvtap1: entered allmulticast mode [ 744.113844][T15173] syz_tun: entered allmulticast mode [ 744.237274][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 744.240517][T15177] syz_tun: left allmulticast mode [ 744.240885][T15177] syz_tun: left promiscuous mode [ 744.317333][ T5883] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 744.387670][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 744.393711][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.393770][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.393801][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.393825][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.393850][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.414038][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 744.414127][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 744.414184][ T9] usb 6-1: Manufacturer: syz [ 744.467399][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 744.720571][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.720630][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.720661][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.720684][ T5883] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.720709][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.722593][ T5883] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 744.722622][ T5883] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 744.722644][ T5883] usb 8-1: Manufacturer: syz [ 744.731329][ T9] usb 6-1: config 0 descriptor?? [ 745.894684][ T5883] usb 8-1: config 0 descriptor?? [ 746.309378][ T9] rc_core: IR keymap rc-hauppauge not found [ 746.309401][ T9] Registered IR keymap rc-empty [ 746.309565][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.309677][ T5883] rc_core: IR keymap rc-hauppauge not found [ 746.309693][ T5883] Registered IR keymap rc-empty [ 746.309834][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 746.327232][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.327401][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 746.350613][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 746.355626][ T5883] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 746.429611][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 746.482488][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.504120][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.519737][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.552157][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.587780][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.617757][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.619302][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input18 [ 746.637249][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.881427][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.898814][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 746.925048][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 747.926053][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.926128][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.978598][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 747.978626][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 748.801705][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.831045][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.857393][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.877939][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.915197][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.938360][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.941202][ T9] usb 6-1: USB disconnect, device number 15 [ 748.957330][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 748.987299][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 749.007429][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 749.028478][ T5883] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 749.051930][ T5883] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 749.051950][ T5883] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 750.413688][T15228] netlink: 'syz.7.3405': attribute type 2 has an invalid length. [ 750.558329][ T5883] usb 8-1: USB disconnect, device number 19 [ 751.957346][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 752.117237][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 752.119363][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.119391][ T9] usb 6-1: config 0 has no interface number 0 [ 752.119436][ T9] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 752.119461][ T9] usb 6-1: config 0 interface 1 has no altsetting 0 [ 752.122120][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 752.122151][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.122173][ T9] usb 6-1: Product: syz [ 752.122188][ T9] usb 6-1: Manufacturer: syz [ 752.122204][ T9] usb 6-1: SerialNumber: syz [ 752.252785][ T9] usb 6-1: config 0 descriptor?? [ 752.524141][ T9] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 752.703341][ T9] cx231xx 6-1:0.1: Failed to read PCB config [ 752.703417][ T9] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 752.733581][ T9] usb 6-1: USB disconnect, device number 16 [ 753.157224][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 753.319814][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 753.345712][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 753.345746][ T9] usb 6-1: config 0 has no interface number 0 [ 753.345793][ T9] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 753.345816][ T9] usb 6-1: config 0 interface 1 has no altsetting 0 [ 753.409773][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 753.409808][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.409829][ T9] usb 6-1: Product: syz [ 753.409843][ T9] usb 6-1: Manufacturer: syz [ 753.409857][ T9] usb 6-1: SerialNumber: syz [ 753.503793][ T9] usb 6-1: config 0 descriptor?? [ 753.972222][ T9] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 753.999240][ T9] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 754.155855][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 754.156332][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 754.175388][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 754.175902][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 754.176972][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 754.189390][ T9] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 754.546083][ T9] i2c i2c-5: Added multiplexed i2c bus 7 [ 754.588484][ T9] i2c i2c-5: Added multiplexed i2c bus 8 [ 754.987456][ T37] audit: type=1400 audit(1776551706.096:1008): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15273 comm="syz.3.3423" dest=20000 netif=wpan0 [ 755.917177][ T9] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 755.939381][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.941133][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.941573][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.942007][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.942478][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.942908][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.943330][ T9] cx231xx 6-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 755.944575][ T9] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 755.944601][ T9] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 756.404074][ T9] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 756.441332][ T9] usb 6-1: USB disconnect, device number 17 [ 760.891585][T15335] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 762.855369][T15362] Can't find ip_set type hash:net,p [ 763.073769][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.028063][T15371] netlink: 'syz.5.3456': attribute type 3 has an invalid length. [ 768.376654][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3475'. [ 768.595273][T15423] vlan3: entered promiscuous mode [ 777.425099][T15474] could not allocate digest TFM handle sha1_mb [ 777.686548][T15495] PKCS8: Unsupported PKCS#8 version [ 788.639977][T15598] kvm: kvm [15597]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 788.640071][T15598] kvm: kvm [15597]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 788.642337][T15598] kvm: kvm [15597]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9310 [ 788.644934][T15598] kvm: kvm [15597]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc869 [ 794.166140][T15649] libceph: resolve '0..' (ret=-3): failed [ 798.939716][T15649] gfs2: error -5 reading superblock [ 799.419501][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3564'. [ 803.978364][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4b12 [ 803.985883][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1024 [ 803.994733][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 803.994822][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 803.997181][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 803.997264][T15704] kvm: kvm [15703]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 808.782605][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.782681][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.917280][ T5924] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 811.072093][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 811.074848][ T5924] usb 8-1: config 8 has an invalid interface number: 206 but max is 0 [ 811.074878][ T5924] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 811.074899][ T5924] usb 8-1: config 8 has no interface number 0 [ 811.074946][ T5924] usb 8-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 811.074975][ T5924] usb 8-1: config 8 interface 206 has no altsetting 0 [ 811.124444][ T5924] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 811.124609][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.124685][ T5924] usb 8-1: Product: syz [ 811.124728][ T5924] usb 8-1: Manufacturer: syz [ 811.124771][ T5924] usb 8-1: SerialNumber: syz [ 812.213957][T14396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 812.326679][T14396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 812.333728][T14396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.353912][T14396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.366852][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3587'. [ 812.393796][T14396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 812.686933][ T5924] garmin_gps 8-1:8.206: Garmin GPS usb/tty converter detected [ 812.773228][ T5924] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 812.773293][ T5924] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 812.845158][ T5924] usb 8-1: USB disconnect, device number 20 [ 812.885760][ T5924] garmin_gps 8-1:8.206: device disconnected [ 814.820795][T14396] Bluetooth: hci5: command tx timeout [ 817.104572][T14396] Bluetooth: hci5: command tx timeout [ 819.608865][T14396] Bluetooth: hci5: command tx timeout [ 821.672325][T14396] Bluetooth: hci5: command tx timeout [ 822.278108][T15827] loop4: detected capacity change from 0 to 7 [ 823.497372][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.497415][ C1] buffer_io_error: 9 callbacks suppressed [ 823.497427][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.092457][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.092501][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.243175][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.243203][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.302332][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.302375][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.304339][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.304376][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.439046][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.439095][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.439319][T15827] ldm_validate_partition_table(): Disk read failed. [ 824.439433][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.439463][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.439731][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.439760][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.441776][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.441810][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.442098][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.442128][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 824.442314][T15827] Dev loop4: unable to read RDB block 0 [ 824.583189][T15827] loop4: unable to read partition table [ 824.583358][T15827] loop4: partition table beyond EOD, truncated [ 824.583384][T15827] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=à ) failed (rc=-5) [ 824.721496][T15842] libceph: resolve '0..' (ret=-3): failed [ 825.548828][T15842] gfs2: error -5 reading superblock [ 825.827856][T15847] kvm: kvm [15846]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 826.120069][T15752] chnl_net:caif_netlink_parms(): no params data found [ 826.198409][T15858] overlay: filesystem on ./bus not supported [ 827.001442][T15859] input: syz1 as /devices/virtual/input/input19 [ 829.671002][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.671127][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.671441][T15752] bridge_slave_0: entered allmulticast mode [ 829.681461][T15752] bridge_slave_0: entered promiscuous mode [ 829.728126][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.728292][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.728508][T15752] bridge_slave_1: entered allmulticast mode [ 829.761977][T15752] bridge_slave_1: entered promiscuous mode [ 831.257975][T15880] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 831.376636][T15880] bond2 (unregistering): Released all slaves [ 833.010248][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.025547][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.171830][T15752] team0: Port device team_slave_0 added [ 