last executing test programs: 1.620179278s ago: executing program 2 (id=6899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, 0x0, 0x0) 1.401451673s ago: executing program 2 (id=6904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) 1.140248927s ago: executing program 2 (id=6909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.140054188s ago: executing program 3 (id=6910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f00000000c0)={0x4, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x88) 1.139878535s ago: executing program 0 (id=6911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.090271214s ago: executing program 4 (id=6912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x2018, 0x4) 1.032587213s ago: executing program 3 (id=6913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001dc0)=""/4102, 0x1006}], 0x1}, 0x9}], 0x2, 0x40012160, 0x0) 972.195711ms ago: executing program 2 (id=6915): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x4) r0 = syz_usb_connect(0x2, 0x5e, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 942.181075ms ago: executing program 0 (id=6916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 820.27857ms ago: executing program 3 (id=6918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000012002506"], 0x18}, 0x1, 0x0, 0x0, 0x4004011}, 0x20040810) 820.076194ms ago: executing program 4 (id=6919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = dup(r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) 776.664672ms ago: executing program 0 (id=6920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7e, r3}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 704.351603ms ago: executing program 4 (id=6922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) 657.840312ms ago: executing program 3 (id=6923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x10406) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid}, {@access_user}]}}) 623.842284ms ago: executing program 0 (id=6924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 591.903168ms ago: executing program 1 (id=6925): socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bb6568d15b0000000000000000000000aa88"], 0x0) 526.535678ms ago: executing program 4 (id=6926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 444.193668ms ago: executing program 1 (id=6927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto(r3, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 406.523455ms ago: executing program 4 (id=6928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="4d01000000000000000100e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) 402.887114ms ago: executing program 0 (id=6929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 352.323304ms ago: executing program 1 (id=6930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'erspan0\x00', 0x0}) 334.724133ms ago: executing program 1 (id=6931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "49c2ace48cb54d80", "e0e6d4a271e30000596600", '\x00', "c962b0c0b5d958c9"}, 0x28) 303.849272ms ago: executing program 3 (id=6932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, &(0x7f00000000c0)) 248.255839ms ago: executing program 2 (id=6933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r5}) 221.106049ms ago: executing program 1 (id=6934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',ro']) 188.798595ms ago: executing program 0 (id=6935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x0, 0x3, 0x397, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) dup3(r4, r2, 0x80000) 180.615604ms ago: executing program 2 (id=6936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) socket(0x10, 0x803, 0x0) 90.942471ms ago: executing program 1 (id=6937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 246.314µs ago: executing program 4 (id=6938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 3 (id=6939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) kernel console output (not intermixed with test programs): gth 0, skipping remainder of the config [ 137.831779][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 137.831807][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 137.831833][ T5895] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.831875][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.831898][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.897176][ T6323] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.957690][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.985619][ T5895] usb 4-1: invalid MIDI out EP 0 [ 138.164530][ T6344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.184'. [ 138.364468][ T5895] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 138.409394][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.409488][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.434574][ T5895] usb 4-1: USB disconnect, device number 3 [ 139.045039][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.303330][ T6405] overlayfs: unescaped trailing colons in lowerdir mount option. [ 141.026475][ T6435] netlink: 72 bytes leftover after parsing attributes in process `syz.3.222'. [ 141.637779][ T6456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.994035][ T6467] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.066396][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'. [ 142.151873][ T6475] overlayfs: unescaped trailing colons in lowerdir mount option. [ 142.955909][ T6495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.245'. [ 143.398917][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 145.435879][ T6527] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.089477][ T6585] overlayfs: unescaped trailing colons in lowerdir mount option. [ 147.111459][ T6587] ======================================================= [ 147.111459][ T6587] WARNING: The mand mount option has been deprecated and [ 147.111459][ T6587] and is ignored by this kernel. Remove the mand [ 147.111459][ T6587] option from the mount to silence this warning. [ 147.111459][ T6587] ======================================================= [ 147.111548][ T6587] devtmpfs: Unknown parameter 'u' [ 147.178258][ T6585] fuse: Bad value for 'fd' [ 147.262970][ T6591] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.532413][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.294'. [ 147.785053][ T6611] syz.0.302 (6611) used greatest stack depth: 17944 bytes left [ 148.444406][ T6636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'. [ 150.378008][ T6665] netlink: 52 bytes leftover after parsing attributes in process `syz.2.326'. [ 150.571646][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 150.571670][ T6672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.330'. [ 150.808398][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.332'. [ 150.846657][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.332'. [ 153.220652][ T6742] netlink: 'syz.4.362': attribute type 2 has an invalid length. [ 153.220679][ T6742] netlink: 1 bytes leftover after parsing attributes in process `syz.4.362'. [ 154.407321][ T6753] netlink: 172 bytes leftover after parsing attributes in process `syz.3.367'. [ 154.407348][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 156.180135][ T6801] 9pnet_virtio: no channels available for device syz [ 157.743910][ T6857] @: renamed from vlan0 (while UP) [ 157.817666][ T5792] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 157.983230][ T5792] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 157.983261][ T5792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.983281][ T5792] usb 3-1: config 1 has no interface number 0 [ 157.983314][ T5792] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 157.983360][ T5792] usb 3-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.983382][ T5792] usb 3-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 157.987744][ T5792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.987775][ T5792] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 157.987797][ T5792] usb 3-1: Manufacturer: syz [ 157.987812][ T5792] usb 3-1: SerialNumber: syz [ 158.238001][ T5792] usb 3-1: USB disconnect, device number 3 [ 159.001669][ T6893] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 159.001693][ T6893] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.430'. [ 159.253025][ T6901] overlayfs: unescaped trailing colons in lowerdir mount option. [ 159.674193][ T6917] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 160.106550][ T6934] overlayfs: unescaped trailing colons in lowerdir mount option. [ 160.593157][ T37] audit: type=1326 audit(1763565847.598:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 160.593216][ T37] audit: type=1326 audit(1763565847.598:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 160.593272][ T37] audit: type=1326 audit(1763565847.598:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6948 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 160.907227][ T37] audit: type=1326 audit(1763565847.