last executing test programs: 9m50.742175488s ago: executing program 3 (id=12): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x1000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 9m49.169386814s ago: executing program 3 (id=18): socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 9m48.538296324s ago: executing program 3 (id=20): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0xffffffff, 0x0) 9m45.057010562s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 9m44.323492641s ago: executing program 3 (id=46): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r2, r3, 0x106, 0x40, 0x8, 0x9a, {0x9, 0xb0f, 0xef51, 0x5, 0x3, 0x1, 0x8, 0xaf02, 0x0, 0x81, 0x0, 0x7ffffffb, 0x93, 0x8, "41ed6dd4a8b629c657994fc7ef37c9eab8c119571d4132b2629a00"}}) 9m43.901327915s ago: executing program 3 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 9m28.348334375s ago: executing program 32 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 7m8.102512586s ago: executing program 5 (id=1457): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m7.396466055s ago: executing program 5 (id=1462): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 7m6.719881543s ago: executing program 5 (id=1467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'ip6erspan0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x400}) close(0x3) 7m5.982920118s ago: executing program 5 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 7m5.798333973s ago: executing program 5 (id=1477): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000cf2000/0x1000)=nil, 0x1000}, 0x1}) 7m4.630402069s ago: executing program 5 (id=1487): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x6, 0x7}, &(0x7f00000000c0)=0x8) 7m4.251815274s ago: executing program 33 (id=1487): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x6, 0x7}, &(0x7f00000000c0)=0x8) 4m10.592391079s ago: executing program 1 (id=2467): set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000000500)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002480)=""/4096, 0x1000}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4m9.534074456s ago: executing program 1 (id=2472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r3, 0x1) 4m7.246989758s ago: executing program 1 (id=2476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x20) 4m4.757122973s ago: executing program 1 (id=2482): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x101800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 4m3.353784197s ago: executing program 1 (id=2490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m56.978959659s ago: executing program 4 (id=2508): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 3m55.940720335s ago: executing program 4 (id=2511): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) close(r0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3m50.478608718s ago: executing program 4 (id=2515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 3m49.347207124s ago: executing program 4 (id=2518): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x43) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3m49.078751574s ago: executing program 1 (id=2520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x3, 0xc00, 0x8000003}, &(0x7f0000000100), 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, 0x0, &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m46.314322351s ago: executing program 4 (id=2526): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000070000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="02", @ANYBLOB="01000000050000000100000000000000000000000000000000000000c2"], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m45.950622033s ago: executing program 4 (id=2530): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4c080) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x10) timer_create(0x6, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x7, 0x2, r4) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3m33.872076861s ago: executing program 34 (id=2520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x3, 0xc00, 0x8000003}, &(0x7f0000000100), 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, 0x0, &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m30.322997695s ago: executing program 35 (id=2530): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4c080) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x10) timer_create(0x6, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x7, 0x2, r4) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.93107455s ago: executing program 6 (id=3853): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb, 0x200, 0x2}, 0x1c) close(0x3) 2.436772059s ago: executing program 6 (id=3861): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r1}, &(0x7f0000000240)=0x8) 2.214830204s ago: executing program 6 (id=3865): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40010080) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 1.970643036s ago: executing program 8 (id=3871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) 1.966354913s ago: executing program 6 (id=3872): r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.786287981s ago: executing program 2 (id=3874): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 1.786043355s ago: executing program 8 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1058}], 0x1) 1.613484542s ago: executing program 2 (id=3877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, r0, 0x6) 1.556132228s ago: executing program 8 (id=3878): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 1.388246114s ago: executing program 8 (id=3880): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x1000003e, 0x101, 0x2}, 0x10) 1.359635706s ago: executing program 2 (id=3881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbff, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x13, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x3b, 0x3}}, @random={0x7}, @tim={0x5, 0x3, {0x5, 0xcc, 0xf8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.246204777s ago: executing program 8 (id=3882): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000008}) 1.189120016s ago: executing program 6 (id=3883): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x9, 0x80}) 1.07710154s ago: executing program 0 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.022178651s ago: executing program 2 (id=3886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 907.34298ms ago: executing program 8 (id=3888): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) 830.791577ms ago: executing program 2 (id=3889): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="70000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="0800975780200000140003006e657464657673696d300000000000000500110004000000340016"], 0x70}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20044080) 830.652906ms ago: executing program 0 (id=3890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}}, 0x0) 782.980838ms ago: executing program 6 (id=3891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 771.983019ms ago: executing program 7 (id=3892): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)) 665.581408ms ago: executing program 7 (id=3893): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 621.852625ms ago: executing program 7 (id=3894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088030000c800c000b8008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40000044}, 0x404c884) 575.99369ms ago: executing program 2 (id=3895): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0xb02d, 0xfe}}}, &(0x7f0000000080)={0x8c91b7153c6ffb64, 0x0, 0x0, 0x0, 0x0, 0x0}) 486.340977ms ago: executing program 0 (id=3896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000c00000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x10000}, 0x28) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0xe0ff, 0xffffffffffffffff}) 486.037896ms ago: executing program 7 (id=3897): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000003c0)={0x3ff, 0x40008, 0x9, 0x10000}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000001000000000800040001200000", 0x24) 393.694928ms ago: executing program 0 (id=3898): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @local, 0xe}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10001}, 0x1c) 378.502887ms ago: executing program 7 (id=3899): unshare(0x2040400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) 175.526917ms ago: executing program 0 (id=3900): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xffffffffffffffff, 0x1000) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffd, 0x7) 70.198475ms ago: executing program 7 (id=3901): sigaltstack(0x0, 0x0) timer_create(0x8, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x800) recvmmsg(r5, &(0x7f0000003a40), 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601e6ffffffffffffff0000000003140007800800114000000000050015000a0000000500010007000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[], 0x0) 0s ago: executing program 0 (id=3902): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x3, 0x7fffffff}]}) mknod(&(0x7f0000000100)='./file0\x00', 0x80, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 1931.735:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f685e4acdd9 code=0x7ffc0000 [ 270.269795][ T36] audit: type=1326 audit(1777461931.735:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685e4acdd9 code=0x7ffc0000 [ 270.269830][ T36] audit: type=1326 audit(1777461931.735:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685e4acdd9 code=0x7ffc0000 [ 270.584660][ T9652] veth0_vlan: entered promiscuous mode [ 270.636507][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 270.636542][T10008] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 270.636555][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 270.714639][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 270.714673][T10012] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 270.714685][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 270.750573][ T9652] veth1_vlan: entered promiscuous mode [ 270.846354][ T9652] veth0_macvtap: entered promiscuous mode [ 270.926398][ T9652] veth1_macvtap: entered promiscuous mode [ 271.021373][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.112573][ T9652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.144927][ T7504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.149129][ T7504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.154230][ T7504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.201300][ T7504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.533966][T10028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1624'. [ 272.659963][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.659983][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.285742][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.285762][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.467678][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 274.697110][ T5607] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 274.879597][ T5607] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.879622][ T5607] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.885307][ T5607] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.885335][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.885355][ T5607] usb 1-1: SerialNumber: syz [ 275.206839][ T5607] usb 1-1: 0:2 : does not exist [ 275.857067][ T5715] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 275.939498][ T5607] usb 1-1: USB disconnect, device number 12 [ 275.967206][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 276.017105][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 276.023102][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.023156][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.023184][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.023205][ T5715] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.023229][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.025437][ T5715] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.025463][ T5715] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.025482][ T5715] usb 5-1: Manufacturer: syz [ 276.157052][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 276.159396][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 276.159422][ T9] usb 3-1: config 0 has no interface number 0 [ 276.159467][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 276.162923][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 276.162949][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.163049][ T9] usb 3-1: Product: syz [ 276.163074][ T9] usb 3-1: Manufacturer: syz [ 276.163087][ T9] usb 3-1: SerialNumber: syz [ 276.236181][ T5715] usb 5-1: config 0 descriptor?? [ 276.365527][ T9] usb 3-1: config 0 descriptor?? [ 276.566964][ T5715] rc_core: IR keymap rc-hauppauge not found [ 276.566984][ T5715] Registered IR keymap rc-empty [ 276.572717][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.587556][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.655712][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 276.686255][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 276.714325][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.737306][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.755322][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.767411][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.787242][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.803261][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.823448][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.847233][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.877627][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.907163][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.927199][ T5715] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.954767][ T5715] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.954790][ T5715] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.005113][ T5715] usb 5-1: USB disconnect, device number 20 [ 277.871272][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 277.871321][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 277.871337][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 277.871413][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 277.933757][ T9] usb 3-1: USB disconnect, device number 9 [ 278.140726][T10143] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1661'. [ 278.144836][T10145] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1662'. [ 278.993733][T10165] netlink: 'syz.4.1671': attribute type 28 has an invalid length. [ 280.007160][ T5600] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 281.067638][ T5600] usb 5-1: Using ep0 maxpacket: 32 [ 281.095703][ T5600] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 281.095733][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.095753][ T5600] usb 5-1: Product: syz [ 281.095767][ T5600] usb 5-1: Manufacturer: syz [ 281.095781][ T5600] usb 5-1: SerialNumber: syz [ 281.102212][ T5600] usb 5-1: config 0 descriptor?? [ 281.184495][ T5600] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 281.195474][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1682'. [ 281.195493][T10196] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1682'. [ 281.195508][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1682'. [ 281.775934][T10210] netlink: 'syz.6.1687': attribute type 8 has an invalid length. [ 281.809288][ T36] audit: type=1326 audit(1777461943.275:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 281.810121][ T36] audit: type=1326 audit(1777461943.275:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 281.810166][ T36] audit: type=1326 audit(1777461943.275:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f745124d60e code=0x7ffc0000 [ 281.810766][ T36] audit: type=1326 audit(1777461943.275:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 281.811203][ T36] audit: type=1326 audit(1777461943.275:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 281.964089][ T36] audit: type=1326 audit(1777461943.425:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 282.116020][ T36] audit: type=1326 audit(1777461943.575:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.0.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 282.357761][T10223] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1691'. [ 282.606850][ T5600] gspca_ov534_9: reg_r err -71 [ 282.857081][ T5600] gspca_ov534_9: Unknown sensor 0000 [ 282.857182][ T5600] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 282.907704][ T5600] usb 5-1: USB disconnect, device number 21 [ 283.456861][T10244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1699'. [ 283.493336][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.510606][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.227089][ T818] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 284.289823][T10247] syz.1.1700 (10247) used greatest stack depth: 15680 bytes left [ 284.373611][T10257] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 284.387222][ T818] usb 7-1: Using ep0 maxpacket: 8 [ 284.392446][ T818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.392473][ T818] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 284.404774][ T818] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 284.404801][ T818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.404821][ T818] usb 7-1: Product: syz [ 284.404834][ T818] usb 7-1: Manufacturer: syz [ 284.404847][ T818] usb 7-1: SerialNumber: syz [ 284.413677][T10265] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1706'. [ 284.451937][ T818] usb 7-1: config 0 descriptor?? [ 284.927132][ T818] usb 7-1: USB disconnect, device number 2 [ 286.129065][ T36] audit: type=1326 audit(1777461947.595:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10300 comm="syz.6.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 286.129112][ T36] audit: type=1326 audit(1777461947.595:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10300 comm="syz.6.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 286.129662][ T36] audit: type=1326 audit(1777461947.595:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10300 comm="syz.6.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 286.628811][T10319] syz.0.1725 uses obsolete (PF_INET,SOCK_PACKET) [ 286.759166][ T5716] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 286.937165][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 286.940528][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.940561][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.940597][ T5716] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 286.940620][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.028912][ T5716] usb 5-1: config 0 descriptor?? [ 287.036048][ T5716] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 287.501701][ T5716] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2 [ 287.506189][ T5716] ft260 0003:0403:6030.000A: failed to parse HID [ 287.506298][ T5716] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -22 [ 287.746892][ T10] usb 5-1: USB disconnect, device number 22 [ 289.295313][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1737'. [ 289.330252][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1737'. [ 289.557078][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 289.727019][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 289.729563][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.729589][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.732937][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.732963][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.732983][ T10] usb 2-1: Product: syz [ 289.732996][ T10] usb 2-1: Manufacturer: syz [ 289.733010][ T10] usb 2-1: SerialNumber: syz [ 289.831170][ T10] usb 2-1: 0:2 : does not exist [ 290.062425][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 290.274350][ T10] usb 2-1: USB disconnect, device number 14 [ 290.407414][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.807221][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 290.850207][T10378] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.962532][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'. [ 290.978173][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 291.018896][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.018930][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.018969][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 291.018993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.058822][ T9] usb 5-1: config 0 descriptor?? [ 291.083936][ T9] hub 5-1:0.0: USB hub found [ 291.281952][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 291.282546][T10385] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 291.575324][ T9] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 291.587256][ T9] hid-generic 0003:046D:C31C.000B: probe with driver hid-generic failed with error -22 [ 291.877704][ T818] usb 5-1: USB disconnect, device number 23 [ 292.014405][T10399] bridge0: port 3(vlan2) entered blocking state [ 292.014569][T10399] bridge0: port 3(vlan2) entered disabled state [ 292.014763][T10399] vlan2: entered allmulticast mode [ 292.014779][T10399] geneve0: entered allmulticast mode [ 292.016430][T10399] vlan2: entered promiscuous mode [ 292.016446][T10399] geneve0: entered promiscuous mode [ 292.567131][ T818] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 292.719110][ T818] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.719138][ T818] usb 2-1: config 0 has no interface number 0 [ 292.719181][ T818] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 292.719210][ T818] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 292.729620][ T818] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.729650][ T818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.729669][ T818] usb 2-1: Product: syz [ 292.729682][ T818] usb 2-1: Manufacturer: syz [ 292.729696][ T818] usb 2-1: SerialNumber: syz [ 292.800275][ T818] usb 2-1: config 0 descriptor?? [ 292.801157][T10412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.801290][T10412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.013856][T10412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.013978][T10412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.216480][ T818] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.216513][ T818] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.255344][ T818] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 294.255642][ T818] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 294.283324][ T818] usb 2-1: USB disconnect, device number 15 [ 294.693583][T10446] team0: Port device team_slave_0 removed [ 294.796258][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1779'. [ 295.876021][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 295.876037][ T36] audit: type=1326 audit(1777461957.335:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.4.1788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685e4acdd9 code=0x0 [ 299.063153][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 299.235397][T10556] gretap0: entered promiscuous mode [ 299.270150][T10556] macvtap1: entered promiscuous mode [ 299.298463][T10556] macvtap1: entered allmulticast mode [ 299.298482][T10556] gretap0: entered allmulticast mode [ 300.516896][ T36] audit: type=1326 audit(1777461961.975:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.539186][ T36] audit: type=1326 audit(1777461962.005:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.548805][ T36] audit: type=1326 audit(1777461962.005:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.548851][ T36] audit: type=1326 audit(1777461962.015:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.548889][ T36] audit: type=1326 audit(1777461962.015:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.549451][ T36] audit: type=1326 audit(1777461962.015:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.558209][ T36] audit: type=1326 audit(1777461962.015:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.558256][ T36] audit: type=1326 audit(1777461962.015:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 300.558293][ T36] audit: type=1326 audit(1777461962.015:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 301.641076][T10595] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 303.397124][ T4910] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.852052][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 303.852072][ T36] audit: type=1800 audit(1777461965.255:221): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1854" name="file1" dev="overlay" ino=2392 res=0 errno=0 [ 304.457090][ T37] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 304.607237][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 304.609313][ T37] usb 1-1: config 0 has no interfaces? [ 304.620546][ T37] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 304.620573][ T37] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 304.620592][ T37] usb 1-1: Product: syz [ 304.620606][ T37] usb 1-1: Manufacturer: syz [ 304.620619][ T37] usb 1-1: SerialNumber: syz [ 304.636799][ T37] usb 1-1: config 0 descriptor?? [ 305.171663][ T37] usb 1-1: USB disconnect, device number 13 [ 305.304020][T10690] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1865'. [ 305.304143][T10690] netlink: Conntrack attr has 4 unknown bytes [ 307.289686][T10744] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 307.345362][T10751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.481231][T10798] binder: BINDER_SET_CONTEXT_MGR already set [ 309.481258][T10798] binder: 10796:10798 ioctl 4018620d 200000004a80 returned -16 [ 309.580296][T10803] 8021q: VLANs not supported on syzkaller0 [ 309.887152][ T37] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 310.060310][ T37] usb 7-1: not running at top speed; connect to a high speed hub [ 310.061599][ T37] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 310.061631][ T37] usb 7-1: config 1 interface 0 has no altsetting 0 [ 310.064067][ T37] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.064095][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.064116][ T37] usb 7-1: Product: syz [ 310.064129][ T37] usb 7-1: Manufacturer: syz [ 310.064144][ T37] usb 7-1: SerialNumber: syz [ 310.122921][T10806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 310.399689][ T37] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 310.419425][ T37] usb 7-1: USB disconnect, device number 3 [ 310.462530][ T5832] udevd[5832]: setting mode of /dev/bus/usb/007/003 to 020664 failed: No such file or directory [ 310.464144][ T5832] udevd[5832]: setting owner of /dev/bus/usb/007/003 to uid=0, gid=0 failed: No such file or directory [ 312.368451][T10877] binder_alloc: 10876: binder_alloc_buf, no vma [ 312.548910][T10882] syzkaller1: entered promiscuous mode [ 312.548936][T10882] syzkaller1: entered allmulticast mode [ 313.194881][T10904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.780552][ T818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 313.937012][ T818] usb 3-1: Using ep0 maxpacket: 32 [ 313.939752][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.939783][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.939806][ T818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 313.939847][ T818] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 313.939869][ T818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.950417][ T818] usb 3-1: config 0 descriptor?? [ 314.028837][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 314.377118][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 314.395212][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.427710][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.450936][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 314.450966][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.450986][ T31] usb 2-1: Product: syz [ 314.451001][ T31] usb 2-1: Manufacturer: syz [ 314.451014][ T31] usb 2-1: SerialNumber: syz [ 314.782745][ T818] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000C/input/input22 [ 314.874168][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 314.909247][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 315.090813][ T818] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000C/input/input23 [ 315.660740][ T818] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 315.777504][ T31] usb 2-1: USB disconnect, device number 16 [ 315.952969][T10948] kvm: MONITOR instruction emulated as NOP! [ 316.266533][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.408228][ T1139] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 316.558418][ T1139] usb 5-1: Using ep0 maxpacket: 32 [ 316.561774][ T1139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.561805][ T1139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.561841][ T1139] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 316.561863][ T1139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.616274][ T1139] usb 5-1: config 0 descriptor?? [ 316.633679][T10961] kvm: emulating exchange as write [ 317.072658][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073038][ T1139] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 317.073070][ T1139] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 317.197199][ T818] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 317.239511][ T1139] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 317.259716][ T818] usb 3-1: device reset changed ep0 maxpacket size! [ 317.425773][ T5716] usb 3-1: USB disconnect, device number 10 [ 317.441315][ T1139] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 317.634032][T10986] overlayfs: failed to clone upperpath [ 317.646000][ T1139] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 317.646789][ T1139] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 317.887486][ T818] usb 5-1: USB disconnect, device number 24 [ 318.297142][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 318.487052][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 318.492497][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.492522][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.495281][ T5716] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.495309][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.495328][ T5716] usb 3-1: Product: syz [ 318.495342][ T5716] usb 3-1: Manufacturer: syz [ 318.495356][ T5716] usb 3-1: SerialNumber: syz [ 318.563987][ T5716] usb 3-1: 0:2 : does not exist [ 318.717870][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 318.796804][ T5716] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 318.879278][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.879314][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.879347][ T9] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 318.879371][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.888164][ T9] usb 5-1: config 0 descriptor?? [ 319.090606][ T5716] usb 3-1: USB disconnect, device number 11 [ 319.296043][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 319.296068][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 319.384643][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384681][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384707][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384733][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384759][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384792][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384817][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.384843][ T9] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x0 [ 319.428180][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 319.428208][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 319.620727][ T9] greenasia 0003:0E8F:0012.000E: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 319.620770][ T9] greenasia 0003:0E8F:0012.000E: no inputs found [ 319.791350][ T9] usb 5-1: USB disconnect, device number 25 [ 320.035588][T11025] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 320.690498][T11044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.666534][T11092] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 323.497166][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 323.657170][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 324.213373][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 324.213403][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.213421][ T9] usb 2-1: Product: syz [ 324.213434][ T9] usb 2-1: Manufacturer: syz [ 324.213448][ T9] usb 2-1: SerialNumber: syz [ 324.253283][ T9] usb 2-1: config 0 descriptor?? [ 324.272725][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 325.673337][ T36] audit: type=1326 audit(1777461987.135:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11154 comm="syz.0.2030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x0 [ 325.909781][ T9] gspca_ov534_9: reg_r err -32 [ 325.977107][ T818] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.127038][ T818] usb 3-1: Using ep0 maxpacket: 32 [ 326.136122][ T818] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.136155][ T818] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.158997][ T818] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 326.159027][ T818] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 326.159046][ T818] usb 3-1: Product: syz [ 326.159059][ T818] usb 3-1: Manufacturer: syz [ 326.187040][ T9] gspca_ov534_9: Unknown sensor 0000 [ 326.187137][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 326.190596][ T9] usb 2-1: USB disconnect, device number 17 [ 326.240462][ T818] hub 3-1:4.0: USB hub found [ 326.474967][ T818] hub 3-1:4.0: 2 ports detected [ 326.662216][T11173] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 326.745946][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2036'. [ 326.831338][T11173] bond2: entered promiscuous mode [ 326.844013][T11173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.897274][T11176] bond2: left promiscuous mode [ 326.897301][T11176] bond2: entered allmulticast mode [ 327.320916][T11197] binder_alloc: 11196: binder_alloc_buf size 61936 failed, no address space [ 327.321095][T11197] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 327.736612][ T37] hub 3-1:4.0: activate --> -90 [ 328.142133][ T31] usb 3-1-port2: cannot warm reset (err = -71) [ 328.142461][ T31] usb 3-1-port2: cannot warm reset (err = -71) [ 328.142478][ T31] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 328.142771][ T31] usb 3-1-port2: cannot disable (err = -71) [ 328.149982][ T1139] usb 3-1: USB disconnect, device number 12 [ 328.258083][ T31] usb 3-1-port2: attempt power cycle [ 329.667252][ T1139] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 329.874544][ T1139] usb 5-1: Using ep0 maxpacket: 16 [ 329.883038][ T1139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.902519][ T1139] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.902549][ T1139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.902562][ T1139] usb 5-1: Product: syz [ 329.902570][ T1139] usb 5-1: Manufacturer: syz [ 329.902577][ T1139] usb 5-1: SerialNumber: syz [ 329.942937][ T1139] usb 5-1: config 0 descriptor?? [ 329.955801][ T1139] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.955834][ T1139] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 331.014652][ T1139] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 331.672599][T11252] fuse: Bad value for 'fd' [ 331.721818][T11247] evm: overlay not supported [ 331.989668][ T1139] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 331.991727][ T1139] em28xx 5-1:0.0: board has no eeprom [ 332.167088][ T1139] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 332.167127][ T1139] em28xx 5-1:0.0: dvb set to bulk mode. [ 332.167555][ T5716] em28xx 5-1:0.0: Binding DVB extension [ 332.278456][ T1139] usb 5-1: USB disconnect, device number 26 [ 332.279031][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.280842][ T1139] em28xx 5-1:0.0: Disconnecting em28xx [ 332.378015][T11269] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.447289][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.566441][ T5716] em28xx 5-1:0.0: Registering input extension [ 332.592382][ T1139] em28xx 5-1:0.0: Closing input extension [ 333.015970][T11275] fuse: fd is not a fuse device [ 333.147491][ T1139] em28xx 5-1:0.0: Freeing device [ 333.351356][T11283] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2077'. [ 333.497339][ T1139] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 333.623875][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 333.623896][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 333.683990][ T1139] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.684020][ T1139] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.684040][ T1139] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.684088][ T1139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.730313][ T1139] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.730343][ T1139] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.730361][ T1139] usb 5-1: Product: syz [ 333.730376][ T1139] usb 5-1: Manufacturer: syz [ 333.781175][ T1139] cdc_wdm 5-1:1.0: skipping garbage [ 333.786232][ T1139] cdc_wdm 5-1:1.0: skipping garbage [ 333.890223][ T1139] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 333.890255][ T1139] cdc_wdm 5-1:1.0: Unknown control protocol [ 333.989432][ T31] usb 5-1: USB disconnect, device number 27 [ 334.527158][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.702379][ T31] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.702409][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.702428][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.702481][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.705654][ T31] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.705684][ T31] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.705704][ T31] usb 5-1: Product: syz [ 334.705718][ T31] usb 5-1: Manufacturer: syz [ 334.719538][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 334.719558][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 334.740847][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 334.740868][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 334.747316][ T37] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 334.860833][T11317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2089'. [ 334.982561][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.982592][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.982613][ T37] usb 1-1: Product: syz [ 334.982627][ T37] usb 1-1: Manufacturer: syz [ 334.982642][ T37] usb 1-1: SerialNumber: syz [ 335.022176][ T37] usb 1-1: config 0 descriptor?? [ 335.294681][ T37] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.387403][ T31] usb 5-1: USB disconnect, device number 28 [ 336.747746][ T37] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 336.787907][ T37] usb 1-1: USB disconnect, device number 14 [ 337.575832][T11356] mmap: syz.6.2103 (11356) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 337.887199][ T37] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.038390][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 338.045754][ T37] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 338.045771][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.045783][ T37] usb 3-1: Product: syz [ 338.045790][ T37] usb 3-1: Manufacturer: syz [ 338.045797][ T37] usb 3-1: SerialNumber: syz [ 338.070610][ T37] usb 3-1: config 0 descriptor?? [ 338.085150][ T37] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 339.571218][ T37] gspca_ov534_9: reg_w failed -110 [ 339.857085][ T37] gspca_ov534_9: Unknown sensor 0000 [ 339.857427][ T37] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 340.638737][ T5715] usb 3-1: USB disconnect, device number 17 [ 341.386279][T11444] io-wq is not configured for unbound workers [ 342.806294][T11477] serio: Serial port ttyprintk [ 343.318077][ T1139] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 343.477134][ T1139] usb 1-1: Using ep0 maxpacket: 16 [ 343.486107][ T1139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.486132][ T1139] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.512971][ T1139] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.513001][ T1139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.513021][ T1139] usb 1-1: Product: syz [ 343.513035][ T1139] usb 1-1: Manufacturer: syz [ 343.513050][ T1139] usb 1-1: SerialNumber: syz [ 343.644593][ T1139] usb 1-1: 0:2 : does not exist [ 343.923486][ T1139] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 344.041119][ T1139] usb 1-1: USB disconnect, device number 15 [ 344.205254][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.486699][T11535] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 345.495160][T11535] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 345.748651][ T37] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 345.859396][T11542] netlink: 'syz.2.2167': attribute type 9 has an invalid length. [ 345.859418][T11542] netlink: 212188 bytes leftover