833.184714][T15752] team0: Port device team_slave_1 added [ 833.386473][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.386499][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.386531][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.479982][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.480002][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.480033][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.555949][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80000000 [ 833.579576][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3300 [ 833.606474][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100002b00 [ 833.680540][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1000 [ 833.680621][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 833.734192][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2300 [ 833.746651][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2300 [ 833.759098][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2300 [ 833.771551][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2300 [ 833.904962][T15921] kvm: kvm [15919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2300 [ 834.034933][T15752] hsr_slave_0: entered promiscuous mode [ 834.044192][T15752] hsr_slave_1: entered promiscuous mode [ 836.447194][ T5883] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 836.580357][T15953] random: crng reseeded on system resumption [ 836.660971][ T5883] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 836.702011][ T5883] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 836.719968][ T5883] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 836.953612][ T5883] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 836.971164][ T5883] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 836.982095][ T5883] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 836.987978][ T5883] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 837.030093][ T5883] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 837.055013][ T5883] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 837.202569][ T5883] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.202658][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.202683][ T5883] usb 6-1: Product: syz [ 837.202742][ T5883] usb 6-1: Manufacturer: syz [ 837.202759][ T5883] usb 6-1: SerialNumber: syz [ 837.564626][ T5883] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.962661][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 838.475288][T14396] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 838.490237][T15944] random: crng reseeded on system resumption [ 838.803368][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.843035][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.064882][T15964] 9pnet_fd: Insufficient options for proto=fd [ 839.420535][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 839.531044][T15752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 839.628353][ T10] ath9k_htc: Failed to initialize the device [ 839.910011][T15752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.911362][T15752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 841.197936][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 841.255594][T15752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.262621][T15752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 841.368487][T15752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.369800][T15752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 842.446357][T15752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.072228][ T5983] usb 6-1: USB disconnect, device number 18 [ 843.153079][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.048691][T14396] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 845.048738][T14396] Bluetooth: hci0: Dropping invalid advertising data [ 845.048756][T14396] Bluetooth: hci0: Malformed LE Event: 0x02 [ 845.368968][T16014] 9p: Bad value for 'rfdno' [ 845.475272][T16018] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 845.597684][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.808458][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.808690][ T4839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.924375][ T4839] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.924522][ T4839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.743063][T16040] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 848.036326][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.235051][T16053] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3683'. [ 849.301994][T16054] input: syz1 as /devices/virtual/input/input20 [ 852.054924][T15752] veth0_vlan: entered promiscuous mode [ 852.088660][T15752] veth1_vlan: entered promiscuous mode [ 852.135858][T15752] veth0_macvtap: entered promiscuous mode [ 852.245997][T15752] veth1_macvtap: entered promiscuous mode [ 853.213575][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.516805][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.690542][ T1500] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.691021][ T1500] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.691491][ T1500] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.694587][ T1500] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.691862][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.765283][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.790644][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.825330][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.846453][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 858.072295][T14396] Bluetooth: hci2: command tx timeout [ 858.890406][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.890431][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.152581][T14396] Bluetooth: hci2: command tx timeout [ 860.372967][ T1496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.372991][ T1496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.533667][T16158] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 862.227257][T14396] Bluetooth: hci2: command tx timeout [ 864.337704][T14396] Bluetooth: hci2: command tx timeout [ 864.380127][ T7938] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.431635][T16186] lo speed is unknown, defaulting to 1000 [ 864.431762][T16186] lo speed is unknown, defaulting to 1000 [ 864.435243][T16186] lo speed is unknown, defaulting to 1000 [ 864.439110][T16186] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 864.439142][T16186] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 864.439175][T16186] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 864.443286][T16186] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 864.456396][T16186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 864.511162][T16186] lo speed is unknown, defaulting to 1000 [ 864.513513][T16186] lo speed is unknown, defaulting to 1000 [ 864.515353][T16186] lo speed is unknown, defaulting to 1000 [ 864.520157][T16186] lo speed is unknown, defaulting to 1000 [ 864.521966][T16186] lo speed is unknown, defaulting to 1000 [ 864.523758][T16186] lo speed is unknown, defaulting to 1000 [ 864.525683][T16186] lo speed is unknown, defaulting to 1000 [ 866.953100][ T7938] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.177261][ T5815] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 867.341269][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 867.341314][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.344037][ T5815] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 867.344069][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.344090][ T5815] usb 8-1: Product: syz [ 867.344106][ T5815] usb 8-1: Manufacturer: syz [ 867.344121][ T5815] usb 8-1: SerialNumber: syz [ 867.426219][ T5815] usb 8-1: config 0 descriptor?? [ 867.432557][T16219] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 867.492734][ C1] port100 8-1:0.0: NFC: Urb failure (status -71) [ 867.603636][ T5815] port100 8-1:0.0: NFC: Could not get supported command types [ 868.147623][T16227] Dead loop on virtual device ip6_vti0 (net 283), fix it urgently! [ 868.190452][ T10] usb 8-1: USB disconnect, device number 21 [ 869.660665][ T7938] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.069426][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.069919][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.969204][T16252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3748'. [ 873.099690][T16111] chnl_net:caif_netlink_parms(): no params data found [ 878.128083][T15328] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 878.396903][T15328] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.407839][T15328] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 878.407863][T15328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.448086][T15328] usb 9-1: config 0 descriptor?? [ 878.498436][T15328] pwc: Askey VC010 type 2 USB webcam detected. [ 878.791492][ T7938] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.048011][T15328] pwc: recv_control_msg error -32 req 02 val 2b00 [ 879.050085][T15328] pwc: recv_control_msg error -32 req 02 val 2700 [ 879.053285][T15328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 879.055778][T15328] pwc: recv_control_msg error -32 req 04 val 1000 [ 879.084686][T15328] pwc: recv_control_msg error -32 req 04 val 1300 [ 879.095122][T15328] pwc: recv_control_msg error -32 req 04 val 1400 [ 879.104361][T15328] pwc: recv_control_msg error -32 req 02 val 2000 [ 879.106126][T15328] pwc: recv_control_msg error -32 req 02 val 2100 [ 879.120330][T15328] pwc: recv_control_msg error -32 req 04 val 1500 [ 879.121232][T15328] pwc: recv_control_msg error -32 req 02 val 2500 [ 879.122131][T15328] pwc: recv_control_msg error -32 req 02 val 2400 [ 879.166534][T15328] pwc: recv_control_msg error -32 req 02 val 2600 [ 879.184203][T15328] pwc: recv_control_msg error -32 req 02 val 2900 [ 879.186302][T15328] pwc: recv_control_msg error -71 req 02 val 2800 [ 879.249360][T15328] pwc: recv_control_msg error -71 req 04 val 1100 [ 879.266037][T15328] pwc: recv_control_msg error -71 req 04 val 1200 [ 879.804659][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3766'. [ 880.701781][T16318] bond0: Unable to set down delay as MII monitoring is disabled [ 880.961878][T15328] pwc: Registered as video103. [ 881.024725][T15328] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input21 [ 881.122516][T16111] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.122605][T16111] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.122825][T16111] bridge_slave_0: entered allmulticast mode [ 881.172226][T16111] bridge_slave_0: entered promiscuous mode [ 881.183725][T15328] usb 9-1: USB disconnect, device number 2 [ 881.392461][T16111] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.392550][T16111] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.392771][T16111] bridge_slave_1: entered allmulticast mode [ 881.395583][T16111] bridge_slave_1: entered promiscuous mode [ 883.671454][T16341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3774'. [ 884.398414][T16111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.496805][T16111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.007146][T16111] team0: Port device team_slave_0 added [ 887.042497][T16111] team0: Port device team_slave_1 added [ 888.547903][T16111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.547920][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.547942][T16111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.715759][T16111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.715777][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.715802][T16111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.851163][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851203][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851230][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851257][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851283][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851310][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851337][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851363][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851399][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 888.851425][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 889.051267][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.03 Device [syz1] on syz1 [ 889.406470][T16380] fido_id[16380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 889.783579][ T7938] bridge_slave_1: left allmulticast mode [ 889.783609][ T7938] bridge_slave_1: left promiscuous mode [ 889.783896][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.802736][T16428] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 893.211636][ T7938] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 893.910462][ T7938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.940163][ T7938] bond_slave_0: left promiscuous mode [ 893.980692][ T7938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.029964][ T7938] bond_slave_1: left promiscuous mode [ 894.032994][ T7938] bond0 (unregistering): Released all slaves [ 894.045260][ T7938] bond1 (unregistering): Released all slaves [ 894.292429][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 894.429056][ T37] audit: type=1326 audit(1776551845.556:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16468 comm="syz.7.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 894.429114][ T37] audit: type=1326 audit(1776551845.556:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16468 comm="syz.7.