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 160.935768][ T37] audit: type=1326 audit(1763565847.908:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 160.935847][ T37] audit: type=1326 audit(1763565847.938:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 160.935898][ T37] audit: type=1326 audit(1763565847.938:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 162.394679][ T7001] IPv6: sit1: Disabled Multicast RS [ 162.396238][ T7001] sit1: entered allmulticast mode [ 162.468816][ T5813] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 162.621687][ T5813] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 162.621750][ T5813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 162.621779][ T5813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 162.621961][ T5813] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.622011][ T5813] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.622036][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.704969][ T6997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.752331][ T5813] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.753421][ T5813] usb 3-1: invalid MIDI out EP 0 [ 163.284849][ T5813] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 163.348241][ T5813] usb 3-1: USB disconnect, device number 4 [ 163.821537][ T7026] trusted_key: syz.0.490 sent an empty control message without MSG_MORE. [ 164.717823][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.338725][ T5792] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 171.508307][ T5792] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 171.508371][ T5792] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 171.508399][ T5792] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 171.508425][ T5792] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.508469][ T5792] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.508491][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.574695][ T7132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.655798][ T5792] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.657079][ T5792] usb 4-1: invalid MIDI out EP 0 [ 172.184406][ T5792] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 172.251859][ T5792] usb 4-1: USB disconnect, device number 4 [ 172.369349][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.466747][ T7189] overlayfs: unescaped trailing colons in lowerdir mount option. [ 175.229729][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'. [ 175.799611][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 177.291764][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 177.291798][ T7236] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.700891][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 179.437324][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 179.873857][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 180.978877][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 181.635619][ T7343] netlink: 'syz.2.637': attribute type 63 has an invalid length. [ 181.635644][ T7343] netlink: 5 bytes leftover after parsing attributes in process `syz.2.637'. [ 181.635673][ T7343] gretap0: entered allmulticast mode [ 181.636437][ T7343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.090190][ T7388] overlayfs: unescaped trailing colons in lowerdir mount option. [ 184.364051][ T7428] overlayfs: unescaped trailing colons in lowerdir mount option. [ 184.456870][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.673'. [ 185.883849][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.696'. [ 186.008274][ T7482] overlayfs: unescaped trailing colons in lowerdir mount option. [ 186.213409][ T7491] @: renamed from vlan0 (while UP) [ 186.696351][ T7507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.226771][ T7524] @: renamed from vlan0 (while UP) [ 187.751074][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 188.903073][ T7545] netlink: 'syz.0.728': attribute type 4 has an invalid length. [ 189.261533][ T7559] @: renamed from vlan0 (while UP) [ 191.148251][ T7625] overlayfs: unescaped trailing colons in lowerdir mount option. [ 191.250183][ T7624] netlink: 'syz.3.763': attribute type 10 has an invalid length. [ 193.046851][ T7674] overlayfs: unescaped trailing colons in lowerdir mount option. [ 193.867437][ T7704] exFAT-fs (loop4): unable to read boot sector [ 193.867456][ T7704] exFAT-fs (loop4): failed to read boot sector [ 193.867464][ T7704] exFAT-fs (loop4): failed to recognize exfat type [ 194.141212][ T5813] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 194.336812][ T5813] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 194.336874][ T5813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 194.336901][ T5813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 194.336927][ T5813] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.336972][ T5813] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.336996][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.347624][ T7703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.467395][ T5813] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.468539][ T5813] usb 3-1: invalid MIDI out EP 0 [ 194.850918][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.866888][ T5813] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 194.922564][ T5813] usb 3-1: USB disconnect, device number 5 [ 199.949819][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.949934][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.799375][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.961863][ T44] usb 5-1: config 0 has no interfaces? [ 200.961905][ T44] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.961929][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.997402][ T44] usb 5-1: config 0 descriptor?? [ 201.211068][ T993] usb 5-1: USB disconnect, device number 2 [ 204.688777][ T7851] capability: warning: `syz.2.857' uses 32-bit capabilities (legacy support in use) [ 204.924810][ T7860] netlink: 92 bytes leftover after parsing attributes in process `syz.2.863'. [ 205.134554][ T7867] overlayfs: conflicting options: userxattr,metacopy=on [ 208.448783][ T993] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 208.578768][ T993] usb 5-1: device descriptor read/64, error -71 [ 208.839360][ T993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.970417][ T993] usb 5-1: device descriptor read/64, error -71 [ 209.083154][ T993] usb usb5-port1: attempt power cycle [ 210.187814][ T993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.230373][ T993] usb 5-1: device descriptor read/8, error -71 [ 210.489090][ T993] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.509533][ T993] usb 5-1: device descriptor read/8, error -71 [ 210.620940][ T993] usb usb5-port1: unable to enumerate USB device [ 212.688863][ T8015] overlayfs: unescaped trailing colons in lowerdir mount option. [ 214.280728][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.128740][ T5792] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 215.210816][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 215.282219][ T5792] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 215.282282][ T5792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 215.282311][ T5792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 215.282338][ T5792] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.282382][ T5792] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.282405][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.293638][ T8069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.344374][ T5792] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.345685][ T5792] usb 1-1: invalid MIDI out EP 0 [ 215.772966][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.783941][ T5792] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 215.853544][ T5792] usb 1-1: USB disconnect, device number 5 [ 216.182215][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 216.806153][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.983'. [ 216.806182][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'. [ 216.806199][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 217.172760][ T8145] capability: warning: `syz.4.990' uses deprecated v2 capabilities in a way that may be insecure [ 218.099036][ T993] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.256935][ T993] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.256964][ T993] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 218.257003][ T993] usb 4-1: config 220 interface 0 has no altsetting 0 [ 218.289626][ T993] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 218.289656][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.289676][ T993] usb 4-1: Product: syz [ 218.289691][ T993] usb 4-1: Manufacturer: syz [ 218.289705][ T993] usb 4-1: SerialNumber: syz [ 218.566366][ T993] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 218.566403][ T993] uvcvideo 4-1:220.0: No valid video chain found. [ 218.591967][ T993] usb 4-1: USB disconnect, device number 5 [ 218.615090][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 219.333919][ T37] audit: type=1326 audit(1763565906.328:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.333980][ T37] audit: type=1326 audit(1763565906.328:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334027][ T37] audit: type=1326 audit(1763565906.328:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334157][ T37] audit: type=1326 audit(1763565906.328:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334206][ T37] audit: type=1326 audit(1763565906.328:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334251][ T37] audit: type=1326 audit(1763565906.338:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334297][ T37] audit: type=1326 audit(1763565906.338:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334342][ T37] audit: type=1326 audit(1763565906.338:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334484][ T37] audit: type=1326 audit(1763565906.338:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 219.334541][ T37] audit: type=1326 audit(1763565906.338:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x50000 [ 220.291104][ T8241] overlayfs: unescaped trailing colons in lowerdir mount option. [ 220.919377][ T8260] netlink: 'syz.0.1045': attribute type 16 has an invalid length. [ 220.919398][ T8260] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1045'. [ 223.424101][ T8303] overlayfs: unescaped trailing colons in lowerdir mount option. [ 223.491115][ T8307] tmpfs: Bad value for 'mpol' [ 224.152258][ T8335] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1077'. [ 224.325552][ T8336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1070'. [ 226.498763][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.653021][ T5896] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.653051][ T5896] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 226.653092][ T5896] usb 4-1: config 220 interface 0 has no altsetting 1 [ 226.657005][ T5896] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.657037][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.657059][ T5896] usb 4-1: Product: syz [ 226.657074][ T5896] usb 4-1: Manufacturer: syz [ 226.657088][ T5896] usb 4-1: SerialNumber: syz [ 227.020094][ T5896] usb 4-1: USB disconnect, device number 6 [ 227.205269][ T8410] mmap: syz.4.1111 (8410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.340275][ T37] kauditd_printk_skb: 3352 callbacks suppressed [ 227.340295][ T37] audit: type=1326 audit(1763565914.338:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8416 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 227.340747][ T37] audit: type=1326 audit(1763565914.348:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8416 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f61efc8e1ff code=0x7ffc0000 [ 227.341487][ T37] audit: type=1326 audit(1763565914.348:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8416 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 227.343180][ T37] audit: type=1326 audit(1763565914.348:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8416 comm="syz.0.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 227.528434][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 227.528481][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 227.528508][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 227.528531][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 227.557089][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 227.660602][ T8423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1120'. [ 228.063227][ T8438] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1124'. [ 228.335122][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1132'. [ 228.403621][ T8450] overlayfs: unescaped trailing colons in lowerdir mount option. [ 228.623253][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.783139][ T5813] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 228.783170][ T5813] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 228.783234][ T5813] usb 4-1: config 220 interface 0 has no altsetting 1 [ 228.796376][ T5813] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 228.796413][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.796436][ T5813] usb 4-1: Product: syz [ 228.796452][ T5813] usb 4-1: Manufacturer: syz [ 228.796468][ T5813] usb 4-1: SerialNumber: syz [ 229.084100][ T5813] usb 4-1: USB disconnect, device number 7 [ 229.099111][ T6373] udevd[6373]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory [ 229.099449][ T6373] udevd[6373]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 229.429374][ T8483] overlayfs: unescaped trailing colons in lowerdir mount option. [ 230.392399][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 230.790560][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 230.790588][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.790613][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.858865][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.858901][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.015022][ T8542] overlayfs: unescaped trailing colons in lowerdir mount option. [ 232.050765][ T8575] cgroup2: Unknown parameter '18446744073709551615' [ 232.128747][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 232.281166][ T44] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.281197][ T44] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 232.281217][ T44] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 232.281239][ T44] usb 4-1: config 220 has no interface number 1 [ 232.281286][ T44] usb 4-1: config 220 interface 0 has no altsetting 0 [ 232.281305][ T44] usb 4-1: config 220 interface 76 has no altsetting 0 [ 232.340315][ T44] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.340346][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.340365][ T44] usb 4-1: Product: syz [ 232.340379][ T44] usb 4-1: Manufacturer: syz [ 232.340393][ T44] usb 4-1: SerialNumber: syz [ 232.638249][ T44] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 232.638287][ T44] uvcvideo 4-1:220.0: No valid video chain found. [ 232.680412][ T44] usb 4-1: USB disconnect, device number 8 [ 233.357499][ T8612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1202'. [ 234.592033][ T8633] overlayfs: unescaped trailing colons in lowerdir mount option. [ 239.677399][ T8671] EXT4-fs (loop3): unable to read superblock [ 239.976674][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 240.081706][ T8682] overlayfs: missing 'workdir' [ 240.089465][ T8683] overlayfs: unescaped trailing colons in lowerdir mount option. [ 241.035989][ T8718] IPVS: length: 62 != 8 [ 241.701627][ T8744] overlayfs: unescaped trailing colons in lowerdir mount option. [ 243.809047][ T8810] syz.4.1294 uses obsolete (PF_INET,SOCK_PACKET) [ 244.855211][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 245.037849][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.312523][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.055110][ T8836] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 246.385397][ T8844] overlayfs: unescaped trailing colons in lowerdir mount option. [ 246.753202][ T8852] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 246.753223][ T8852] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1311'. [ 247.152098][ T8866] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1317'. [ 247.504084][ T8879] overlayfs: unescaped trailing colons in lowerdir mount option. [ 249.287777][ T8936] overlayfs: unescaped trailing colons in lowerdir mount option. [ 249.853334][ T8955] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 249.853366][ T8955] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.943038][ T8955] vhci_hcd vhci_hcd.0: Device attached [ 249.956995][ T8959] vhci_hcd: connection closed [ 250.007859][ T4895] vhci_hcd: stop threads [ 250.028712][ T4895] vhci_hcd: release socket [ 250.028825][ T4895] vhci_hcd: disconnect device [ 250.788940][ T8983] netlink: 'syz.0.1370': attribute type 11 has an invalid length. [ 251.783720][ T9017] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1386'. [ 251.820961][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1387'. [ 251.820992][ T9019] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1387'. [ 251.821008][ T9019] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1387'. [ 253.925510][ T37] audit: type=1326 audit(1763565940.908:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.925566][ T37] audit: type=1326 audit(1763565940.928:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.927084][ T37] audit: type=1326 audit(1763565940.928:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.927127][ T37] audit: type=1326 audit(1763565940.928:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.927161][ T37] audit: type=1326 audit(1763565940.928:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.940711][ T37] audit: type=1326 audit(1763565940.938:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.940774][ T37] audit: type=1326 audit(1763565940.948:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.942277][ T37] audit: type=1326 audit(1763565940.948:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.942332][ T37] audit: type=1326 audit(1763565940.948:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 253.943192][ T37] audit: type=1326 audit(1763565940.948:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9085 comm="syz.3.