after parsing attributes in process `syz.2.2167'. [ 345.907750][ T37] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 345.907778][ T37] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 345.907798][ T37] usb 5-1: config 0 has no interface number 0 [ 345.921678][ T37] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 345.921705][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.921724][ T37] usb 5-1: Product: syz [ 345.921737][ T37] usb 5-1: Manufacturer: syz [ 345.921750][ T37] usb 5-1: SerialNumber: syz [ 345.963272][ T37] usb 5-1: config 0 descriptor?? [ 346.117637][ T1139] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 346.288442][ T1139] usb 3-1: Using ep0 maxpacket: 16 [ 346.319697][ T1139] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 346.319724][ T1139] usb 3-1: config 252 has no interface number 0 [ 346.319769][ T1139] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 27578, setting to 64 [ 346.366206][ T1139] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 346.366246][ T1139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.366265][ T1139] usb 3-1: Product: syz [ 346.366279][ T1139] usb 3-1: Manufacturer: syz [ 346.366292][ T1139] usb 3-1: SerialNumber: syz [ 346.486745][T11537] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 346.573400][ T37] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 346.573439][ T37] uvcvideo 5-1:0.64: No valid video chain found. [ 346.611309][ T1139] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 346.655782][ T1139] usb 3-1: USB disconnect, device number 18 [ 346.671235][ T158] usb 3-1: Failed to submit usb control message: -19 [ 346.671272][ T158] usb 3-1: unable to send the bmi data to the device: -19 [ 346.671288][ T158] usb 3-1: unable to get target info from device [ 346.671313][ T158] usb 3-1: could not get target info (-19) [ 346.671655][ T158] usb 3-1: could not probe fw (-19) [ 346.712000][ T37] usb 5-1: USB disconnect, device number 29 [ 346.911563][ T5599] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 346.911710][ T5599] Bluetooth: hci3: connection err: -111 [ 346.945018][T11536] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 348.386971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 348.396949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.066974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.086964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.096961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 350.171241][T11596] binder: 11594:11596 ioctl c0306201 200000000680 returned -14 [ 354.890807][T11644] program syz.1.2202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.808830][T11768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2241'. [ 361.007306][T11775] fuse: fd is not a fuse device [ 362.996955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 363.016939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 363.026943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 363.036974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 363.046993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 363.442132][T11806] fuse: fd is not a fuse device [ 363.538234][T11808] futex_wake_op: syz.0.2255 tries to shift op by 144; fix this program [ 364.485580][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 364.485604][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 364.573816][T11814] netlink: 'syz.2.2257': attribute type 1 has an invalid length. [ 364.684189][T11814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.851940][T11818] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 365.729960][T11840] bridge0: port 3(macvlan0) entered blocking state [ 365.730199][T11840] bridge0: port 3(macvlan0) entered disabled state [ 365.730374][T11840] macvlan0: entered allmulticast mode [ 365.730390][T11840] ip6gretap0: entered allmulticast mode [ 365.733169][T11840] macvlan0: entered promiscuous mode [ 366.011821][T11842] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2267'. [ 366.327108][ T818] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 366.416373][T11856] fuse: fd is not a fuse device [ 366.477058][ T818] usb 3-1: Using ep0 maxpacket: 8 [ 366.479618][ T818] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 366.479672][ T818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.479694][ T818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.479719][ T818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.479742][ T818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.479793][ T818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.479814][ T818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.711816][T11865] cgroup: noprefix used incorrectly [ 366.823804][ T36] audit: type=1400 audit(1777462028.255:223): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11862 comm="syz.1.2275" saddr=100.1.0.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 366.929663][T11874] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2280'. [ 367.016363][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 367.016392][T11878] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.396187][ T37] usb 3-1: USB disconnect, device number 19 [ 370.612179][T11917] syz_tun: entered allmulticast mode [ 371.448463][T11924] netlink: 'syz.1.2296': attribute type 8 has an invalid length. [ 372.567170][ T818] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 372.938506][ T818] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 372.938537][ T818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.938557][ T818] usb 1-1: Product: syz [ 372.938572][ T818] usb 1-1: Manufacturer: syz [ 372.938586][ T818] usb 1-1: SerialNumber: syz [ 372.971712][ T818] usb 1-1: config 0 descriptor?? [ 373.964308][ T818] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 374.450583][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 374.718870][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 375.396246][ T818] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 375.440389][ T818] usb 1-1: USB disconnect, device number 16 [ 378.339355][T11994] IPVS: persistence engine module ip_vs_pe_ not found [ 378.533001][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.727208][T12019] overlayfs: failed to resolve './file0': -2 [ 380.716954][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 381.192693][T12039] overlayfs: failed to clone upperpath [ 385.745480][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2342'. [ 385.879566][T12074] futex_wake_op: syz.4.2343 tries to shift op by 36; fix this program [ 388.215712][T12087] netlink: 'syz.0.2347': attribute type 4 has an invalid length. [ 388.215727][T12087] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2347'. [ 389.675368][T12106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.014560][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 393.079875][T12128] overlayfs: failed to clone upperpath [ 393.383123][T12127] bond4: entered promiscuous mode [ 393.383600][T12127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.290356][T12157] netlink: 'syz.0.2367': attribute type 10 has an invalid length. [ 397.148525][T12157] macvlan1: entered allmulticast mode [ 397.153828][T12157] veth1_vlan: entered allmulticast mode [ 397.159039][T12157] team0: Port device macvlan1 added [ 402.122082][T12202] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 402.122113][T12202] overlayfs: failed to set xattr on upper [ 402.122121][T12202] overlayfs: ...falling back to redirect_dir=nofollow. [ 402.122129][T12202] overlayfs: ...falling back to index=off. [ 402.122138][T12202] overlayfs: ...falling back to uuid=null. [ 403.365346][T12204] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 408.892150][T12286] binder: 12285:12286 ioctl c0306201 2000000007c0 returned -14 [ 409.958413][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'. [ 411.617579][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618017][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618164][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618305][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618441][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618579][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618725][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618862][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.618999][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.619123][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.619251][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.619379][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.619501][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.619631][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.621994][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622139][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622262][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622400][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622535][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622672][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622815][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.622952][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.623089][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.623225][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.623353][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.623492][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.623629][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624068][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624215][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624408][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624529][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624642][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624772][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.624885][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625003][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625123][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625244][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625371][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625492][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625610][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625737][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625852][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.625964][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626083][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626205][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626324][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626455][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626604][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626732][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.626860][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.631362][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.631501][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.631626][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.631760][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.631883][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632012][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632139][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632261][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632401][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632520][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.632639][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637016][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637146][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637309][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637442][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637561][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637691][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637827][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.637954][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638082][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638209][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638347][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638469][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638589][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638704][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638853][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.638980][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639105][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639233][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639355][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639479][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639602][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639719][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639851][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.639976][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640104][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640231][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640357][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640472][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640597][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640719][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640848][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.640972][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641103][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641229][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641373][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641495][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641621][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.641790][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 