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 894.440630][ T36] usb 6-1: too many configurations: 28, using maximum allowed: 8 [ 894.450345][ T36] usb 6-1: config 0 has no interfaces? [ 894.499222][ T36] usb 6-1: config 0 has no interfaces? [ 894.500392][ T36] usb 6-1: config 0 has no interfaces? [ 894.501644][ T36] usb 6-1: config 0 has no interfaces? [ 894.503294][ T36] usb 6-1: config 0 has no interfaces? [ 894.504475][ T36] usb 6-1: config 0 has no interfaces? [ 894.505656][ T36] usb 6-1: config 0 has no interfaces? [ 894.506802][ T36] usb 6-1: config 0 has no interfaces? [ 894.506839][ T36] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 894.506881][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.591395][ T37] audit: type=1326 audit(1776551845.706:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16468 comm="syz.7.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 894.591455][ T37] audit: type=1326 audit(1776551845.706:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16468 comm="syz.7.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 894.591502][ T37] audit: type=1326 audit(1776551845.706:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16468 comm="syz.7.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 894.758864][T16111] hsr_slave_0: entered promiscuous mode [ 894.775382][T16111] hsr_slave_1: entered promiscuous mode [ 894.776414][T16111] debugfs: 'hsr0' already exists in 'hsr' [ 894.776441][T16111] Cannot create hsr debugfs directory [ 894.803858][ T36] usb 6-1: config 0 descriptor?? [ 895.041815][ T10] usb 6-1: USB disconnect, device number 19 [ 898.490569][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3861'. [ 899.367527][ T5467] 8021q: adding VLAN 0 to HW filter on device eth13 [ 901.637949][T16644] CIFS mount error: No usable UNC path provided in device string! [ 901.637949][T16644] [ 901.638242][T16644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 901.815696][T16111] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 902.233387][T16111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.793299][T16111] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 903.051054][T16111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.287299][ T7938] batadv0: left promiscuous mode [ 903.539826][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.539859][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.581933][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.581963][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.951142][ T7938] veth1_macvtap: left promiscuous mode [ 903.951254][ T7938] veth0_macvtap: left promiscuous mode [ 903.951522][ T7938] veth1_vlan: left promiscuous mode [ 903.951721][ T7938] veth0_vlan: left promiscuous mode [ 906.818633][ T7938] team0 (unregistering): Port device team_slave_1 removed [ 906.899835][ T7938] team0 (unregistering): Port device team_slave_0 removed [ 907.467167][T16111] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 907.565404][T16111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.567939][ T5467] 8021q: adding VLAN 0 to HW filter on device eth14 [ 907.628454][T16111] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 907.702391][T16111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.760613][T16751] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.855431][T16757] IPv6: NLM_F_CREATE should be specified when creating new route [ 909.007630][T16111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.219717][T16111] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.270993][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.271203][ T4839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.309486][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.309734][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.270885][ T7938] IPVS: stop unused estimator thread 0... [ 912.000989][ T5467] 8021q: adding VLAN 0 to HW filter on device eth15 [ 912.045710][T16111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.746211][ T37] audit: type=1326 audit(1776551865.866:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 914.747047][ T37] audit: type=1326 audit(1776551865.866:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 914.797901][ T37] audit: type=1326 audit(1776551865.916:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 914.803632][ T37] audit: type=1326 audit(1776551865.926:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 914.823775][ T37] audit: type=1326 audit(1776551865.916:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 914.936090][ T37] audit: type=1326 audit(1776551866.056:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02041d04e code=0x7ffc0000 [ 914.959480][ T37] audit: type=1326 audit(1776551866.086:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02041d04e code=0x7ffc0000 [ 914.960561][ T37] audit: type=1326 audit(1776551866.086:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02041d04e code=0x7ffc0000 [ 914.963604][ T37] audit: type=1326 audit(1776551866.086:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02041d04e code=0x7ffc0000 [ 914.963658][ T37] audit: type=1326 audit(1776551866.086:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16926 comm="syz.7.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02041d04e code=0x7ffc0000 [ 915.243841][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.302292][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.313130][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.392265][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.393079][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 916.377843][T16934] lo speed is unknown, defaulting to 1000 [ 916.409550][ T5467] 8021q: adding VLAN 0 to HW filter on device eth16 [ 916.627144][ T5890] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 916.789496][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 916.789533][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 916.789562][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 916.792609][ T5890] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 916.792642][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.792664][ T5890] usb 6-1: Product: syz [ 916.792678][ T5890] usb 6-1: Manufacturer: syz [ 916.792694][ T5890] usb 6-1: SerialNumber: syz [ 916.870450][ T5890] usb 6-1: config 0 descriptor?? [ 916.899133][ T5890] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 917.152201][ T10] usb 6-1: USB disconnect, device number 20 [ 917.587402][T14396] Bluetooth: hci1: command tx timeout [ 919.659464][T14396] Bluetooth: hci1: command tx timeout [ 921.860437][T14396] Bluetooth: hci1: command tx timeout [ 922.788363][T16934] chnl_net:caif_netlink_parms(): no params data found [ 923.070605][T17103] netlink: 'syz.5.4091': attribute type 10 has an invalid length. [ 923.460758][T17114] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 923.709960][T17121] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 923.898037][T14396] Bluetooth: hci1: command tx timeout [ 924.263424][T17103] team0: Device veth1_vlan failed to register rx_handler [ 924.931154][T17145] netlink: 'syz.5.4107': attribute type 4 has an invalid length. [ 924.931179][T17145] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4107'. [ 925.034601][T16934] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.034730][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.034993][T16934] bridge_slave_0: entered allmulticast mode [ 925.060399][T16934] bridge_slave_0: entered promiscuous mode [ 925.315946][T16934] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.316075][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.316360][T16934] bridge_slave_1: entered allmulticast mode [ 925.360461][T16934] bridge_slave_1: entered promiscuous mode [ 925.719048][T15328] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 925.925098][T15328] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 925.925133][T15328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.925155][T15328] usb 6-1: Product: syz [ 925.925171][T15328] usb 6-1: Manufacturer: syz [ 925.925187][T15328] usb 6-1: SerialNumber: syz [ 926.117792][T15328] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 926.174696][ T36] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.826188][ T5890] usb 6-1: USB disconnect, device number 21 [ 927.039420][T17183] netlink: 'syz.7.4125': attribute type 2 has an invalid length. [ 927.075372][T16934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.162992][T16934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.499368][ T36] usb 6-1: Service connection timeout for: 256 [ 927.499395][ T36] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 927.547775][ T36] ath9k_htc: Failed to initialize the device [ 927.555094][ T5890] usb 6-1: ath9k_htc: USB layer deinitialized [ 927.635706][T16934] team0: Port device team_slave_0 added [ 928.301040][T16934] team0: Port device team_slave_1 added [ 929.053546][T16934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.053566][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.053596][T16934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.085761][T16934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.117108][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.117146][T16934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.539712][ T7458] bridge_slave_1: left allmulticast mode [ 929.539744][ T7458] bridge_slave_1: left promiscuous mode [ 929.540040][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.642109][ T7458] bridge_slave_0: left allmulticast mode [ 929.642140][ T7458] bridge_slave_0: left promiscuous mode [ 929.642455][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.709383][T17248] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 931.517329][ T5883] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 931.665442][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665544][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.687152][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 931.689936][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 931.690971][ T5883] usb 6-1: config 3 has an invalid interface number: 11 but max is 0 [ 931.690991][ T5883] usb 6-1: config 3 has no interface number 0 [ 931.691023][ T5883] usb 6-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 931.691043][ T5883] usb 6-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 931.691060][ T5883] usb 6-1: config 3 interface 11 altsetting 225 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 931.691078][ T5883] usb 6-1: config 3 interface 11 altsetting 225 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 931.691097][ T5883] usb 6-1: config 3 interface 11 has no altsetting 0 [ 931.693264][ T5883] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 931.693287][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.693302][ T5883] usb 6-1: Product: syz [ 931.693312][ T5883] usb 6-1: Manufacturer: syz [ 931.693323][ T5883] usb 6-1: SerialNumber: syz [ 932.077652][ T5883] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.11/input/input23 [ 932.351477][ C0] appletouch 6-1:3.11: atp_complete: usb_submit_urb failed with result -1 [ 932.484769][ T5883] usb 6-1: USB disconnect, device number 22 [ 932.718181][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.740614][ T5883] appletouch 6-1:3.11: input: appletouch disconnected [ 932.902751][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.903012][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.903173][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.903317][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.903458][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.903594][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 932.931870][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 933.041777][T17287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4174'. [ 933.127244][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 933.130463][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 933.130573][T17284] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 933.393181][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.617187][ T7458] bond0 (unregistering): Released all slaves [ 934.490238][T16934] hsr_slave_0: entered promiscuous mode [ 934.491497][T16934] hsr_slave_1: entered promiscuous mode [ 934.493427][T16934] debugfs: 'hsr0' already exists in 'hsr' [ 934.493453][T16934] Cannot create hsr debugfs directory [ 934.600845][T17309] random: crng reseeded on system resumption [ 935.279037][T17319] netlink: 'syz.5.4189': attribute type 21 has an invalid length. [ 935.447189][ T7458] hsr_slave_0: left promiscuous mode [ 935.513411][ T7458] hsr_slave_1: left promiscuous mode [ 935.514578][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.607968][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.183547][T17387] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 939.355191][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 939.418809][ T7458] team0 (unregistering): Port device team_slave_1 removed [ 939.459468][ T7458] team0 (unregistering): Port device team_slave_0 removed [ 939.885541][T17319] netlink: 'syz.5.4189': attribute type 6 has an invalid length. [ 939.885569][T17319] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4189'. [ 940.112232][ T5467] 8021q: adding VLAN 0 to HW filter on device eth17 [ 941.316722][T17438] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4233'. [ 943.079364][ T5883] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 943.230388][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 943.239504][ T5883] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 943.258593][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 943.258626][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.258763][ T5883] usb 6-1: Product: syz [ 943.258780][ T5883] usb 6-1: Manufacturer: syz [ 943.258794][ T5883] usb 6-1: SerialNumber: syz [ 943.452749][T17498] netlink: 'syz.8.4256': attribute type 8 has an invalid length. [ 943.753538][ T5883] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 943.764667][ T5883] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 943.764755][ T5883] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 943.793193][ T5883] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 944.133571][ T5883] usb 6-1: USB disconnect, device number 23 [ 944.138093][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4260'. [ 944.138169][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4260'. [ 944.138232][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4260'. [ 944.138263][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4260'. [ 945.087080][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 945.277142][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 945.279630][ T9] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 945.279661][ T9] usb 8-1: config 0 has no interface number 0 [ 945.279714][ T9] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.279744][ T9] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.279770][ T9] usb 8-1: config 0 interface 85 has no altsetting 0 [ 945.282783][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 945.282823][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.282847][ T9] usb 8-1: Product: syz [ 945.282862][ T9] usb 8-1: Manufacturer: syz [ 945.282878][ T9] usb 8-1: SerialNumber: syz [ 945.429684][ T8587] udevd[8587]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.470149][ T9] usb 8-1: config 0 descriptor?? [ 945.953719][ T9] appletouch 8-1:0.85: Failed to request geyser raw mode [ 945.953965][ T9] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 946.173788][ T9] usb 8-1: USB disconnect, device number 22 [ 947.248725][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4293'. [ 947.276291][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 947.276312][ T37] audit: type=1326 audit(1776551898.396:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17593 comm="syz.8.4296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x0 [ 948.774055][T17638] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4312'. [ 948.902367][T17641] netlink: 'syz.8.4315': attribute type 7 has an invalid length. [ 950.034378][T17673] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 952.890287][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4353'. [ 953.763634][T17752] netlink: 'syz.5.4358': attribute type 2 has an invalid length. [ 953.991957][T17752] hmac(sha2!: entered promiscuous mode [ 953.992240][T16934] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 954.080663][T16934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.082259][T16934] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 954.165217][T16934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.199999][T16934] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 954.490642][T16934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.490982][T17772] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4365'. [ 954.491040][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4365'. [ 954.537658][T17772] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4365'. [ 954.537693][T17772] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4365'. [ 954.537728][T17772] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4365'. [ 954.623079][T16934] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 954.742521][T16934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 955.435355][T17805] netlink: 'syz.7.4376': attribute type 3 has an invalid length. [ 955.596099][T16934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.724168][T16934] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.808197][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.808331][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.835983][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4383'. [ 955.882509][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.882644][ T7938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.046129][T17823] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 956.317172][ T5815] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 956.520635][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 956.526429][ T5815] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 956.526467][ T5815] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 956.526497][ T5815] usb 6-1: config 1 interface 0 has no altsetting 0 [ 956.545311][ T5815] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 956.545405][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.545465][ T5815] usb 6-1: Product: syz [ 956.545508][ T5815] usb 6-1: Manufacturer: syz [ 956.545555][ T5815] usb 6-1: SerialNumber: syz [ 956.896604][ T5815] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input26 [ 957.164706][ T5157] bcm5974 6-1:1.0: could not read from device [ 957.263137][ T5157] bcm5974 6-1:1.0: could not read from device [ 957.330116][ T5815] usb 6-1: USB disconnect, device number 24 [ 957.511828][T16934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.291237][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 958.507121][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 958.509459][ T10] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 958.509487][ T10] usb 8-1: config 0 has no interface number 0 [ 958.509533][ T10] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 958.509561][ T10] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 958.514636][ T10] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 958.514669][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.514691][ T10] usb 8-1: Product: syz [ 958.514707][ T10] usb 8-1: Manufacturer: syz [ 958.514722][ T10] usb 8-1: SerialNumber: syz [ 958.618045][ T10] usb 8-1: config 0 descriptor?? [ 958.618985][T17874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 958.619112][T17874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 958.849319][T17874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 958.850098][T17874] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 959.065318][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 959.224111][T16934] veth0_vlan: entered promiscuous mode [ 959.264657][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 959.264695][ T10] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 959.264992][ T10] asix 8-1:0.34: probe with driver asix failed with error -71 [ 959.321266][ T10] usb 8-1: USB disconnect, device number 23 [ 959.357088][T16934] veth1_vlan: entered promiscuous mode [ 959.401383][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4418'. [ 959.634673][T17909] : entered promiscuous mode [ 960.055318][T16934] veth0_macvtap: entered promiscuous mode [ 960.097891][T16934] veth1_macvtap: entered promiscuous mode [ 960.270900][T16934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.337701][T16934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.380549][ T3488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.382240][ T3488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.382295][ T3488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.382334][ T3488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.877806][ T5924] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 962.027089][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 962.030182][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 962.030217][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 962.034505][ T5924] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 962.034535][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.034557][ T5924] usb 9-1: Product: syz [ 962.034572][ T5924] usb 9-1: Manufacturer: syz [ 962.034587][ T5924] usb 9-1: SerialNumber: syz [ 962.113351][ T5924] usb 9-1: config 0 descriptor?? [ 962.164872][ T5924] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 962.164910][ T5924] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 962.213545][T10406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.213569][T10406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.766660][ T5924] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 962.767762][ T5924] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 962.892612][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4449'. [ 962.971042][ T5924] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 962.971067][ T5924] em28xx 9-1:0.0: No AC97 audio processor [ 963.008303][ T5924] usb 9-1: USB disconnect, device number 3 [ 963.011058][ T5924] em28xx 9-1:0.0: Disconnecting em28xx [ 963.072375][ T5924] em28xx 9-1:0.0: Freeing device [ 963.917178][ T5883] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 964.109803][ T5883] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 964.109836][ T5883] usb 9-1: config 0 has no interface number 0 [ 964.112848][ T5883] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 964.112878][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.112900][ T5883] usb 9-1: Product: syz [ 964.112915][ T5883] usb 9-1: Manufacturer: syz [ 964.112931][ T5883] usb 9-1: SerialNumber: syz [ 964.115600][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.115637][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.155067][ T5883] usb 9-1: config 0 descriptor?? [ 964.383547][T14396] Bluetooth: hci3: connection err: -111 [ 964.439019][ T5883] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 964.504480][ T5883] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 964.504550][ T5883] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 964.505148][ T5883] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 964.748021][ T5883] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 964.824587][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.824612][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.004341][ T5924] usb 9-1: USB disconnect, device number 4 [ 965.058928][ T5924] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 965.092444][ T5924] keyspan 9-1:0.133: device disconnected [ 965.148285][T18010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 965.148422][T18010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 965.389760][T18029] binder: 18028:18029 ioctl c018620c 200000000180 returned -22 [ 965.713107][T18010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 965.973096][T18010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 965.973410][T18010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 965.973547][T18010] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 966.092038][T18043] net_ratelimit: 766 callbacks suppressed [ 966.092062][T18043] netlink: zone id is out of range [ 966.092073][T18043] netlink: zone id is out of range [ 966.092155][T18043] netlink: zone id is out of range [ 966.092285][T18043] netlink: zone id is out of range [ 966.092349][T18043] netlink: zone id is out of range [ 966.143010][T18043] netlink: zone id is out of range [ 966.143168][T18043] netlink: zone id is out of range [ 966.143215][T18043] netlink: zone id is out of range [ 966.143455][T18043] netlink: zone id is out of range [ 966.143557][T18043] netlink: zone id is out of range [ 966.363990][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.364032][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.657497][T18010] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 966.657619][T18010] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.184902][T14396] Bluetooth: hci4: command 0x0406 tx timeout [ 967.339690][T18010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.347740][T18010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.772339][T18010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.978384][T14396] Bluetooth: hci3: command 0x0c1a tx timeout [ 968.309891][T18068] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 968.621524][T14396] Bluetooth: hci5: command 0x0406 tx timeout [ 969.315977][T14396] Bluetooth: hci4: command 0x0406 tx timeout [ 969.439442][T14396] Bluetooth: hci1: command 0x0c1a tx timeout [ 969.733873][ T37] audit: type=1326 audit(1776551920.856:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.733924][ T37] audit: type=1326 audit(1776551920.856:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.751691][ T37] audit: type=1326 audit(1776551920.856:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.751868][ T37] audit: type=1326 audit(1776551920.876:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.752888][ T37] audit: type=1326 audit(1776551920.876:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.759593][ T37] audit: type=1326 audit(1776551920.886:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.761974][ T37] audit: type=1326 audit(1776551920.886:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.762647][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.848537][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.849247][ T37] audit: type=1326 audit(1776551920.976:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.862575][ T37] audit: type=1326 audit(1776551920.986:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 969.862732][ T37] audit: type=1326 audit(1776551920.986:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.7.