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 254.480136][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 259.241069][ T9202] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 259.822104][ T9209] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1471'. [ 260.918835][ T5792] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 261.096966][ T5792] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 261.097032][ T5792] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 261.097059][ T5792] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 261.097083][ T5792] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.097132][ T5792] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.097155][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.144127][ T5792] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.145327][ T5792] usb 5-1: invalid MIDI out EP 0 [ 261.287963][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.288038][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.560856][ T5792] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 261.641650][ T5792] usb 5-1: USB disconnect, device number 7 [ 262.083632][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 262.271899][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 266.858750][ T5792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 267.012574][ T5792] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 267.012602][ T5792] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 267.012622][ T5792] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 267.012642][ T5792] usb 3-1: config 220 has no interface number 1 [ 267.012721][ T5792] usb 3-1: config 220 interface 0 has no altsetting 0 [ 267.012741][ T5792] usb 3-1: config 220 interface 76 has no altsetting 0 [ 267.017155][ T5792] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 267.017189][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.017209][ T5792] usb 3-1: Product: syz [ 267.017224][ T5792] usb 3-1: Manufacturer: syz [ 267.017239][ T5792] usb 3-1: SerialNumber: syz [ 267.245937][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 267.359376][ T5792] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 267.359412][ T5792] uvcvideo 3-1:220.0: No valid video chain found. [ 267.547353][ T5792] usb 3-1: USB disconnect, device number 6 [ 268.810872][ T9455] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1587'. [ 269.039036][ T9459] vlan0: entered promiscuous mode [ 269.039061][ T9459] bridge0: entered promiscuous mode [ 270.143748][ T9508] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1612'. [ 270.726677][ T9529] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 271.301168][ T5813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 271.473230][ T5813] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.473262][ T5813] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.473283][ T5813] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 271.473305][ T5813] usb 1-1: config 220 has no interface number 1 [ 271.473354][ T5813] usb 1-1: config 220 interface 0 has no altsetting 0 [ 271.473374][ T5813] usb 1-1: config 220 interface 76 has no altsetting 0 [ 271.478231][ T5813] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.478264][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.478286][ T5813] usb 1-1: Product: syz [ 271.478301][ T5813] usb 1-1: Manufacturer: syz [ 271.478315][ T5813] usb 1-1: SerialNumber: syz [ 272.984859][ T5813] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 272.984896][ T5813] uvcvideo 1-1:220.0: No valid video chain found. [ 273.046916][ T5813] usb 1-1: USB disconnect, device number 6 [ 275.608686][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 275.771198][ T44] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.771231][ T44] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 275.771251][ T44] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 275.771272][ T44] usb 1-1: config 220 has no interface number 1 [ 275.771319][ T44] usb 1-1: config 220 interface 0 has no altsetting 0 [ 275.771338][ T44] usb 1-1: config 220 interface 76 has no altsetting 0 [ 275.774463][ T44] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.774496][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.774517][ T44] usb 1-1: Product: syz [ 275.774532][ T44] usb 1-1: Manufacturer: syz [ 275.774547][ T44] usb 1-1: SerialNumber: syz [ 276.078294][ T44] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 276.078328][ T44] uvcvideo 1-1:220.0: No valid video chain found. [ 276.117746][ T44] usb 1-1: USB disconnect, device number 7 [ 276.903776][ T9646] overlayfs: failed to resolve './file0/file0': -2 [ 278.020967][ T9686] overlayfs: unescaped trailing colons in lowerdir mount option. [ 279.863573][ T9746] fuse: Unknown parameter '&' [ 280.378700][ T5813] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 280.555876][ T5813] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 280.555907][ T5813] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 280.555927][ T5813] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 280.556005][ T5813] usb 3-1: config 220 has no interface number 1 [ 280.556057][ T5813] usb 3-1: config 220 interface 0 has no altsetting 0 [ 280.556076][ T5813] usb 3-1: config 220 interface 76 has no altsetting 0 [ 280.568733][ T5813] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.568769][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.568794][ T5813] usb 3-1: Product: syz [ 280.568812][ T5813] usb 3-1: Manufacturer: syz [ 280.568828][ T5813] usb 3-1: SerialNumber: syz [ 280.740496][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 280.909799][ T5813] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 280.909835][ T5813] uvcvideo 3-1:220.0: No valid video chain found. [ 281.029556][ T5813] usb 3-1: USB disconnect, device number 7 [ 281.055567][ T9780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.097140][ T9784] 9pnet: Could not find request transport: b5vx}YDi("l_H"oiҍ[۽paƤ}Ty8ZۻjMf [ 281.584870][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 281.584890][ T37] audit: type=1326 audit(1763565968.578:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.584943][ T37] audit: type=1326 audit(1763565968.588:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.584991][ T37] audit: type=1326 audit(1763565968.588:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.588436][ T37] audit: type=1326 audit(1763565968.588:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.589519][ T37] audit: type=1326 audit(1763565968.598:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.589578][ T37] audit: type=1326 audit(1763565968.598:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.589632][ T37] audit: type=1326 audit(1763565968.598:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.593161][ T37] audit: type=1326 audit(1763565968.598:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.593221][ T37] audit: type=1326 audit(1763565968.598:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 281.594734][ T37] audit: type=1326 audit(1763565968.598:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.4.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 284.361340][ T993] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 284.521492][ T993] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 284.521524][ T993] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 284.521546][ T993] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 284.521567][ T993] usb 4-1: config 220 has no interface number 1 [ 284.521615][ T993] usb 4-1: config 220 interface 0 has no altsetting 0 [ 284.521634][ T993] usb 4-1: config 220 interface 76 has no altsetting 0 [ 284.525047][ T993] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 284.525168][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.525190][ T993] usb 4-1: Product: syz [ 284.525205][ T993] usb 4-1: Manufacturer: syz [ 284.525221][ T993] usb 4-1: SerialNumber: syz [ 284.817671][ T993] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 284.817708][ T993] uvcvideo 4-1:220.0: No valid video chain found. [ 284.870584][ T993] usb 4-1: USB disconnect, device number 9 [ 285.899858][ T9909] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 287.742636][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 287.962219][ T9949] netlink: 'syz.4.1820': attribute type 13 has an invalid length. [ 288.388356][ T9965] netlink: 'syz.4.1826': attribute type 4 has an invalid length. [ 288.888022][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 288.888042][ T37] audit: type=1326 audit(1763565975.878:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.888092][ T37] audit: type=1326 audit(1763565975.888:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.888137][ T37] audit: type=1326 audit(1763565975.888:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.987668][ T37] audit: type=1326 audit(1763565975.988:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.987729][ T37] audit: type=1326 audit(1763565975.988:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.987776][ T37] audit: type=1326 audit(1763565975.988:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 288.987823][ T37] audit: type=1326 audit(1763565975.988:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 289.001681][ T37] audit: type=1326 audit(1763565976.008:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 289.001749][ T37] audit: type=1326 audit(1763565976.008:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 289.001800][ T37] audit: type=1326 audit(1763565976.008:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9984 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 290.825266][T10022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 290.825294][T10022] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 290.825393][T10022] vhci_hcd vhci_hcd.0: Device attached [ 290.828090][T10026] vhci_hcd: connection closed [ 290.828762][ T3547] vhci_hcd: stop threads [ 290.828782][ T3547] vhci_hcd: release socket [ 290.828817][ T3547] vhci_hcd: disconnect device [ 291.180304][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.114001][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.800788][T10075] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 293.161082][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'. [ 294.233803][T10134] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 294.233834][T10134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.233936][T10134] vhci_hcd vhci_hcd.0: Device attached [ 294.237628][T10137] vhci_hcd: connection closed [ 294.239248][ T3551] vhci_hcd: stop threads [ 294.239349][ T3551] vhci_hcd: release socket [ 294.239385][ T3551] vhci_hcd: disconnect device [ 295.524184][T10187] fuse: Bad value for 'group_id' [ 295.524205][T10187] fuse: Bad value for 'group_id' [ 295.984888][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 295.984908][ T37] audit: type=1326 audit(1763565982.988:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 295.985172][ T37] audit: type=1326 audit(1763565982.988:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 295.985323][ T37] audit: type=1326 audit(1763565982.988:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.068409][ T37] audit: type=1326 audit(1763565983.068:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.068467][ T37] audit: type=1326 audit(1763565983.068:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.068694][ T37] audit: type=1326 audit(1763565983.068:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.068752][ T37] audit: type=1326 audit(1763565983.068:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.094504][ T37] audit: type=1326 audit(1763565983.098:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.094571][ T37] audit: type=1326 audit(1763565983.098:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 296.096079][ T37] audit: type=1326 audit(1763565983.098:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10199 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 297.090099][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 297.846519][T10264] fuse: Bad value for 'fd' [ 297.992699][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.045156][T10271] sctp: [Deprecated]: syz.2.1969 (pid 10271) Use of int in maxseg socket option. [ 298.045156][T10271] Use struct sctp_assoc_value instead [ 298.182315][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.604369][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.625569][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 301.625588][ T37] audit: type=1326 audit(1763565988.628:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 301.626016][ T37] audit: type=1326 audit(1763565988.628:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 301.626296][ T37] audit: type=1326 audit(1763565988.628:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 301.627310][ T37] audit: type=1326 audit(1763565988.628:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.4.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 301.795412][T10324] fuse: Bad value for 'group_id' [ 301.795443][T10324] fuse: Bad value for 'group_id' [ 303.041445][ T37] audit: type=1326 audit(1763565989.848:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 303.041747][ T37] audit: type=1326 audit(1763565989.948:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 303.042162][ T37] audit: type=1326 audit(1763565990.038:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 303.325577][ T37] audit: type=1326 audit(1763565990.318:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 303.395239][ T37] audit: type=1326 audit(1763565990.388:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 303.509434][ T37] audit: type=1326 audit(1763565990.508:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10360 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 304.728703][ T5792] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 305.102654][ T5792] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 305.102683][ T5792] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 305.102703][ T5792] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 305.102724][ T5792] usb 3-1: config 220 has no interface number 1 [ 305.102772][ T5792] usb 3-1: config 220 interface 0 has no altsetting 0 [ 305.102791][ T5792] usb 3-1: config 220 interface 76 has no altsetting 0 [ 305.153782][ T5792] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 305.153816][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.153837][ T5792] usb 3-1: Product: syz [ 305.153852][ T5792] usb 3-1: Manufacturer: syz [ 305.153867][ T5792] usb 3-1: SerialNumber: syz [ 305.176218][T10406] netlink: 'syz.3.2035': attribute type 28 has an invalid length. [ 305.503806][ T5792] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 305.503842][ T5792] uvcvideo 3-1:220.0: No valid video chain found. [ 305.544371][ T5792] usb 3-1: USB disconnect, device number 8 [ 306.437467][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 306.764664][T10446] tmpfs: Bad value for 'mpol' [ 309.271933][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 309.271953][ T37] audit: type=1326 audit(1763565996.278:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.280949][ T37] audit: type=1326 audit(1763565996.278:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281008][ T37] audit: type=1326 audit(1763565996.278:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281055][ T37] audit: type=1326 audit(1763565996.278:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281101][ T37] audit: type=1326 audit(1763565996.278:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281148][ T37] audit: type=1326 audit(1763565996.278:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281193][ T37] audit: type=1326 audit(1763565996.278:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281239][ T37] audit: type=1326 audit(1763565996.278:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281286][ T37] audit: type=1326 audit(1763565996.278:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 309.281332][ T37] audit: type=1326 audit(1763565996.278:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 316.159636][T10582] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 316.159667][T10582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.159778][T10582] vhci_hcd vhci_hcd.0: Device attached [ 316.167282][T10588] vhci_hcd: connection closed [ 316.168661][ T7774] vhci_hcd: stop threads [ 316.168682][ T7774] vhci_hcd: release socket [ 316.168717][ T7774] vhci_hcd: disconnect device [ 316.429582][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2120'. [ 317.350043][T10635] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 317.812642][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 319.531314][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.681174][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.884702][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 320.267290][T10699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 320.267321][T10699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 320.287812][T10699] vhci_hcd vhci_hcd.0: Device attached [ 320.300610][T10702] vhci_hcd: connection closed [ 320.301043][ T71] vhci_hcd: stop threads [ 320.301063][ T71] vhci_hcd: release socket [ 320.301098][ T71] vhci_hcd: disconnect device [ 320.796114][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 321.267780][T10738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2189'. [ 321.526542][T10749] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 321.526571][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 321.550081][T10749] vhci_hcd vhci_hcd.0: Device attached [ 321.550949][T10753] vhci_hcd: connection closed [ 321.579712][ T3547] vhci_hcd: stop threads [ 321.579735][ T3547] vhci_hcd: release socket [ 321.579772][ T3547] vhci_hcd: disconnect device [ 