last executing test programs: 9.726633993s ago: executing program 0 (id=3793): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x3c}}, 0x0) 9.536384418s ago: executing program 0 (id=3795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0xfffffffffffffff8, 0x100, 0x7) gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x74efdfe049b861ab) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00', @multicast1, 0x400}}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) 9.324630622s ago: executing program 4 (id=3799): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 9.277278045s ago: executing program 2 (id=3800): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) 9.147596055s ago: executing program 4 (id=3801): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 8.107915395s ago: executing program 4 (id=3805): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0xebff, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r4, &(0x7f00000001c0)='net/dev_mcast\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4188aea7, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000a00158000000000000000000000000001"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0809000300", 0x33fe0}], 0x1}, 0x0) 7.869765156s ago: executing program 3 (id=3807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 7.773547755s ago: executing program 3 (id=3808): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000002380)=0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0xffffffff) read$FUSE(r2, &(0x7f0000004400)={0x2020}, 0x204a) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000200)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6}]}) 7.562962791s ago: executing program 3 (id=3809): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000940)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @local}}}], 0x20}, 0x0) 7.476816272s ago: executing program 1 (id=3810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) write$dsp(r0, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 7.447035756s ago: executing program 3 (id=3811): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @random="2966e59e1ce0"}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x8001, 0x4) listen(r7, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @mptcp=@capable={0x1e, 0xc}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.365767936s ago: executing program 4 (id=3812): socket$inet6_tcp(0xa, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003d80)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000026c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) 6.104572147s ago: executing program 3 (id=3813): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="0c78bca32c37898d78318e236899", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.989235748s ago: executing program 3 (id=3814): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x92) 5.829040483s ago: executing program 4 (id=3815): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x12, 0x4, 0x0, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x1170, 0x1398, 0xd0, 0x1170, 0x1f0, 0x1398, 0x1398, 0x1f0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'sit0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @local, [], [], 'veth1_vlan\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r7, 0x300, 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x7, 0x1) socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) 5.699653942s ago: executing program 0 (id=3816): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000740)=ANY=[], 0x0}, 0x23) socket$kcm(0x2, 0x3, 0x106) io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) semget(0x2, 0x1, 0x201) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/198) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) readv(r2, &(0x7f00000006c0), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @private0, 0x10}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd00000000000000123fe4204c3598198f25a8204800000000e4ec0100000000400040af5b4ea3780051762431773e1081940632036d000000020000000000000003000000013da51fd47aa2e2f700"/146, @ANYRES16=r0, @ANYRESDEC=r2], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) io_submit(r0, 0x1, &(0x7f0000001740)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r4 = syz_usbip_server_init(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r5, r6, 0x0, 0x5) write$usbip_server(r4, &(0x7f0000003400)=ANY=[@ANYBLOB="00000003"], 0x2c5d) socket$nl_generic(0x10, 0x3, 0x10) 5.682377446s ago: executing program 1 (id=3817): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)='\v\x00', 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) pwrite64(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x0) 5.015524531s ago: executing program 2 (id=3818): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='cachefiles_mkdir\x00', r4}, 0xfffffffffffffd93) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}]}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r7 = dup2(r6, r3) ioctl$TIOCVHANGUP(r7, 0x89e3, 0x1000000000000) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="020000000140000004000000000000001000fd00000000002000df8000"], 0x24, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 4.988037964s ago: executing program 1 (id=3819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@private0, 0x0, r5}) 4.889089948s ago: executing program 1 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}}, 0x0) 4.848523004s ago: executing program 1 (id=3821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 4.767294044s ago: executing program 0 (id=3822): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000104000000000008000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000038001280110001006272696467655f736c6176650000000020000580060002000000000005001900000000000800030008"], 0x58}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d20085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000a500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r8, 0x107, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], 0x0, 0x0, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl(r6, 0x8b27, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x100) 4.741589817s ago: executing program 4 (id=3823): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.636839035s ago: executing program 1 (id=3824): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c000904"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x6, 0x0, 0x102, 0x3, 0xd9}, 0x20) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) 4.632932341s ago: executing program 2 (id=3825): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x0, 0x0) io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x0, 0x1, 0x0, 0x240}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000ffff04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 470.189728ms ago: executing program 2 (id=3826): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0xfffffff6, 0x1}}, 0x3c) 284.978534ms ago: executing program 2 (id=3827): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="040001"], 0x90}}, 0x0) 267.382646ms ago: executing program 0 (id=3828): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="0c78bca32c37898d78318e236899", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.646979ms ago: executing program 2 (id=3829): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001a", 0x5) r0 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)=0x2) 0s ago: executing program 0 (id=3830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e}, 0x14}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f0000000cc0)={0x6}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x75, 0x5e, 0x75, 0x40, 0x9022, 0xd484, 0xcd35, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x7f, 0x36}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x9}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0xffffffffffffff57, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xf, "a32f4afb34727c8f01094a3df899f8"}, &(0x7f0000000240)=0x17) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 792.937454][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.009212][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.042990][T13915] input: syz0 as /devices/virtual/input/input35 [ 793.239472][ T9] kernel read not supported for file /bus/input/devices (pid: 9 comm: kworker/0:1) [ 793.552260][T13929] netlink: 'syz.1.2527': attribute type 2 has an invalid length. [ 794.830731][T13947] veth1: mtu less than device minimum [ 794.873309][T13947] Process accounting resumed [ 795.059559][ T5112] usb 5-1: USB disconnect, device number 27 [ 797.587619][T13969] netlink: 'syz.4.2539': attribute type 2 has an invalid length. [ 798.146487][T13981] hub 6-0:1.0: USB hub found [ 798.157433][T13981] hub 6-0:1.0: 1 port detected [ 799.785484][ T25] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 800.231907][ T25] usb 5-1: config 0 has too many interfaces: 87, using maximum allowed: 32 [ 800.298059][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.381117][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 87 [ 800.419979][ T25] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 800.469295][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.513914][ T25] usb 5-1: config 0 descriptor?? [ 800.707161][T14008] nbd: illegal input index -748760761 [ 800.911557][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.209374][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.851612][T14029] tap0: tun_chr_ioctl cmd 1074025694 [ 803.115773][ T5146] usb 5-1: USB disconnect, device number 28 [ 803.926292][T14048] nbd: illegal input index -748760761 [ 804.430835][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2568'. [ 806.339704][ T29] audit: type=1800 audit(1721652382.032:506): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2572" name="/" dev="fuse" ino=1 res=0 errno=0 [ 806.758307][T14073] overlayfs: missing 'lowerdir' [ 807.302058][ T5146] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 807.474987][T11042] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 807.509880][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 807.517778][ T5146] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 807.532116][ T5146] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 807.540817][ T5146] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 807.550438][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 807.560549][ T5146] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 807.570644][ T5146] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 807.584099][ T5146] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 807.596942][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.609327][ T5146] usb 2-1: config 0 descriptor?? [ 807.740563][T11042] usb 1-1: config 0 has too many interfaces: 87, using maximum allowed: 32 [ 807.760868][T11042] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.785907][T11042] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 87 [ 807.795446][T11042] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 807.804783][T11042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.822606][T11042] usb 1-1: config 0 descriptor?? [ 807.854706][ T5146] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 807.887342][ T5146] usb 2-1: USB disconnect, device number 22 [ 807.908633][ T5146] usblp0: removed [ 808.166147][T14077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.174961][T14077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.186222][T11042] usb 1-1: USB disconnect, device number 25 [ 808.452604][ T5146] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 808.658298][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 808.671657][ T5146] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 808.680688][ T5146] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 808.689487][ T5146] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 808.699881][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 808.709945][ T5146] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 808.721023][ T5146] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 808.734274][ T5146] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 808.743360][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.757035][ T5146] usb 2-1: config 0 descriptor?? [ 808.991185][ T5146] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 809.024914][T14094] nbd: illegal input index -748760761 [ 810.330752][ T25] usb 2-1: USB disconnect, device number 23 [ 810.348108][ T25] usblp0: removed [ 811.518644][T14135] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 811.756239][T14146] netlink: 'syz.4.2600': attribute type 5 has an invalid length. [ 812.799448][ T5146] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 813.015877][ T5146] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 813.015917][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.022638][ T5146] usb 3-1: config 0 descriptor?? [ 813.030150][ T5146] usb-storage 3-1:0.0: USB Mass Storage device detected [ 813.567056][ T5146] usb 3-1: USB disconnect, device number 22 [ 815.844452][T14196] loop7: detected capacity change from 0 to 16384 [ 816.161269][T14196] I/O error, dev loop7, sector 640 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 816.244567][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.282783][T14196] I/O error, dev loop7, sector 520 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 816.318736][T14200] buffer_io_error: 231 callbacks suppressed [ 816.318761][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 816.375379][T14196] I/O error, dev loop7, sector 520 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.413893][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.444109][T14196] Buffer I/O error on dev loop7, logical block 65, async page read [ 816.482591][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 816.522659][T14196] I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 816.536482][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.542833][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.567388][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.615972][T14196] Buffer I/O error on dev loop7, logical block 64, lost async page write [ 816.710409][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 816.786598][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.870221][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 816.903522][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 816.999656][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 817.079543][T14200] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 817.108952][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 817.133878][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 817.162531][ T29] audit: type=1326 audit(1721652392.047:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 817.206353][T14200] Buffer I/O error on dev loop7, logical block 0, async page read [ 817.240353][ T29] audit: type=1326 audit(1721652392.056:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 817.264147][ C0] eth0: bad gso: type: 1, size: 1408 [ 817.276553][T14200] ldm_validate_partition_table(): Disk read failed. [ 817.311682][ T29] audit: type=1326 audit(1721652392.056:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 817.312711][T14200] Dev loop7: unable to read RDB block 0 [ 817.337843][ T29] audit: type=1326 audit(1721652392.056:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14215 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 817.361121][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.445417][T14200] loop7: unable to read partition table [ 818.143331][T14200] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 818.481513][ T29] audit: type=1326 audit(1721652393.219:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 818.544010][ T29] audit: type=1326 audit(1721652393.219:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 818.578236][ T29] audit: type=1326 audit(1721652393.228:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 818.630822][ T29] audit: type=1326 audit(1721652393.247:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 818.660703][ T29] audit: type=1326 audit(1721652393.247:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 818.697034][ T29] audit: type=1326 audit(1721652393.256:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.3.