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02045c819 code=0x7ffc0000 [ 970.057865][T14396] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.175260][T18082] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 970.701386][T14396] Bluetooth: hci5: command 0x0406 tx timeout [ 971.177250][T15328] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 971.344965][T14396] Bluetooth: hci4: command 0x0406 tx timeout [ 971.396764][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.396796][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.433983][T15328] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.434025][T15328] usb 10-1: config 0 interface 0 has no altsetting 0 [ 971.434063][T15328] usb 10-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 971.434090][T15328] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.507343][T14396] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.589371][T15328] usb 10-1: config 0 descriptor?? [ 972.226541][T15328] hid_parser_main: 73 callbacks suppressed [ 972.226570][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226611][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226638][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226664][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226691][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226718][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226743][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226768][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226793][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.226818][T15328] wacom 0003:056A:0094.0010: unknown main item tag 0x0 [ 972.422894][T15328] wacom 0003:056A:0094.0010: Using device in hidraw-only mode [ 972.456070][T15328] wacom 0003:056A:0094.0010: hidraw0: USB HID v0.09 Device [HID 056a:0094] on usb-dummy_hcd.9-1/input0 [ 972.641355][T15328] usb 10-1: USB disconnect, device number 2 [ 973.171971][T18133] fido_id[18133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 973.577299][T14396] Bluetooth: hci1: command 0x0c1a tx timeout [ 976.829718][ T66] bridge_slave_1: left allmulticast mode [ 976.829752][ T66] bridge_slave_1: left promiscuous mode [ 976.830032][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.958606][ T66] bridge_slave_0: left allmulticast mode [ 976.958639][ T66] bridge_slave_0: left promiscuous mode [ 976.958900][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.973105][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.049575][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.093925][ T66] bond0 (unregistering): Released all slaves [ 980.169192][ T66] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 980.219320][ T66] veth0: left promiscuous mode [ 980.262518][ T66] bond1 (unregistering): Released all slaves [ 980.340579][T18266] bridge_slave_0: left allmulticast mode [ 980.340620][T18266] bridge_slave_0: left promiscuous mode [ 980.340879][T18266] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.043307][ T5467] 8021q: adding VLAN 0 to HW filter on device eth17 [ 981.300613][ T66] m>e5n: left promiscuous mode [ 981.635077][T18379] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4628'. [ 982.348269][ T66] tipc: Disabling bearer [ 982.434409][ T66] tipc: Disabling bearer [ 982.436668][ T66] tipc: Left network mode [ 982.827831][T18408] tipc: Enabling of bearer rejected, failed to enable media [ 983.818544][T16117] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 983.989631][T16117] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 983.989667][T16117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.026381][T16117] usb 9-1: config 0 descriptor?? [ 984.069107][T16117] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 984.479668][T16117] gp8psk: usb in 138 operation failed. [ 984.479694][T16117] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 984.479733][T16117] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 984.539299][T16117] usb 9-1: USB disconnect, device number 5 [ 985.024952][T18460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.428761][ T5467] 8021q: adding VLAN 0 to HW filter on device eth18 [ 985.667095][ T5883] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 985.820879][ T5883] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.820923][ T5883] usb 9-1: config 0 interface 0 has no altsetting 0 [ 985.841143][ T5883] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 985.841178][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.841200][ T5883] usb 9-1: Product: syz [ 985.841215][ T5883] usb 9-1: Manufacturer: syz [ 985.841231][ T5883] usb 9-1: SerialNumber: syz [ 985.854949][ T5883] usb 9-1: config 0 descriptor?? [ 985.957153][ T5883] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 985.983798][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 986.005839][ T5883] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 986.005917][ T5883] usb 9-1: media controller created [ 986.064890][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.065490][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.100184][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.253631][ T5883] DVB: Unable to find symbol tda10046_attach() [ 986.253651][ T5883] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 986.253669][ T5883] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 986.254148][ T5883] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 986.343166][ T5883] usb 9-1: USB disconnect, device number 6 [ 986.527276][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 986.527296][ T37] audit: type=1326 audit(1776551937.646:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.527346][ T37] audit: type=1326 audit(1776551937.656:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.696543][ T37] audit: type=1326 audit(1776551937.776:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.696609][ T37] audit: type=1326 audit(1776551937.776:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.696658][ T37] audit: type=1326 audit(1776551937.776:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.696707][ T37] audit: type=1326 audit(1776551937.816:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.696756][ T37] audit: type=1326 audit(1776551937.816:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18497 comm="syz.9.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97909cc819 code=0x7ffc0000 [ 986.911356][T18508] macsec1: entered allmulticast mode [ 987.276662][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4682'. [ 988.055568][T18549] bridge_slave_1: left allmulticast mode [ 988.055602][T18549] bridge_slave_1: left promiscuous mode [ 988.055881][T18549] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.158845][T18549] bridge_slave_0: left allmulticast mode [ 988.158879][T18549] bridge_slave_0: left promiscuous mode [ 988.200848][T18549] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.492376][ T5467] 8021q: adding VLAN 0 to HW filter on device eth19 [ 989.844355][ T66] hsr_slave_0: left promiscuous mode [ 989.882842][ T66] hsr_slave_1: left promiscuous mode [ 989.996221][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.996254][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.020295][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.020327][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.366783][ T66] veth1_macvtap: left promiscuous mode [ 990.371148][ T66] veth0_macvtap: left promiscuous mode [ 990.371657][ T66] veth1_vlan: left promiscuous mode [ 990.373085][ T66] veth0_vlan: left promiscuous mode [ 990.900177][T18636] net_ratelimit: 44 callbacks suppressed [ 990.900200][T18636] openvswitch: netlink: Message has 584 unknown bytes. [ 990.900232][T18636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.279776][ T66] team0 (unregistering): Port device team_slave_1 removed [ 992.361088][ T66] team0 (unregistering): Port device team_slave_0 removed [ 992.955386][T18596] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4714'. [ 993.127307][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.127379][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.447913][T18702] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 994.908813][ T66] IPVS: stop unused estimator thread 0... [ 995.257127][ T5956] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 995.409653][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 995.409691][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 995.409818][ T5956] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 995.409841][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.461690][ T5956] usb 9-1: config 0 descriptor?? [ 996.462934][T18771] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 996.811328][ T5956] hid_parser_main: 27 callbacks suppressed [ 996.811359][ T5956] zydacron 0003:13EC:0006.0011: unknown main item tag 0x7 [ 996.811392][ T5956] zydacron 0003:13EC:0006.0011: unknown main item tag 0x1 [ 996.811425][ T5956] zydacron 0003:13EC:0006.0011: unknown main item tag 0x2 [ 996.811453][ T5956] zydacron 0003:13EC:0006.0011: unknown main item tag 0x4 [ 996.811481][ T5956] zydacron 0003:13EC:0006.0011: item fetching failed at offset 32/41 [ 996.817068][ T5956] zydacron 0003:13EC:0006.0011: parse failed [ 996.817215][ T5956] zydacron 0003:13EC:0006.0011: probe with driver zydacron failed with error -22 [ 997.004220][ T9] usb 9-1: USB disconnect, device number 7 [ 997.222101][ T5467] 8021q: adding VLAN 0 to HW filter on device eth20 [ 998.253274][T18816] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 999.626520][T18873] kernel read not supported for file /ns¿á ÈEàr‘7kjœLÎZ™øQ%#-ÓÒèÜáýÞïò§Ò«—Âe'ü… (pid: 18873 comm: syz.9.4831) [ 999.723500][T18876] 9p: Bad value for 'rfdno' [ 999.755420][T18879] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 999.820944][ T37] audit: type=1800 audit(1776551950.746:1113): pid=18873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4831" name=6E73BF12E10BC845E0037291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="mqueue" ino=61570 res=0 errno=0 [ 999.970705][ T37] audit: type=1326 audit(1776551951.096:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 999.970949][ T37] audit: type=1326 audit(1776551951.096:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.047018][ T37] audit: type=1326 audit(1776551951.166:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.047079][ T37] audit: type=1326 audit(1776551951.166:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.047128][ T37] audit: type=1326 audit(1776551951.166:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.047176][ T37] audit: type=1326 audit(1776551951.166:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.069622][ T37] audit: type=1326 audit(1776551951.176:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.069805][ T37] audit: type=1326 audit(1776551951.176:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.069949][ T37] audit: type=1326 audit(1776551951.196:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18884 comm="syz.8.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61359bc819 code=0x7ffc0000 [ 1000.697435][ T5956] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1000.849659][ T5956] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1000.849694][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.856720][ T5956] usb 10-1: config 0 descriptor?? [ 1000.893414][ T5956] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1001.107720][ T5956] gp8psk: usb in 128 operation failed. [ 1001.108849][ T5956] gp8psk: usb in 137 operation failed. [ 1001.108867][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.111689][ T5956] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1001.111862][ T5956] usb 10-1: media controller created [ 1001.212961][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.254555][ T5956] gp8psk_fe: Frontend attached [ 1001.304206][ T5956] usb 10-1: DVB: registering adapter 5 frontend 0 (Genpix DVB-S)... [ 1001.332874][ T5956] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1001.748121][ T5956] gp8psk: usb in 137 operation failed. [ 1001.748144][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1001.748159][ T5956] gp8psk: found Genpix USB device pID = 203 (hex) [ 1001.834398][ T5956] usb 10-1: USB disconnect, device number 3 [ 1001.978012][ T5924] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1002.201326][ T5924] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1002.201355][ T5924] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1002.201375][ T5924] usb 9-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1002.201394][ T5924] usb 9-1: config 220 has no interface number 2 [ 1002.201452][ T5924] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1002.201480][ T5924] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1002.201498][ T5924] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1002.201515][ T5924] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1002.205117][ T5924] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1002.205152][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.205175][ T5924] usb 9-1: Product: syz [ 1002.205191][ T5924] usb 9-1: Manufacturer: syz [ 1002.205207][ T5924] usb 9-1: SerialNumber: syz [ 1002.365705][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1002.628583][ T5924] uvcvideo 9-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1002.628627][ T5924] usb 9-1: selecting invalid altsetting 0 [ 1002.693984][ T5924] uvcvideo 9-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1002.694028][ T5924] usb 9-1: selecting invalid altsetting 0 [ 1002.694588][ T5924] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1002.694621][ T5924] uvcvideo 9-1:220.0: No valid video chain found. [ 1002.753329][ T5924] usb 9-1: selecting invalid altsetting 0 [ 1002.753372][ T5924] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1002.787240][ T5924] usb 9-1: USB disconnect, device number 8 [ 1003.104741][T18937] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 1005.636153][T19037] program syz.7.4903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1006.701256][T19074] tipc: Started in network mode [ 1006.701291][T19074] tipc: Node identity ac1414aa, cluster identity 4711 [ 1006.701654][T19074] tipc: New replicast peer: 100.1.1.1 [ 1006.701901][T19074] tipc: Enabled bearer , priority 10 [ 1006.930483][T19073] lo speed is unknown, defaulting to 1000 [ 1008.210411][ T5956] tipc: Node number set to 2886997162 [ 1008.813527][ T10] lo speed is unknown, defaulting to 1000 [ 1008.896689][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.968490][ T5983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1009.100675][ T5983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1009.875150][ T1405] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.876525][ T1405] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.876574][ T1405] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.876614][ T1405] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.007076][ T5983] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1012.136011][T19204] lo speed is unknown, defaulting to 1000 [ 1012.157182][ T5983] usb 10-1: Using ep0 maxpacket: 16 [ 1012.178211][ T5983] usb 10-1: config 0 has no interfaces? [ 1012.182726][ T5983] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1012.182793][ T5983] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1012.182855][ T5983] usb 10-1: Manufacturer: syz [ 1012.332328][ T5983] usb 10-1: config 0 descriptor?? [ 1013.398424][ T9] usb 10-1: USB disconnect, device number 4 [ 1013.856539][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1013.856560][ T37] audit: type=1326 audit(1776551964.976:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1013.886489][ T37] audit: type=1326 audit(1776551964.976:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1013.976299][ T37] audit: type=1326 audit(1776551965.086:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1013.976375][ T37] audit: type=1326 audit(1776551965.096:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1013.976680][ T37] audit: type=1326 audit(1776551965.096:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1013.987048][ T37] audit: type=1326 audit(1776551965.096:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1014.041920][ T37] audit: type=1326 audit(1776551965.116:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1014.042085][ T37] audit: type=1326 audit(1776551965.106:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1014.042207][ T37] audit: type=1326 audit(1776551965.166:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1014.060494][ T37] audit: type=1326 audit(1776551965.186:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19260 comm="syz.5.