322.580771][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.768315][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.818139][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.832079][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.109994][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 325.303504][T10853] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 325.303535][T10853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 325.303636][T10853] vhci_hcd vhci_hcd.0: Device attached [ 325.306029][T10856] vhci_hcd: connection closed [ 325.309512][ T7774] vhci_hcd: stop threads [ 325.309546][ T7774] vhci_hcd: release socket [ 325.309591][ T7774] vhci_hcd: disconnect device [ 325.427123][T10858] sit0: entered promiscuous mode [ 325.445567][T10858] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 325.445592][T10858] netlink: 'syz.4.2238': attribute type 3 has an invalid length. [ 326.415120][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.769020][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 327.769041][ T37] audit: type=1326 audit(1763566014.768:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10896 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7fc00000 [ 328.005400][T10909] tmpfs: Unsupported parameter 'huge' [ 328.052200][ T37] audit: type=1800 audit(1763566015.028:3600): pid=10909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2260" name="bus" dev="tmpfs" ino=2156 res=0 errno=0 [ 328.452518][ T37] audit: type=1326 audit(1763566015.458:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10896 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61efc8f749 code=0x7fc00000 [ 332.467020][T11014] tmpfs: Bad value for 'huge' [ 332.979934][T11035] overlayfs: missing 'lowerdir' [ 338.098679][ T5792] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 338.248683][ T5792] usb 1-1: Using ep0 maxpacket: 8 [ 338.252984][ T5792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 338.254848][ T5792] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 338.254880][ T5792] usb 1-1: config 12 interface 0 has no altsetting 0 [ 338.289626][ T5792] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 338.289656][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.289676][ T5792] usb 1-1: Product: syz [ 338.289756][ T5792] usb 1-1: Manufacturer: syz [ 338.289771][ T5792] usb 1-1: SerialNumber: syz [ 338.357593][T11116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.541094][T11138] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2364'. [ 338.591610][ T5792] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.591679][ T5792] usb 1-1: selecting invalid altsetting 0 [ 338.726061][ T5792] usb 1-1: USB disconnect, device number 8 [ 338.905636][ T6092] udevd[6092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.382234][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2372'. [ 339.384202][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 339.384254][T11160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2372'. [ 341.450136][T11206] veth3: entered promiscuous mode [ 346.882572][T11308] tmpfs: Unsupported parameter 'huge' [ 351.370558][ T37] audit: type=1326 audit(1763566038.078:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.370632][ T37] audit: type=1326 audit(1763566038.148:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.370679][ T37] audit: type=1326 audit(1763566038.378:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.372935][ T37] audit: type=1326 audit(1763566038.378:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.374438][ T37] audit: type=1326 audit(1763566038.378:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.374489][ T37] audit: type=1326 audit(1763566038.378:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.378284][ T37] audit: type=1326 audit(1763566038.378:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.384854][ T37] audit: type=1326 audit(1763566038.388:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.384922][ T37] audit: type=1326 audit(1763566038.388:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 351.385332][ T37] audit: type=1326 audit(1763566038.388:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11449 comm="syz.3.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 354.667326][T11507] fuse: Bad value for 'group_id' [ 354.667347][T11507] fuse: Bad value for 'group_id' [ 357.278354][T11605] tmpfs: Unsupported parameter 'huge' [ 358.130071][T11641] netlink: 'syz.4.2596': attribute type 4 has an invalid length. [ 358.477540][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 358.477561][ T37] audit: type=1107 audit(1763566045.478:3651): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 358.715648][ T37] audit: type=1800 audit(1763566045.708:3652): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2607" name="bus" dev="tmpfs" ino=2807 res=0 errno=0 [ 359.598063][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 359.641147][T11693] 9pnet: Could not find request transport: 0x0000000000000004 [ 359.828373][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 360.023488][T11716] tmpfs: Bad value for 'mpol' [ 361.120747][T11758] netlink: 'syz.4.2652': attribute type 13 has an invalid length. [ 361.671761][ T37] audit: type=1326 audit(1763566048.678:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.673512][ T37] audit: type=1326 audit(1763566048.678:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.673565][ T37] audit: type=1326 audit(1763566048.678:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.674304][ T37] audit: type=1326 audit(1763566048.678:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.674577][ T37] audit: type=1326 audit(1763566048.678:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.674901][ T37] audit: type=1326 audit(1763566048.678:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.675179][ T37] audit: type=1326 audit(1763566048.678:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 361.675695][ T37] audit: type=1326 audit(1763566048.678:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 362.033284][T11791] fuse: Bad value for 'group_id' [ 362.033306][T11791] fuse: Bad value for 'group_id' [ 363.365047][T11844] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2694'. [ 364.118092][T11868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2705'. [ 364.118119][T11868] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2705'. [ 364.118136][T11868] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2705'. [ 364.530263][T11879] sctp: [Deprecated]: syz.3.2710 (pid 11879) Use of int in maxseg socket option. [ 364.530263][T11879] Use struct sctp_assoc_value instead [ 366.802391][ T37] kauditd_printk_skb: 138 callbacks suppressed [ 366.802414][ T37] audit: type=1804 audit(1763566053.798:3799): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2746" name="bus" dev="ramfs" ino=35318 res=1 errno=0 [ 366.836683][ T37] audit: type=1804 audit(1763566053.838:3800): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2746" name="bus" dev="ramfs" ino=35318 res=1 errno=0 [ 369.222154][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2780'. [ 371.094041][T12085] fuse: Bad value for 'fd' [ 371.805422][T12116] overlayfs: missing 'lowerdir' [ 372.945005][T12167] tmpfs: Bad value for 'mpol' [ 374.816061][ T37] audit: type=1326 audit(1763566061.818:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12236 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 374.829172][ T37] audit: type=1326 audit(1763566061.838:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12236 comm="syz.4.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 375.046136][ T37] audit: type=1326 audit(1763566062.048:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 375.046194][ T37] audit: type=1326 audit(1763566062.048:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 375.067986][ T37] audit: type=1326 audit(1763566062.068:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 375.068051][ T37] audit: type=1326 audit(1763566062.068:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12203 comm="syz.3.