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 821.588714][T14254] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 821.889341][T14256] netlink: 'syz.2.2637': attribute type 5 has an invalid length. [ 822.229725][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 824.156853][T14294] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 824.865597][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 824.941760][T14304] ucma_write: process 152 (syz.0.2647) changed security contexts after opening file descriptor, this is not allowed. [ 825.097169][ T25] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 825.150311][ T25] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 825.234759][ T25] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 825.283023][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.313862][ T25] usb 5-1: Product: syz [ 825.329193][ T25] usb 5-1: Manufacturer: syz [ 825.340247][ T25] usb 5-1: SerialNumber: syz [ 825.369769][ T25] usb 5-1: bad CDC descriptors [ 825.387133][ T25] option 5-1:7.0: GSM modem (1-port) converter detected [ 825.613759][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 825.613779][ T29] audit: type=1326 audit(1721652399.856:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14312 comm="syz.1.2654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f957ad75f19 code=0x0 [ 826.056474][T14323] vivid-007: ================= START STATUS ================= [ 826.070025][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 826.099189][T14323] vivid-007: Enable Output Cropping: true grabbed [ 826.131734][T14323] vivid-007: Enable Output Composing: true grabbed [ 826.162657][T14323] vivid-007: Enable Output Scaler: true grabbed [ 826.183438][T14323] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 826.205490][T14323] vivid-007: Transmit Mode: HDMI grabbed [ 826.225591][T14323] vivid-007: Hotplug Present: 0x00000000 [ 826.243116][T14323] vivid-007: RxSense Present: 0x00000000 [ 826.271373][T14323] vivid-007: EDID Present: 0x00000000 [ 826.292816][T14323] vivid-007: ================== END STATUS ================== [ 829.703819][ T5177] usb 5-1: USB disconnect, device number 29 [ 829.724218][ T5177] option 5-1:7.0: device disconnected [ 829.746025][ T29] audit: type=1326 audit(1721652403.585:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 829.845084][ T29] audit: type=1326 audit(1721652403.585:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 829.912896][ T29] audit: type=1326 audit(1721652403.603:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 829.959116][ T29] audit: type=1326 audit(1721652403.650:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 829.981457][ T29] audit: type=1326 audit(1721652403.686:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 830.870318][ T29] audit: type=1326 audit(1721652403.686:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 830.893327][ T29] audit: type=1326 audit(1721652403.686:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 830.952437][ T29] audit: type=1326 audit(1721652403.686:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 831.008868][ T29] audit: type=1326 audit(1721652403.686:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 831.057039][ T29] audit: type=1326 audit(1721652403.686:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 831.078569][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.137082][ T29] audit: type=1326 audit(1721652403.686:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 831.372856][ T29] audit: type=1326 audit(1721652403.686:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 831.479256][ T29] audit: type=1326 audit(1721652403.686:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 831.509191][ T29] audit: type=1326 audit(1721652403.686:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 831.530720][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.664040][ T29] audit: type=1326 audit(1721652403.686:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 832.135129][ T29] audit: type=1326 audit(1721652403.686:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 832.225867][ T29] audit: type=1326 audit(1721652403.714:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 832.376359][ T29] audit: type=1326 audit(1721652403.714:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3da8b6cf67 code=0x7ffc0000 [ 832.622210][ T29] audit: type=1326 audit(1721652403.714:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14344 comm="syz.2.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da8b11909 code=0x7ffc0000 [ 833.564503][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 835.046785][T14399] input: syz0 as /devices/virtual/input/input36 [ 836.791941][ T4489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 836.804726][ T4489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 836.814206][ T4489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 837.024282][ T4489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 837.032603][ T4489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 837.041304][ T4489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 837.984785][T14414] ip6gretap0 speed is unknown, defaulting to 1000 [ 838.547691][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 838.547712][ T29] audit: type=1326 audit(1721652411.782:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14427 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 838.681552][T14433] loop0: detected capacity change from 0 to 2 [ 838.693277][ T29] audit: type=1326 audit(1721652411.828:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14427 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7ffc0000 [ 838.715219][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.859999][ T29] audit: type=1326 audit(1721652411.855:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.029796][ T29] audit: type=1326 audit(1721652411.865:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.128198][ T29] audit: type=1326 audit(1721652411.865:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.149920][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.194894][ T29] audit: type=1326 audit(1721652411.865:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.239429][ T29] audit: type=1326 audit(1721652411.865:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.272718][ T29] audit: type=1326 audit(1721652411.865:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.316593][ T4489] Bluetooth: hci5: command tx timeout [ 839.357813][ T29] audit: type=1326 audit(1721652411.865:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.380101][T14414] chnl_net:caif_netlink_parms(): no params data found [ 839.389538][ T29] audit: type=1326 audit(1721652411.865:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14431 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x7ffc0000 [ 839.486326][T14444] netlink: 105108 bytes leftover after parsing attributes in process `syz.2.2694'. [ 839.497545][T14444] netlink: 'syz.2.2694': attribute type 1 has an invalid length. [ 839.539032][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 840.463999][T14414] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.492126][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.517316][T14414] bridge_slave_0: entered allmulticast mode [ 840.543827][T14414] bridge_slave_0: entered promiscuous mode [ 840.572877][T14414] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.611119][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.636413][T14414] bridge_slave_1: entered allmulticast mode [ 840.666208][T14414] bridge_slave_1: entered promiscuous mode [ 840.886553][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.094817][ T5097] IPVS: starting estimator thread 0... [ 841.194378][T14478] IPVS: using max 19 ests per chain, 45600 per kthread [ 841.323160][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.406835][T14414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.608029][ T4489] Bluetooth: hci5: command tx timeout [ 841.670780][T14414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.658277][T14493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.076778][T14485] delete_channel: no stack [ 843.768937][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.813901][ T4489] Bluetooth: hci5: command tx timeout [ 844.000213][T14414] team0: Port device team_slave_0 added [ 844.097610][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.158523][T14414] team0: Port device team_slave_1 added [ 844.162801][T14519] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 844.229236][T14520] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 844.336665][T14523] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 844.437520][T14414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.451261][T14414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.519342][T14414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.547142][T14414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.555278][T14414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.605955][T14414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.790553][T14414] hsr_slave_0: entered promiscuous mode [ 844.798763][T14414] hsr_slave_1: entered promiscuous mode [ 844.819717][T14414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.839654][T14414] Cannot create hsr debugfs directory [ 844.989857][ T136] bridge_slave_1: left allmulticast mode [ 844.999639][ T136] bridge_slave_1: left promiscuous mode [ 845.010666][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.047603][ T136] bridge_slave_0: left allmulticast mode [ 845.057650][ T136] bridge_slave_0: left promiscuous mode [ 845.074930][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.190264][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 845.190284][ T29] audit: type=1326 audit(1721652417.920:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14560 comm="syz.2.2736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3da8b75f19 code=0x0 [ 845.251688][T14564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.067594][ T4489] Bluetooth: hci5: command tx timeout [ 846.166590][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.549044][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.568811][ T136] bond0 (unregistering): Released all slaves [ 847.021474][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 847.226821][ T5177] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 847.259549][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 847.307508][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 847.339494][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 847.351932][ T136] hsr_slave_0: left promiscuous mode [ 847.359530][ T136] hsr_slave_1: left promiscuous mode [ 847.360066][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.373609][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.381556][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.384379][ T25] usb 4-1: config 0 descriptor?? [ 847.400872][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.410759][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.445316][ T136] veth1_macvtap: left promiscuous mode [ 847.451115][ T136] veth0_macvtap: left promiscuous mode [ 847.456947][ T5177] usb 3-1: Using ep0 maxpacket: 16 [ 847.467069][ T136] veth1_vlan: left promiscuous mode [ 847.475085][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 847.486826][ T136] veth0_vlan: left promiscuous mode [ 847.493773][ T5177] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 847.503328][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.544587][ T5177] usb 3-1: config 0 descriptor?? [ 847.843791][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.869776][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.911855][ T25] hid (null): unknown global tag 0xc [ 847.936513][ T25] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 847.954529][ T25] hid-generic 0003:0158:0100.0016: unexpected long global item [ 847.974549][ T25] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 848.142776][ T5150] usb 4-1: USB disconnect, device number 27 [ 848.155161][T14595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.175482][T14595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.191216][ T5177] hid (null): invalid report_size 812540268 [ 848.199829][ T5177] hid (null): unknown global tag 0x83 [ 848.210518][ T5177] hid (null): unknown global tag 0xc [ 848.219518][ T5177] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 848.228951][ T5177] hid-generic 0003:0158:0100.0017: unexpected long global item [ 848.245200][ T5177] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 848.612976][T14599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.363967][ T136] team0 (unregistering): Port device team_slave_1 removed [ 849.506497][ T136] team0 (unregistering): Port device team_slave_0 removed [ 851.023885][T14612] syzkaller1: entered promiscuous mode [ 851.040103][T14612] syzkaller1: entered allmulticast mode [ 851.121095][ T5097] usb 3-1: USB disconnect, device number 23 [ 851.577998][ T5146] IPVS: starting estimator thread 0... [ 851.702014][T14634] IPVS: using max 19 ests per chain, 45600 per kthread [ 851.818377][T14639] syz.4.2762[14639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 851.818554][T14639] syz.4.2762[14639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 851.990708][T14640] KVM: debugfs: duplicate directory 14640-4 [ 852.009249][T14645] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 852.020533][T14414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.059311][T14414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.087022][T14414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.125609][T14414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.228292][ T29] audit: type=1326 audit(1721652424.409:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.2.2767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3da8b75f19 code=0x0 [ 852.284896][T14654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.305207][T14414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.334961][T14414] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.361787][ T5177] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 852.379788][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.387109][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.418707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.425961][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.582345][ T5177] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 852.614832][ T5177] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 852.660345][T14657] syzkaller1: entered promiscuous mode [ 852.666695][T14657] syzkaller1: entered allmulticast mode [ 852.677603][ T5177] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.693840][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 852.730200][ T5177] usb 5-1: SerialNumber: syz [ 852.740965][ T5177] usb 5-1: bad CDC descriptors [ 852.912246][T14414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.063670][T14414] veth0_vlan: entered promiscuous mode [ 853.084863][T14414] veth1_vlan: entered promiscuous mode [ 853.177010][T14414] veth0_macvtap: entered promiscuous mode [ 853.207693][T14414] veth1_macvtap: entered promiscuous mode [ 853.324372][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.349339][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.378635][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.396656][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.418474][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.443295][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.481131][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.529078][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.577230][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.623361][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.667704][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 853.695483][T14414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.723567][ T5177] usb 5-1: USB disconnect, device number 30 [ 853.739436][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.754803][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.766394][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.778671][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.789911][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.803302][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.813186][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.823820][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.853788][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.883675][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 853.900195][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.918976][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 853.939894][T14414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.953218][ T9] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 853.964035][T14414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.975114][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.983300][ T9] usb 1-1: Product: syz [ 853.989829][T14414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.998310][ T9] usb 1-1: Manufacturer: syz [ 854.011269][ T9] usb 1-1: SerialNumber: syz [ 854.022666][ T9] usb 1-1: config 0 descriptor?? [ 854.039993][T14681] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 854.040357][ T9] usb 1-1: Found UVC 0.00 device syz (468c:90ea) [ 854.058392][T14414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.067501][T14414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.076766][ T9] usb 1-1: No valid video chain found. [ 854.083562][T14414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.096956][T14414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.294908][ T25] usb 1-1: USB disconnect, device number 26 [ 854.372952][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.401514][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.497375][ T6929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.531793][ T6929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.346347][T14713] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2789' sets config #0 [ 856.992826][ T29] audit: type=1800 audit(1721652428.802:723): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2793" name="/" dev="fuse" ino=1 res=0 errno=0 [ 857.508023][ T29] audit: type=1326 audit(1721652429.282:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 857.667325][ T29] audit: type=1326 audit(1721652429.282:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 857.798715][ T29] audit: type=1326 audit(1721652429.328:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 857.908810][ T29] audit: type=1326 audit(1721652429.328:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.027483][ T29] audit: type=1326 audit(1721652429.328:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.149713][ T29] audit: type=1326 audit(1721652429.328:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.246093][ T29] audit: type=1326 audit(1721652429.328:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.363615][ T29] audit: type=1326 audit(1721652429.328:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.448861][ T29] audit: type=1326 audit(1721652429.328:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.562517][ T29] audit: type=1326 audit(1721652429.347:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 858.663533][ T29] audit: type=1326 audit(1721652429.347:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14740 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdcc5f75f19 code=0x7ffc0000 [ 860.699274][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 860.742443][T14790] team0: entered promiscuous mode [ 860.778396][T14790] team_slave_0: entered promiscuous mode [ 860.823371][T14790] team_slave_1: entered promiscuous mode [ 860.881393][T14790] syz_tun: entered promiscuous mode [ 860.935685][T14789] syz_tun: left promiscuous mode [ 860.954174][T14789] team0: left promiscuous mode [ 861.153305][T14789] team_slave_0: left promiscuous mode [ 861.180866][T14789] team_slave_1: left promiscuous mode [ 863.200894][T14808] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2820' sets config #0 [ 864.031976][T14830] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 865.550082][ T5177] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 865.886636][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 865.907417][ T5177] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 865.918727][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.927028][ T5177] usb 5-1: Product: syz [ 865.931802][ T5177] usb 5-1: Manufacturer: syz [ 865.936691][ T5177] usb 5-1: SerialNumber: syz [ 865.944727][ T5177] usb 5-1: config 0 descriptor?? [ 866.046228][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 866.134350][T14844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2834'. [ 866.167822][T14844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2834'. [ 866.238570][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.253164][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.286784][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 866.313976][T14850] batadv0: entered promiscuous mode [ 866.327788][T14850] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.438945][T14858] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 866.517938][ T5177] usb 5-1: MIDIStreaming interface descriptor not found [ 866.933645][ T5177] usb 5-1: USB disconnect, device number 31 [ 869.316051][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 869.367496][T14899] program syz.3.2858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.053265][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 871.516738][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 871.545746][ T9] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 871.570022][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.597741][ T9] usb 4-1: Product: syz [ 871.613642][ T9] usb 4-1: Manufacturer: syz [ 871.618324][ T9] usb 4-1: SerialNumber: syz [ 871.690460][ T9] usb 4-1: config 0 descriptor?? [ 877.611940][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 877.836687][ T9] usb 4-1: USB disconnect, device number 28 [ 877.984846][T14934] program syz.2.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 878.175817][T14943] kAFS: unable to lookup cell '.,' [ 878.374706][T14953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2881'. [ 878.522756][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 878.522776][ T29] audit: type=1326 audit(1721652448.685:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14950 comm="syz.2.2880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x0 [ 878.633793][ T5112] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 878.723743][ T5177] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 878.807300][ T5146] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 878.844250][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.862517][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.889910][ T5112] usb 2-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 878.908295][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.928170][ T5177] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.950062][ T5112] usb 2-1: config 0 descriptor?? [ 878.960664][ T5177] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 878.992176][ T5177] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 879.011483][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.024001][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.048338][ T5146] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.060482][T14955] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 879.072889][ T5146] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 879.100651][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 879.113465][ T5146] usb 5-1: SerialNumber: syz [ 879.434542][ T5146] usb 5-1: 0:2 : does not exist [ 879.451869][ T5146] usb 5-1: unit 5 not found! [ 879.916207][ T5146] usb 5-1: USB disconnect, device number 32 [ 880.837627][ T5146] usb 1-1: USB disconnect, device number 27 [ 880.890704][ T5112] usbhid 2-1:0.0: can't add hid device: -71 [ 880.896780][ T5112] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 880.919219][ T5112] usb 2-1: USB disconnect, device number 25 [ 881.279574][T14983] kAFS: unable to lookup cell '.,' [ 883.078061][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.085096][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.704436][T15015] netlink: 'syz.3.2901': attribute type 6 has an invalid length. [ 884.245684][T15014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2902'. [ 884.396240][ C0] eth0: bad gso: type: 1, size: 1408 [ 884.559950][T15023] kAFS: unable to lookup cell '.,' [ 884.787617][ T5177] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 885.090775][T13487] Bluetooth: hci2: command 0x0406 tx timeout [ 885.328892][ T4489] Bluetooth: hci1: command 0x0406 tx timeout [ 885.328953][T13487] Bluetooth: hci0: command 0x0406 tx timeout [ 885.811997][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.852379][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.883978][ T5177] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 885.914154][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 885.929475][ T5177] usb 2-1: SerialNumber: syz [ 886.156209][T15050] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 886.243742][ T5177] usb 2-1: 0:2 : does not exist [ 886.278590][ T5177] usb 2-1: unit 5 not found! [ 886.335434][ T5177] usb 2-1: USB disconnect, device number 26 [ 887.831828][T15073] bpf: Bad value for 'mode' [ 888.453415][T15085] pimreg: entered allmulticast mode [ 889.157918][T15087] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 890.669350][T15109] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 890.878333][ T5100] Bluetooth: hci5: command 0x0406 tx timeout [ 891.500332][ T29] audit: type=1326 audit(1721652460.666:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.2.2939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3da8b75f19 code=0x0 [ 892.187588][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2949'. [ 892.610312][T15169] tipc: Started in network mode [ 892.626094][T15169] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 892.657406][T15169] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0001 [ 892.685750][T15169] tipc: Enabled bearer , priority 10 [ 893.348711][T15195] /dev/nullb0: Can't open blockdev [ 893.446809][T15197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2969'. [ 893.528127][ T29] audit: type=1326 audit(1721652462.530:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 893.647543][ T29] audit: type=1326 audit(1721652462.530:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 893.757614][ T29] audit: type=1326 audit(1721652462.558:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 893.852280][ T29] audit: type=1326 audit(1721652462.558:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 893.898671][ T5146] tipc: Node number set to 1 [ 893.959802][ T29] audit: type=1326 audit(1721652462.558:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 894.166703][ T29] audit: type=1326 audit(1721652462.558:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 894.258301][ T29] audit: type=1326 audit(1721652462.576:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 894.455699][ T29] audit: type=1326 audit(1721652462.576:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 894.485495][ T29] audit: type=1326 audit(1721652462.576:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 895.784027][T15245] bpf: Bad value for 'mode' [ 896.624595][T15271] random: crng reseeded on system resumption [ 897.757504][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3007'. [ 897.791155][T15287] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.800517][T15287] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.809406][T15287] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.818269][T15287] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.944706][ T5107] Bluetooth: hci5: ACL packet for unknown connection handle 456 [ 898.189764][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 898.189784][ T29] audit: type=1326 audit(1721652466.841:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.1.3017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x0 [ 898.503452][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 898.534667][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3019'. [ 898.637091][T15317] ALSA: seq fatal error: cannot create timer (-22) [ 899.573830][T15322] input: syz1 as /devices/virtual/input/input39 [ 899.954809][T15332] random: crng reseeded on system resumption [ 900.653836][ T5107] Bluetooth: hci1: ACL packet for unknown connection handle 456 [ 903.347323][ T5149] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 903.437598][T15372] input: syz1 as /devices/virtual/input/input40 [ 903.541155][ T5177] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 903.553634][ T5149] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 903.577425][ T5149] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 903.590235][ T5149] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 903.604387][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.615515][T15351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 903.822341][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 903.842193][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 903.881347][ T5177] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 903.911754][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.930620][T11043] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 903.967099][ T5177] usb 5-1: config 0 descriptor?? [ 905.458083][T11043] usb 4-1: Using ep0 maxpacket: 16 [ 905.494114][T11043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 905.514586][ T9] usb 1-1: USB disconnect, device number 28 [ 905.589656][T11043] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 905.655852][T11043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.703958][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.704295][T11043] usb 4-1: config 0 descriptor?? [ 905.746845][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.789470][ T5177] hid (null): invalid report_size 812540268 [ 905.822126][ T5177] hid (null): unknown global tag 0x83 [ 905.851790][ T5177] hid (null): unknown global tag 0xc [ 905.875283][ T5177] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 905.903915][ T5177] hid-generic 0003:0158:0100.0018: unexpected long global item [ 906.038030][ T5177] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 906.197954][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.217162][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.305236][ T5177] usb 5-1: USB disconnect, device number 33 [ 906.329596][T11043] hid (null): unknown global tag 0x83 [ 906.368039][T11043] hid (null): unknown global tag 0xc [ 906.405865][T11043] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 906.429320][T11043] hid-generic 0003:0158:0100.0019: unexpected long global item [ 906.464980][T11043] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 907.170247][ T5149] usb 4-1: USB disconnect, device number 29 [ 907.300265][T11043] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 907.342592][T15412] Mount JFS Failure: -22 [ 907.527358][T11043] usb 1-1: Using ep0 maxpacket: 32 [ 907.550535][T11043] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 907.578555][T11043] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 907.595366][T11043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.620005][T11043] usb 1-1: Product: syz [ 907.635312][T11043] usb 1-1: Manufacturer: syz [ 907.646559][T11043] usb 1-1: SerialNumber: syz [ 907.664045][T11043] usb 1-1: config 0 descriptor?? [ 907.680500][T15408] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 907.706173][T11043] hub 1-1:0.0: bad descriptor, ignoring hub [ 907.727635][T11043] hub 1-1:0.0: probe with driver hub failed with error -5 [ 907.772968][T11043] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 907.830752][ T5149] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 907.962658][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 907.972442][ T9] usb 1-1: USB disconnect, device number 29 [ 908.028202][ T5149] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 908.058879][ T5149] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 908.079775][ T5149] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 908.108167][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.140767][T15415] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.291658][T15417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3057'. [ 908.319156][T15417] tipc: Invalid UDP bearer configuration [ 908.319206][T15417] tipc: Enabling of bearer rejected, failed to enable media [ 910.798142][ T9677] usb 4-1: USB disconnect, device number 30 [ 910.842655][ T5107] Bluetooth: hci5: ACL packet for unknown connection handle 456 [ 910.982330][T15436] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 911.357436][ T5107] Bluetooth: hci2: unexpected cc 0x0403 length: 65 > 1 [ 911.367571][ T5107] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 911.464742][T14875] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 912.612753][T15476] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 912.773917][T15478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.844654][T15481] serio: Serial port ptm0 [ 912.873492][T15483] tmpfs: Bad value for 'mpol' [ 912.877390][T15478] syz.1.3074: attempt to access beyond end of device [ 912.877390][T15478] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 912.931737][T15478] SQUASHFS error: Failed to read block 0x0: -5 [ 912.950493][T15478] unable to read squashfs_super_block [ 913.291665][T15492] input: syz1 as /devices/virtual/input/input42 [ 914.521040][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 915.751928][ T5107] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 915.761012][ T5107] Bluetooth: hci2: Injecting HCI hardware error event [ 915.773576][ T5107] Bluetooth: hci2: hardware error 0x00 [ 916.725507][ T5149] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 916.967353][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 916.988669][ T5149] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 917.020193][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.053527][ T5149] usb 1-1: Product: syz [ 917.061036][ T5149] usb 1-1: Manufacturer: syz [ 917.078146][ T5149] usb 1-1: SerialNumber: syz [ 917.142417][ T5149] usb 1-1: config 0 descriptor?? [ 917.387015][ T5149] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 917.424201][ T5149] usb 1-1: USB disconnect, device number 30 [ 917.791639][T15531] serio: Serial port ptm0 [ 918.036336][ T5107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 918.676068][T15521] pimreg: entered allmulticast mode [ 918.987362][T15543] input: syz1 as /devices/virtual/input/input43 [ 920.062055][T11043] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 920.279870][T11043] usb 4-1: Using ep0 maxpacket: 16 [ 920.300140][T11043] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 920.341072][T11043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.376128][T11043] usb 4-1: Product: syz [ 920.388199][T11043] usb 4-1: Manufacturer: syz [ 920.409893][T11043] usb 4-1: SerialNumber: syz [ 920.448925][T11043] usb 4-1: config 0 descriptor?? [ 920.730889][T11043] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 920.773287][T11043] usb 4-1: USB disconnect, device number 31 [ 922.323545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dbc1000: rx timeout, send abort [ 922.332267][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dbc0c00: rx timeout, send abort [ 922.342113][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802dbc1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 922.356593][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802dbc0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 926.432313][ T29] audit: type=1326 audit(1721652492.898:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.3.3145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x0 [ 928.169817][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3154'. [ 929.487587][T15699] ip6gretap0 speed is unknown, defaulting to 1000 [ 929.594916][T15713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.623933][T15713] syz.1.3158: attempt to access beyond end of device [ 929.623933][T15713] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 929.637664][T15713] SQUASHFS error: Failed to read block 0x0: -5 [ 929.644797][T15713] unable to read squashfs_super_block [ 929.910893][ T5146] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 930.202526][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 930.209924][ T5146] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.233865][ T5146] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 930.325051][ T5146] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 930.372526][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.459589][T15726] serio: Serial port ptm0 [ 930.471430][ T5146] usb 5-1: config 0 descriptor?? [ 931.222952][ T5112] usb 5-1: USB disconnect, device number 34 [ 932.641574][ T5112] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 933.018425][ T5112] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 933.244558][ T5112] usb 2-1: config 0 has no interface number 0 [ 933.273067][ T5112] usb 2-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 933.327759][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.410341][ T5112] usb 2-1: config 0 descriptor?? [ 933.429694][ T5112] usb 2-1: can't set first interface for hiFace device. [ 933.459039][ T5112] snd-usb-hiface 2-1:0.153: probe with driver snd-usb-hiface failed with error -5 [ 933.678434][T15770] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 933.977700][ T29] audit: type=1400 audit(1721652499.876:783): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15769 comm="syz.3.3178" daddr=255.255.255.255 dest=20000 netif=wpan0 [ 934.498704][ T5112] usb 2-1: USB disconnect, device number 27 [ 937.939815][ T5107] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 938.122129][ T29] audit: type=1326 audit(1721652503.670:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15802 comm="syz.3.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x0 [ 938.923755][ T9677] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 938.990530][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.012625][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.028903][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.041126][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.054699][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 939.063033][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.129005][T15838] ip6gretap0 speed is unknown, defaulting to 1000 [ 939.142540][ T9677] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 939.162124][ T9677] usb 5-1: config 0 has no interface number 0 [ 939.178441][ T9677] usb 5-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 939.188489][ T5112] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 939.225348][ T9677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.257697][ T9677] usb 5-1: config 0 descriptor?? [ 939.282546][ T9677] usb 5-1: can't set first interface for hiFace device. [ 939.295906][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'. [ 939.300107][ T9677] snd-usb-hiface 5-1:0.153: probe with driver snd-usb-hiface failed with error -5 [ 939.422063][ T5112] usb 2-1: Using ep0 maxpacket: 16 [ 939.439498][ T5112] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 939.460494][ T5112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.485794][ T5112] usb 2-1: Product: syz [ 939.490434][ T5112] usb 2-1: Manufacturer: syz [ 939.495078][ T5112] usb 2-1: SerialNumber: syz [ 939.532232][ T5112] usb 2-1: config 0 descriptor?? [ 939.559596][ T5177] usb 5-1: USB disconnect, device number 35 [ 939.586806][T15838] chnl_net:caif_netlink_parms(): no params data found [ 939.707926][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.717486][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.724827][T15838] bridge_slave_0: entered allmulticast mode [ 939.732979][T15838] bridge_slave_0: entered promiscuous mode [ 939.742563][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.750680][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.758115][T15838] bridge_slave_1: entered allmulticast mode [ 939.766496][T15838] bridge_slave_1: entered promiscuous mode [ 939.781906][ T5112] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 939.810762][ T5112] usb 2-1: USB disconnect, device number 28 [ 939.812975][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.823362][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.926873][T15858] input: syz1 as /devices/virtual/input/input45 [ 939.970069][T15838] team0: Port device team_slave_0 added [ 940.001485][T15838] team0: Port device team_slave_1 added [ 941.235809][T15864] netlink: 'syz.4.3211': attribute type 4 has an invalid length. [ 941.261133][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.278081][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.318871][ T5100] Bluetooth: hci3: command tx timeout [ 941.357613][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.422203][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.472683][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.555844][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.579891][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 941.700218][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 941.748547][T15838] hsr_slave_0: entered promiscuous mode [ 941.778193][T15838] hsr_slave_1: entered promiscuous mode [ 941.815286][T15838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.033016][T15838] Cannot create hsr debugfs directory [ 943.251418][T15889] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 943.251418][T15889] The task syz.1.3220 (15889) triggered the difference, watch for misbehavior. [ 943.910888][ T5100] Bluetooth: hci3: command tx timeout [ 944.384033][ T5112] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 948.955034][ T5107] Bluetooth: hci3: command tx timeout [ 949.041315][T15838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.313248][ T5112] usb 2-1: device not accepting address 29, error -71 [ 949.332421][T15838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.353472][T15911] ip6gretap0 speed is unknown, defaulting to 1000 [ 949.399903][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 949.572644][T15838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.643200][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 949.650340][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.677117][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 949.687723][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 949.698720][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.705311][T15919] input: syz1 as /devices/virtual/input/input46 [ 949.712248][ T9] usb 1-1: config 0 descriptor?? [ 949.736887][ T5112] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 949.792234][T15838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.969109][ T5112] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.015427][ T5112] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 950.044071][ T5112] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.119193][ T5112] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 950.136718][ T5112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.189560][ T5112] usb 2-1: Product: syz [ 950.196877][ T5112] usb 2-1: Manufacturer: syz [ 950.213295][ T5112] usb 2-1: SerialNumber: syz [ 950.386037][T15838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.413883][T15838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 950.447840][T15838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 950.488518][T15838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.513555][ T5112] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 950.773639][ T5112] usb 2-1: USB disconnect, device number 30 [ 950.801921][ T5112] usblp0: removed [ 951.177988][T15838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.198690][ T5107] Bluetooth: hci3: command tx timeout [ 951.340687][T15838] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.411817][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.419021][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.513426][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.520676][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.502338][T15950] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3240'. [ 954.528691][T15838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.539357][T11043] usb 1-1: USB disconnect, device number 31 [ 954.830390][T15838] veth0_vlan: entered promiscuous mode [ 954.873772][T15838] veth1_vlan: entered promiscuous mode [ 954.956045][T15838] veth0_macvtap: entered promiscuous mode [ 954.979673][T15838] veth1_macvtap: entered promiscuous mode [ 955.025383][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.066618][ T5177] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 955.074960][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.075000][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.075022][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.075045][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.075063][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.075081][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.217634][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.308393][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.340997][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.353321][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.369220][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.380126][ T5177] usb 5-1: Using ep0 maxpacket: 8 [ 955.397350][T15838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.421081][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.453130][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.470367][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.488391][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.525381][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.548361][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.565680][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.591277][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.616120][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.656631][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.680268][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.702840][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.737918][T15838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.335797][T15838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.356714][ T5177] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 956.357140][T15838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.365204][ T5177] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 956.420299][ T5146] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 956.428820][T15838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.438111][T15838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.455864][T15838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.464750][T15838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.491002][ T5177] usb 5-1: config 135 has no interface number 0 [ 956.514273][ T5177] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.567790][ T5177] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 956.587930][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.616731][ T5177] usb 5-1: Product: syz [ 956.626064][ T5177] usb 5-1: Manufacturer: syz [ 956.653900][ T5146] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 956.663915][ T5177] usb 5-1: SerialNumber: syz [ 956.679228][ T5146] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 956.720605][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.757425][ T5146] usb 1-1: config 0 descriptor?? [ 956.834459][ T6917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.842528][ T6917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.926601][ T5177] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 956.948577][ T5177] usb 5-1: No valid video chain found. [ 956.970606][ T5177] usb 5-1: USB disconnect, device number 36 [ 957.015525][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.024408][T15988] netlink: 'syz.3.3252': attribute type 4 has an invalid length. [ 957.049348][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.276182][ T5146] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 957.481966][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 957.496434][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 957.508967][ T5146] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.522165][ T5146] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 957.543446][ T5146] usb 2-1: string descriptor 0 read error: -22 [ 957.550729][ T5146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.567940][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.793418][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3259'. [ 957.824316][ T5146] cdc_ncm 2-1:1.0: bind() failure [ 957.837707][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 957.843888][ T5146] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 957.874438][ T5146] cdc_ncm 2-1:1.1: bind() failure [ 957.899813][ T5146] usb 2-1: USB disconnect, device number 31 [ 958.729092][T16013] Bluetooth: MGMT ver 1.23 [ 958.788519][T16015] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3263'. [ 958.835080][T16015] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 959.069997][T16025] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3268'. [ 959.092711][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 959.233281][T16028] team1: Mode changed to "activebackup" [ 959.318285][T16031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3269'. [ 959.551272][ T9677] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 959.633630][ T29] audit: type=1800 audit(1721652523.552:785): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3263" name="/" dev="fuse" ino=1 res=0 errno=0 [ 959.673777][ T5146] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 959.769448][ T9677] usb 5-1: Using ep0 maxpacket: 8 [ 959.787971][ T9677] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 959.789707][ T5149] usb 1-1: USB disconnect, device number 32 [ 959.806959][ T9677] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 959.845989][ T9677] usb 5-1: config 135 has no interface number 0 [ 959.852354][ T9677] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.896291][ T9677] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 959.916740][ T9677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.928304][ T9677] usb 5-1: Product: syz [ 959.932928][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 959.941962][ T9677] usb 5-1: Manufacturer: syz [ 959.948699][ T5146] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 959.971397][ T9677] usb 5-1: SerialNumber: syz [ 959.976352][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.007578][ T5146] usb 2-1: config 0 descriptor?? [ 960.028774][ T5146] gspca_main: sq930x-2.14.0 probing 041e:403c [ 960.230498][ T9677] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 960.254727][ T9677] usb 5-1: No valid video chain found. [ 960.279623][ T9677] usb 5-1: USB disconnect, device number 37 [ 960.480499][ T5146] gspca_sq930x: ucbus_write failed -71 [ 960.491308][ T5146] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 960.502049][ T5146] usb 2-1: USB disconnect, device number 32 [ 960.779257][T16050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3277'. [ 960.790837][T11043] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 961.036800][T16055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 961.512736][T11043] usb 3-1: Using ep0 maxpacket: 32 [ 961.540808][T11043] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 961.573722][T11043] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 961.585926][T11043] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 961.607744][T11043] usb 3-1: string descriptor 0 read error: -22 [ 961.623866][T11043] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.664034][T11043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.038194][T11043] cdc_ncm 3-1:1.0: bind() failure [ 962.070189][T11043] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 962.086977][T11043] cdc_ncm 3-1:1.1: bind() failure [ 962.103486][T11043] usb 3-1: USB disconnect, device number 24 [ 962.158279][T16075] input: syz1 as /devices/virtual/input/input47 [ 962.393719][T16064] netlink: 'syz.0.3279': attribute type 4 has an invalid length. [ 962.704264][T11043] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 962.919002][T11043] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 962.955470][T11043] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 962.979846][T11043] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.014838][T11043] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 963.026475][T11043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.048288][T11043] usb 4-1: Product: syz [ 963.053870][T11043] usb 4-1: Manufacturer: syz [ 963.060661][T11043] usb 4-1: SerialNumber: syz [ 963.112131][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3289'. [ 963.334026][T11043] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 963.596807][T11043] usb 4-1: USB disconnect, device number 32 [ 963.633715][T11043] usblp0: removed [ 964.561683][T16093] program syz.3.3291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 964.612362][T16093] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 970.619144][T16125] netlink: 'syz.0.3299': attribute type 4 has an invalid length. [ 971.850610][T16135] program syz.4.3303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 972.008519][T16135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 972.175243][T16152] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 973.203246][T16157] input: syz0 as /devices/virtual/input/input48 [ 974.761831][T16194] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 976.075435][ T9677] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 976.318631][ T9677] usb 2-1: config 0 interface 0 has no altsetting 0 [ 976.336137][ T9677] usb 2-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 976.407633][ T9677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.705363][ T9677] usb 2-1: config 0 descriptor?? [ 977.053289][ T9677] usb 2-1: selecting invalid altsetting 0 [ 977.115320][ T9677] usb 2-1: USB disconnect, device number 33 [ 978.506515][T16256] ISOFS: Unable to identify CD-ROM format. [ 979.042411][T16264] ALSA: seq fatal error: cannot create timer (-16) [ 979.046969][T16262] loop7: detected capacity change from 0 to 16384 [ 979.304559][T16272] netlink: 'syz.2.3345': attribute type 7 has an invalid length. [ 979.312697][T16272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3345'. [ 979.343329][T16272] netlink: 'syz.2.3345': attribute type 3 has an invalid length. [ 979.351168][T16272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3345'. [ 980.436708][T16277] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 980.447861][T16277] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 980.595909][T16277] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 981.898872][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.066105][T16308] ALSA: seq fatal error: cannot create timer (-16) [ 982.086275][ T1152] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 982.294907][ T1152] usb 4-1: Using ep0 maxpacket: 8 [ 982.317141][ T1152] usb 4-1: unable to get BOS descriptor or descriptor too short [ 982.345913][T16319] Invalid logical block size (1) [ 982.362397][ T1152] usb 4-1: string descriptor 0 read error: -22 [ 982.371413][ T1152] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 982.395885][ T1152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.429680][ T1152] usb 4-1: config 0 descriptor?? [ 982.681786][ T5112] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 982.925838][ T5112] usb 3-1: Using ep0 maxpacket: 32 [ 982.955313][ T5112] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 983.020622][ T5112] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.032769][ T5112] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 983.048951][ T5112] usb 3-1: string descriptor 0 read error: -22 [ 983.063251][ T5112] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.295917][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.243028][T16342] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 984.329491][ T5112] cdc_ncm 3-1:1.0: bind() failure [ 984.333729][ T1152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 984.351844][ T5112] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 984.358902][ T5112] cdc_ncm 3-1:1.1: bind() failure [ 984.400170][ T5112] usb 3-1: USB disconnect, device number 25 [ 984.414259][ T1152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 984.433593][ T1152] dib0700: firmware download failed at 7 with -22 [ 984.447302][ T5177] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 984.469336][ T1152] usb 4-1: USB disconnect, device number 33 [ 984.685488][ T5177] usb 5-1: Using ep0 maxpacket: 32 [ 984.698391][ T5177] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.718183][ T5177] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.728021][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 984.750728][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.774709][ T5177] hub 5-1:4.0: USB hub found [ 985.036698][ T5177] hub 5-1:4.0: 2 ports detected [ 985.508532][ T5177] hub 5-1:4.0: set hub depth failed [ 985.539211][ T5177] usb 5-1: USB disconnect, device number 38 [ 985.986186][T16373] netlink: 'syz.2.3379': attribute type 7 has an invalid length. [ 985.994255][T16373] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3379'. [ 986.014671][T16373] netlink: 'syz.2.3379': attribute type 3 has an invalid length. [ 986.022641][T16373] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3379'. [ 987.914405][ T1152] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 988.184201][T16388] binder: 16382:16388 ioctl c0306201 200003c0 returned -14 [ 988.392762][ T1152] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 988.440886][ T1152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.641063][ T1152] usb 3-1: config 0 descriptor?? [ 988.655936][ T1152] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 988.894240][ T1152] gspca_sn9c2028: read1 error -32 [ 989.867426][ T1152] gspca_sn9c2028: read1 error -110 [ 989.900794][ T1152] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 990.040936][T16401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.122286][T16412] syz.0.3387: attempt to access beyond end of device [ 990.122286][T16412] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 990.180550][T16412] SQUASHFS error: Failed to read block 0x0: -5 [ 990.189399][T16412] unable to read squashfs_super_block [ 990.702229][T16427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3395'. [ 990.829708][T16429] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 991.294594][T16432] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xe [ 991.447019][ T5112] usb 3-1: USB disconnect, device number 26 [ 993.391527][T16473] netlink: 'syz.0.3411': attribute type 1 has an invalid length. [ 993.439535][T16473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3411'. [ 993.765132][T16483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 994.276866][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.357343][T16494] 9pnet_fd: p9_fd_create_tcp (16494): problem connecting socket to 127.0.0.1 [ 995.462707][T16502] x_tables: unsorted underflow at hook 2 [ 996.088283][T16518] program syz.2.3424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.103217][T16518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 996.178952][T16521] ip6gretap0 speed is unknown, defaulting to 1000 [ 997.694840][T16548] syz.1.3433[16548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 997.695015][T16548] syz.1.3433[16548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 997.914167][T16555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3436'. [ 997.946429][T16555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3436'. [ 997.962442][T16558] vivid-007: disconnect [ 998.009968][T16557] vivid-007: reconnect [ 998.520288][ T9677] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 998.732018][ T9677] usb 2-1: config 0 has no interfaces? [ 998.732979][T16582] syz.3.3447[16582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 998.754006][T16582] syz.3.3447[16582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 998.756661][T16579] program syz.0.3446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.788844][ T9677] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 998.798483][T16579] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 998.817960][ T9677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.856800][ T9677] usb 2-1: config 0 descriptor?? [ 999.262470][T16596] input: syz1 as /devices/virtual/input/input49 [ 999.724190][ T9677] usb 2-1: USB disconnect, device number 34 [ 1000.193546][T16607] tipc: Started in network mode [ 1000.223539][T16607] tipc: Node identity , cluster identity 4711 [ 1000.283616][T16607] tipc: Failed to set node id, please configure manually [ 1000.321927][T16607] tipc: Enabling of bearer rejected, failed to enable media [ 1000.925317][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1002.104958][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 1006.310030][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1006.537574][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.557392][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.565470][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1006.607616][T16734] team0: Port device bond0 added [ 1006.613427][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.820568][ T9] usb 1-1: config 0 descriptor?? [ 1009.221156][ T9677] usb 1-1: USB disconnect, device number 33 [ 1009.560562][T11043] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1010.012430][T11043] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1010.012469][T11043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.015265][T11043] usb 3-1: config 0 descriptor?? [ 1010.018253][T11043] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1010.898707][T11043] gspca_sn9c2028: read1 error -110 [ 1011.182632][T11043] gspca_sn9c2028: read1 error -32 [ 1011.199238][T11043] gspca_sn9c2028: read1 error -32 [ 1011.204437][T11043] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1011.509150][T16795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.544718][T16795] team0: Port device bond0 added [ 1013.089561][ T9677] usb 3-1: USB disconnect, device number 27 [ 1014.502293][T16821] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1014.920801][T16838] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 1014.973147][T16838] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.3540'. [ 1015.038372][T16838] netlink: 'syz.4.3540': attribute type 2 has an invalid length. [ 1015.060402][T16838] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 1016.206252][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.405631][T16866] Smack: duplicate mount options [ 1018.691614][T16860] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3550'. [ 1018.980758][T16876] netlink: 'syz.1.3555': attribute type 1 has an invalid length. [ 1019.081495][T16881] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1019.099459][T16881] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1019.159402][T16881] bond1: (slave vcan1): making interface the new active one [ 1019.189616][T16881] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1019.266028][T16891] Smack: duplicate mount options [ 1020.260729][T16903] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1021.050050][T16935] program syz.1.3575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.101027][T16935] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1021.109743][T16936] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 1021.416334][T16941] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1021.466591][T16941] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1021.516120][T16941] bond1: (slave vcan1): making interface the new active one [ 1021.529025][T16941] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1022.387841][ T9677] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1022.603956][ T9677] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1022.634669][ T9677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.651895][ T9677] usb 5-1: config 0 descriptor?? [ 1022.667549][ T9677] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1022.971180][T16975] netlink: 'syz.3.3587': attribute type 7 has an invalid length. [ 1022.979188][T16975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1023.001144][T16975] netlink: 'syz.3.3587': attribute type 3 has an invalid length. [ 1023.009254][T16975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1023.510619][ T9677] gspca_sn9c2028: read1 error -110 [ 1023.706510][T16973] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1024.272306][T16984] netlink: 'syz.1.3590': attribute type 1 has an invalid length. [ 1024.386452][T16984] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 1024.397103][T16984] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 1024.412287][T16984] bond2: (slave vcan2): making interface the new active one [ 1024.421324][T16984] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 1025.524692][T16995] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1025.764401][ T9677] usb 5-1: USB disconnect, device number 39 [ 1027.004861][T17027] ip6gretap0 speed is unknown, defaulting to 1000 [ 1027.749801][ T9677] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1027.776967][T17042] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1027.974390][ T9677] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1027.994827][T17021] ip6gretap0 speed is unknown, defaulting to 1000 [ 1028.020621][ T9677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.064640][ T9677] usb 2-1: config 0 descriptor?? [ 1028.084021][ T9677] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1028.215802][T11043] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1028.324068][ T9677] gspca_sn9c2028: read1 error -32 [ 1028.439477][T11043] usb 4-1: Using ep0 maxpacket: 8 [ 1028.514586][T11043] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1028.552073][T11043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.653006][T11043] usb 4-1: Product: syz [ 1028.697859][T11043] usb 4-1: Manufacturer: syz [ 1028.743054][T11043] usb 4-1: SerialNumber: syz [ 1028.765159][T11043] usb 4-1: config 0 descriptor?? [ 1028.856268][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.992505][ T25] usb 2-1: USB disconnect, device number 35 [ 1031.006873][T11043] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1031.050336][T11043] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1031.683377][T11043] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1033.128870][T11043] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1033.194838][T17057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1034.022387][T11043] usb 4-1: USB disconnect, device number 34 [ 1034.463003][T17076] netlink: 'syz.3.3623': attribute type 7 has an invalid length. [ 1034.477907][T17074] tipc: Started in network mode [ 1034.490458][T17074] tipc: Node identity ce480e28d65e, cluster identity 4711 [ 1034.497919][T17074] tipc: Enabled bearer , priority 0 [ 1034.602271][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1034.972596][T17074] tipc: Resetting bearer [ 1035.069487][T17073] tipc: Resetting bearer [ 1035.105979][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1035.355643][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1035.378698][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.472438][ T25] usb 5-1: config 0 has no interface number 0 [ 1035.476548][T17098] input: syz0 as /devices/virtual/input/input50 [ 1035.517700][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1035.561060][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.614563][ T25] usb 5-1: config 0 descriptor?? [ 1035.694989][ T25] hso 5-1:0.1: Failed to find BULK IN ep [ 1035.701967][ T5146] tipc: Node number set to 404098600 [ 1035.720954][T17101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1037.898403][ T25] usb 5-1: USB disconnect, device number 40 [ 1038.216798][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1038.229570][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1038.239114][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1038.250624][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1038.258730][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1038.266345][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1040.474540][ T5100] Bluetooth: hci4: command tx timeout [ 1040.834126][T17073] tipc: Disabling bearer [ 1040.941884][T17112] ip6gretap0 speed is unknown, defaulting to 1000 [ 1041.682125][ T1152] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1042.744590][ T5100] Bluetooth: hci4: command tx timeout [ 1043.307221][ T1152] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1043.316318][ T29] audit: type=1800 audit(1721652600.783:786): pid=17130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3643" name="/" dev="9p" ino=2 res=0 errno=0 [ 1043.345774][ T1152] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1043.848981][ T1152] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1043.858112][ T1152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.870482][ T29] audit: type=1326 audit(1721652601.290:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17138 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 1043.957545][ T1152] usb 3-1: Product: syz [ 1043.961777][ T1152] usb 3-1: Manufacturer: syz [ 1043.966412][ T1152] usb 3-1: SerialNumber: syz [ 1043.971431][ T29] audit: type=1326 audit(1721652601.290:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17138 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 1044.029497][ T1152] cdc_ncm 3-1:1.0: skipping garbage [ 1044.058101][T17147] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1044.071361][ T29] audit: type=1326 audit(1721652601.290:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17138 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 1044.130729][ T29] audit: type=1326 audit(1721652601.290:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17138 comm="syz.1.