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8dd206c819 code=0x7ffc0000 [ 1015.929532][T19326] netlink: 5204 bytes leftover after parsing attributes in process `syz.5.5011'. [ 1015.929605][T19326] nbd: socks must be embedded in a SOCK_ITEM attr [ 1016.413087][T19342] delete_channel: no stack [ 1016.999042][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1017.151735][T19365] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5027'. [ 1017.169618][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1017.172330][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.172367][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.172410][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1017.172438][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.236464][ T9] usb 10-1: config 0 descriptor?? [ 1017.241838][ T9] hub 10-1:0.0: USB hub found [ 1017.464319][ T9] hub 10-1:0.0: 1 port detected [ 1017.668729][ T9] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 1017.668751][ T9] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 1017.757236][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1017.757366][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1017.814780][ T9] usb 10-1: USB disconnect, device number 5 [ 1019.268857][T19422] batadv0: entered promiscuous mode [ 1019.294743][T19422] bond0: entered promiscuous mode [ 1019.294769][T19422] bond_slave_0: entered promiscuous mode [ 1019.295014][T19422] bond_slave_1: entered promiscuous mode [ 1019.328427][T19422] debugfs: 'hsr1' already exists in 'hsr' [ 1019.328459][T19422] Cannot create hsr debugfs directory [ 1019.465677][T19422] hsr1: entered allmulticast mode [ 1019.465707][T19422] batadv0: entered allmulticast mode [ 1019.465726][T19422] bond0: entered allmulticast mode [ 1019.465757][T19422] bond_slave_0: entered allmulticast mode [ 1019.465777][T19422] bond_slave_1: entered allmulticast mode [ 1019.476095][T19422] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1019.978027][ T5812] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1020.139246][ T5812] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1020.139287][ T5812] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1020.139327][ T5812] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.139353][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.214619][T19434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.234821][ T5812] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.382633][T19452] netlink: 'syz.9.5066': attribute type 1 has an invalid length. [ 1020.382657][T19452] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5066'. [ 1021.768591][ T5890] usb 6-1: USB disconnect, device number 25 [ 1022.546980][ T5122] Bluetooth: hci1: command 0x0c1a tx timeout [ 1023.134604][T19512] netlink: 642 bytes leftover after parsing attributes in process `syz.8.5094'. [ 1023.817458][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.397135][T16117] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1024.561502][T16117] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1024.577656][T16117] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1024.577690][T16117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.577713][T16117] usb 6-1: Product: syz [ 1024.577729][T16117] usb 6-1: Manufacturer: syz [ 1024.577745][T16117] usb 6-1: SerialNumber: syz [ 1024.682016][T19528] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1024.682163][T19528] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1024.953147][ T9] usb 6-1: USB disconnect, device number 26 [ 1025.374211][T19576] netlink: 5204 bytes leftover after parsing attributes in process `syz.7.5121'. [ 1025.374270][T19576] nbd: socks must be embedded in a SOCK_ITEM attr [ 1026.638998][ T5812] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1026.817121][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 1026.836129][ T5812] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1026.836170][ T5812] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.836200][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1026.836236][ T5812] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1026.836261][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.897854][ T5812] usb 6-1: config 0 descriptor?? [ 1026.899879][T19606] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1027.334958][ T5812] hid (null): nested delimiters [ 1027.538648][ T5812] usb 6-1: string descriptor 0 read error: -71 [ 1027.539245][ T5812] uclogic 0003:5543:0081.0012: failed retrieving string descriptor #200: -71 [ 1027.539310][ T5812] uclogic 0003:5543:0081.0012: failed retrieving pen parameters: -71 [ 1027.539334][ T5812] uclogic 0003:5543:0081.0012: failed probing pen v2 parameters: -71 [ 1027.539393][ T5812] uclogic 0003:5543:0081.0012: failed probing parameters: -71 [ 1027.539506][ T5812] uclogic 0003:5543:0081.0012: probe with driver uclogic failed with error -71 [ 1027.603188][ T5812] usb 6-1: USB disconnect, device number 27 [ 1029.580980][T19681] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5171'. [ 1029.950766][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5178'. [ 1029.950794][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5178'. [ 1029.977704][T19695] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5177'. [ 1030.665342][T19717] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1031.138845][T19732] ubi16: attaching mtd0 [ 1031.418071][ T5812] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1032.265116][T19742] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1032.569777][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.569809][ T5812] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1032.569848][ T5812] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1032.569873][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.650089][ T5812] usb 8-1: config 0 descriptor?? [ 1032.786527][T19751] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1032.786559][T19751] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1032.902063][T16117] usb 8-1: USB disconnect, device number 24 [ 1034.773436][T19802] /dev/nullb0: Can't open blockdev [ 1035.613122][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5225'. [ 1036.533793][T19844] program syz.7.5244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.981706][T19860] program syz.5.5251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.192265][T19867] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 1037.687776][T19886] netlink: 11 bytes leftover after parsing attributes in process `syz.5.5263'. [ 1038.179112][T19907] netlink: 140 bytes leftover after parsing attributes in process `syz.8.5270'. [ 1038.220684][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1038.220704][ T37] audit: type=1400 audit(1776551989.336:1153): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=19903 comm="syz.5.5272" dest=20000 netif=wpan0 [ 1039.049402][T19937] input: syz1 as /devices/virtual/input/input27 [ 1039.726253][T19954] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5293'. [ 1040.006017][T19964] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5297'. [ 1041.016043][T19997] ªªªªª: renamed from lo (while UP) [ 1041.594141][T20016] vivid-007: ================= START STATUS ================= [ 1041.594163][T20016] vivid-007: Enable Output Cropping: true grabbed [ 1041.594214][T20016] vivid-007: Enable Output Composing: true grabbed [ 1041.594239][T20016] vivid-007: Enable Output Scaler: true grabbed [ 1041.594264][T20016] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1041.623909][T20016] vivid-007: Transmit Mode: HDMI grabbed [ 1041.623990][T20016] vivid-007: Hotplug Present: 0x00000000 [ 1041.624056][T20016] vivid-007: RxSense Present: 0x00000000 [ 1041.624098][T20016] vivid-007: EDID Present: 0x00000000 [ 1041.624163][T20016] vivid-007: ================== END STATUS ================== [ 1042.673514][T14396] block nbd5: Receive control failed (result -32) [ 1042.743295][T20025] sysfs: cannot create duplicate filename '/devices/virtual/block/nbd5/pid' [ 1042.743331][T20025] CPU: 0 UID: 0 PID: 20025 Comm: syz.5.5322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1042.743391][T20025] Tainted: [L]=SOFTLOCKUP [ 1042.743401][T20025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1042.743415][T20025] Call Trace: [ 1042.743424][T20025] [ 1042.743434][T20025] dump_stack_lvl+0xe8/0x150 [ 1042.743480][T20025] sysfs_warn_dup+0x8e/0xa0 [ 1042.743513][T20025] sysfs_add_file_mode_ns+0x287/0x300 [ 1042.743558][T20025] sysfs_create_file_ns+0x12b/0x1b0 [ 1042.743589][T20025] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1042.743620][T20025] ? nbd_start_device+0x189/0xb20 [ 1042.743644][T20025] ? mutex_lock_nested+0x168/0x1d0 [ 1042.743763][T20025] ? nbd_start_device+0x189/0xb20 [ 1042.743785][T20025] ? device_create_file+0xf4/0x1b0 [ 1042.743816][T20025] nbd_start_device+0x2b3/0xb20 [ 1042.743856][T20025] nbd_ioctl+0x57b/0xe40 [ 1042.743889][T20025] ? __pfx_nbd_ioctl+0x10/0x10 [ 1042.743914][T20025] ? __asan_memset+0x22/0x50 [ 1042.743945][T20025] ? smack_file_ioctl+0x263/0x360 [ 1042.743980][T20025] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1042.744016][T20025] ? __pfx_nbd_ioctl+0x10/0x10 [ 1042.744045][T20025] blkdev_ioctl+0x5e6/0x750 [ 1042.744074][T20025] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1042.744096][T20025] ? __fget_files+0x2a/0x420 [ 1042.744131][T20025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1042.744156][T20025] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1042.744181][T20025] __se_sys_ioctl+0xff/0x170 [ 1042.744219][T20025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.744246][T20025] do_syscall_64+0x15f/0xf80 [ 1042.744310][T20025] ? trace_irq_disable+0x3b/0x140 [ 1042.744336][T20025] ? clear_bhb_loop+0x40/0x90 [ 1042.744367][T20025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.744397][T20025] RIP: 0033:0x7f8dd206c819 [ 1042.744425][T20025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.744447][T20025] RSP: 002b:00007f8dd0284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.744473][T20025] RAX: ffffffffffffffda RBX: 00007f8dd22e6180 RCX: 00007f8dd206c819 [ 1042.744490][T20025] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1042.744506][T20025] RBP: 00007f8dd2102c91 R08: 0000000000000000 R09: 0000000000000000 [ 1042.744521][T20025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.744535][T20025] R13: 00007f8dd22e6218 R14: 00007f8dd22e6180 R15: 00007ffeb84374f8 [ 1042.744582][T20025] [ 1042.804655][T20025] block nbd5: device_create_file failed for pid! [ 1043.027136][T20024] block nbd5: shutting down sockets [ 1044.026512][T20071] netlink: 'syz.9.5344': attribute type 11 has an invalid length. [ 1044.438272][T20078] netlink: 566 bytes leftover after parsing attributes in process `syz.5.5347'. [ 1045.220346][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1046.221654][T20118] netlink: 'syz.7.5365': attribute type 1 has an invalid length. [ 1046.221694][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5365'. [ 1046.367225][T16117] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1046.517220][T16117] usb 10-1: Using ep0 maxpacket: 32 [ 1046.524446][T16117] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1046.524480][T16117] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1046.524505][T16117] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1046.524528][T16117] usb 10-1: config 1 has no interface number 0 [ 1046.524577][T16117] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1046.524608][T16117] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1046.524654][T16117] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1046.524680][T16117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.667216][T16117] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1046.952198][T16117] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1047.346763][ T5812] usb 