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 376.718004][ T37] audit: type=1326 audit(1763566063.718:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12297 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 376.718603][ T37] audit: type=1326 audit(1763566063.718:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12297 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 376.718664][ T37] audit: type=1326 audit(1763566063.718:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12297 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 376.805263][ T37] audit: type=1326 audit(1763566063.798:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12297 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 377.076690][T12312] tmpfs: Unsupported parameter 'huge' [ 377.221250][T12318] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 377.296517][T12318] bond1 (unregistering): Released all slaves [ 377.708554][T12334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2930'. [ 377.749342][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2932'. [ 379.956187][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2955'. [ 384.191256][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.191332][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.158123][T12528] kAFS: No cell specified [ 385.490606][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 385.490625][ T37] audit: type=1326 audit(1763566072.498:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.491319][ T37] audit: type=1326 audit(1763566072.498:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.495811][ T37] audit: type=1326 audit(1763566072.498:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.497030][ T37] audit: type=1326 audit(1763566072.498:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.530510][ T37] audit: type=1326 audit(1763566072.538:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.531868][ T37] audit: type=1326 audit(1763566072.538:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.531929][ T37] audit: type=1326 audit(1763566072.538:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.531982][ T37] audit: type=1326 audit(1763566072.538:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.533020][ T37] audit: type=1326 audit(1763566072.538:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 385.533080][ T37] audit: type=1326 audit(1763566072.538:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 386.148183][T12565] overlayfs: missing 'lowerdir' [ 387.362538][T12605] fuse: Invalid rootmode [ 388.321972][T12651] overlayfs: failed to resolve './file1': -2 [ 388.637346][T12664] netlink: 'syz.4.3084': attribute type 58 has an invalid length. [ 389.111192][T12685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3094'. [ 389.554274][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3102'. [ 389.808770][T12708] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3105'. [ 390.289210][T12730] bridge0: entered allmulticast mode [ 396.214580][T12910] misc userio: Invalid payload size [ 399.476590][T12995] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3238'. [ 400.956913][T13032] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.3253'. [ 401.786502][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 401.786522][ T37] audit: type=1326 audit(1763566088.788:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.789196][ T37] audit: type=1326 audit(1763566088.788:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.792933][ T37] audit: type=1326 audit(1763566088.798:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.793461][ T37] audit: type=1326 audit(1763566088.798:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.793515][ T37] audit: type=1326 audit(1763566088.798:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.796351][ T37] audit: type=1326 audit(1763566088.798:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.796410][ T37] audit: type=1326 audit(1763566088.798:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.796875][ T37] audit: type=1326 audit(1763566088.798:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.800118][ T37] audit: type=1326 audit(1763566088.798:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 401.800180][ T37] audit: type=1326 audit(1763566088.808:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c6cef749 code=0x7ffc0000 [ 403.622296][T13093] overlayfs: failed to resolve './file1/file0': -2 [ 406.359630][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 406.359896][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 406.861430][T13183] 9pnet_fd: Insufficient options for proto=fd [ 408.989436][T13226] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3341'. [ 408.989463][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 409.818989][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3357'. [ 409.903629][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3357'. [ 410.808295][T13300] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3373'. [ 410.996907][T13308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3378'. [ 411.529223][T13330] tmpfs: Unsupported parameter 'huge' [ 411.546232][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 411.546252][ T37] audit: type=1800 audit(1763566098.538:4017): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3389" name="bus" dev="tmpfs" ino=3615 res=0 errno=0 [ 411.598708][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 411.665505][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 411.686155][T13333] sit1: entered allmulticast mode [ 416.509672][T13475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3454'. [ 416.509698][T13475] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3454'. [ 416.509714][T13475] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3454'. [ 417.108434][T13504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3468'. [ 420.577108][ T37] audit: type=1800 audit(1763566107.578:4018): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3521" name="bus" dev="tmpfs" ino=3718 res=0 errno=0 [ 423.237965][T13662] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 429.059814][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3622'. [ 429.059845][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.059871][T13829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.130367][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.130397][T13829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.033662][T13863] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 430.033695][T13863] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 430.033706][T13863] overlayfs: missing 'lowerdir' [ 430.052407][T13865] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3640'. [ 430.401034][T13880] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 431.201426][T13916] TCP: TCP_TX_DELAY enabled [ 431.541979][ T37] audit: type=1326 audit(1763566118.518:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.542036][ T37] audit: type=1326 audit(1763566118.548:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.542083][ T37] audit: type=1326 audit(1763566118.548:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.542129][ T37] audit: type=1326 audit(1763566118.548:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.542175][ T37] audit: type=1326 audit(1763566118.548:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.544969][ T37] audit: type=1326 audit(1763566118.548:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.545022][ T37] audit: type=1326 audit(1763566118.548:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.545068][ T37] audit: type=1326 audit(1763566118.548:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.545815][ T37] audit: type=1326 audit(1763566118.548:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 431.545865][ T37] audit: type=1326 audit(1763566118.548:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13929 comm="syz.3.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 432.631638][T13976] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3694'. [ 432.631666][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'. [ 432.631681][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3694'. [ 434.103180][T13999] netlink: 'syz.2.3705': attribute type 10 has an invalid length. [ 434.103227][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3705'. [ 434.103683][T13999] dummy0: entered promiscuous mode [ 434.111356][T13999] bridge0: port 3(dummy0) entered blocking state [ 434.111595][T13999] bridge0: port 3(dummy0) entered disabled state [ 434.111830][T13999] dummy0: entered allmulticast mode [ 434.172441][T13999] bridge0: port 3(dummy0) entered blocking state [ 434.173234][T13999] bridge0: port 3(dummy0) entered forwarding state [ 434.293711][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 434.431712][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'. [ 434.776133][T14031] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3720'. [ 434.776171][T14031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3720'. [ 438.948611][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 439.102162][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 439.107291][ T5867] usb 3-1: config 252 has an invalid interface number: 165 but max is 0 [ 439.107321][ T5867] usb 3-1: config 252 has no interface number 0 [ 439.107488][ T5867] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 439.107512][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.180091][ T5867] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 439.180120][ T5867] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 439.388374][ T5813] usb 3-1: USB disconnect, device number 9 [ 440.488116][T14224] netlink: 'syz.4.3813': attribute type 2 has an invalid length. [ 440.488141][T14224] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3813'. [ 440.705340][T14231] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 440.705534][T14231] Error validating options; rc = [-22] [ 442.121305][T14264] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3829'. [ 442.221584][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 442.237523][T14270] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3834'. [ 442.237554][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 