411.825191][ T4910] Bluetooth: hci4: Unknown advertising packet type: 0x19 [ 411.825211][ T4910] Bluetooth: hci4: Unknown advertising packet type: 0x1f [ 411.825228][ T4910] Bluetooth: hci4: Unknown advertising packet type: 0x31 [ 411.825240][ T4910] Bluetooth: hci4: Malformed LE Event: 0x0d [ 429.566844][T12489] trusted_key: encrypted_key: insufficient parameters specified [ 437.411535][T12562] tipc: Started in network mode [ 437.411566][T12562] tipc: Node identity 223bde25d702, cluster identity 4711 [ 437.412055][T12562] tipc: Enabled bearer , priority 0 [ 437.413026][T12562] syzkaller0: entered promiscuous mode [ 437.413046][T12562] syzkaller0: entered allmulticast mode [ 437.663565][T12574] tipc: Resetting bearer [ 439.954086][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.475108][T12558] tipc: Resetting bearer [ 443.581797][T12558] tipc: Disabling bearer [ 449.107314][ T31] tipc: Node number set to 4114210341 [ 450.347540][T12650] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2518'. [ 454.251460][T12686] tipc: Enabling of bearer rejected, failed to enable media [ 454.530552][T12697] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2532'. [ 466.300887][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.353593][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.370336][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.386501][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.392213][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.008201][ T4910] Bluetooth: hci5: command tx timeout [ 471.108970][ T4910] Bluetooth: hci5: command tx timeout [ 472.604652][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 472.630756][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 472.658654][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.659909][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.660738][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.994679][T12816] hugetlbfs: syz.0.2566 (12816): Using mlock ulimits for SHM_HUGETLB is obsolete [ 473.653310][ T5599] Bluetooth: hci5: command tx timeout [ 475.751254][ T4910] Bluetooth: hci5: command tx timeout [ 475.787331][ T4910] Bluetooth: hci6: command tx timeout [ 478.854934][ T4910] Bluetooth: hci6: command tx timeout [ 480.451527][ T1177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.451570][ T1177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.009750][ T4910] Bluetooth: hci6: command tx timeout [ 481.234242][T12890] fuse: Bad value for 'fd' [ 482.326678][ T1177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.326700][ T1177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.232020][ T4910] Bluetooth: hci6: command tx timeout [ 484.181724][ T1177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.183185][ T1177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.322389][ T1177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.322424][ T1177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.187575][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2595'. [ 503.478465][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.673366][ T1177] macvlan0: left allmulticast mode [ 503.673389][ T1177] ip6gretap0: left allmulticast mode [ 503.736314][ T1177] macvlan0: left promiscuous mode [ 503.736749][ T1177] bridge0: port 3(macvlan0) entered disabled state [ 504.841129][ T1177] bridge_slave_1: left allmulticast mode [ 504.841177][ T1177] bridge_slave_1: left promiscuous mode [ 504.872972][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.275412][ T1177] bridge_slave_0: left allmulticast mode [ 505.418593][ T1177] bridge_slave_0: left promiscuous mode [ 505.616993][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.955380][T13045] IPv6: addrconf: prefix option has invalid lifetime [ 509.457092][ T1177] gretap0 (unregistering): left allmulticast mode [ 509.819307][ T1177] smc: removing net device bond0 with user defined pnetid SYZ2 [ 509.819801][ T1177] bond0 (unregistering): Released all slaves [ 511.092445][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 511.494376][ T36] audit: type=1326 audit(1777462170.727:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494432][ T36] audit: type=1326 audit(1777462170.727:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494471][ T36] audit: type=1326 audit(1777462170.727:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494509][ T36] audit: type=1326 audit(1777462170.727:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494548][ T36] audit: type=1326 audit(1777462170.727:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494587][ T36] audit: type=1326 audit(1777462170.727:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494626][ T36] audit: type=1326 audit(1777462170.727:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494662][ T36] audit: type=1326 audit(1777462170.736:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494719][ T36] audit: type=1326 audit(1777462170.736:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 511.494759][ T36] audit: type=1326 audit(1777462170.736:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 513.279880][T13083] overlayfs: failed to clone upperpath [ 514.708316][T12764] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.708447][T12764] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.710112][T12764] bridge_slave_0: entered allmulticast mode [ 514.751953][T12764] bridge_slave_0: entered promiscuous mode [ 514.906031][T12764] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.906158][T12764] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.906390][T12764] bridge_slave_1: entered allmulticast mode [ 514.914392][T12764] bridge_slave_1: entered promiscuous mode [ 519.062370][T13106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'. [ 520.077577][T13108] fuse: Bad value for 'fd' [ 521.444225][T13115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2637'. [ 521.460383][T13115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2637'. [ 522.683138][T13119] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 522.683161][T13119] netlink: 'syz.2.2640': attribute type 4 has an invalid length. [ 522.683174][T13119] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2640'. [ 529.349197][T12764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.818596][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 531.818639][ T36] audit: type=1326 audit(1777462189.752:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.818687][ T36] audit: type=1326 audit(1777462189.752:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.818723][ T36] audit: type=1326 audit(1777462189.752:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.818761][ T36] audit: type=1326 audit(1777462189.752:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.818798][ T36] audit: type=1326 audit(1777462189.752:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.818837][ T36] audit: type=1326 audit(1777462189.752:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.819082][ T36] audit: type=1326 audit(1777462189.752:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.819348][ T36] audit: type=1326 audit(1777462189.752:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.819469][ T36] audit: type=1326 audit(1777462189.752:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 531.820133][ T36] audit: type=1326 audit(1777462189.752:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13164 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 533.664174][T12807] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.664305][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.664555][T12807] bridge_slave_0: entered allmulticast mode [ 533.758566][T12807] bridge_slave_0: entered promiscuous mode [ 533.927719][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'. [ 535.640072][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.888584][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.871900][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.886920][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.889768][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.826260][ T5599] Bluetooth: hci0: command tx timeout [ 540.060111][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.112053][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.132574][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.133743][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.163622][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.480517][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 542.173168][ T5599] Bluetooth: hci0: command tx timeout [ 542.309603][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'. [ 542.403170][T13232] nbd: socks must be embedded in a SOCK_ITEM attr [ 542.971978][T13242] netlink: 'syz.2.2662': attribute type 3 has an invalid length. [ 544.218145][ T5599] Bluetooth: hci2: command tx timeout [ 544.596414][ T5599] Bluetooth: hci0: command tx timeout [ 544.828288][T13236] udevd[13236]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 545.087033][ T1177] hsr_slave_0: left promiscuous mode [ 545.128557][ T1177] hsr_slave_1: left promiscuous mode [ 545.129706][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.129730][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.967728][ T1177] veth1_macvtap: left promiscuous mode [ 545.973880][ T1177] veth0_macvtap: left promiscuous mode [ 545.987494][ T1177] veth1_vlan: left promiscuous mode [ 546.000351][ T1177] veth0_vlan: left promiscuous mode [ 546.437533][ T5599] Bluetooth: hci2: command tx timeout [ 547.336291][ T5599] Bluetooth: hci0: command tx timeout [ 547.833265][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 547.833282][ T36] audit: type=1326 audit(1777462204.743:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.833324][ T36] audit: type=1326 audit(1777462204.743:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.834321][ T36] audit: type=1326 audit(1777462204.743:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.834366][ T36] audit: type=1326 audit(1777462204.743:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.835613][ T36] audit: type=1326 audit(1777462204.743:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.835918][ T36] audit: type=1326 audit(1777462204.743:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.836085][ T36] audit: type=1326 audit(1777462204.743:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.836600][ T36] audit: type=1326 audit(1777462204.743:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 547.836886][ T36] audit: type=1326 audit(1777462204.743:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f745124d60e code=0x7ffc0000 [ 547.837540][ T36] audit: type=1326 audit(1777462204.743:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 548.121167][T13292] trusted_key: encrypted_key: insufficient parameters specified [ 548.710351][ T5599] Bluetooth: hci2: command tx timeout [ 549.027080][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 551.556353][ T5599] Bluetooth: hci2: command tx timeout [ 554.332351][T13334] overlayfs: failed to clone upperpath [ 555.481119][T13338] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2680'. [ 555.697604][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 558.518814][ T1177] bridge_slave_0: left allmulticast mode [ 558.518914][ T1177] bridge_slave_0: left promiscuous mode [ 558.834871][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.660760][ T1177] bridge_slave_1: left allmulticast mode [ 559.660783][ T1177] bridge_slave_1: left promiscuous mode [ 559.660940][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.784658][ T4910] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 560.810471][ T1177] bridge_slave_0: left allmulticast mode [ 560.810494][ T1177] bridge_slave_0: left promiscuous mode [ 560.810659][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.450332][ T1177] bond0 (unregistering): Released all slaves [ 564.361436][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.404668][ T1177] bond0 (unregistering): Released all slaves [ 565.604483][T13393] ip6gretap0: refused to change device tx_queue_len [ 565.793418][ T5255] 8021q: adding VLAN 0 to HW filter on device eth8 [ 565.970483][T13439] 9p: Bad value for 'rfdno' [ 567.721736][T13184] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.722148][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.722385][T13184] bridge_slave_0: entered allmulticast mode [ 567.756428][T13184] bridge_slave_0: entered promiscuous mode [ 567.810956][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.811086][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.851436][T13184] bridge_slave_1: entered allmulticast mode [ 567.869699][T13184] bridge_slave_1: entered promiscuous mode [ 568.424519][T13202] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.425499][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.425698][T13202] bridge_slave_0: entered allmulticast mode [ 568.459199][T13202] bridge_slave_0: entered promiscuous mode [ 568.508655][T13184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.647339][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.647482][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.647694][T13202] bridge_slave_1: entered allmulticast mode [ 568.671579][T13202] bridge_slave_1: entered promiscuous mode [ 568.725101][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.750960][T13184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.751276][T13474] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2715'. [ 569.163728][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.181923][T13184] team0: Port device team_slave_0 added [ 569.188309][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.209572][T13184] team0: Port device team_slave_1 added [ 569.338363][T13496] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2725'. [ 570.401203][T13500] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 570.445387][T13500] bond2 (unregistering): Released all slaves [ 570.742355][T13202] team0: Port device team_slave_0 added [ 570.743205][T13184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.743219][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.743245][T13184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.749902][T13202] team0: Port device team_slave_1 added [ 570.887370][T13184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.890394][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.890426][T13184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.166416][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.166440][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.166465][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.270302][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.270318][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.270341][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.486893][T13184] hsr_slave_0: entered promiscuous mode [ 571.495777][T13184] hsr_slave_1: entered promiscuous mode [ 571.496632][T13184] debugfs: 'hsr0' already exists in 'hsr' [ 571.496654][T13184] Cannot create hsr debugfs directory [ 571.721443][T13202] hsr_slave_0: entered promiscuous mode [ 571.722887][T13202] hsr_slave_1: entered promiscuous mode [ 571.734253][T13202] debugfs: 'hsr0' already exists in 'hsr' [ 571.734279][T13202] Cannot create hsr debugfs directory [ 572.217213][T13526] trusted_key: encrypted_key: insufficient parameters specified [ 573.956184][T13542] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2741'. [ 575.882776][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 575.882794][ T36] audit: type=1326 audit(1777462230.159:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.882841][ T36] audit: type=1326 audit(1777462230.159:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.882879][ T36] audit: type=1326 audit(1777462230.159:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.882939][ T36] audit: type=1326 audit(1777462230.159:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.882991][ T36] audit: type=1326 audit(1777462230.159:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.883032][ T36] audit: type=1326 audit(1777462230.159:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.883071][ T36] audit: type=1326 audit(1777462230.159:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.883110][ T36] audit: type=1326 audit(1777462230.178:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 575.883149][ T36] audit: type=1326 audit(1777462230.187:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13546 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 578.097546][T13184] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.155960][T13184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.279228][T13184] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 578.342991][T13582] kAFS: unable to lookup cell '(,c¾ûL' [ 578.418502][T13184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.481068][T13585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2755'. [ 578.485649][T13587] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2756'. [ 578.495887][T13184] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 578.585245][T13184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.918398][T13184] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 578.962072][T13184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.590037][T13202] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 579.728018][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.737938][T13202] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 579.816031][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.938277][T13202] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 580.016533][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.025199][T13202] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 580.697647][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.558446][T13653] veth4: entered promiscuous mode [ 581.558472][T13653] veth4: entered allmulticast mode [ 581.816169][T13184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.986771][T13184] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.086098][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.086224][ T7505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.208948][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.209044][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.389776][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 583.678477][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.058487][T13202] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.163450][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.163679][ T7557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.231309][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.231453][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.319357][T13744] ptrace attach of "./syz-executor exec"[5594] was attempted by ""[13744] [ 585.877517][ T36] audit: type=1326 audit(1777462240.341:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 585.905215][ T36] audit: type=1326 audit(1777462240.341:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 585.911759][ T36] audit: type=1326 audit(1777462240.378:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 585.913096][ T36] audit: type=1326 audit(1777462240.378:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 585.913390][ T36] audit: type=1326 audit(1777462240.378:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 586.044262][T13184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.670856][ T36] audit: type=1326 audit(1777462241.089:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13789 comm="syz.6.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 586.680352][ T36] audit: type=1326 audit(1777462241.089:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13789 comm="syz.6.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 586.685357][ T36] audit: type=1326 audit(1777462241.108:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13789 comm="syz.6.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 586.685599][ T36] audit: type=1326 audit(1777462241.108:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13789 comm="syz.6.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 586.687950][ T36] audit: type=1326 audit(1777462241.108:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13789 comm="syz.6.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 587.009811][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'. [ 587.200976][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.294823][T13184] veth0_vlan: entered promiscuous mode [ 587.340759][T13184] veth1_vlan: entered promiscuous mode [ 588.274286][T13184] veth0_macvtap: entered promiscuous mode [ 588.342146][T13184] veth1_macvtap: entered promiscuous mode [ 588.491233][T13184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.539651][T13184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.605303][T11077] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.623069][T11077] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.623916][T11077] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.624389][T11077] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.090911][T13202] veth0_vlan: entered promiscuous mode [ 590.221247][T11077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.221268][T11077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.347516][T13202] veth1_vlan: entered promiscuous mode [ 590.858043][T13880] trusted_key: encrypted_key: insufficient parameters specified [ 591.645194][T13883] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2846'. [ 591.645223][T13883] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2846'. [ 591.645238][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2846'. [ 591.686092][ T7505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.686112][ T7505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.962980][T13202] veth0_macvtap: entered promiscuous mode [ 592.157058][T13898] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.2851'. [ 592.306749][T13202] veth1_macvtap: entered promiscuous mode [ 592.382020][T13903] netlink: 1052 bytes leftover after parsing attributes in process `syz.6.2852'. [ 592.505156][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.579035][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.645513][ T7505] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.682267][ T7505] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.682844][ T7505] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.683102][ T7505] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.211413][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.211441][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.582992][ T7504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.583014][ T7504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.834276][T13947] trusted_key: encrypted_key: insufficient parameters specified [ 597.824608][T13987] QAT: failed to copy from user cfg_data. [ 598.739723][ T36] audit: type=1326 audit(1777462252.385:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.739779][ T36] audit: type=1326 audit(1777462252.385:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.744358][ T36] audit: type=1326 audit(1777462252.385:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.744407][ T36] audit: type=1326 audit(1777462252.385:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.749740][ T36] audit: type=1326 audit(1777462252.394:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.750344][ T36] audit: type=1326 audit(1777462252.394:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.750386][ T36] audit: type=1326 audit(1777462252.394:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.751200][ T36] audit: type=1326 audit(1777462252.394:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.751241][ T36] audit: type=1326 audit(1777462252.394:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14004 comm="syz.6.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 598.779636][T14008] netlink: 'syz.7.2894': attribute type 1 has an invalid length. [ 599.279421][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 599.545483][T14030] netlink: 'syz.0.2905': attribute type 9 has an invalid length. [ 600.079336][ T36] audit: type=1326 audit(1777462253.639:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14057 comm="syz.6.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 601.409069][ T5716] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 601.555555][ T5716] usb 9-1: device descriptor read/64, error -71 [ 601.954397][ T5716] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 603.043588][ T5716] usb 9-1: device descriptor read/64, error -71 [ 603.159136][T14103] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2938'. [ 603.182870][ T5716] usb usb9-port1: attempt power cycle [ 604.046351][T14135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2953'. [ 604.144040][T14139] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 604.144061][T14139] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 604.326401][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.398882][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.398916][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.398941][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.398961][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.631470][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.631503][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.825861][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.825896][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.976591][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 604.976627][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 605.023708][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 605.023742][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 605.071096][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 605.071129][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2959'. [ 606.657123][T14202] binder: Bad value for 'stats' [ 608.498658][T14285] cgroup: name respecified [ 608.680332][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 608.680349][ T36] audit: type=1326 audit(1777462261.677:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.706765][ T36] audit: type=1326 audit(1777462261.705:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.744792][ T36] audit: type=1326 audit(1777462261.743:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.744840][ T36] audit: type=1326 audit(1777462261.743:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.744880][ T36] audit: type=1326 audit(1777462261.743:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.744924][ T36] audit: type=1326 audit(1777462261.743:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.744963][ T36] audit: type=1326 audit(1777462261.743:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 608.745001][ T36] audit: type=1326 audit(1777462261.743:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14291 comm="syz.0.