10-1: USB disconnect, device number 6 [ 1047.394588][ T5812] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1048.248734][T20174] netlink: 'syz.9.5387': attribute type 2 has an invalid length. [ 1048.248774][T20174] netlink: 'syz.9.5387': attribute type 2 has an invalid length. [ 1048.678245][T20184] loop2: detected capacity change from 0 to 7 [ 1048.743066][T20184] Dev loop2: unable to read RDB block 7 [ 1048.743113][T20184] loop2: unable to read partition table [ 1048.744032][T20184] loop2: partition table beyond EOD, truncated [ 1048.745626][T20184] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1049.427908][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5403'. [ 1049.427957][T20204] bond0: Unable to set up delay as MII monitoring is disabled [ 1049.461875][T20205] netlink: 'syz.8.5400': attribute type 11 has an invalid length. [ 1049.627138][ T5890] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1049.777062][ T5890] usb 10-1: Using ep0 maxpacket: 32 [ 1049.779801][ T5890] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1049.779832][ T5890] usb 10-1: config 0 has no interface number 0 [ 1049.794015][ T5890] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1049.794051][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.794075][ T5890] usb 10-1: Product: syz [ 1049.794091][ T5890] usb 10-1: Manufacturer: syz [ 1049.794107][ T5890] usb 10-1: SerialNumber: syz [ 1049.919106][ T5890] usb 10-1: config 0 descriptor?? [ 1049.924176][ T5890] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1050.179311][ T5890] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1050.225435][ T5890] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1050.554670][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1050.615001][ T5812] usb 10-1: USB disconnect, device number 7 [ 1050.905876][ T5812] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1050.968783][ T5812] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1050.998071][ T5812] quatech2 10-1:0.51: device disconnected [ 1051.503415][ T31] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1051.653119][ T31] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1051.653151][ T31] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1051.653173][ T31] usb 6-1: config 0 has no interface number 0 [ 1051.653219][ T31] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.653257][ T31] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1051.653282][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.705602][ T31] usb 6-1: config 0 descriptor?? [ 1051.738729][T20253] netlink: 'syz.8.5422': attribute type 8 has an invalid length. [ 1051.738754][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5422'. [ 1052.052292][ T5812] usb 6-1: USB disconnect, device number 28 [ 1052.255786][ T5890] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1052.427004][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 1052.435998][ T5890] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1052.436033][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.477578][ T5890] usb 8-1: config 0 descriptor?? [ 1052.492796][ T5890] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1052.531142][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1052.717088][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1052.721161][ T9] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.721219][ T9] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1052.721826][ T9] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.721862][ T9] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1052.812176][ T9] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1052.812213][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.812376][ T9] usb 10-1: Product: syz [ 1052.812394][ T9] usb 10-1: Manufacturer: syz [ 1052.812636][ T9] usb 10-1: SerialNumber: syz [ 1052.942671][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1052.954467][ T5890] gspca_sunplus: reg_w_riv err -71 [ 1052.954570][ T5890] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1052.978500][ T5890] usb 8-1: USB disconnect, device number 25 [ 1053.375278][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input28 [ 1053.431007][T20287] batadv_slave_1: entered promiscuous mode [ 1053.435730][T20285] batadv_slave_1: left promiscuous mode [ 1053.807170][ T9] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1053.807194][ T9] (id 0x00) [ 1054.177007][ T9] rc_core: IR keymap rc-imon-pad not found [ 1054.177032][ T9] Registered IR keymap rc-empty [ 1054.177133][ T9] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1054.177153][ T9] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1054.364660][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1054.403357][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input29 [ 1054.428445][ T9] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:8> initialized [ 1054.557652][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.557731][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.887228][T20315] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 1055.572312][ T31] usb 10-1: USB disconnect, device number 8 [ 1056.069370][T20339] 9pnet: p9_errstr2errno: server reported unknown error [ 1056.178688][ T5812] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1056.329452][ T5812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.338164][ T5812] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.338257][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.338316][ T5812] usb 8-1: Product: syz [ 1056.338361][ T5812] usb 8-1: Manufacturer: syz [ 1056.338407][ T5812] usb 8-1: SerialNumber: syz [ 1056.484886][ T37] audit: type=1400 audit(1776552007.606:1154): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20349 comm="syz.8.5464" daddr=224.0.0.1 dest=20000 netif=wpan0 [ 1057.502611][ T5812] cdc_ncm 8-1:1.0: bind() failure [ 1057.551388][ T5812] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1057.589765][ T5812] usb 8-1: USB disconnect, device number 26 [ 1057.816347][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5477'. [ 1058.844415][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5485'. [ 1059.407592][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5490'. [ 1059.407636][T20412] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5490'. [ 1060.227031][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1060.440602][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1060.442675][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.442742][ T9] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1060.442778][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1060.445432][ T9] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1060.445463][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.445485][ T9] usb 9-1: Product: syz [ 1060.445501][ T9] usb 9-1: Manufacturer: syz [ 1060.445517][ T9] usb 9-1: SerialNumber: syz [ 1060.532519][ T9] usb 9-1: config 0 descriptor?? [ 1060.558212][ T9] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 1060.894526][ T9] snd_usb_toneport 9-1:0.0: cannot get proper max packet size [ 1060.896001][ T9] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 1060.919672][ T9] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1062.310674][ T9] usb 9-1: USB disconnect, device number 9 [ 1063.563446][ T5812] IPVS: starting estimator thread 0... [ 1063.801604][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1063.915318][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1063.942959][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1063.969318][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1063.993382][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1064.221098][ T1500] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.325787][T20501] IPVS: using max 9 ests per chain, 21600 per kthread [ 1064.596717][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5546'. [ 1064.676054][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5547'. [ 1064.871049][T20527] ip6gre1: entered promiscuous mode [ 1064.871078][T20527] ip6gre1: entered allmulticast mode [ 1065.261361][T20541] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5554'. [ 1065.781594][ T1500] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.869144][T20506] lo speed is unknown, defaulting to 1000 [ 1065.912644][T13928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1065.912920][T13928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1065.941982][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1065.997295][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1066.137346][T14396] Bluetooth: hci1: command tx timeout [ 1066.223997][T20566] vcan0: tx drop: invalid sa for name 0x0000000008000000 [ 1066.315559][ T5812] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1066.433805][ T1500] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.487023][ T5812] usb 9-1: Using ep0 maxpacket: 32 [ 1066.502572][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.502666][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.502788][ T5812] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1066.502862][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.562571][ T5812] usb 9-1: config 0 descriptor?? [ 1066.691596][ T5812] hub 9-1:0.0: USB hub found [ 1066.702033][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1066.747535][ T5983] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1066.813102][ T5812] hub 9-1:0.0: 1 port detected [ 1066.917111][ T5983] usb 8-1: Using ep0 maxpacket: 8 [ 1066.920101][ T5983] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1066.920122][ T5983] usb 8-1: config 0 has no interface number 0 [ 1066.925630][ T5983] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1066.925729][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.925745][ T5983] usb 8-1: Product: syz [ 1066.925756][ T5983] usb 8-1: Manufacturer: syz [ 1066.925767][ T5983] usb 8-1: SerialNumber: syz [ 1067.041812][ T5983] usb 8-1: config 0 descriptor?? [ 1067.267893][ T5983] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1067.268011][ T5983] uvcvideo 8-1:0.31: No valid video chain found. [ 1067.477615][ T5890] usb 8-1: USB disconnect, device number 27 [ 1067.590090][ T5812] usb 9-1: USB disconnect, device number 10 [ 1068.204804][ T1500] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.217547][T14396] Bluetooth: hci1: command tx timeout [ 1069.737416][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1070.302636][T14396] Bluetooth: hci1: command tx timeout [ 1070.615439][T20506] chnl_net:caif_netlink_parms(): no params data found [ 1072.377088][T14396] Bluetooth: hci1: command tx timeout [ 1072.658088][T20676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5611'. [ 1073.293338][T20693] 9p: Bad value for 'rfdno' [ 1074.997765][ T1500] bond0 (unregistering): left promiscuous mode [ 1074.997790][ T1500] bond_slave_0: left promiscuous mode [ 1074.998150][ T1500] bond_slave_1: left promiscuous mode [ 1075.058018][ T1500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.099867][ T1500] bond_slave_0: left allmulticast mode [ 1075.168047][ T1500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.219185][ T1500] bond_slave_1: left allmulticast mode [ 1075.222617][ T1500] bond0 (unregistering): Released all slaves [ 1075.290958][ T1500] bond1 (unregistering): Released all slaves [ 1075.399105][T20506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.399238][T20506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.399532][T20506] bridge_slave_0: entered allmulticast mode [ 1075.412226][T20506] bridge_slave_0: entered promiscuous mode [ 1075.504654][T20506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.504791][T20506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.505006][T20506] bridge_slave_1: entered allmulticast mode [ 1075.598440][T20506] bridge_slave_1: entered promiscuous mode [ 1075.963588][T20506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.990940][T20506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.117040][ T5812] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1076.267416][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 1076.267648][T20506] team0: Port device team_slave_0 added [ 1076.270802][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.270858][ T5812] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1076.270884][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.271340][T20506] team0: Port device team_slave_1 added [ 1076.370039][ T5812] usb 6-1: config 0 descriptor?? [ 1076.667670][ T5812] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1076.916536][T20506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.916558][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.916590][T20506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.019810][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5657'. [ 1077.067161][T20779] hsr0: entered promiscuous mode [ 1077.367127][ T10] usb 6-1: USB disconnect, device number 29 [ 1077.587132][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1077.726487][T20506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.726508][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.726539][T20506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.829240][T20506] hsr_slave_0: entered promiscuous mode [ 1077.830432][T20506] hsr_slave_1: entered promiscuous mode [ 1077.831899][T20506] debugfs: 'hsr0' already exists in 'hsr' [ 1077.831922][T20506] Cannot create hsr debugfs directory [ 1078.256188][T16117] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1078.419767][T16117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.419807][T16117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.421306][T16117] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1078.421335][T16117] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1078.421358][T16117] usb 