last executing test programs: 4m50.601578726s ago: executing program 4 (id=80): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300fff2) 4m49.084601966s ago: executing program 4 (id=86): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x8b) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty, 0x0, 0x1, 0x8c31162}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m48.144312802s ago: executing program 4 (id=88): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 4m47.445645265s ago: executing program 4 (id=91): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) r5 = syz_open_dev$audion(0x0, 0x3, 0x1) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) 4m35.153575268s ago: executing program 4 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) 4m30.750972006s ago: executing program 4 (id=121): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) 4m15.312297326s ago: executing program 32 (id=121): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) 3m4.09008004s ago: executing program 1 (id=317): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x3ffff, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000008c0), 0x2000006c, r1}, 0x38) 2m59.896429553s ago: executing program 1 (id=320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000a40)='pim6reg1\x00') 2m58.361361337s ago: executing program 1 (id=325): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x20000010) 2m57.476137433s ago: executing program 1 (id=329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 2m56.801930704s ago: executing program 1 (id=333): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x10}, {r0, 0x91}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4040}, {r0}, {r1, 0x20}], 0x6, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x81c6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.380031094s ago: executing program 1 (id=337): socket(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0xe8, 0xb2, 0x4, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, r6, 0x1000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000b00068000000889078ac1414bbac1414aafffe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17edb45db0e2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(r7, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m36.106540637s ago: executing program 33 (id=337): socket(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0xe8, 0xb2, 0x4, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, r6, 0x1000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000b00068000000889078ac1414bbac1414aafffe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17edb45db0e2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(r7, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m10.603981467s ago: executing program 5 (id=403): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x6, 0xa2, &(0x7f0000001100)=ANY=[@ANYBLOB="4ced9cd7b6f07659a724d27ae792c1d3a6238d511c7644012416f37ea7b7e1418572eb6de7c0d16c3ab8ff2ac23dde85035ba22c36622a07afba2b2b18dcb89112c5027df5503cc43bcaca658a4073cf37f46b224420c63ec8cebf00004ccf7b911384beb1089044b1a09fd852", @ANYBLOB="94ca33b49168277f14eecf7580c1a3b8a55d6eb6903995d003772d1dfc4b867ddf1128206943693ba1e18054e3bc115974de66ffc3cfcf05d8e840f652c0c82dec6f9352b75c2f81c12eb84e3aa98e0df7647e35e6ab4a63ba24c1465c1f49a9e2344a3105279847ff424d40d0dda1df82da5c9d64c725"], 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000002700)=0x1d, 0x4) syz_io_uring_setup(0x467c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/70, &(0x7f0000000100)=0x46) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r3, 0x84, 0x71, 0x0, 0x0) 2m7.927773655s ago: executing program 5 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 2m6.989909799s ago: executing program 5 (id=407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m6.009299494s ago: executing program 5 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x50}}, 0x20044084) close(r0) 2m5.319605804s ago: executing program 5 (id=411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat$cgroup(r3, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) fchown(r4, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) 1m54.698917099s ago: executing program 5 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1m39.435501833s ago: executing program 34 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 30.064138538s ago: executing program 2 (id=589): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x11122, 0x0) 28.614388258s ago: executing program 2 (id=592): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x50) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44) 27.936992686s ago: executing program 2 (id=595): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) 27.833733315s ago: executing program 3 (id=596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES8], 0x0) 25.49045461s ago: executing program 2 (id=598): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x20000010) 22.709992081s ago: executing program 2 (id=602): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x11122, 0x0) 22.141171297s ago: executing program 3 (id=603): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 21.217263561s ago: executing program 3 (id=605): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) close(r0) 20.508049677s ago: executing program 2 (id=606): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20.206828588s ago: executing program 3 (id=608): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) 19.27123443s ago: executing program 3 (id=612): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x20000010) 18.481616363s ago: executing program 3 (id=614): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 12.673910091s ago: executing program 7 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x69, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x51, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec"}}}}, 0x77) 10.916329409s ago: executing program 0 (id=623): unshare(0x22020600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = io_uring_setup(0x3a74, &(0x7f0000002b00)={0x0, 0x9182, 0x100, 0x3, 0x1e5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002b80), 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000005980)={0x1, 0x0, 0x0, &(0x7f00000058c0)=[{0x0}], 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') sendmsg$nl_route_sched(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 10.913855542s ago: executing program 7 (id=624): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x20000010) 10.513583146s ago: executing program 6 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 10.063273308s ago: executing program 7 (id=626): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700", @ANYRESDEC=r0], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 9.84163567s ago: executing program 0 (id=627): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(r2, 0x0, 0x400200, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1003ff}) r4 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0xd070, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) 9.358061692s ago: executing program 7 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x11122, 0x0) 8.863188165s ago: executing program 6 (id=629): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffc1, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d61d4e2ab1e031b2ff6fdade11f0b43761e3a79d61607b3e36c7477d3297b96e8d6145f66f4dd08b8702f27d96ed60372e02eb62d0dffef", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x39) 8.365138089s ago: executing program 0 (id=630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES8], 0x0) 7.257864748s ago: executing program 7 (id=631): r0 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.751173606s ago: executing program 35 (id=606): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.641184053s ago: executing program 6 (id=633): unshare(0x22020600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = io_uring_setup(0x3a74, &(0x7f0000002b00)={0x0, 0x9182, 0x100, 0x3, 0x1e5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002b80), 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000005980)={0x1, 0x0, 0x0, &(0x7f00000058c0)=[{0x0}], 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') sendmsg$nl_route_sched(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 2.98668528s ago: executing program 36 (id=614): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 2.32214352s ago: executing program 0 (id=635): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) 2.163765374s ago: executing program 6 (id=636): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x20000010) 1.342874771s ago: executing program 0 (id=637): unshare(0x22020600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = io_uring_setup(0x3a74, &(0x7f0000002b00)={0x0, 0x9182, 0x100, 0x3, 0x1e5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002b80), 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000005980)={0x1, 0x0, 0x0, &(0x7f00000058c0)=[{0x0}], 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') sendmsg$nl_route_sched(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1.192637209s ago: executing program 6 (id=638): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc7000000", @ANYRESDEC=r0], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 908.050984ms ago: executing program 7 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 8.023636ms ago: executing program 6 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=641): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x11122, 0x0) kernel console output (not intermixed with test programs): or: local softirq work is pending, handler #40!!! [ 187.211614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 187.232106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.334614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 188.001595][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 188.448358][ T29] audit: type=1326 audit(1772884942.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 188.651438][ T29] audit: type=1326 audit(1772884942.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 188.752795][ T29] audit: type=1326 audit(1772884942.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 188.865966][ T29] audit: type=1326 audit(1772884942.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 188.918266][ T29] audit: type=1326 audit(1772884942.060:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 188.992427][ T29] audit: type=1326 audit(1772884942.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 189.064682][ T29] audit: type=1326 audit(1772884942.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 189.143261][ T29] audit: type=1326 audit(1772884942.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 189.284387][ T29] audit: type=1326 audit(1772884942.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 190.264560][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.290612][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.353382][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 190.773792][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.833379][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.054919][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.113313][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.271569][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.284949][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.604631][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.633340][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.474491][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.530940][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.044490][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.230626][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 197.242515][ T5828] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.272275][ T5828] usb 2-1: config 0 has no interface number 0 [ 197.299683][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.329347][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.380315][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.413017][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.460466][ T5828] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.523534][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.592785][ T5828] usb 2-1: config 0 descriptor?? [ 197.707912][ T5828] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 197.997166][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 198.003661][ T5828] usb 2-1: USB disconnect, device number 2 [ 198.068864][ T5828] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 199.562349][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 199.650274][ T6015] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 199.799336][ T6015] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.890618][ T6015] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9'. [ 200.038108][ T6022] syzkaller1: entered promiscuous mode [ 200.123437][ T6022] syzkaller1: entered allmulticast mode [ 201.683286][ T6041] Zero