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 609.015843][T14304] netlink: 'syz.2.3030': attribute type 2 has an invalid length. [ 609.015863][T14304] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 609.601203][ T5815] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 610.641825][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 610.643997][ T5815] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 610.644023][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.715515][ T5815] usb 8-1: config 0 descriptor?? [ 610.827225][ T5815] as10x_usb: device has been detected [ 610.885345][ T5815] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 611.091210][T14362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.576931][ T36] audit: type=1326 audit(1777462264.353:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14364 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 611.577423][ T36] audit: type=1326 audit(1777462264.353:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14364 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 612.820840][ T5815] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 613.655452][T14166] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 613.799127][T14166] usb 9-1: device descriptor read/64, error -71 [ 614.001837][T14391] binfmt_misc: register: failed to install interpreter file ./file0 [ 614.050694][T14166] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 614.192642][ T4910] Bluetooth: hci1: unexpected subevent 0x12 length: 11 > 5 [ 614.200639][T14166] usb 9-1: device descriptor read/64, error -71 [ 614.200887][T14395] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 614.212557][ T5815] as10x_usb: error during firmware upload part1 [ 614.225978][ T5815] Registered device nBox DVB-T Dongle [ 614.249748][ T5815] usb 8-1: USB disconnect, device number 2 [ 614.318611][T14166] usb usb9-port1: attempt power cycle [ 614.717432][T14166] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 614.748002][T14166] usb 9-1: device descriptor read/8, error -71 [ 614.796823][ T5815] Unregistered device nBox DVB-T Dongle [ 614.809062][ T5815] as10x_usb: device has been disconnected [ 615.001757][T14166] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 615.113348][T14166] usb 9-1: device descriptor read/8, error -71 [ 615.232034][T14166] usb usb9-port1: unable to enumerate USB device [ 615.822075][T14439] siw: device registration error -23 [ 616.000174][T14440] Bluetooth: MGMT ver 1.23 [ 618.219454][ T5599] Bluetooth: hci0: command 0x1407 tx timeout [ 618.244775][ T4910] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 618.545761][T14476] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 618.547080][T14476] overlayfs: missing 'lowerdir' [ 619.366376][T14463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 620.276820][T14508] __nla_validate_parse: 22 callbacks suppressed [ 620.292346][T14508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3120'. [ 620.526847][ T4910] Bluetooth: hci0: command 0x1407 tx timeout [ 620.565392][ T5599] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 620.641347][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3125'. [ 620.641371][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3125'. [ 620.832451][T14527] netlink: 340 bytes leftover after parsing attributes in process `syz.8.3129'. [ 621.099679][T14539] tipc: Started in network mode [ 621.099731][T14539] tipc: Node identity e0000001, cluster identity 4711 [ 621.099784][T14539] tipc: Enabling of bearer rejected, failed to enable media [ 621.589731][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3143'. [ 621.958389][T14575] netlink: 'syz.7.3150': attribute type 2 has an invalid length. [ 621.958410][T14575] netlink: 'syz.7.3150': attribute type 8 has an invalid length. [ 621.958423][T14575] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3150'. [ 622.667291][T14601] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 623.100999][T14617] fuse: Bad value for 'fd' [ 625.395082][T14656] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 625.641065][T14661] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.3190'. [ 625.654298][T14661] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.3190'. [ 625.799643][T14665] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3191'. [ 625.902455][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3192'. [ 626.206306][T14683] overlayfs: failed to clone upperpath [ 629.704843][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3230'. [ 629.704868][T14751] netlink: 'syz.8.3230': attribute type 1 has an invalid length. [ 629.704880][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3230'. [ 629.834805][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3233'. [ 629.834842][T14756] netlink: 'syz.7.3233': attribute type 1 has an invalid length. [ 630.025449][T14764] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 630.025449][T14764] program syz.8.3236 not setting count and/or reply_len properly [ 630.838626][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 630.998645][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 631.001439][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.001543][ T9] usb 8-1: config 0 has no interfaces? [ 631.012012][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 631.012040][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.012058][ T9] usb 8-1: Product: syz [ 631.012072][ T9] usb 8-1: Manufacturer: syz [ 631.012086][ T9] usb 8-1: SerialNumber: syz [ 631.102303][ T9] usb 8-1: config 0 descriptor?? [ 631.194716][T14796] netlink: 392 bytes leftover after parsing attributes in process `syz.6.3250'. [ 631.217061][T14795] vlan2: entered allmulticast mode [ 631.217088][T14795] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 631.875688][T14819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'. [ 632.147880][T14829] overlay: Unknown parameter 'uid>00000000000000000000' [ 632.581805][T14836] openvswitch: netlink: Duplicate or invalid key (type 0). [ 632.581841][T14836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.182091][ T36] kauditd_printk_skb: 140 callbacks suppressed [ 634.182109][ T36] audit: type=1326 audit(1777462285.549:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.182157][ T36] audit: type=1326 audit(1777462285.549:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.240454][ T36] audit: type=1326 audit(1777462285.605:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.241549][ T36] audit: type=1326 audit(1777462285.605:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.241595][ T36] audit: type=1326 audit(1777462285.605:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.241634][ T36] audit: type=1326 audit(1777462285.605:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.259914][ T36] audit: type=1326 audit(1777462285.624:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.259960][ T36] audit: type=1326 audit(1777462285.624:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.259997][ T36] audit: type=1326 audit(1777462285.624:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.260034][ T36] audit: type=1326 audit(1777462285.624:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14891 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 634.390279][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.594995][ T9] usb 8-1: USB disconnect, device number 3 [ 634.642171][T14906] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3302'. [ 634.705084][T14910] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3302'. [ 635.119437][T14928] 9p: Bad value for 'rfdno' [ 635.910135][T14957] gre1: entered promiscuous mode [ 635.910161][T14957] gre1: entered allmulticast mode [ 636.516789][ T5599] Bluetooth: hci0: command 0x1407 tx timeout [ 636.518061][ T4910] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 637.987454][ T5815] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 638.134378][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 638.148408][ T5815] usb 9-1: Using ep0 maxpacket: 16 [ 638.158120][ T5815] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 638.158150][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.172611][ T5815] usb 9-1: Product: syz [ 638.172631][ T5815] usb 9-1: Manufacturer: syz [ 638.172646][ T5815] usb 9-1: SerialNumber: syz [ 638.217516][ T5815] usb 9-1: config 0 descriptor?? [ 638.240732][ T5815] gspca_main: spca508-2.14.0 probing 041e:4018 [ 638.450701][ T5815] gspca_spca508: reg_read err -32 [ 638.670852][ T5815] gspca_spca508: reg_read err -71 [ 638.676735][ T5815] gspca_spca508: reg_read err -71 [ 638.679450][ T5815] gspca_spca508: reg_read err -71 [ 638.679881][ T5815] gspca_spca508: reg write: error -71 [ 638.679980][ T5815] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 638.743786][ T5815] usb 9-1: USB disconnect, device number 9 [ 639.201369][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 639.817112][T15072] gretap0: entered promiscuous mode [ 639.832481][T15072] vlan3: entered promiscuous mode [ 640.270743][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3391'. [ 640.624801][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 640.624817][ T36] audit: type=1326 audit(1777462291.566:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.624862][ T36] audit: type=1326 audit(1777462291.576:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.667026][ T36] audit: type=1326 audit(1777462291.613:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.667071][ T36] audit: type=1326 audit(1777462291.613:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.667108][ T36] audit: type=1326 audit(1777462291.613:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.667145][ T36] audit: type=1326 audit(1777462291.613:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.667180][ T36] audit: type=1326 audit(1777462291.613:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.691619][ T36] audit: type=1326 audit(1777462291.613:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.691667][ T36] audit: type=1326 audit(1777462291.632:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 640.691712][ T36] audit: type=1326 audit(1777462291.632:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15104 comm="syz.2.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f2e1fedcdd9 code=0x7ffc0000 [ 641.385688][ T4910] Bluetooth: hci2: command tx timeout [ 642.988634][ T5715] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 643.120136][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 643.140114][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 643.140474][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 643.194632][ T5715] usb 8-1: Using ep0 maxpacket: 8 [ 643.200503][ T5715] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 643.216611][ T5715] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 643.216641][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.216661][ T5715] usb 8-1: Product: syz [ 643.216676][ T5715] usb 8-1: Manufacturer: syz [ 643.216690][ T5715] usb 8-1: SerialNumber: syz [ 643.241460][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 643.241616][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 643.307850][ T5715] usb 8-1: config 0 descriptor?? [ 643.396934][ T5715] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 643.396978][ T5715] usb 8-1: setting power ON [ 643.466808][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 643.626616][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 643.630278][ T5715] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 643.630333][ T5715] usb 8-1: media controller created [ 643.772011][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.946520][ T5715] usb 8-1: selecting invalid altsetting 6 [ 643.946544][ T5715] usb 8-1: digital interface selection failed (-22) [ 643.946573][ T5715] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 643.947761][ T5715] usb 8-1: setting power OFF [ 643.948076][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 643.948094][ T5715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 643.948108][ T5715] (NULL device *): no alternate interface [ 645.038515][ T5715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 645.060128][ T5715] usb 8-1: USB disconnect, device number 4 [ 646.000030][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 646.000048][ T36] audit: type=1326 audit(1777462296.601:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.000090][ T36] audit: type=1326 audit(1777462296.601:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.000129][ T36] audit: type=1326 audit(1777462296.601:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.000176][ T36] audit: type=1326 audit(1777462296.601:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.000214][ T36] audit: type=1326 audit(1777462296.601:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.004614][ T36] audit: type=1326 audit(1777462296.620:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.004660][ T36] audit: type=1326 audit(1777462296.620:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.004702][ T36] audit: type=1326 audit(1777462296.620:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f745128cdd9 code=0x7ffc0000 [ 646.533037][T14162] kernel read not supported for file /vcs (pid: 14162 comm: kworker/1:3) [ 646.982233][T15279] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3477'. [ 646.994412][T15279] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3477'. [ 648.251594][T15321] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 649.193495][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3513'. [ 649.228458][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 649.407603][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3518'. [ 650.138829][T15398] fuse: fd is not a fuse device [ 651.365770][T15435] program syz.7.3550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.566821][T15439] Bluetooth: MGMT ver 1.23 [ 