6-1: Manufacturer: syz [ 1078.432539][T16117] usb 6-1: config 0 descriptor?? [ 1078.990920][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5669'. [ 1079.486541][T16117] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 1079.486609][T16117] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 1079.486629][T16117] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 1079.486683][T16117] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 1079.486800][T16117] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 1079.487813][ T5983] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 1079.573649][T16117] usb 6-1: USB disconnect, device number 30 [ 1079.703060][T20822] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1079.703093][T20822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1079.952153][T20822] vhci_hcd vhci_hcd.0: Device attached [ 1079.963715][ T5983] usb 8-1: config 0 has no interfaces? [ 1079.963751][ T5983] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1079.963771][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.992510][ T5983] usb 8-1: config 0 descriptor?? [ 1080.118995][ T5467] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1080.177027][ T5812] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1080.215903][T16117] usb 8-1: USB disconnect, device number 28 [ 1080.331898][T20834] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 1080.387730][T20835] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1080.487090][ T40] vhci_hcd vhci_hcd.7: stop threads [ 1080.503702][ T40] vhci_hcd vhci_hcd.7: release socket [ 1080.540186][ T40] vhci_hcd vhci_hcd.7: disconnect device [ 1080.897178][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1081.049395][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1081.070255][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1081.070297][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.070319][ T10] usb 6-1: Product: syz [ 1081.070335][ T10] usb 6-1: Manufacturer: syz [ 1081.070351][ T10] usb 6-1: SerialNumber: syz [ 1081.124188][ T10] usb 6-1: config 0 descriptor?? [ 1081.166679][ T10] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1081.392484][ T10] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 1081.392660][ T10] visor 6-1:0.0: probe with driver visor failed with error -71 [ 1081.423582][ T10] usb 6-1: USB disconnect, device number 31 [ 1081.466335][T20870] IPv6: Can't replace route, no match found [ 1081.466733][T20870] IPv6: Can't replace route, no match found [ 1081.919948][ T1500] batadv0: left promiscuous mode [ 1081.987073][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1082.097166][ T1500] hsr_slave_0: left promiscuous mode [ 1082.143200][ T1500] hsr_slave_1: left promiscuous mode [ 1082.144378][ T1500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.144405][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.157005][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 1082.163863][ T31] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1082.163892][ T31] usb 9-1: config 0 has no interface number 0 [ 1082.193210][ T31] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1082.193245][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.193267][ T31] usb 9-1: Product: syz [ 1082.193283][ T31] usb 9-1: Manufacturer: syz [ 1082.193298][ T31] usb 9-1: SerialNumber: syz [ 1082.241452][ T31] usb 9-1: config 0 descriptor?? [ 1082.242018][ T1500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.275306][ T31] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1082.276041][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.481627][ T31] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1082.659487][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1082.663294][ T1500] veth1_macvtap: left promiscuous mode [ 1082.663382][ T1500] veth0_macvtap: left promiscuous mode [ 1082.663580][ T1500] veth1_vlan: left promiscuous mode [ 1082.663716][ T1500] veth0_vlan: left promiscuous mode [ 1082.701945][ T31] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1082.878662][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1082.880543][ T10] usb 9-1: USB disconnect, device number 11 [ 1082.934771][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1083.025468][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1083.062274][ T10] quatech2 9-1:0.51: device disconnected [ 1085.407174][ T5812] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1086.439328][ T1500] team0 (unregistering): Port device team_slave_1 removed [ 1086.615391][ T1500] team0 (unregistering): Port device team_slave_0 removed [ 1088.847523][T21007] input: syz0 as /devices/virtual/input/input30 [ 1090.906009][ T5467] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1091.148838][T21055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.366678][T21068] ------------[ cut here ]------------ [ 1092.366695][T21068] debug_locks && !(!get_current()->pi_blocked_on) [ 1092.366718][T21068] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#1: syz.7.5765/21068 [ 1092.366768][T21068] Modules linked in: [ 1092.366799][T21068] CPU: 1 UID: 0 PID: 21068 Comm: syz.7.5765 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1092.366833][T21068] Tainted: [L]=SOFTLOCKUP [ 1092.366841][T21068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1092.366910][T21068] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 1092.366935][T21068] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 aa 72 06 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 8e 72 06 f6 [ 1092.366957][T21068] RSP: 0000:ffffc9000495f5a0 EFLAGS: 00010282 [ 1092.366978][T21068] RAX: 1ffff11006fa6cef RBX: 1ffff9200092beb8 RCX: 0000000000000046 [ 1092.367018][T21068] RDX: 0000000000000000 RSI: ffffffff8d891dd8 RDI: ffffffff8ba73060 [ 1092.367036][T21068] RBP: ffffc9000495f660 R08: ffffffff8220caa4 R09: ffff88801a03d758 [ 1092.367054][T21068] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: ffff888037d36778 [ 1092.367081][T21068] R13: dffffc0000000000 R14: ffff88801a03d700 R15: ffffc9000495f5e0 [ 1092.367100][T21068] FS: 00007fc01e6ae6c0(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 1092.367121][T21068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.367137][T21068] CR2: 00007ffeb8433eb0 CR3: 0000000086230000 CR4: 00000000003526f0 [ 1092.367158][T21068] Call Trace: [ 1092.367167][T21068] [ 1092.367182][T21068] ? __pfx_rt_spin_lock+0x10/0x10 [ 1092.367209][T21068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1092.367243][T21068] ? lockdep_hardirqs_on+0x7a/0x110 [ 1092.367274][T21068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1092.367309][T21068] ? fill_pool+0x156/0x580 [ 1092.367335][T21068] get_from_partial_node+0x54/0x480 [ 1092.367371][T21068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1092.367406][T21068] ? fill_pool+0x156/0x580 [ 1092.367430][T21068] ___slab_alloc+0xb2/0x670 [ 1092.367473][T21068] kmem_cache_alloc_noprof+0xea/0x680 [ 1092.367511][T21068] ? fill_pool+0x156/0x580 [ 1092.367541][T21068] fill_pool+0x156/0x580 [ 1092.367573][T21068] ? __pfx_fill_pool+0x10/0x10 [ 1092.367605][T21068] ? debug_objects_fill_pool+0x6f/0xd0 [ 1092.367628][T21068] ? debug_objects_fill_pool+0x6f/0xd0 [ 1092.367655][T21068] debug_objects_fill_pool+0x97/0xd0 [ 1092.367680][T21068] debug_object_assert_init+0x34/0x340 [ 1092.367713][T21068] hrtimer_start_range_ns+0x3f/0xef0 [ 1092.367757][T21068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.367794][T21068] futex_lock_pi+0x8df/0xb10 [ 1092.367846][T21068] ? __pfx_futex_lock_pi+0x10/0x10 [ 1092.367888][T21068] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1092.367924][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.367976][T21068] ? __pfx_futex_wake_mark+0x10/0x10 [ 1092.368041][T21068] do_futex+0x292/0x420 [ 1092.368100][T21068] ? __pfx_do_futex+0x10/0x10 [ 1092.368143][T21068] __se_sys_futex+0x3a8/0x450 [ 1092.368185][T21068] ? __pfx___se_sys_futex+0x10/0x10 [ 1092.368217][T21068] ? __task_pid_nr_ns+0x28/0x470 [ 1092.368253][T21068] ? __x64_sys_futex+0x21/0xf0 [ 1092.368286][T21068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.368314][T21068] do_syscall_64+0x15f/0xf80 [ 1092.368347][T21068] ? clear_bhb_loop+0x40/0x90 [ 1092.368378][T21068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.368402][T21068] RIP: 0033:0x7fc02045c819 [ 1092.368424][T21068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.368444][T21068] RSP: 002b:00007fc01e6ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.368470][T21068] RAX: ffffffffffffffda RBX: 00007fc0206d5fa0 RCX: 00007fc02045c819 [ 1092.368488][T21068] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 1092.368503][T21068] RBP: 00007fc0204f2c91 R08: 0000000000000000 R09: 0000000000000001 [ 1092.368518][T21068] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1092.368533][T21068] R13: 00007fc0206d6038 R14: 00007fc0206d5fa0 R15: 00007ffdbfd00ab8 [ 1092.368573][T21068] [ 1092.368585][T21068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1092.368607][T21068] CPU: 1 UID: 0 PID: 21068 Comm: syz.7.5765 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1092.368640][T21068] Tainted: [L]=SOFTLOCKUP [ 1092.368648][T21068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1092.368662][T21068] Call Trace: [ 1092.368672][T21068] [ 1092.368681][T21068] vpanic+0x56c/0xa60 [ 1092.368708][T21068] ? __pfx__printk+0x10/0x10 [ 1092.368738][T21068] ? __pfx_vpanic+0x10/0x10 [ 1092.368759][T21068] ? is_bpf_text_address+0x292/0x2b0 [ 1092.368788][T21068] ? is_bpf_text_address+0x26/0x2b0 [ 1092.368828][T21068] panic+0xc5/0xd0 [ 1092.368851][T21068] ? __pfx_panic+0x10/0x10 [ 1092.368896][T21068] __warn+0x315/0x4c0 [ 1092.368918][T21068] ? rt_spin_lock+0x31c/0x400 [ 1092.368944][T21068] ? rt_spin_lock+0x31c/0x400 [ 1092.368969][T21068] __report_bug+0x29a/0x540 [ 1092.368998][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.369032][T21068] ? rt_spin_lock+0x31c/0x400 [ 1092.369065][T21068] ? __pfx___report_bug+0x10/0x10 [ 1092.369096][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.369128][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.369163][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.369195][T21068] ? rt_spin_lock+0x31c/0x400 [ 1092.369218][T21068] report_bug+0x16a/0x220 [ 1092.369248][T21068] ? rt_spin_lock+0x31c/0x400 [ 1092.369268][T21068] ? rt_spin_lock+0x31e/0x400 [ 1092.369292][T21068] handle_bug+0x9c/0x200 [ 1092.369328][T21068] exc_invalid_op+0x1a/0x50 [ 1092.369363][T21068] asm_exc_invalid_op+0x1a/0x20 [ 1092.369387][T21068] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 1092.369411][T21068] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 aa 72 06 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 8e 72 06 f6 [ 1092.369432][T21068] RSP: 0000:ffffc9000495f5a0 EFLAGS: 00010282 [ 1092.369452][T21068] RAX: 1ffff11006fa6cef RBX: 1ffff9200092beb8 RCX: 0000000000000046 [ 1092.369471][T21068] RDX: 0000000000000000 RSI: ffffffff8d891dd8 RDI: ffffffff8ba73060 [ 1092.369487][T21068] RBP: ffffc9000495f660 R08: ffffffff8220caa4 R09: ffff88801a03d758 [ 1092.369506][T21068] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: ffff888037d36778 [ 1092.369523][T21068] R13: dffffc0000000000 R14: ffff88801a03d700 R15: ffffc9000495f5e0 [ 1092.369551][T21068] ? get_from_partial_node+0x54/0x480 [ 1092.369597][T21068] ? __pfx_rt_spin_lock+0x10/0x10 [ 1092.369622][T21068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1092.369653][T21068] ? lockdep_hardirqs_on+0x7a/0x110 [ 1092.369682][T21068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1092.369718][T21068] ? fill_pool+0x156/0x580 [ 1092.369741][T21068] get_from_partial_node+0x54/0x480 [ 1092.369776][T21068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1092.369811][T21068] ? fill_pool+0x156/0x580 [ 1092.369834][T21068] ___slab_alloc+0xb2/0x670 [ 1092.369879][T21068] kmem_cache_alloc_noprof+0xea/0x680 [ 1092.369916][T21068] ? fill_pool+0x156/0x580 [ 1092.369946][T21068] fill_pool+0x156/0x580 [ 1092.369978][T21068] ? __pfx_fill_pool+0x10/0x10 [ 1092.370011][T21068] ? debug_objects_fill_pool+0x6f/0xd0 [ 1092.370035][T21068] ? debug_objects_fill_pool+0x6f/0xd0 [ 1092.370071][T21068] debug_objects_fill_pool+0x97/0xd0 [ 1092.370096][T21068] debug_object_assert_init+0x34/0x340 [ 1092.370129][T21068] hrtimer_start_range_ns+0x3f/0xef0 [ 1092.370173][T21068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.370208][T21068] futex_lock_pi+0x8df/0xb10 [ 1092.370259][T21068] ? __pfx_futex_lock_pi+0x10/0x10 [ 1092.370301][T21068] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1092.370338][T21068] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.370391][T21068] ? __pfx_futex_wake_mark+0x10/0x10 [ 1092.370456][T21068] do_futex+0x292/0x420 [ 1092.370495][T21068] ? __pfx_do_futex+0x10/0x10 [ 1092.370537][T21068] __se_sys_futex+0x3a8/0x450 [ 1092.370575][T21068] ? __pfx___se_sys_futex+0x10/0x10 [ 1092.370609][T21068] ? __task_pid_nr_ns+0x28/0x470 [ 1092.370644][T21068] ? __x64_sys_futex+0x21/0xf0 [ 1092.370676][T21068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.370703][T21068] do_syscall_64+0x15f/0xf80 [ 1092.370733][T21068] ? clear_bhb_loop+0x40/0x90 [ 1092.370764][T21068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.370788][T21068] RIP: 0033:0x7fc02045c819 [ 1092.370809][T21068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.370830][T21068] RSP: 002b:00007fc01e6ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.370854][T21068] RAX: ffffffffffffffda RBX: 00007fc0206d5fa0 RCX: 00007fc02045c819 [ 1092.370871][T21068] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 1092.370887][T21068] RBP: 00007fc0204f2c91 R08: 0000000000000000 R09: 0000000000000001 [ 1092.370902][T21068] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1092.370917][T21068] R13: 00007fc0206d6038 R14: 00007fc0206d5fa0 R15: 00007ffdbfd00ab8 [ 1092.370956][T21068] [ 1092.371909][T21068] Kernel Offset: disabled