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b0975f19 code=0x7ffc0000 [ 1044.241313][T17149] netem: change failed [ 1044.477567][ T5177] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1045.138081][ T5177] usb 5-1: Using ep0 maxpacket: 8 [ 1045.150978][ T5177] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1045.160552][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.160910][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.231422][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.244288][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.271771][ T5177] usb 5-1: Product: syz [ 1045.276006][ T5177] usb 5-1: Manufacturer: syz [ 1045.308490][ T5177] usb 5-1: SerialNumber: syz [ 1045.334062][ T5177] usb 5-1: config 0 descriptor?? [ 1045.431522][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.440628][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.495974][ T5107] Bluetooth: hci4: command tx timeout [ 1045.546226][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.647524][ T5177] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1045.656243][ T5177] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1045.669644][ T5177] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1045.684195][ T1152] cdc_ncm 3-1:1.0: bind() failure [ 1045.684651][ T5177] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1045.704774][ T5177] usb 5-1: USB disconnect, device number 41 [ 1045.712851][ T1152] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1045.735124][ T1152] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1045.755946][ T1152] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1045.770958][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.778073][ T1152] usb 3-1: USB disconnect, device number 28 [ 1045.925961][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.957291][T17112] chnl_net:caif_netlink_parms(): no params data found [ 1046.165829][T17179] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1046.187391][T17112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.189378][ T136] Bluetooth: hci1: Frame reassembly failed (-84) [ 1046.195602][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.208998][T17112] bridge_slave_0: entered allmulticast mode [ 1046.216872][T17112] bridge_slave_0: entered promiscuous mode [ 1046.245792][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.253045][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.260646][T17112] bridge_slave_1: entered allmulticast mode [ 1046.269650][T17112] bridge_slave_1: entered promiscuous mode [ 1046.368638][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.389152][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.426355][ T53] bridge_slave_1: left allmulticast mode [ 1046.434057][ T53] bridge_slave_1: left promiscuous mode [ 1046.451733][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.496358][ T53] bridge_slave_0: left allmulticast mode [ 1046.502184][ T53] bridge_slave_0: left promiscuous mode [ 1046.521911][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.267145][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.282563][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.303553][ T53] bond0 (unregistering): Released all slaves [ 1047.321188][ T53] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1047.334739][ T53] bond1 (unregistering): Released all slaves [ 1047.749418][ T5100] Bluetooth: hci4: command tx timeout [ 1048.363875][ T5100] Bluetooth: hci1: command 0x1003 tx timeout [ 1048.371824][ T5107] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1048.411231][T17112] team0: Port device team_slave_0 added [ 1048.422048][T17112] team0: Port device team_slave_1 added [ 1048.781747][T17205] syz.4.3668 uses old SIOCAX25GETINFO [ 1049.345950][T17216] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.352660][T17216] binder: 17214:17216 ioctl 4018620d 20000100 returned -16 [ 1049.456566][T17203] ip6gretap0 speed is unknown, defaulting to 1000 [ 1049.598093][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.616387][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.652068][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.722801][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.729802][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.775242][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.067669][T17112] hsr_slave_0: entered promiscuous mode [ 1050.101721][T17112] hsr_slave_1: entered promiscuous mode [ 1050.132777][T17112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.149108][T17112] Cannot create hsr debugfs directory [ 1050.986844][T17237] binder: 17236:17237 ioctl c00c620f 0 returned -14 [ 1051.466680][ T53] hsr_slave_0: left promiscuous mode [ 1051.467036][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.767942][ T29] audit: type=1326 audit(1721652608.573:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7fc00000 [ 1052.228578][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.274834][ T29] audit: type=1326 audit(1721652608.582:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f714d975f19 code=0x7fc00000 [ 1052.321908][ T53] hsr_slave_1: left promiscuous mode [ 1052.390374][ T29] audit: type=1326 audit(1721652609.016:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714d975f19 code=0x7fc00000 [ 1052.409727][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.681849][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.826943][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.363087][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.382054][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1053.425166][T17259] netlink: 'syz.1.3685': attribute type 2 has an invalid length. [ 1053.458817][ T53] veth1_macvtap: left promiscuous mode [ 1053.480120][ T53] veth0_macvtap: left promiscuous mode [ 1053.489048][ T53] veth1_vlan: left promiscuous mode [ 1053.494676][ T53] veth0_vlan: left promiscuous mode [ 1055.081891][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1055.211739][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1055.981219][ T9677] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1056.470507][ T9677] usb 3-1: Using ep0 maxpacket: 16 [ 1056.479429][ T9677] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1056.504874][ T9677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.520830][ T9677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1056.529243][ T9677] usb 3-1: SerialNumber: syz [ 1056.544649][ T9677] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1056.562130][ T9677] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1056.572797][ T9677] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1056.683077][T17254] ip6gretap0 speed is unknown, defaulting to 1000 [ 1056.822525][ T9677] usb 3-1: USB disconnect, device number 29 [ 1057.064965][T17273] ip6gretap0 speed is unknown, defaulting to 1000 [ 1058.788580][T17112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1058.866285][T17112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1058.890297][T17293] ipvlan0: entered promiscuous mode [ 1058.904726][T17112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1058.931338][T17112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1059.173284][T17299] dccp_invalid_packet: invalid packet type [ 1059.174807][T17293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.245880][T17292] ipvlan0: left promiscuous mode [ 1059.400521][T17112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.432382][T17112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.453801][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.461055][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.497600][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.504888][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.525684][ T9677] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1059.760880][ T9677] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1059.781653][ T9677] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.826145][ T9677] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1059.836240][ T9677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.853586][ T9677] usb 2-1: Product: syz [ 1059.865551][ T9677] usb 2-1: Manufacturer: syz [ 1059.891752][ T9677] usb 2-1: SerialNumber: syz [ 1059.912000][ T9677] cdc_ncm 2-1:1.0: skipping garbage [ 1060.249127][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.553389][T17112] veth0_vlan: entered promiscuous mode [ 1060.632834][T17112] veth1_vlan: entered promiscuous mode [ 1060.822637][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.834159][T17112] veth0_macvtap: entered promiscuous mode [ 1060.876726][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.932489][T17112] veth1_macvtap: entered promiscuous mode [ 1061.095720][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.111708][T17339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1061.128737][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.129065][T17339] netlink: 'syz.4.3713': attribute type 2 has an invalid length. [ 1061.147809][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.202537][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.206477][T17341] netlink: 'syz.3.3714': attribute type 9 has an invalid length. [ 1061.220751][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.246716][T17341] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1061.254050][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.273722][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.300271][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.302251][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.320861][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.332485][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.345165][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.358014][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.368967][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.388141][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.479277][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.514293][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.543549][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.580291][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.595981][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.617154][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.638158][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.661735][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.684946][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.707582][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.729989][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.753588][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.777761][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.801590][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.826630][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.868310][T17342] netlink: 'syz.3.3714': attribute type 9 has an invalid length. [ 1061.896476][T17112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.926270][T17112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.926295][ T9677] cdc_ncm 2-1:1.0: bind() failure [ 1061.931701][ T9677] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1061.935518][T17342] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1061.940811][ T9677] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1061.959355][T17112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.018213][T17112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.387402][ T6917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.417257][ T6917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.521868][ T6917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.532851][ T6917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.945328][T17356] input: syz1 as /devices/virtual/input/input51 [ 1065.212529][T17356] bond_slave_0: entered promiscuous mode [ 1065.219517][T17356] bond_slave_0: entered allmulticast mode [ 1065.227436][T17356] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1065.501154][T17351] bond_slave_0: left allmulticast mode [ 1065.509599][T17351] bond_slave_0: left promiscuous mode [ 1066.251394][T17360] netlink: 'syz.0.3636': attribute type 7 has an invalid length. [ 1066.259555][T17360] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1066.277774][T17360] netlink: 'syz.0.3636': attribute type 3 has an invalid length. [ 1066.285712][T17360] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1066.511296][T17359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1066.985856][ T9677] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1067.083272][ T9677] usb 2-1: USB disconnect, device number 36 [ 1067.781849][T11043] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1068.008422][T11043] usb 1-1: Using ep0 maxpacket: 8 [ 1068.032361][T11043] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.090335][T11043] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.155155][T11043] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 1068.196732][T11043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.248788][T11043] usb 1-1: config 0 descriptor?? [ 1068.281193][T11043] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1068.556305][T17383] overlayfs: failed to resolve '/ûHÌÕe': -2 [ 1068.584092][T11043] usb-storage 1-1:0.0: Quirks match for vid 054c pid 0069: 1 [ 1068.591832][T17408] dccp_invalid_packet: invalid packet type [ 1068.696392][T17411] input: syz1 as /devices/virtual/input/input52 [ 1068.896938][T17411] bond_slave_0: entered promiscuous mode [ 1068.908994][T17411] bond_slave_0: entered allmulticast mode [ 1068.924868][T17411] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1069.303523][T17392] bond_slave_0: left allmulticast mode [ 1069.311966][T17392] bond_slave_0: left promiscuous mode [ 1069.611842][T11043] usb 1-1: USB disconnect, device number 34 [ 1069.718922][T17420] sp0: Synchronizing with TNC [ 1069.728521][T17423] netlink: 'syz.0.3741': attribute type 14 has an invalid length. [ 1070.393211][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1070.421252][T17441] lo speed is unknown, defaulting to 1000 [ 1070.449096][T17441] lo speed is unknown, defaulting to 1000 [ 1070.458325][T17441] lo speed is unknown, defaulting to 1000 [ 1070.723761][ T5177] lo speed is unknown, defaulting to 1000 [ 1070.731553][T17441] infiniband syz1: set active [ 1070.781593][T17441] infiniband syz1: added lo [ 1070.803972][T17441] syz1: rxe_create_cq: returned err = -12 [ 1070.820861][T17441] infiniband syz1: Couldn't create ib_mad CQ [ 1070.831883][T17441] infiniband syz1: Couldn't open port 1 [ 1070.869418][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1070.894817][T17447] netlink: 'syz.1.3749': attribute type 3 has an invalid length. [ 1070.923400][T17441] RDS/IB: syz1: added [ 1070.930288][T17447] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1070.940450][T17441] smc: adding ib device syz1 with port count 1 [ 1070.956007][T17441] smc: ib device syz1 port 1 has pnetid [ 1070.975409][ T5177] lo speed is unknown, defaulting to 1000 [ 1070.992567][T17441] lo speed is unknown, defaulting to 1000 [ 1071.355186][T17455] binder: 17452:17455 ioctl 4018620d 0 returned -22 [ 1071.647262][T17441] lo speed is unknown, defaulting to 1000 [ 1071.919357][ T5177] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1072.264275][ T5177] usb 2-1: device descriptor read/64, error -71 [ 1073.443397][T17470] netlink: 'syz.0.3756': attribute type 14 has an invalid length. [ 1073.481578][ T5177] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1073.632659][T17441] lo speed is unknown, defaulting to 1000 [ 1073.697936][ T5177] usb 2-1: device descriptor read/64, error -71 [ 1073.827080][ T5177] usb usb2-port1: attempt power cycle [ 1074.268261][T17441] lo speed is unknown, defaulting to 1000 [ 1074.356913][ T5177] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1074.422224][ T5177] usb 2-1: device descriptor read/8, error -71 [ 1074.802705][T17441] lo speed is unknown, defaulting to 1000 [ 1074.964201][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1075.075619][T17489] QAT: Device 0 not found [ 1075.176949][T17441] lo speed is unknown, defaulting to 1000 [ 1075.189385][T17492] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1075.196447][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1075.198602][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.245726][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 1075.256382][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.307396][ T9] usb 4-1: config 0 descriptor?? [ 1075.593332][ T9] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -71 [ 1075.728729][ T9] usb 4-1: USB disconnect, device number 35 [ 1075.795866][T17441] lo speed is unknown, defaulting to 1000 [ 1075.843646][T11043] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1075.882522][T17506] sctp: [Deprecated]: syz.0.3771 (pid 17506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1075.882522][T17506] Use struct sctp_sack_info instead [ 1075.906060][T11043] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1075.919916][T11043] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1076.451102][T17441] lo speed is unknown, defaulting to 1000 [ 1076.487169][ T29] audit: type=1326 audit(1721652631.409:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.2.3775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3752d75f19 code=0x0 [ 1076.679897][T17522] sp0: Synchronizing with TNC [ 1077.323030][T17538] overlayfs: failed to clone upperpath [ 1077.337585][T17538] netlink: 'syz.4.3783': attribute type 10 has an invalid length. [ 1077.451526][T17538] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1077.953541][ T5177] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1078.289387][ T5177] usb 2-1: Using ep0 maxpacket: 32 [ 1078.305268][ T5177] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.420096][ T5177] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 1078.471452][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.734742][ T5177] usb 2-1: config 0 descriptor?? [ 1079.534178][ T5177] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -71 [ 1079.598897][ T5177] usb 2-1: USB disconnect, device number 41 [ 1080.786343][ T5177] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1080.823002][ T5177] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1080.875565][ T5177] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1080.888382][T17590] sctp: [Deprecated]: syz.1.3803 (pid 17590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.888382][T17590] Use struct sctp_sack_info instead [ 1082.188109][T17617] input: syz1 as /devices/virtual/input/input53 [ 1082.362601][T17619] bond_slave_0: entered promiscuous mode [ 1082.375272][T17619] bond_slave_0: entered allmulticast mode [ 1082.390826][T17619] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1082.906510][T17612] bond_slave_0: left allmulticast mode [ 1082.913156][T17612] bond_slave_0: left promiscuous mode [ 1082.983950][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.291292][T17626] sp0: Synchronizing with TNC [ 1083.695690][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1083.702277][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1083.750106][T17631] vhci_hcd vhci_hcd.0: Device attached [ 1083.778288][T17632] vhci_hcd: connection closed [ 1083.778756][ T6917] vhci_hcd: stop threads [ 1083.805725][ T6917] vhci_hcd: release socket [ 1083.825813][ T6917] vhci_hcd: disconnect device [ 1084.107484][T17630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.170114][T17640] IPv4: Oversized IP packet from 127.0.0.1 [ 1084.178677][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1084.402550][T17647] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1084.522141][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1084.583259][T17654] dccp_invalid_packet: P.Data Offset(80) too large [ 1088.682196][T17662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1088.970411][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1089.035848][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1089.066603][T17677] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 1089.088203][T17677] nbd: error processing sock list [ 1089.125622][ T5177] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1089.234044][ C0] Oops: general protection fault, probably for non-canonical address 0xe3fffa220150251c: 0000 [#1] PREEMPT SMP KASAN PTI [ 1089.246706][ C0] KASAN: maybe wild-memory-access in range [0x1ffff1100a8128e0-0x1ffff1100a8128e7] [ 1089.256478][ C0] CPU: 0 UID: 0 PID: 17679 Comm: syz.0.3828 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 1089.266928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1089.277029][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 1089.282271][ C0] Code: 48 89 ef e8 b7 9b 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 85 9b 3b 00 48 8b 03 48 89 44 [ 1089.301925][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010202 [ 1089.308045][ C0] RAX: dffffc0000000000 RBX: 1ffff1100a8128e0 RCX: ffff888054093c00 [ 1089.316155][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc90002fbf810 [ 1089.324165][ C0] RBP: ffffc90002fbf810 R08: ffffffff896119aa R09: 1ffffffff1f5cf7d [ 1089.332173][ C0] R10: dffffc0000000000 R11: fffffbfff1f5cf7e R12: 0000000000000000 [ 1089.340186][ C0] R13: 03fffe220150251c R14: 0000000000000000 R15: ffffc90002fbf810 [ 1089.348189][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1089.357166][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1089.363764][ C0] CR2: 0000555582f0f808 CR3: 00000000610f0000 CR4: 00000000003506f0 [ 1089.371759][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1089.379747][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1089.387743][ C0] Call Trace: [ 1089.391037][ C0] [ 1089.393888][ C0] ? __die_body+0x88/0xe0 [ 1089.398336][ C0] ? die_addr+0x108/0x140 [ 1089.402793][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 1089.408408][ C0] ? asm_exc_general_protection+0x26/0x30 [ 1089.414247][ C0] ? xdp_do_check_flushed+0x10a/0x240 [ 1089.419652][ C0] ? __dev_flush+0x5b/0x160 [ 1089.424352][ C0] xdp_do_check_flushed+0x129/0x240 [ 1089.429577][ C0] __napi_poll+0xe4/0x490 [ 1089.433929][ C0] net_rx_action+0x89b/0x1240 [ 1089.438730][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1089.443979][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1089.449134][ C0] ? sched_clock+0x4a/0x70 [ 1089.453591][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1089.460040][ C0] handle_softirqs+0x2c4/0x970 [ 1089.465032][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1089.469833][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1089.475137][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1089.480355][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1089.484984][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1089.490221][ C0] irq_exit_rcu+0x9/0x30 [ 1089.494485][ C0] common_interrupt+0xaa/0xd0 [ 1089.499186][ C0] [ 1089.502129][ C0] [ 1089.505088][ C0] asm_common_interrupt+0x26/0x40 [ 1089.510163][ C0] RIP: 0010:do_exit+0x1d41/0x27f0 [ 1089.515253][ C0] Code: e8 b4 f9 a0 00 48 8b 1b 41 bc 08 00 00 00 4a 8d 3c 23 48 89 f8 48 c1 e8 03 42 80 3c 38 00 74 05 e8 94 f9 a0 00 4a 83 3c 23 00 <75> 0b e8 b8 e8 3c 00 49 83 c4 08 eb d7 44 8b 35 4b e2 c6 0c 4c 89 [ 1089.534889][ C0] RSP: 0018:ffffc90002fbfac0 EFLAGS: 00000246 [ 1089.540997][ C0] RAX: 1ffff920005f7001 RBX: ffffc90002fb8000 RCX: ffffc90002fbf903 [ 1089.548982][ C0] RDX: 0000000000000000 RSI: ffffffff8bcae720 RDI: ffffc90002fb8008 [ 1089.556972][ C0] RBP: ffffc90002fbfc20 R08: ffffffff8fae7bef R09: 1ffffffff1f5cf7d [ 1089.564957][ C0] R10: dffffc0000000000 R11: fffffbfff1f5cf7e R12: 0000000000000008 [ 1089.572972][ C0] R13: 1ffff1100a812844 R14: 0000000000000000 R15: dffffc0000000000 [ 1089.580999][ C0] ? __pfx_do_exit+0x10/0x10 [ 1089.585658][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1089.591072][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1089.597094][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1089.603449][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1089.608602][ C0] do_group_exit+0x207/0x2c0 [ 1089.613221][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.618442][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1089.623661][ C0] get_signal+0x1695/0x1730 [ 1089.628284][ C0] ? __pfx_get_signal+0x10/0x10 [ 1089.633197][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1089.638868][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1089.645050][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1089.651117][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1089.656880][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 1089.662476][ C0] do_syscall_64+0x100/0x230 [ 1089.667086][ C0] ? clear_bhb_loop+0x35/0x90 [ 1089.671791][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.677737][ C0] RIP: 0033:0x7fc784f75f19 [ 1089.682185][ C0] Code: Unable to access opcode bytes at 0x7fc784f75eef. [ 1089.689224][ C0] RSP: 002b:00007fc785cd90f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1089.697666][ C0] RAX: fffffffffffffe00 RBX: 00007fc785105f68 RCX: 00007fc784f75f19 [ 1089.705666][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc785105f68 [ 1089.713743][ C0] RBP: 00007fc785105f60 R08: 00007fc785cd96c0 R09: 00007fc785cd96c0 [ 1089.721930][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc785105f6c [ 1089.729933][ C0] R13: 000000000000000b R14: 00007ffe4da8ead0 R15: 00007ffe4da8ebb8 [ 1089.737957][ C0] [ 1089.740998][ C0] Modules linked in: [ 1089.744986][ C0] ---[ end trace 0000000000000000 ]--- [ 1089.750465][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 1089.755657][ C0] Code: 48 89 ef e8 b7 9b 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 85 9b 3b 00 48 8b 03 48 89 44 [ 1089.775412][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010202 [ 1089.781505][ C0] RAX: dffffc0000000000 RBX: 1ffff1100a8128e0 RCX: ffff888054093c00 [ 1089.789525][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc90002fbf810 [ 1089.797818][ C0] RBP: ffffc90002fbf810 R08: ffffffff896119aa R09: 1ffffffff1f5cf7d [ 1089.805823][ C0] R10: dffffc0000000000 R11: fffffbfff1f5cf7e R12: 0000000000000000 [ 1089.813902][ C0] R13: 03fffe220150251c R14: 0000000000000000 R15: ffffc90002fbf810 [ 1089.822006][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1089.830979][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1089.837600][ C0] CR2: 0000555582f0f808 CR3: 00000000610f0000 CR4: 00000000003506f0 [ 1089.845622][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1089.853645][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1089.861682][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1089.869475][ C0] Kernel Offset: disabled [ 1089.873840][ C0] Rebooting in 86400 seconds..