651.832865][T15419] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 651.904607][T15447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3555'. [ 651.905922][T15447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3555'. [ 652.297739][T15458] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3561'. [ 653.930491][T15483] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 654.132841][T15495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3575'. [ 654.244698][T15495] vti0: entered promiscuous mode [ 654.244725][T15495] vti0: entered allmulticast mode [ 654.931326][T15534] afs: Unknown parameter 'smackfshatd' [ 655.650286][T15556] netlink: 'syz.8.3604': attribute type 2 has an invalid length. [ 658.404801][T15611] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3629'. [ 658.876284][T15634] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 658.927053][T15635] netlink: 'syz.6.3638': attribute type 6 has an invalid length. [ 658.927075][T15635] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3638'. [ 658.956865][T15626] IPVS: stopping backup sync thread 15634 ... [ 659.625132][T15664] CUSE: unknown device info "" [ 659.625147][T15664] CUSE: unknown device info "" [ 659.625155][T15664] CUSE: unknown device info "ÿw" [ 659.625163][T15664] CUSE: unknown device info "" [ 659.625170][T15664] CUSE: unknown device info "" [ 659.625177][T15664] CUSE: unknown device info "" [ 659.625185][T15664] CUSE: unknown device info "" [ 659.625191][T15664] CUSE: unknown device info "" [ 659.625198][T15664] CUSE: DEVNAME unspecified [ 659.815701][T15672] netlink: zone id is out of range [ 659.815716][T15672] netlink: zone id is out of range [ 659.816488][T15672] netlink: set zone limit has 8 unknown bytes [ 659.819411][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3656'. [ 659.985950][T15681] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 661.818478][T15716] vlan3: entered allmulticast mode [ 661.818501][T15716] bond0: entered allmulticast mode [ 661.818516][T15716] bond_slave_0: entered allmulticast mode [ 661.818540][T15716] bond_slave_1: entered allmulticast mode [ 661.905664][T15727] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3682'. [ 663.784511][T14166] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 663.944152][T14166] usb 9-1: Using ep0 maxpacket: 32 [ 663.946535][T14166] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.946567][T14166] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.946603][T14166] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 663.946624][T14166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.005034][T14166] usb 9-1: config 0 descriptor?? [ 664.182671][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'. [ 665.345368][T14166] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 665.345787][T14166] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -71 [ 665.473804][T14166] usb 9-1: USB disconnect, device number 10 [ 665.617715][T15789] batadv0: entered promiscuous mode [ 665.674244][T15789] macsec2: entered promiscuous mode [ 665.681971][T15789] macsec2: entered allmulticast mode [ 665.681999][T15789] batadv0: entered allmulticast mode [ 665.689516][T15789] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 665.741723][T15789] batadv0: left allmulticast mode [ 665.742156][T15789] batadv0: left promiscuous mode [ 667.977328][T15838] netlink: 'syz.7.3732': attribute type 1 has an invalid length. [ 667.977351][T15838] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3732'. [ 667.977378][T15838] netlink: 658 bytes leftover after parsing attributes in process `syz.7.3732'. [ 669.125629][T15873] vlan4: entered allmulticast mode [ 669.135102][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3751'. [ 669.135142][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3751'. [ 669.429203][ T4910] Bluetooth: hci0: command 0x1407 tx timeout [ 669.442785][T15887] bridge0: port 3(veth0_to_bridge) entered blocking state [ 669.443621][T15887] bridge0: port 3(veth0_to_bridge) entered disabled state [ 669.495803][T15887] veth0_to_bridge: entered allmulticast mode [ 669.946346][T15887] veth0_to_bridge: entered promiscuous mode [ 669.986450][T15887] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.015365][T15887] bridge0: port 3(veth0_to_bridge) entered blocking state [ 670.015568][T15887] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 670.063814][T15911] sch_tbf: burst 0 is lower than device ip6gre0 mtu (9216) ! [ 671.650461][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3788'. [ 673.953753][T16011] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3812'. [ 673.953794][T16011] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3812'. [ 673.953811][T16011] netlink: 'syz.7.3812': attribute type 5 has an invalid length. [ 673.953824][T16011] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3812'. [ 675.313731][ T36] audit: type=1326 audit(1777462324.001:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313782][ T36] audit: type=1326 audit(1777462324.001:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313822][ T36] audit: type=1326 audit(1777462324.011:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313862][ T36] audit: type=1326 audit(1777462324.011:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313903][ T36] audit: type=1326 audit(1777462324.011:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313954][ T36] audit: type=1326 audit(1777462324.011:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.313994][ T36] audit: type=1326 audit(1777462324.011:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.314039][ T36] audit: type=1326 audit(1777462324.029:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.314079][ T36] audit: type=1326 audit(1777462324.029:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.314117][ T36] audit: type=1326 audit(1777462324.039:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f821722cdd9 code=0x7ffc0000 [ 675.717693][T16054] netlink: 'syz.7.3833': attribute type 2 has an invalid length. [ 676.128163][T16077] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3841'. [ 676.197067][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3843'. [ 676.217666][T16084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 676.217682][T16084] IPv6: NLM_F_CREATE should be set when creating new route [ 676.217733][T16084] IPv6: NLM_F_CREATE should be set when creating new route [ 676.230977][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3845'. [ 676.231433][ T7557] bond0: (slave bond_slave_0): interface is now down [ 676.231460][ T7557] bond0: (slave bond_slave_1): interface is now down [ 676.378537][ T1177] bond0: (slave bond_slave_0): interface is now down [ 676.378560][ T1177] bond0: (slave bond_slave_1): interface is now down [ 676.475730][ T1177] bond0: now running without any active interface! [ 676.826060][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 676.891396][T16107] netlink: 'syz.7.3855': attribute type 36 has an invalid length. [ 676.942837][T16107] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 676.942860][T16107] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 678.074781][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 678.220846][T16158] bridge0: port 3(batadv1) entered blocking state [ 678.221046][T16158] bridge0: port 3(batadv1) entered disabled state [ 678.221260][T16158] batadv1: entered allmulticast mode [ 678.254192][T16158] batadv1: entered promiscuous mode [ 678.684734][ T1177] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 678.684754][ T1177] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 678.949557][T16187] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3894'. [ 679.000459][ T5715] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 679.166717][ T5715] usb 9-1: unable to get BOS descriptor or descriptor too short [ 679.171004][ T5715] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 679.191931][ T5715] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 679.191961][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.191981][ T5715] usb 9-1: Product: syz [ 679.191995][ T5715] usb 9-1: Manufacturer: syz [ 679.192009][ T5715] usb 9-1: SerialNumber: syz [ 679.535054][ T68] ------------[ cut here ]------------ [ 679.535068][ T68] time_after(jiffies, timeout) [ 679.535082][ T68] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4b9/0x970, CPU#1: kworker/u8:4/68 [ 679.535192][ T68] Modules linked in: [ 679.535213][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 679.535290][ T68] Tainted: [L]=SOFTLOCKUP [ 679.535295][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.535303][ T68] Workqueue: iou_exit io_ring_exit_work [ 679.535328][ T68] RIP: 0010:io_ring_exit_work+0x4b9/0x970 [ 679.535375][ T68] Code: c6 05 31 31 48 0e 01 48 c7 c7 e0 f9 a5 8b be 25 00 00 00 48 c7 c2 00 f5 a5 8b e8 72 e2 75 00 e9 7e fe ff ff e8 a8 cb 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 679.535417][ T68] RSP: 0018:ffffc9000153f940 EFLAGS: 00010293 [ 679.535455][ T68] RAX: ffffffff812aa598 RBX: 0000000100008e82 RCX: ffff88801d715c40 [ 679.535466][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.535474][ T68] RBP: ffffc9000153fad0 R08: 0000000000000000 R09: 0000000000000000 [ 679.535483][ T68] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: dffffc0000000000 [ 679.535492][ T68] R13: 0000000100008e7d R14: 0000000000002000 R15: ffff88803c304000 [ 679.535502][ T68] FS: 0000000000000000(0000) GS:ffff88812627c000(0000) knlGS:0000000000000000 [ 679.535513][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.535522][ T68] CR2: 00007f74520356b8 CR3: 000000004465c000 CR4: 00000000003526f0 [ 679.535535][ T68] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 679.535545][ T68] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 679.535555][ T68] Call Trace: [ 679.535592][ T68] [ 679.535653][ T68] ? trace_hrtimer_start+0x82/0x200 [ 679.535768][ T68] ? __pfx_io_ring_exit_work+0x10/0x10 [ 679.535805][ T68] ? process_scheduled_works+0xa70/0x1860 [ 679.535832][ T68] ? process_scheduled_works+0xa70/0x1860 [ 679.535848][ T68] process_scheduled_works+0xb5d/0x1860 [ 679.535885][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.535904][ T68] ? assign_work+0x3d5/0x5e0 [ 679.535923][ T68] worker_thread+0xa53/0xfc0 [ 679.535959][ T68] kthread+0x388/0x470 [ 679.535992][ T68] ? __pfx_worker_thread+0x10/0x10 [ 679.536006][ T68] ? __pfx_kthread+0x10/0x10 [ 679.536025][ T68] ret_from_fork+0x514/0xb70 [ 679.536061][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 679.536079][ T68] ? __switch_to+0xc79/0x1410 [ 679.536108][ T68] ? __pfx_kthread+0x10/0x10 [ 679.536129][ T68] ret_from_fork_asm+0x1a/0x30 [ 679.536173][ T68] [ 679.536180][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.536197][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 679.536216][ T68] Tainted: [L]=SOFTLOCKUP [ 679.536220][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.536229][ T68] Workqueue: iou_exit io_ring_exit_work [ 679.536247][ T68] Call Trace: [ 679.536253][ T68] [ 679.536258][ T68] vpanic+0x56c/0xa60 [ 679.536276][ T68] ? __pfx__printk+0x10/0x10 [ 679.536294][ T68] ? __pfx_vpanic+0x10/0x10 [ 679.536307][ T68] ? is_bpf_text_address+0x292/0x2b0 [ 679.536383][ T68] ? is_bpf_text_address+0x26/0x2b0 [ 679.536407][ T68] panic+0xc5/0xd0 [ 679.536423][ T68] ? __pfx_panic+0x10/0x10 [ 679.536445][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 679.536466][ T68] __warn+0x315/0x4c0 [ 679.536481][ T68] ? io_ring_exit_work+0x4b9/0x970 [ 679.536499][ T68] ? io_ring_exit_work+0x4b9/0x970 [ 679.536515][ T68] __report_bug+0x29a/0x540 [ 679.536610][ T68] ? io_ring_exit_work+0x4b9/0x970 [ 679.536629][ T68] ? __pfx___report_bug+0x10/0x10 [ 679.536654][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.536712][ T68] ? io_ring_exit_work+0x4b9/0x970 [ 679.536727][ T68] report_bug+0x16a/0x220 [ 679.536747][ T68] ? io_ring_exit_work+0x4b9/0x970 [ 679.536761][ T68] ? io_ring_exit_work+0x4bb/0x970 [ 679.536777][ T68] handle_bug+0x9c/0x200 [ 679.536835][ T68] exc_invalid_op+0x1a/0x50 [ 679.536849][ T68] asm_exc_invalid_op+0x1a/0x20 [ 679.536881][ T68] RIP: 0010:io_ring_exit_work+0x4b9/0x970 [ 679.536899][ T68] Code: c6 05 31 31 48 0e 01 48 c7 c7 e0 f9 a5 8b be 25 00 00 00 48 c7 c2 00 f5 a5 8b e8 72 e2 75 00 e9 7e fe ff ff e8 a8 cb 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 679.536911][ T68] RSP: 0018:ffffc9000153f940 EFLAGS: 00010293 [ 679.536924][ T68] RAX: ffffffff812aa598 RBX: 0000000100008e82 RCX: ffff88801d715c40 [ 679.536935][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.536944][ T68] RBP: ffffc9000153fad0 R08: 0000000000000000 R09: 0000000000000000 [ 679.536953][ T68] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: dffffc0000000000 [ 679.536963][ T68] R13: 0000000100008e7d R14: 0000000000002000 R15: ffff88803c304000 [ 679.536979][ T68] ? io_ring_exit_work+0x4b8/0x970 [ 679.537001][ T68] ? trace_hrtimer_start+0x82/0x200 [ 679.537027][ T68] ? __pfx_io_ring_exit_work+0x10/0x10 [ 679.537056][ T68] ? process_scheduled_works+0xa70/0x1860 [ 679.537071][ T68] ? process_scheduled_works+0xa70/0x1860 [ 679.537089][ T68] process_scheduled_works+0xb5d/0x1860 [ 679.537130][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.537153][ T68] ? assign_work+0x3d5/0x5e0 [ 679.537175][ T68] worker_thread+0xa53/0xfc0 [ 679.537212][ T68] kthread+0x388/0x470 [ 679.537231][ T68] ? __pfx_worker_thread+0x10/0x10 [ 679.537245][ T68] ? __pfx_kthread+0x10/0x10 [ 679.537264][ T68] ret_from_fork+0x514/0xb70 [ 679.537282][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 679.537298][ T68] ? __switch_to+0xc79/0x1410 [ 679.537321][ T68] ? __pfx_kthread+0x10/0x10 [ 679.537339][ T68] ret_from_fork_asm+0x1a/0x30 [ 679.537368][ T68] [ 679.537807][ T68] Kernel Offset: disabled