length message leads to an empty skb [ 202.379675][ T6047] binder_alloc: 6045: binder_alloc_buf, no vma [ 204.412898][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.419481][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.925249][ T129] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 204.972833][ T129] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 205.005349][ T129] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 205.035757][ T129] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 205.987221][ T5833] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 206.370400][ T5833] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 206.391064][ T5833] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 206.412622][ T5833] usb 1-1: config 8 has no interface number 0 [ 206.428549][ T5833] usb 1-1: config 8 interface 177 has no altsetting 0 [ 206.441300][ T5833] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 206.451502][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.576999][ T5404] usb 1-1: USB disconnect, device number 2 [ 215.543777][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 215.621706][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 216.575973][ T6091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'. [ 217.010591][ T5833] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 217.200817][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 217.320436][ T5833] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 217.329802][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.418352][ T5833] usb 3-1: Product: syz [ 217.455341][ T5833] usb 3-1: Manufacturer: syz [ 217.484382][ T5833] usb 3-1: SerialNumber: syz [ 217.531835][ T5833] usb 3-1: config 0 descriptor?? [ 217.605760][ T5833] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 218.225017][ T5833] gspca_sonixj: reg_w1 err -71 [ 218.274560][ T5833] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 218.317785][ T5833] usb 3-1: USB disconnect, device number 2 [ 218.407383][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 218.710787][ T5404] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.750367][ T5828] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 218.932712][ T5404] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.999226][ T5404] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.999818][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 219.098011][ T5404] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.163114][ T5404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.207464][ T6105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.230769][ T5828] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 219.306533][ T5404] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.369698][ T5828] usb 2-1: config 0 has no interface number 0 [ 219.501663][ T5828] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.578669][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.668538][ T5828] usb 2-1: Product: syz [ 219.688860][ T5828] usb 2-1: Manufacturer: syz [ 219.772613][ T5828] usb 2-1: SerialNumber: syz [ 219.811876][ T5828] usb 2-1: config 0 descriptor?? [ 219.877619][ T5828] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.129619][ T5828] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.233823][ T5828] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.479386][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 220.526498][ T5404] usb 4-1: USB disconnect, device number 2 [ 220.733574][ T6103] fuse: Bad value for 'fd' [ 221.516477][ T6122] netlink: 80 bytes leftover after parsing attributes in process `syz.0.34'. [ 222.670313][ T6124] random: crng reseeded on system resumption [ 222.890694][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 222.899142][ T5828] usb 2-1: USB disconnect, device number 3 [ 222.918695][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 223.145354][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 223.451173][ T5828] quatech2 2-1:0.51: device disconnected [ 226.671107][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 227.518629][ T6157] tipc: Started in network mode [ 227.537830][ T6157] tipc: Node identity a68078f60a28, cluster identity 4711 [ 227.571181][ T6157] tipc: Enabled bearer , priority 0 [ 227.674523][ T6158] syzkaller0: entered promiscuous mode [ 227.807403][ T6158] syzkaller0: entered allmulticast mode [ 227.932217][ T6157] tipc: Resetting bearer [ 228.012573][ T6156] tipc: Resetting bearer [ 228.043710][ T6156] tipc: Disabling bearer [ 229.091362][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 230.263220][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.271986][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.798885][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.947129][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.926725][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.110863][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.142632][ T129] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.173845][ T129] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.888066][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 235.371550][ T6222] random: crng reseeded on system resumption [ 238.436608][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 239.190617][ T6245] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 241.078682][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 242.369529][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 244.380486][ T6293] random: crng reseeded on system resumption [ 245.280925][ T6296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.729404][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 249.999386][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 249.999582][ T29] audit: type=1326 audit(1772885006.240:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 250.386476][ T6340] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.318035][ T29] audit: type=1326 audit(1772885006.240:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 251.507185][ T29] audit: type=1326 audit(1772885006.250:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 251.580032][ T29] audit: type=1326 audit(1772885006.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 251.667908][ T29] audit: type=1326 audit(1772885006.250:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 251.715781][ T29] audit: type=1326 audit(1772885006.250:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 251.797943][ T29] audit: type=1326 audit(1772885006.260:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 252.190571][ T29] audit: type=1326 audit(1772885006.260:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 252.220370][ T29] audit: type=1326 audit(1772885006.260:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 252.250441][ T29] audit: type=1326 audit(1772885006.270:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 253.260547][ T5868] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 253.510635][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 253.569244][ T5868] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 253.620751][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.667640][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.775230][ T5868] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 253.818271][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.849305][ T5868] usb 4-1: Product: syz [ 253.882092][ T5868] usb 4-1: Manufacturer: syz [ 253.941977][ T5868] usb 4-1: SerialNumber: syz [ 253.999461][ T5868] usb 4-1: config 0 descriptor?? [ 256.031097][ T5868] usb 4-1: USB disconnect, device number 3 [ 256.277568][ T6371] random: crng reseeded on system resumption [ 258.014159][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 258.014233][ T29] audit: type=1326 audit(1772885013.860:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 258.055434][ T6377] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.870568][ T29] audit: type=1326 audit(1772885013.870:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 258.975442][ T29] audit: type=1326 audit(1772885013.890:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.028274][ T29] audit: type=1326 audit(1772885013.890:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.255414][ T29] audit: type=1326 audit(1772885013.900:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.364073][ T29] audit: type=1326 audit(1772885013.900:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.690362][ T29] audit: type=1326 audit(1772885013.910:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.786499][ T29] audit: type=1326 audit(1772885013.910:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 259.970157][ T29] audit: type=1326 audit(1772885013.920:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 260.117755][ T29] audit: type=1326 audit(1772885013.920:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 261.467800][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 263.351197][ T6409] random: crng reseeded on system resumption [ 264.284654][ T6414] random: crng reseeded on system resumption [ 265.992373][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.998974][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.023086][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 266.023162][ T29] audit: type=1326 audit(1772885021.810:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 266.297856][ T6420] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 266.838258][ T29] audit: type=1326 audit(1772885021.820:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.010621][ T29] audit: type=1326 audit(1772885021.830:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.040708][ T29] audit: type=1326 audit(1772885021.830:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.146865][ T29] audit: type=1326 audit(1772885021.830:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.220461][ T29] audit: type=1326 audit(1772885021.840:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.249041][ T29] audit: type=1326 audit(1772885021.840:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.292860][ T29] audit: type=1326 audit(1772885021.850:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.774993][ T29] audit: type=1326 audit(1772885021.850:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 267.810760][ T29] audit: type=1326 audit(1772885021.860:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 268.119066][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 268.959653][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.450503][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 271.450738][ T29] audit: type=1326 audit(1772885027.660:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 273.081631][ T29] audit: type=1326 audit(1772885027.660:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 273.440446][ T6455] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 274.233501][ T29] audit: type=1326 audit(1772885027.670:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.298924][ T29] audit: type=1326 audit(1772885027.670:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.410392][ T29] audit: type=1326 audit(1772885027.680:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.496938][ T29] audit: type=1326 audit(1772885027.680:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.620850][ T29] audit: type=1326 audit(1772885027.690:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.714122][ T29] audit: type=1326 audit(1772885027.690:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.809030][ T29] audit: type=1326 audit(1772885027.690:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 274.900166][ T29] audit: type=1326 audit(1772885027.700:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 275.059352][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 277.257766][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.271589][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.282591][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.308946][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.321185][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.251084][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 279.251282][ T29] audit: type=1326 audit(1772885035.460:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 279.431714][ T5070] Bluetooth: hci5: command tx timeout [ 279.991900][ T29] audit: type=1326 audit(1772885035.460:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 280.795442][ T29] audit: type=1326 audit(1772885035.470:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 281.007665][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 281.280777][ T6513] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 281.530763][ T5070] Bluetooth: hci5: command tx timeout [ 281.612989][ T29] audit: type=1326 audit(1772885035.470:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 281.708870][ T29] audit: type=1326 audit(1772885035.470:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 281.832812][ T29] audit: type=1326 audit(1772885035.480:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 281.908339][ T29] audit: type=1326 audit(1772885035.480:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 282.010094][ T29] audit: type=1326 audit(1772885035.480:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 282.129589][ T29] audit: type=1326 audit(1772885035.490:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 282.231326][ T29] audit: type=1326 audit(1772885035.490:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 282.561285][ T147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.706099][ T147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.886672][ T147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.372746][ T147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.603924][ T5070] Bluetooth: hci5: command tx timeout [ 283.946639][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.961721][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.971952][ T6489] bridge_slave_0: entered allmulticast mode [ 284.011639][ T6489] bridge_slave_0: entered promiscuous mode [ 284.150961][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.169189][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.189677][ T6489] bridge_slave_1: entered allmulticast mode [ 284.262202][ T6489] bridge_slave_1: entered promiscuous mode [ 284.347227][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 284.502084][ T147] bridge_slave_1: left allmulticast mode [ 284.507918][ T147] bridge_slave_1: left promiscuous mode [ 284.532464][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.563897][ T147] bridge_slave_0: left allmulticast mode [ 284.569793][ T147] bridge_slave_0: left promiscuous mode [ 284.598599][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.684259][ T5070] Bluetooth: hci5: command tx timeout [ 285.837326][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.916630][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.992859][ T147] bond0 (unregistering): Released all slaves [ 286.037477][ T147] bond1 (unregistering): Released all slaves [ 286.197423][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.384309][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.821554][ T6489] team0: Port device team_slave_0 added [ 286.989610][ T6489] team0: Port device team_slave_1 added [ 287.323294][ T147] hsr_slave_0: left promiscuous mode [ 287.333774][ T147] hsr_slave_1: left promiscuous mode [ 287.344908][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.363147][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.376948][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.417681][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.458179][ T147] veth1_macvtap: left promiscuous mode [ 287.468535][ T147] veth0_macvtap: left promiscuous mode [ 287.962681][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 288.281684][ T147] team0 (unregistering): Port device team_slave_1 removed [ 288.335587][ T147] team0 (unregistering): Port device team_slave_0 removed [ 288.797571][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.829739][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.898569][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.012961][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.049397][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.148366][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.794769][ T6489] hsr_slave_0: entered promiscuous mode [ 289.851306][ T6489] hsr_slave_1: entered promiscuous mode [ 289.912911][ T6489] debugfs: 'hsr0' already exists in 'hsr' [ 289.918884][ T6489] Cannot create hsr debugfs directory [ 290.101188][ T6596] warning: `syz.0.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 292.117164][ T6623] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure [ 292.626800][ T6489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.816584][ T6489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.012663][ T6489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.041438][ T6612] Bluetooth: hci3: command 0x0406 tx timeout [ 293.048233][ T6612] Bluetooth: hci1: command 0x0406 tx timeout [ 293.054756][ T6612] Bluetooth: hci4: command 0x0406 tx timeout [ 293.084152][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 293.136892][ T6489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.738393][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.220442][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.324850][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.332252][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.417747][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.425100][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.553701][ T6653] syzkaller0: entered promiscuous mode [ 296.635360][ T6653] syzkaller0: entered allmulticast mode [ 298.758516][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.103548][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 301.548615][ T6707] syzkaller0: entered promiscuous mode [ 301.585543][ T6707] syzkaller0: entered allmulticast mode [ 302.298614][ T6489] veth0_vlan: entered promiscuous mode [ 302.508632][ T6489] veth1_vlan: entered promiscuous mode [ 303.124191][ T6489] veth0_macvtap: entered promiscuous mode [ 303.546897][ T6489] veth1_macvtap: entered promiscuous mode [ 304.104596][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.238600][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.439164][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.519728][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.528901][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.695761][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.752254][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 308.549677][ T6781] usb usb7: usbfs: process 6781 (syz.1.226) did not claim interface 0 before use [ 310.630393][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 310.862691][ T5833] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 310.901260][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.953700][ T5833] usb 2-1: Product: syz [ 310.958169][ T5833] usb 2-1: Manufacturer: syz [ 310.994927][ T5833] usb 2-1: SerialNumber: syz [ 311.056974][ T5833] usb 2-1: config 0 descriptor?? [ 311.138114][ T5833] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 311.350272][ T5833] sonixb 2-1:0.0: Error reading register 00: -71 [ 311.427708][ T5833] usb 2-1: USB disconnect, device number 4 [ 314.614909][ T6457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.680999][ T6457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.289825][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.298040][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.147239][ T6842] usb usb7: usbfs: process 6842 (syz.1.237) did not claim interface 0 before use [ 319.385864][ T6872] syzkaller1: entered promiscuous mode [ 319.420407][ T6872] syzkaller1: entered allmulticast mode [ 319.954838][ T6879] usb usb7: usbfs: process 6879 (syz.3.249) did not claim interface 0 before use [ 321.969803][ T6892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.268531][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 324.268601][ T29] audit: type=1326 audit(1772885079.750:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 326.293008][ T29] audit: type=1326 audit(1772885079.760:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 326.790253][ T29] audit: type=1326 audit(1772885079.760:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 326.841093][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.847751][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.947629][ T29] audit: type=1326 audit(1772885079.770:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.095649][ T29] audit: type=1326 audit(1772885079.770:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.287897][ T29] audit: type=1326 audit(1772885079.780:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.370495][ T29] audit: type=1326 audit(1772885079.780:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.522130][ T29] audit: type=1326 audit(1772885079.780:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.544730][ T29] audit: type=1326 audit(1772885079.790:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.570601][ T29] audit: type=1326 audit(1772885079.790:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 327.700871][ T5868] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 327.962726][ T5868] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 328.041608][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.096646][ T5868] usb 2-1: Product: syz [ 328.126053][ T5868] usb 2-1: Manufacturer: syz [ 328.181419][ T5868] usb 2-1: SerialNumber: syz [ 328.209845][ T5868] usb 2-1: config 0 descriptor?? [ 328.359295][ T5868] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 328.469787][ T5868] sonixb 2-1:0.0: Error reading register 00: -71 [ 328.554119][ T5868] usb 2-1: USB disconnect, device number 5 [ 330.970326][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 331.061374][ T6975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 331.170241][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 331.231648][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 331.266781][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.344234][ T5833] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 331.396668][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.443518][ T5833] usb 3-1: Product: syz [ 331.460470][ T5833] usb 3-1: Manufacturer: syz [ 331.483748][ T5833] usb 3-1: SerialNumber: syz [ 331.549325][ T5833] usb 3-1: config 0 descriptor?? [ 331.627290][ T5833] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.675135][ T5833] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 332.206917][ T5833] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 332.260306][ T5833] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 333.597694][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 333.597766][ T29] audit: type=1326 audit(1772885089.040:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 333.611148][ T5833] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 334.588269][ T5833] em28xx 3-1:0.0: No AC97 audio processor [ 334.633022][ T29] audit: type=1326 audit(1772885089.050:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 334.880520][ T6990] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 335.521070][ T29] audit: type=1326 audit(1772885089.050:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 335.706777][ T29] audit: type=1326 audit(1772885089.060:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 335.824424][ T29] audit: type=1326 audit(1772885089.060:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 335.842683][ T5833] usb 3-1: USB disconnect, device number 3 [ 335.910956][ T5833] em28xx 3-1:0.0: Disconnecting em28xx [ 335.935821][ T5833] em28xx 3-1:0.0: Freeing device [ 335.958080][ T29] audit: type=1326 audit(1772885089.060:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 336.098753][ T29] audit: type=1326 audit(1772885089.070:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 336.234215][ T29] audit: type=1326 audit(1772885089.080:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 336.336383][ T29] audit: type=1326 audit(1772885089.080:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 336.432288][ T29] audit: type=1326 audit(1772885089.090:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 341.200167][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 341.200245][ T29] audit: type=1326 audit(1772885096.700:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 342.196055][ T29] audit: type=1326 audit(1772885096.700:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.053747][ T29] audit: type=1326 audit(1772885096.710:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.175335][ T29] audit: type=1326 audit(1772885096.710:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.271687][ T29] audit: type=1326 audit(1772885096.720:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.401007][ T29] audit: type=1326 audit(1772885096.720:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.460222][ T29] audit: type=1326 audit(1772885096.730:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.561131][ T29] audit: type=1326 audit(1772885096.730:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 343.657478][ T29] audit: type=1326 audit(1772885096.730:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 344.171695][ T29] audit: type=1326 audit(1772885096.740:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 346.063290][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 347.284610][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 347.474844][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 347.508729][ T5833] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 347.547414][ T5833] usb 1-1: config 0 has no interface number 0 [ 347.608490][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.667209][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 348.197416][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 348.197615][ T29] audit: type=1326 audit(1772885104.430:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 348.850088][ T5833] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.006044][ T29] audit: type=1326 audit(1772885104.440:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 349.847557][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.874940][ T5833] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 350.240376][ T7133] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 350.858316][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.984065][ T5833] usb 1-1: config 0 descriptor?? [ 350.997666][ T29] audit: type=1326 audit(1772885104.440:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 351.164670][ T29] audit: type=1326 audit(1772885104.450:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 351.342197][ T29] audit: type=1326 audit(1772885104.450:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 351.544998][ T29] audit: type=1326 audit(1772885104.450:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 351.730697][ T5833] usb 1-1: can't set config #0, error -71 [ 351.750146][ T29] audit: type=1326 audit(1772885104.460:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 351.810947][ T5833] usb 1-1: USB disconnect, device number 3 [ 351.958956][ T29] audit: type=1326 audit(1772885104.460:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 352.053500][ T29] audit: type=1326 audit(1772885104.460:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 352.172463][ T29] audit: type=1326 audit(1772885104.470:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 354.427121][ T7174] netlink: 148 bytes leftover after parsing attributes in process `syz.0.331'. [ 354.490909][ T7174] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.185914][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 356.185984][ T29] audit: type=1326 audit(1772885111.630:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 357.191820][ T29] audit: type=1326 audit(1772885111.630:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 357.221248][ T29] audit: type=1326 audit(1772885111.640:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 357.258131][ T29] audit: type=1326 audit(1772885111.640:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 357.440762][ T7188] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 358.300994][ T29] audit: type=1326 audit(1772885111.640:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 358.396953][ T29] audit: type=1326 audit(1772885111.650:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 358.487621][ T29] audit: type=1326 audit(1772885111.650:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 358.595258][ T29] audit: type=1326 audit(1772885111.650:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 358.711859][ T29] audit: type=1326 audit(1772885111.660:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 358.849394][ T29] audit: type=1326 audit(1772885111.660:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 359.529271][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 361.067503][ T7217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.077111][ T7242] input: syz1 as /devices/virtual/input/input5 [ 364.506238][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 364.506435][ T29] audit: type=1326 audit(1772885120.730:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 365.248326][ T29] audit: type=1326 audit(1772885120.730:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 365.530449][ T29] audit: type=1326 audit(1772885120.730:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 366.285496][ T29] audit: type=1326 audit(1772885120.740:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 366.481099][ T7261] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 367.208957][ T29] audit: type=1326 audit(1772885120.740:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 367.286899][ T29] audit: type=1326 audit(1772885120.740:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 367.447664][ T29] audit: type=1326 audit(1772885120.750:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 367.562197][ T29] audit: type=1326 audit(1772885120.750:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 367.649195][ T29] audit: type=1326 audit(1772885120.750:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 367.780299][ T29] audit: type=1326 audit(1772885120.760:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 369.871908][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.642857][ T5833] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 370.878834][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.914013][ T5833] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.016580][ T5833] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 371.063301][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.085396][ T5833] usb 1-1: Product: syz [ 371.102758][ T5833] usb 1-1: Manufacturer: syz [ 371.130115][ T5833] usb 1-1: SerialNumber: syz [ 371.165442][ T5833] usb 1-1: config 0 descriptor?? [ 371.935468][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 371.935666][ T29] audit: type=1326 audit(1772885128.180:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 372.741995][ T29] audit: type=1326 audit(1772885128.180:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 372.772799][ T29] audit: type=1326 audit(1772885128.190:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 372.812221][ T29] audit: type=1326 audit(1772885128.200:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 373.730394][ T29] audit: type=1326 audit(1772885128.200:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 373.813030][ T29] audit: type=1326 audit(1772885128.200:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 374.000189][ T7298] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 374.707709][ T29] audit: type=1326 audit(1772885128.200:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 374.824020][ T29] audit: type=1326 audit(1772885128.210:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 374.863170][ T5404] usb 1-1: USB disconnect, device number 4 [ 374.948639][ T29] audit: type=1326 audit(1772885128.210:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 375.047060][ T29] audit: type=1326 audit(1772885128.220:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 376.839221][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.861856][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.882396][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.903081][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.945917][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.211394][ T7323] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 379.075611][ T5780] Bluetooth: hci2: command tx timeout [ 379.811648][ T5404] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 380.220537][ T5404] usb 3-1: Using ep0 maxpacket: 8 [ 380.600166][ T5404] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.952334][ T5404] usb 3-1: config 0 has no interface number 0 [ 380.958670][ T5404] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.119574][ T5404] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 381.132530][ T5780] Bluetooth: hci2: command tx timeout [ 381.184817][ T5404] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.222519][ T5404] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.257052][ T5404] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 381.268418][ T5404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.293968][ T5404] usb 3-1: config 0 descriptor?? [ 381.315728][ T5404] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 381.715392][ T5404] usb 3-1: USB disconnect, device number 4 [ 381.742764][ T5404] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 381.815040][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.014219][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.170116][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 382.274118][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.341684][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 382.366339][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 382.415002][ T5833] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 382.456392][ T5833] usb 4-1: config 0 has no interface number 0 [ 382.489241][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.544839][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 382.606411][ T5833] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.654873][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.691452][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.724121][ T5833] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.753706][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.798029][ T5833] usb 4-1: config 0 descriptor?? [ 382.906009][ T5833] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 383.201849][ T5780] Bluetooth: hci2: command tx timeout [ 384.096533][ T12] bridge_slave_1: left allmulticast mode [ 384.110871][ T12] bridge_slave_1: left promiscuous mode [ 384.137115][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.206072][ T12] bridge_slave_0: left allmulticast mode [ 384.224961][ T12] bridge_slave_0: left promiscuous mode [ 384.260966][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.874349][ T10] usb 4-1: USB disconnect, device number 4 [ 384.903551][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 385.280488][ T5780] Bluetooth: hci2: command tx timeout [ 387.332064][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.180570][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.208957][ T12] bond0 (unregistering): Released all slaves [ 388.257456][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.264028][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.474498][ T12] tipc: Left network mode [ 388.511256][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.542999][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.598698][ T7326] bridge_slave_0: entered allmulticast mode [ 388.634005][ T7326] bridge_slave_0: entered promiscuous mode [ 388.830446][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.837930][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.898308][ T7326] bridge_slave_1: entered allmulticast mode [ 388.912879][ T7326] bridge_slave_1: entered promiscuous mode [ 389.204524][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 389.395590][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 389.426701][ T5833] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 389.462863][ T5833] usb 6-1: config 0 has no interface number 0 [ 389.482656][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.516088][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.526837][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 389.556879][ T5833] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.557034][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.557230][ T5833] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 389.557366][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.557538][ T7348] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 389.557781][ T7348] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 389.557961][ T7348] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 389.558141][ T7348] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 389.584346][ T5833] usb 6-1: config 0 descriptor?? [ 389.606289][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.616353][ T5833] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 389.955069][ T12] hsr_slave_0: left promiscuous mode [ 389.958898][ T12] hsr_slave_1: left promiscuous mode [ 389.962374][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.962707][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.020725][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.020808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.507497][ T12] veth1_macvtap: left promiscuous mode [ 390.507631][ T12] veth0_macvtap: left promiscuous mode [ 390.507911][ T12] veth1_vlan: left promiscuous mode [ 390.508222][ T12] veth0_vlan: left promiscuous mode [ 392.096205][ T5833] usb 6-1: USB disconnect, device number 2 [ 392.111507][ T5833] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 392.883997][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 393.070676][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 393.085009][ T5833] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 393.101754][ T5833] usb 6-1: config 0 has no interface number 0 [ 393.130082][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.209290][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 393.257162][ T5833] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.308493][ T5833] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.350281][ T5833] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 393.410174][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.480194][ T5833] usb 6-1: config 0 descriptor?? [ 393.532528][ T5833] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 393.774927][ T5868] usb 6-1: USB disconnect, device number 3 [ 393.827539][ T5868] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 394.141826][ T12] team0 (unregistering): Port device team_slave_1 removed [ 394.222508][ T12] team0 (unregistering): Port device team_slave_0 removed [ 395.341296][ T7326] team0: Port device team_slave_0 added [ 395.460068][ T7326] team0: Port device team_slave_1 added [ 395.919572][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.026590][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.180475][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.285232][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.350453][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.480080][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.004126][ T7326] hsr_slave_0: entered promiscuous mode [ 397.062944][ T7326] hsr_slave_1: entered promiscuous mode [ 397.100558][ T7326] debugfs: 'hsr0' already exists in 'hsr' [ 397.106761][ T7326] Cannot create hsr debugfs directory [ 400.643081][ T5070] Bluetooth: hci5: command 0x0406 tx timeout [ 401.320602][ T5868] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 401.484266][ T7326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.520656][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 401.589021][ T7326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.590792][ T5868] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 401.639202][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.697518][ T5868] usb 6-1: Product: syz [ 401.698772][ T7326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.724388][ T5868] usb 6-1: Manufacturer: syz [ 401.729188][ T5868] usb 6-1: SerialNumber: syz [ 401.768319][ T5868] usb 6-1: config 0 descriptor?? [ 401.846482][ T5868] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 401.855075][ T7326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 402.234664][ T5868] gspca_sonixj: reg_r err -71 [ 402.266097][ T5868] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 402.375955][ T5868] usb 6-1: USB disconnect, device number 4 [ 403.318379][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.609361][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.752372][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.760018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.780343][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 403.876350][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.883883][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.991543][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 404.046484][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 404.076409][ T10] usb 4-1: config 0 has no interface number 0 [ 404.118891][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.162137][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 404.256082][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.342857][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.401364][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 404.465437][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.548794][ T10] usb 4-1: config 0 descriptor?? [ 404.641794][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 404.833579][ T10] usb 4-1: USB disconnect, device number 5 [ 404.875321][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 406.268298][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.714188][ T7326] veth0_vlan: entered promiscuous mode [ 410.883150][ T7326] veth1_vlan: entered promiscuous mode [ 411.571793][ T7326] veth0_macvtap: entered promiscuous mode [ 411.674662][ T7326] veth1_macvtap: entered promiscuous mode [ 411.988020][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.192635][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.210704][ T5404] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 412.421012][ T34] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.443063][ T34] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.454973][ T5404] usb 1-1: Using ep0 maxpacket: 8 [ 412.504065][ T5404] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 412.560474][ T5404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.568690][ T5404] usb 1-1: Product: syz [ 412.581113][ T34] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.631166][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.640493][ T5404] usb 1-1: Manufacturer: syz [ 412.645242][ T5404] usb 1-1: SerialNumber: syz [ 412.712382][ T5404] usb 1-1: config 0 descriptor?? [ 412.836595][ T5404] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 413.198278][ T5404] gspca_sonixj: reg_r err -71 [ 413.208599][ T5404] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 413.269479][ T5404] usb 1-1: USB disconnect, device number 5 [ 417.829304][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 422.804146][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 423.041778][ T10] usb 4-1: config index 0 descriptor too short (expected 25380, got 36) [ 423.071957][ T10] usb 4-1: config 128 has too many interfaces: 203, using maximum allowed: 32 [ 423.110095][ T10] usb 4-1: config 128 has an invalid descriptor of length 83, skipping remainder of the config [ 423.147269][ T10] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 203 [ 423.194714][ T10] usb 4-1: config index 1 descriptor too short (expected 25380, got 36) [ 423.210108][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.218118][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.270106][ T10] usb 4-1: config 128 has too many interfaces: 203, using maximum allowed: 32 [ 423.324021][ T10] usb 4-1: config 128 has an invalid descriptor of length 83, skipping remainder of the config [ 423.361497][ T10] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 203 [ 423.396005][ T10] usb 4-1: config index 2 descriptor too short (expected 25380, got 36) [ 423.452719][ T10] usb 4-1: config 128 has too many interfaces: 203, using maximum allowed: 32 [ 423.484620][ T10] usb 4-1: config 128 has an invalid descriptor of length 83, skipping remainder of the config [ 423.502486][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.540223][ T10] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 203 [ 423.551110][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.617762][ T10] usb 4-1: config index 3 descriptor too short (expected 25380, got 36) [ 423.670241][ T10] usb 4-1: config 128 has too many interfaces: 203, using maximum allowed: 32 [ 423.722780][ T10] usb 4-1: config 128 has an invalid descriptor of length 83, skipping remainder of the config [ 423.820628][ T10] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 203 [ 423.875644][ T10] usb 4-1: config index 4 descriptor too short (expected 25380, got 36) [ 423.940108][ T10] usb 4-1: config 128 has too many interfaces: 203, using maximum allowed: 32 [ 423.983667][ T10] usb 4-1: config 128 has an invalid descriptor of length 83, skipping remainder of the config [ 424.027752][ T10] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 203 [ 424.100455][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 424.109734][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.430252][ T10] usb 4-1: string descriptor 0 read error: -71 [ 424.487966][ T10] usb 4-1: USB disconnect, device number 6 [ 425.849293][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 425.849498][ T29] audit: type=1326 audit(1772885181.910:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 427.267614][ T29] audit: type=1326 audit(1772885181.920:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.345059][ T29] audit: type=1326 audit(1772885181.930:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.401387][ T29] audit: type=1326 audit(1772885181.930:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.424483][ T29] audit: type=1326 audit(1772885181.940:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.447465][ T29] audit: type=1326 audit(1772885181.940:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.471708][ T29] audit: type=1326 audit(1772885181.950:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.498517][ T29] audit: type=1326 audit(1772885181.950:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.617924][ T29] audit: type=1326 audit(1772885181.960:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 428.732998][ T29] audit: type=1326 audit(1772885181.960:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 429.923280][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 430.111192][ T5404] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 430.346260][ T5404] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 430.418596][ T5404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.468959][ T5404] usb 3-1: Product: syz [ 430.500463][ T5404] usb 3-1: Manufacturer: syz [ 430.505257][ T5404] usb 3-1: SerialNumber: syz [ 430.585182][ T5404] usb 3-1: config 0 descriptor?? [ 430.699277][ T5404] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 431.107191][ T5404] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 431.301175][ T5404] usb 3-1: USB disconnect, device number 5 [ 431.923757][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 432.211027][ T7663] batadv0: entered promiscuous mode [ 432.332238][ T7663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.416969][ T7663] batadv0: left promiscuous mode [ 433.191582][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 434.519612][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 434.519684][ T29] audit: type=1326 audit(1772885189.980:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 435.608119][ T29] audit: type=1326 audit(1772885189.980:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 435.984379][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.034811][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.320972][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.363994][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.389783][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.460085][ T29] audit: type=1326 audit(1772885189.990:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 436.659256][ T29] audit: type=1326 audit(1772885189.990:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 436.743566][ T29] audit: type=1326 audit(1772885189.990:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 436.946460][ T29] audit: type=1326 audit(1772885190.000:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 437.130443][ T29] audit: type=1326 audit(1772885190.000:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 437.250834][ T29] audit: type=1326 audit(1772885190.010:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 437.390986][ T29] audit: type=1326 audit(1772885190.010:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 437.460898][ T29] audit: type=1326 audit(1772885190.020:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 437.935460][ T7705] netlink: 'syz.0.453': attribute type 15 has an invalid length. [ 437.966872][ T7705] netlink: 'syz.0.453': attribute type 7 has an invalid length. [ 438.480519][ T5070] Bluetooth: hci0: command tx timeout [ 439.303840][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 439.481182][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.459'. [ 440.250964][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 440.251203][ T29] audit: type=1326 audit(1772885196.510:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 440.897920][ T5070] Bluetooth: hci0: command tx timeout [ 443.055415][ T29] audit: type=1326 audit(1772885196.510:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.176460][ T29] audit: type=1326 audit(1772885196.520:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.369655][ T29] audit: type=1326 audit(1772885196.520:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.485069][ T1147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.491985][ T29] audit: type=1326 audit(1772885196.530:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.607581][ T29] audit: type=1326 audit(1772885196.530:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.835351][ T29] audit: type=1326 audit(1772885196.530:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.861601][ T29] audit: type=1326 audit(1772885196.540:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 443.964873][ T29] audit: type=1326 audit(1772885196.540:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 444.000267][ T7734] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 444.080694][ T1147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.115987][ T29] audit: type=1326 audit(1772885196.550:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 444.904963][ T1147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.216650][ T1147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.006818][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 446.180641][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.209280][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.248373][ T7683] bridge_slave_0: entered allmulticast mode [ 446.274986][ T7683] bridge_slave_0: entered promiscuous mode [ 446.358991][ T1147] bridge_slave_1: left allmulticast mode [ 446.407933][ T1147] bridge_slave_1: left promiscuous mode [ 446.415268][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.512054][ T1147] bridge_slave_0: left allmulticast mode [ 446.530723][ T1147] bridge_slave_0: left promiscuous mode [ 446.579266][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.244843][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 448.245051][ T29] audit: type=1326 audit(1772885204.460:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 448.910085][ T29] audit: type=1326 audit(1772885204.470:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 449.717373][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.726580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.883353][ T29] audit: type=1326 audit(1772885204.480:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 449.909528][ T29] audit: type=1326 audit(1772885204.480:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.084165][ T7797] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.350101][ T29] audit: type=1326 audit(1772885204.480:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.440282][ T29] audit: type=1326 audit(1772885204.490:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.545356][ T29] audit: type=1326 audit(1772885204.490:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.718845][ T29] audit: type=1326 audit(1772885204.500:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.868995][ T29] audit: type=1326 audit(1772885204.500:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.937517][ T29] audit: type=1326 audit(1772885204.510:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 450.989736][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.075667][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.138526][ T1147] bond0 (unregistering): Released all slaves [ 451.199338][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.227248][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.297449][ T7683] bridge_slave_1: entered allmulticast mode [ 451.397591][ T7683] bridge_slave_1: entered promiscuous mode [ 453.823927][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.240559][ T7820] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 454.300598][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 454.300668][ T29] audit: type=1326 audit(1772885210.570:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 454.386364][ T29] audit: type=1326 audit(1772885210.580:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 454.744388][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.118390][ T7683] team0: Port device team_slave_0 added [ 455.242122][ T7683] team0: Port device team_slave_1 added [ 455.372011][ T1147] hsr_slave_0: left promiscuous mode [ 455.403768][ T1147] hsr_slave_1: left promiscuous mode [ 455.432662][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.471695][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.500781][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.508344][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.557347][ T1147] veth1_macvtap: left promiscuous mode [ 455.571658][ T1147] veth0_macvtap: left promiscuous mode [ 455.577534][ T1147] veth1_vlan: left promiscuous mode [ 455.600891][ T1147] veth0_vlan: left promiscuous mode [ 457.252853][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 457.984894][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 458.048841][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 458.702151][ T7847] syzkaller0: entered promiscuous mode [ 458.714193][ T7847] syzkaller0: entered allmulticast mode [ 458.864502][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.920162][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.975164][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.994355][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.059686][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.234295][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.990358][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 460.195753][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 460.266331][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 460.336711][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.377169][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 460.430469][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.447100][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.458989][ T5868] usb 3-1: Product: syz [ 460.510088][ T5868] usb 3-1: Manufacturer: syz [ 460.514912][ T5868] usb 3-1: SerialNumber: syz [ 460.593100][ T5868] usb 3-1: config 0 descriptor?? [ 460.628952][ T5868] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 460.698200][ T5868] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 460.716093][ T7683] hsr_slave_0: entered promiscuous mode [ 460.747259][ T7683] hsr_slave_1: entered promiscuous mode [ 460.774170][ T7683] debugfs: 'hsr0' already exists in 'hsr' [ 460.791223][ T7683] Cannot create hsr debugfs directory [ 461.275063][ T5868] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 461.300598][ T5868] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 461.543183][ T5868] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 461.570249][ T5868] em28xx 3-1:0.0: No AC97 audio processor [ 461.709313][ T5868] usb 3-1: USB disconnect, device number 6 [ 461.748443][ T5868] em28xx 3-1:0.0: Disconnecting em28xx [ 461.807315][ T5868] em28xx 3-1:0.0: Freeing device [ 462.250602][ T7908] syzkaller1: entered promiscuous mode [ 462.260313][ T7908] syzkaller1: entered allmulticast mode [ 463.429575][ T29] audit: type=1326 audit(1772885219.660:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 463.704606][ T29] audit: type=1326 audit(1772885219.670:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 463.731428][ T29] audit: type=1326 audit(1772885219.670:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 463.755066][ T29] audit: type=1326 audit(1772885219.680:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 464.705151][ T29] audit: type=1326 audit(1772885219.680:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 465.440104][ T7923] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.662811][ T29] audit: type=1326 audit(1772885219.680:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 465.853619][ T29] audit: type=1326 audit(1772885219.690:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 465.975024][ T29] audit: type=1326 audit(1772885219.690:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 466.107223][ T29] audit: type=1326 audit(1772885219.690:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 466.115918][ T7683] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.220403][ T29] audit: type=1326 audit(1772885219.700:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 466.247707][ T7683] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.358784][ T7683] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.516109][ T7683] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.525401][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 468.551394][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.790400][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.810861][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 468.931473][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.938932][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.015950][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.023573][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.406903][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.527'. [ 471.966327][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.723215][ T8007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.326138][ T7683] veth0_vlan: entered promiscuous mode [ 475.498080][ T7683] veth1_vlan: entered promiscuous mode [ 476.109613][ T7683] veth0_macvtap: entered promiscuous mode [ 476.381521][ T7683] veth1_macvtap: entered promiscuous mode [ 476.675962][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.967799][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.182272][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.222084][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.403655][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.481441][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.400999][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 480.272122][ T8062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.837875][ T8079] syz.3.547: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.838262][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.3.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.838413][ T8079] Tainted: [L]=SOFTLOCKUP [ 480.838460][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.838550][ T8079] Call Trace: [ 480.838600][ T8079] [ 480.838647][ T8079] __dump_stack+0x26/0x30 [ 480.838879][ T8079] dump_stack_lvl+0x14c/0x1c0 [ 480.839038][ T8079] dump_stack+0x1e/0x25 [ 480.839174][ T8079] warn_alloc+0x46f/0x6a0 [ 480.839414][ T8079] ? kmsan_get_metadata+0xf1/0x160 [ 480.839668][ T8079] __vmalloc_node_range_noprof+0x142/0x2d80 [ 480.839862][ T8079] ? should_fail_ex+0x45/0x8c0 [ 480.840048][ T8079] ? kmsan_get_metadata+0xf1/0x160 [ 480.840219][ T8079] ? kmsan_get_metadata+0xf1/0x160 [ 480.840391][ T8079] ? kmsan_get_metadata+0xf1/0x160 [ 480.840572][ T8079] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 480.840765][ T8079] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 480.840956][ T8079] ? kmsan_get_metadata+0xf1/0x160 [ 480.841134][ T8079] vmalloc_user_noprof+0xce/0x140 [ 480.841274][ T8079] ? xskq_create+0x11d/0x290 [ 480.841513][ T8079] xskq_create+0x11d/0x290 [ 480.841651][ T8079] xsk_init_queue+0xce/0x180 [ 480.841781][ T8079] xsk_setsockopt+0x7f6/0xfe0 [ 480.841917][ T8079] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.842048][ T8079] __sys_setsockopt+0x43e/0x580 [ 480.842326][ T8079] __ia32_sys_setsockopt+0xf3/0x1a0 [ 480.842520][ T8079] ia32_sys_call+0x34c3/0x4360 [ 480.842651][ T8079] __do_fast_syscall_32+0x17f/0x3f0 [ 480.842857][ T8079] do_fast_syscall_32+0x37/0x80 [ 480.843001][ T8079] do_SYSENTER_32+0x1f/0x30 [ 480.843129][ T8079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.843295][ T8079] RIP: 0023:0xf7fc2f6c [ 480.843406][ T8079] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 480.843516][ T8079] RSP: 002b:00000000f546550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 480.843634][ T8079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 480.843719][ T8079] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 480.843797][ T8079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.843872][ T8079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 480.843957][ T8079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.844062][ T8079] [ 481.028892][ T8079] Mem-Info: [ 481.028963][ T8079] active_anon:6856 inactive_anon:0 isolated_anon:0 [ 481.028963][ T8079] active_file:3669 inactive_file:39981 isolated_file:0 [ 481.028963][ T8079] unevictable:768 dirty:92 writeback:0 [ 481.028963][ T8079] slab_reclaimable:5256 slab_unreclaimable:22246 [ 481.028963][ T8079] mapped:30018 shmem:1386 pagetables:1716 [ 481.028963][ T8079] sec_pagetables:0 bounce:0 [ 481.028963][ T8079] kernel_misc_reclaimable:0 [ 481.028963][ T8079] free:362865 free_pcp:13635 free_cma:0 [ 481.029300][ T8079] Node 0 active_anon:27424kB inactive_anon:0kB active_file:14676kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120072kB dirty:368kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:6504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.029596][ T8079] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.030491][ T8079] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.030841][ T8079] lowmem_reserve[]: 0 927 1240 1240 1240 [ 481.031088][ T8079] Node 0 DMA32 free:521612kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8528kB inactive_anon:0kB active_file:10500kB inactive_file:83680kB unevictable:0kB writepending:192kB zspages:0kB present:3129332kB managed:949812kB mlocked:0kB bounce:0kB free_pcp:44256kB local_pcp:21520kB free_cma:0kB [ 481.031437][ T8079] lowmem_reserve[]: 0 0 313 313 313 [ 481.031666][ T8079] Node 0 Normal free:18264kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18944kB inactive_anon:0kB active_file:4176kB inactive_file:76052kB unevictable:1536kB writepending:244kB zspages:0kB present:1048580kB managed:320836kB mlocked:0kB bounce:0kB free_pcp:10284kB local_pcp:4992kB free_cma:0kB [ 481.032019][ T8079] lowmem_reserve[]: 0 0 0 0 0 [ 481.032243][ T8079] Node 1 Normal free:907488kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986016kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.032578][ T8079] lowmem_reserve[]: 0 0 0 0 0 [ 481.032825][ T8079] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 481.033486][ T8079] Node 0 DMA32: 1019*4kB (UME) 536*8kB (UM) 266*16kB (UME) 122*32kB (UME) 128*64kB (UME) 128*128kB (UME) 91*256kB (UME) 35*512kB (UM) 19*1024kB (UME) 13*2048kB (UME) 96*4096kB (M) = 521612kB [ 481.034495][ T8079] Node 0 Normal: 2*4kB (ME) 0*8kB 1*16kB (U) 10*32kB (U) 2*64kB (U) 5*128kB (UME) 5*256kB (U) 1*512kB (E) 1*1024kB (E) 1*2048kB (U) 3*4096kB (M) = 18264kB [ 481.035463][ T8079] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 12*16kB (UM) 11*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 219*4096kB (M) = 907488kB [ 481.036589][ T8079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.036690][ T8079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.036782][ T8079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.036992][ T8079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.037094][ T8079] 45032 total pagecache pages [ 481.037166][ T8079] 0 pages in swap cache [ 481.037225][ T8079] Free swap = 124996kB [ 481.037276][ T8079] Total swap = 124996kB [ 481.037351][ T8079] 2097051 pages RAM [ 481.037401][ T8079] 0 pages HighMem/MovableOnly [ 481.037510][ T8079] 1531861 pages reserved [ 481.037568][ T8079] 0 pages cma reserved [ 481.689013][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 483.150183][ T5833] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 483.280776][ T5833] usb 1-1: device descriptor read/64, error -71 [ 483.531820][ T5833] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 483.708085][ T5833] usb 1-1: device descriptor read/64, error -71 [ 483.815052][ T5833] usb usb1-port1: attempt power cycle [ 484.170090][ T5833] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 484.195269][ T5833] usb 1-1: device descriptor read/8, error -71 [ 484.430733][ T5833] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 484.457761][ T5833] usb 1-1: device descriptor read/8, error -71 [ 484.565281][ T5833] usb usb1-port1: unable to enumerate USB device [ 484.989710][ T7348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.992304][ T7348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.322492][ T7348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.322583][ T7348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.463021][ T8121] syzkaller1: entered promiscuous mode [ 485.463089][ T8121] syzkaller1: entered allmulticast mode [ 488.506717][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.733699][ T8167] syzkaller1: entered promiscuous mode [ 489.739365][ T8167] syzkaller1: entered allmulticast mode [ 493.520245][ T8189] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 495.348319][ T8202] syz.2.572: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 495.348642][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.2.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.348795][ T8202] Tainted: [L]=SOFTLOCKUP [ 495.348849][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.348924][ T8202] Call Trace: [ 495.348971][ T8202] [ 495.349015][ T8202] __dump_stack+0x26/0x30 [ 495.349167][ T8202] dump_stack_lvl+0x14c/0x1c0 [ 495.349317][ T8202] dump_stack+0x1e/0x25 [ 495.349450][ T8202] warn_alloc+0x46f/0x6a0 [ 495.349628][ T8202] ? kmsan_get_metadata+0xf1/0x160 [ 495.349818][ T8202] __vmalloc_node_range_noprof+0x142/0x2d80 [ 495.350043][ T8202] ? should_fail_ex+0x45/0x8c0 [ 495.350178][ T8202] ? kmsan_get_metadata+0xf1/0x160 [ 495.350401][ T8202] ? kmsan_get_metadata+0xf1/0x160 [ 495.350615][ T8202] ? kmsan_get_metadata+0xf1/0x160 [ 495.350805][ T8202] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.351005][ T8202] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 495.351148][ T8202] ? kmsan_get_metadata+0xf1/0x160 [ 495.351346][ T8202] vmalloc_user_noprof+0xce/0x140 [ 495.351498][ T8202] ? xskq_create+0x11d/0x290 [ 495.351642][ T8202] xskq_create+0x11d/0x290 [ 495.351788][ T8202] xsk_init_queue+0xce/0x180 [ 495.351921][ T8202] xsk_setsockopt+0x7f6/0xfe0 [ 495.352071][ T8202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 495.352203][ T8202] __sys_setsockopt+0x43e/0x580 [ 495.352439][ T8202] __ia32_sys_setsockopt+0xf3/0x1a0 [ 495.352649][ T8202] ia32_sys_call+0x34c3/0x4360 [ 495.352779][ T8202] __do_fast_syscall_32+0x17f/0x3f0 [ 495.352940][ T8202] do_fast_syscall_32+0x37/0x80 [ 495.353082][ T8202] do_SYSENTER_32+0x1f/0x30 [ 495.353214][ T8202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.353387][ T8202] RIP: 0023:0xf706ef6c [ 495.353484][ T8202] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 495.353601][ T8202] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 495.353729][ T8202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 495.353818][ T8202] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 495.353900][ T8202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.353977][ T8202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.354058][ T8202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.354173][ T8202] [ 495.397934][ T8202] Mem-Info: [ 495.397996][ T8202] active_anon:9700 inactive_anon:0 isolated_anon:0 [ 495.397996][ T8202] active_file:3669 inactive_file:39988 isolated_file:0 [ 495.397996][ T8202] unevictable:768 dirty:94 writeback:0 [ 495.397996][ T8202] slab_reclaimable:5291 slab_unreclaimable:22496 [ 495.397996][ T8202] mapped:34958 shmem:4238 pagetables:1709 [ 495.397996][ T8202] sec_pagetables:0 bounce:0 [ 495.397996][ T8202] kernel_misc_reclaimable:0 [ 495.397996][ T8202] free:360747 free_pcp:12654 free_cma:0 [ 495.398295][ T8202] Node 0 active_anon:38800kB inactive_anon:0kB active_file:14676kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139832kB dirty:376kB writeback:0kB shmem:15416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5536kB pagetables:6476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 495.398566][ T8202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 495.408424][ T8202] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.408778][ T8202] lowmem_reserve[]: 0 927 1240 1240 1240 [ 495.409015][ T8202] Node 0 DMA32 free:515276kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19376kB inactive_anon:0kB active_file:10500kB inactive_file:83688kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:949812kB mlocked:0kB bounce:0kB free_pcp:39020kB local_pcp:18924kB free_cma:0kB [ 495.409531][ T8202] lowmem_reserve[]: 0 0 313 313 313 [ 495.420170][ T8202] Node 0 Normal free:16128kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19424kB inactive_anon:0kB active_file:4176kB inactive_file:76072kB unevictable:1536kB writepending:116kB zspages:0kB present:1048580kB managed:320836kB mlocked:0kB bounce:0kB free_pcp:11584kB local_pcp:5304kB free_cma:0kB [ 495.420521][ T8202] lowmem_reserve[]: 0 0 0 0 0 [ 495.420862][ T8202] Node 1 Normal free:907488kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986016kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.421199][ T8202] lowmem_reserve[]: 0 0 0 0 0 [ 495.421426][ T8202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 495.422094][ T8202] Node 0 DMA32: 633*4kB (UME) 303*8kB (U) 103*16kB (UE) 102*32kB (UME) 131*64kB (UME) 129*128kB (UME) 91*256kB (UME) 35*512kB (UM) 19*1024kB (UME) 13*2048kB (UME) 96*4096kB (M) = 515276kB [ 495.423111][ T8202] Node 0 Normal: 2*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (M) 1*64kB (U) 1*128kB (M) 2*256kB (U) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 16128kB [ 495.424154][ T8202] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 12*16kB (UM) 11*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 219*4096kB (M) = 907488kB [ 495.459593][ T8202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.460189][ T8202] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.460286][ T8202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.460384][ T8202] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 495.460477][ T8202] 47891 total pagecache pages [ 495.460535][ T8202] 0 pages in swap cache [ 495.460581][ T8202] Free swap = 124996kB [ 495.460634][ T8202] Total swap = 124996kB [ 495.460688][ T8202] 2097051 pages RAM [ 495.460742][ T8202] 0 pages HighMem/MovableOnly [ 495.460791][ T8202] 1531861 pages reserved [ 495.460839][ T8202] 0 pages cma reserved [ 496.041066][ T8205] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 496.120650][ T8205] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 496.125492][ T8205] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 496.148023][ T8205] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 496.148933][ T8205] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 496.173329][ T8205] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 496.178206][ T8205] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 496.183602][ T8205] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 496.190461][ T8205] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 496.192553][ T8205] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 496.791172][ T8214] syzkaller1: entered promiscuous mode [ 496.791272][ T8214] syzkaller1: entered allmulticast mode [ 499.452607][ T5868] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 499.628108][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 499.668240][ T5868] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.668346][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.668416][ T5868] usb 8-1: config 0 has no interface number 0 [ 499.668520][ T5868] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.668611][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.685021][ T5868] usb 8-1: config 0 descriptor?? [ 499.752053][ T5868] ldusb 8-1:0.55: Interrupt in endpoint not found [ 501.887505][ T8269] syzkaller1: entered promiscuous mode [ 501.887574][ T8269] syzkaller1: entered allmulticast mode [ 502.245258][ T5868] usb 8-1: USB disconnect, device number 2 [ 502.964245][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 503.374479][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.594'. [ 504.545410][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 504.545608][ T29] audit: type=1326 audit(1772885260.790:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 506.570141][ T8292] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 507.168162][ T29] audit: type=1326 audit(1772885260.800:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.344361][ T29] audit: type=1326 audit(1772885260.810:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.426766][ T29] audit: type=1326 audit(1772885260.810:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.525428][ T29] audit: type=1326 audit(1772885260.810:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.563885][ T29] audit: type=1326 audit(1772885260.820:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.677812][ T29] audit: type=1326 audit(1772885260.820:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.830239][ T29] audit: type=1326 audit(1772885260.820:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 507.984751][ T29] audit: type=1326 audit(1772885260.830:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 508.067238][ T29] audit: type=1326 audit(1772885260.830:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 508.270323][ T8300] warn_alloc: 1 callbacks suppressed [ 508.270396][ T8300] syz.6.599: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 508.530696][ T8300] CPU: 1 UID: 0 PID: 8300 Comm: syz.6.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.530868][ T8300] Tainted: [L]=SOFTLOCKUP [ 508.530917][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.530997][ T8300] Call Trace: [ 508.531042][ T8300] [ 508.531087][ T8300] __dump_stack+0x26/0x30 [ 508.531246][ T8300] dump_stack_lvl+0x14c/0x1c0 [ 508.531405][ T8300] dump_stack+0x1e/0x25 [ 508.531546][ T8300] warn_alloc+0x46f/0x6a0 [ 508.531721][ T8300] ? kmsan_get_metadata+0xf1/0x160 [ 508.531915][ T8300] __vmalloc_node_range_noprof+0x142/0x2d80 [ 508.532092][ T8300] ? should_fail_ex+0x45/0x8c0 [ 508.532225][ T8300] ? kmsan_get_metadata+0xf1/0x160 [ 508.532415][ T8300] ? kmsan_get_metadata+0xf1/0x160 [ 508.532597][ T8300] ? kmsan_get_metadata+0xf1/0x160 [ 508.532781][ T8300] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.532979][ T8300] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 508.533114][ T8300] ? kmsan_get_metadata+0xf1/0x160 [ 508.533308][ T8300] vmalloc_user_noprof+0xce/0x140 [ 508.533450][ T8300] ? xskq_create+0x11d/0x290 [ 508.533594][ T8300] xskq_create+0x11d/0x290 [ 508.533734][ T8300] xsk_init_queue+0xce/0x180 [ 508.533868][ T8300] xsk_setsockopt+0x7f6/0xfe0 [ 508.534009][ T8300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 508.534135][ T8300] __sys_setsockopt+0x43e/0x580 [ 508.534339][ T8300] __ia32_sys_setsockopt+0xf3/0x1a0 [ 508.534544][ T8300] ia32_sys_call+0x34c3/0x4360 [ 508.534670][ T8300] __do_fast_syscall_32+0x17f/0x3f0 [ 508.534827][ T8300] do_fast_syscall_32+0x37/0x80 [ 508.534964][ T8300] do_SYSENTER_32+0x1f/0x30 [ 508.535093][ T8300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.535260][ T8300] RIP: 0023:0xf6ffef6c [ 508.535362][ T8300] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 508.535480][ T8300] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 508.535605][ T8300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 508.535691][ T8300] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 508.535772][ T8300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.535848][ T8300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 508.535926][ T8300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.536038][ T8300] [ 508.813904][ T8300] Mem-Info: [ 508.817283][ T8300] active_anon:6708 inactive_anon:0 isolated_anon:0 [ 508.817283][ T8300] active_file:3669 inactive_file:39994 isolated_file:0 [ 508.817283][ T8300] unevictable:768 dirty:150 writeback:0 [ 508.817283][ T8300] slab_reclaimable:5307 slab_unreclaimable:22501 [ 508.817283][ T8300] mapped:30032 shmem:1369 pagetables:1633 [ 508.817283][ T8300] sec_pagetables:0 bounce:0 [ 508.817283][ T8300] kernel_misc_reclaimable:0 [ 508.817283][ T8300] free:362252 free_pcp:14311 free_cma:0 [ 508.863177][ T8300] Node 0 active_anon:26832kB inactive_anon:0kB active_file:14676kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120128kB dirty:600kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5376kB pagetables:6172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.900669][ T8300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.933504][ T8300] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.965118][ T8300] lowmem_reserve[]: 0 927 1240 1240 1240 [ 508.980853][ T8300] Node 0 DMA32 free:521296kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8472kB inactive_anon:0kB active_file:10500kB inactive_file:83712kB unevictable:0kB writepending:368kB zspages:0kB present:3129332kB managed:949812kB mlocked:0kB bounce:0kB free_pcp:43624kB local_pcp:22656kB free_cma:0kB [ 509.016420][ T8300] lowmem_reserve[]: 0 0 313 313 313 [ 509.026971][ T8300] Node 0 Normal free:16128kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18360kB inactive_anon:0kB active_file:4176kB inactive_file:76072kB unevictable:1536kB writepending:232kB zspages:0kB present:1048580kB managed:320836kB mlocked:0kB bounce:0kB free_pcp:13516kB local_pcp:6268kB free_cma:0kB [ 509.061611][ T8300] lowmem_reserve[]: 0 0 0 0 0 [ 509.066772][ T8300] Node 1 Normal free:907488kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986016kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.241321][ T8300] lowmem_reserve[]: 0 0 0 0 0 [ 509.246506][ T8300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 509.282318][ T8300] Node 0 DMA32: 2026*4kB (UME) 1015*8kB (UM) 333*16kB (UME) 122*32kB (UME) 114*64kB (UME) 127*128kB (UME) 88*256kB (UME) 43*512kB (UM) 23*1024kB (UME) 11*2048kB (UME) 93*4096kB (M) = 520560kB [ 509.419991][ T8300] Node 0 Normal: 2*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (M) 1*64kB (U) 1*128kB (M) 2*256kB (U) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 16128kB [ 509.531558][ T8300] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 12*16kB (UM) 11*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 219*4096kB (M) = 907488kB [ 509.605048][ T8300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.661979][ T8300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.752655][ T8300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.896832][ T8300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.015974][ T8300] 45030 total pagecache pages [ 510.065024][ T8300] 0 pages in swap cache [ 510.121505][ T8300] Free swap = 124996kB [ 510.165532][ T8300] Total swap = 124996kB [ 510.229966][ T8300] 2097051 pages RAM [ 510.233869][ T8300] 0 pages HighMem/MovableOnly [ 510.312909][ T8321] syzkaller1: entered promiscuous mode [ 510.320296][ T8300] 1531861 pages reserved [ 510.327200][ T8321] syzkaller1: entered allmulticast mode [ 510.384056][ T8300] 0 pages cma reserved [ 511.147100][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.164680][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.547698][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.609'. [ 515.840540][ T8357] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 521.114345][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.625'. [ 525.920777][ T8429] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 529.707799][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.739569][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.765109][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.781789][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.822055][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.691157][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 530.738582][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 530.761236][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 530.775164][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 530.799308][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 530.834222][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.639'. [ 531.776125][ T8471] ===================================================== [ 531.783595][ T8471] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 531.790999][ T8471] batadv_get_vid+0x2ce/0x3b0 [ 531.795870][ T8471] batadv_interface_tx+0x2e8/0x1dd0 [ 531.801438][ T8471] dev_hard_start_xmit+0x24e/0xad0 [ 531.806864][ T8471] __dev_queue_xmit+0x3412/0x5980 [ 531.812185][ T8471] __bpf_redirect+0x162e/0x1760 [ 531.817311][ T8471] bpf_clone_redirect+0x4a6/0x6c0 [ 531.822634][ T8471] ___bpf_prog_run+0x12af/0xeb60 [ 531.827791][ T8471] __bpf_prog_run512+0xc5/0x100 [ 531.832887][ T8471] bpf_test_run+0x493/0xdf0 [ 531.837602][ T8471] bpf_prog_test_run_skb+0x22a5/0x3050 [ 531.843447][ T8471] bpf_prog_test_run+0x5bb/0x9f0 [ 531.848604][ T8471] __sys_bpf+0x925/0xee0 [ 531.853099][ T8471] __ia32_sys_bpf+0xa4/0xf0 [ 531.857739][ T8471] ia32_sys_call+0x33e7/0x4360 [ 531.862741][ T8471] __do_fast_syscall_32+0x17f/0x3f0 [ 531.868097][ T8471] do_fast_syscall_32+0x37/0x80 [ 531.873212][ T8471] do_SYSENTER_32+0x1f/0x30 [ 531.877867][ T8471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.884533][ T8471] [ 531.886932][ T8471] Uninit was created at: [ 531.891492][ T8471] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 531.897633][ T8471] pskb_expand_head+0x2ef/0x1fb0 [ 531.903005][ T8471] skb_ensure_writable+0x44e/0x510 [ 531.908304][ T8471] bpf_clone_redirect+0x301/0x6c0 [ 531.913626][ T8471] ___bpf_prog_run+0x12af/0xeb60 [ 531.918709][ T8471] __bpf_prog_run512+0xc5/0x100 [ 531.923844][ T8471] bpf_test_run+0x493/0xdf0 [ 531.928481][ T8471] bpf_prog_test_run_skb+0x22a5/0x3050 [ 531.934251][ T8471] bpf_prog_test_run+0x5bb/0x9f0 [ 531.939356][ T8471] __sys_bpf+0x925/0xee0 [ 531.943848][ T8471] __ia32_sys_bpf+0xa4/0xf0 [ 531.948474][ T8471] ia32_sys_call+0x33e7/0x4360 [ 531.953388][ T8471] __do_fast_syscall_32+0x17f/0x3f0 [ 531.958672][ T8471] do_fast_syscall_32+0x37/0x80 [ 531.963683][ T8471] do_SYSENTER_32+0x1f/0x30 [ 531.968363][ T8471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.974870][ T8471] [ 531.977245][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.6.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.988212][ T8471] Tainted: [L]=SOFTLOCKUP [ 531.992634][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.002845][ T8471] ===================================================== [ 532.009919][ T8471] Disabling lock debugging due to kernel taint [ 532.016410][ T8471] Kernel panic - not syncing: kmsan.panic set ... [ 532.022889][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.6.640 Tainted: G B L syzkaller #0 PREEMPT(full) [ 532.033752][ T8471] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 532.039360][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.049482][ T8471] Call Trace: [ 532.052802][ T8471] [ 532.055769][ T8471] __dump_stack+0x26/0x30 [ 532.060208][ T8471] dump_stack_lvl+0x50/0x1c0 [ 532.064884][ T8471] ? dump_stack+0x12/0x25 [ 532.070184][ T8471] dump_stack+0x1e/0x25 [ 532.074494][ T8471] vpanic+0x7b4/0x1430 [ 532.078680][ T8471] panic+0x15d/0x160 [ 532.082701][ T8471] kmsan_report+0x31a/0x320 [ 532.087320][ T8471] ? __msan_warning+0x1b/0x30 [ 532.092102][ T8471] ? batadv_get_vid+0x2ce/0x3b0 [ 532.097076][ T8471] ? batadv_interface_tx+0x2e8/0x1dd0 [ 532.102553][ T8471] ? dev_hard_start_xmit+0x24e/0xad0 [ 532.107944][ T8471] ? __dev_queue_xmit+0x3412/0x5980 [ 532.113262][ T8471] ? __bpf_redirect+0x162e/0x1760 [ 532.118486][ T8471] ? bpf_clone_redirect+0x4a6/0x6c0 [ 532.123811][ T8471] ? ___bpf_prog_run+0x12af/0xeb60 [ 532.129010][ T8471] ? __bpf_prog_run512+0xc5/0x100 [ 532.134131][ T8471] ? bpf_test_run+0x493/0xdf0 [ 532.138900][ T8471] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 532.144657][ T8471] ? bpf_prog_test_run+0x5bb/0x9f0 [ 532.149878][ T8471] ? __sys_bpf+0x925/0xee0 [ 532.154433][ T8471] ? __ia32_sys_bpf+0xa4/0xf0 [ 532.159183][ T8471] ? ia32_sys_call+0x33e7/0x4360 [ 532.164186][ T8471] ? __do_fast_syscall_32+0x17f/0x3f0 [ 532.169635][ T8471] ? do_fast_syscall_32+0x37/0x80 [ 532.174730][ T8471] ? do_SYSENTER_32+0x1f/0x30 [ 532.179494][ T8471] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.186103][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.191327][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.197247][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.202461][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.208382][ T8471] ? batadv_interface_tx+0xc1/0x1dd0 [ 532.213774][ T8471] ? filter_irq_stacks+0x49/0x190 [ 532.218982][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.224218][ T8471] __msan_warning+0x1b/0x30 [ 532.228834][ T8471] batadv_get_vid+0x2ce/0x3b0 [ 532.233639][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.239582][ T8471] batadv_interface_tx+0x2e8/0x1dd0 [ 532.244997][ T8471] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 532.251448][ T8471] ? __pfx_batadv_interface_tx+0x10/0x10 [ 532.257225][ T8471] dev_hard_start_xmit+0x24e/0xad0 [ 532.262480][ T8471] __dev_queue_xmit+0x3412/0x5980 [ 532.267607][ T8471] ? skb_release_data+0x107c/0x11b0 [ 532.272973][ T8471] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 532.279326][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.284539][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.290466][ T8471] ? __dev_queue_xmit+0x27a/0x5980 [ 532.295689][ T8471] ? pskb_expand_head+0x1c0e/0x1fb0 [ 532.300966][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.306205][ T8471] __bpf_redirect+0x162e/0x1760 [ 532.311178][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.316410][ T8471] bpf_clone_redirect+0x4a6/0x6c0 [ 532.321567][ T8471] ___bpf_prog_run+0x12af/0xeb60 [ 532.326626][ T8471] __bpf_prog_run512+0xc5/0x100 [ 532.331664][ T8471] ? kmsan_internal_poison_memory+0x78/0x90 [ 532.337698][ T8471] ? kmsan_internal_poison_memory+0x4a/0x90 [ 532.343693][ T8471] ? kmsan_slab_alloc+0xdc/0x160 [ 532.348745][ T8471] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 532.354537][ T8471] ? slab_build_skb+0x5c/0x5b0 [ 532.359401][ T8471] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 532.365062][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.370292][ T8471] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 532.376724][ T8471] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 532.382892][ T8471] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 532.388893][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.394115][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.399332][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.404561][ T8471] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 532.410993][ T8471] ? kmsan_get_metadata+0x146/0x160 [ 532.416306][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.422243][ T8471] ? __pfx___bpf_prog_run512+0x10/0x10 [ 532.427874][ T8471] ? __pfx___bpf_prog_run512+0x10/0x10 [ 532.433429][ T8471] bpf_test_run+0x493/0xdf0 [ 532.438013][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.443954][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.449194][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.455142][ T8471] ? bpf_test_run+0x2f4/0xdf0 [ 532.459924][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.465159][ T8471] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.471105][ T8471] bpf_prog_test_run_skb+0x22a5/0x3050 [ 532.476695][ T8471] ? kmsan_get_metadata+0xf1/0x160 [ 532.481958][ T8471] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 532.487882][ T8471] bpf_prog_test_run+0x5bb/0x9f0 [ 532.492928][ T8471] __sys_bpf+0x925/0xee0 [ 532.497278][ T8471] __ia32_sys_bpf+0xa4/0xf0 [ 532.501859][ T8471] ia32_sys_call+0x33e7/0x4360 [ 532.506700][ T8471] __do_fast_syscall_32+0x17f/0x3f0 [ 532.511989][ T8471] do_fast_syscall_32+0x37/0x80 [ 532.516918][ T8471] do_SYSENTER_32+0x1f/0x30 [ 532.521494][ T8471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.527931][ T8471] RIP: 0023:0xf6ffef6c [ 532.532062][ T8471] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 532.551786][ T8471] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 532.560289][ T8471] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 532.568323][ T8471] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.576351][ T8471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.584376][ T8471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.592409][ T8471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.600470][ T8471] [ 532.603718][ T8471] Kernel Offset: disabled [ 532.608102][ T8471] Rebooting in 86400 seconds..