442.621439][T14290] netlink: 'syz.3.3842': attribute type 16 has an invalid length. [ 442.621461][T14290] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.3842'. [ 443.279136][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'. [ 443.279202][T14319] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 443.512505][T14329] warning: `syz.4.3862' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 443.911896][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 444.549208][T14381] 9p: Unknown access argument a: -22 [ 445.404291][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3910'. [ 445.529684][T14433] tmpfs: Unsupported parameter 'huge' [ 445.534255][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 445.534274][ T37] audit: type=1800 audit(1763566132.538:4060): pid=14433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3914" name="bus" dev="tmpfs" ino=4025 res=0 errno=0 [ 445.605284][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.605361][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.911593][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.137186][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.631250][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.167491][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.319719][T14573] fuse: Invalid rootmode [ 450.561730][T14584] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 451.142090][T14611] netlink: 'syz.0.3998': attribute type 22 has an invalid length. [ 451.142116][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3998'. [ 453.544005][T14720] tmpfs: Unsupported parameter 'huge' [ 453.568639][ T37] audit: type=1800 audit(1763566140.548:4061): pid=14720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4052" name="bus" dev="tmpfs" ino=4283 res=0 errno=0 [ 456.955987][ T37] audit: type=1326 audit(1763566143.958:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14826 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 456.956419][ T37] audit: type=1326 audit(1763566143.958:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14826 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 456.956791][ T37] audit: type=1326 audit(1763566143.958:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14826 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 459.164118][T14905] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4138'. [ 459.940469][T14939] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4157'. [ 460.094395][T14945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4158'. [ 460.205621][T14947] batadv_slave_1: entered promiscuous mode [ 460.206520][T14946] batadv_slave_1: left promiscuous mode [ 461.931954][ T37] audit: type=1800 audit(1763566148.938:4065): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4174" name="bus" dev="tmpfs" ino=4580 res=0 errno=0 [ 462.170221][T14986] 9pnet_fd: Insufficient options for proto=fd [ 468.598047][T15106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4230'. [ 473.741644][T15207] overlayfs: missing 'lowerdir' [ 474.028722][ T37] audit: type=1800 audit(1763566161.028:4066): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4277" name="bus" dev="tmpfs" ino=4489 res=0 errno=0 [ 474.793916][T15235] trusted_key: encrypted_key: insufficient parameters specified [ 476.303501][T15289] 9pnet_fd: Insufficient options for proto=fd [ 476.910144][ T37] audit: type=1326 audit(1763566163.918:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.910201][ T37] audit: type=1326 audit(1763566163.918:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.995501][ T37] audit: type=1326 audit(1763566163.998:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.995890][ T37] audit: type=1326 audit(1763566163.998:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.996053][ T37] audit: type=1326 audit(1763566163.998:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.996696][ T37] audit: type=1326 audit(1763566163.998:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.997509][ T37] audit: type=1326 audit(1763566163.998:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 476.997671][ T37] audit: type=1326 audit(1763566163.998:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 477.014186][ T37] audit: type=1326 audit(1763566164.018:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15310 comm="syz.4.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 477.083591][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4326'. [ 479.174136][T15391] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4365'. [ 479.593893][T15409] @0: renamed from bond_slave_1 (while UP) [ 479.793620][T15420] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4378'. [ 479.814402][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4379'. [ 484.046647][T15568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.358117][T15581] netlink: 'syz.0.4454': attribute type 22 has an invalid length. [ 484.358143][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4454'. [ 484.858563][ T5896] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 485.008916][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 485.013004][ T5896] usb 5-1: config 252 has an invalid interface number: 165 but max is 0 [ 485.013036][ T5896] usb 5-1: config 252 has no interface number 0 [ 485.013088][ T5896] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 485.013112][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.071502][ T5896] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 485.071523][ T5896] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 485.261733][ T5896] usb 5-1: USB disconnect, device number 8 [ 486.174266][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4477'. [ 487.739868][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4509'. [ 489.413942][T15755] 9pnet: Could not find request transport: 0xffffffffffffffff [ 495.275627][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4624'. [ 498.397822][T16041] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4663'. [ 498.430174][T16043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4664'. [ 498.484131][T16047] batadv_slave_1: entered promiscuous mode [ 498.485006][T16046] batadv_slave_1: left promiscuous mode [ 500.543306][T16147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4715'. [ 501.111118][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4731'. [ 501.954924][T16204] overlayfs: failed to resolve './file0': -2 [ 502.040993][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 504.435407][T16264] 9pnet_virtio: no channels available for device syz [ 505.785862][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4777'. [ 506.907959][T16336] tipc: Failed to remove unknown binding: 66,1,1/0:2776914524/2776914526 [ 507.296889][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.311602][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.084547][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'. [ 508.409747][T16379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4823'. [ 508.409776][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'. [ 508.409791][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4823'. [ 508.517151][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 508.753472][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4831'. [ 509.209342][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4844'. [ 509.311814][T16426] tmpfs: Unsupported parameter 'huge' [ 509.313811][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 509.313832][ T37] audit: type=1800 audit(1763566196.318:4098): pid=16426 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4845" name="bus" dev="tmpfs" ino=5049 res=0 errno=0 [ 510.016004][T16453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4860'. [ 511.354059][T16503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4881'. [ 511.610556][T16515] overlayfs: missing 'lowerdir' [ 512.194966][T16540] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4901'. [ 513.909960][T16570] overlayfs: failed lookup in upper (873/file1, name='file0', err=-40): overlapping layers [ 514.187304][T16578] netlink: 'syz.2.4916': attribute type 13 has an invalid length. [ 515.106603][T16596] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4923'. [ 515.106635][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4923'. [ 515.213379][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4925'. [ 515.334341][T16601] bridge_slave_1: left allmulticast mode [ 515.334371][T16601] bridge_slave_1: left promiscuous mode [ 515.338908][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.456234][T16601] bridge_slave_0: left allmulticast mode [ 515.456265][T16601] bridge_slave_0: left promiscuous mode [ 515.456568][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.798552][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 515.874385][T16631] pim6reg1: entered promiscuous mode [ 515.874413][T16631] pim6reg1: entered allmulticast mode [ 515.952315][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 516.147431][T16644] netlink: 'syz.4.4943': attribute type 13 has an invalid length. [ 516.767365][T16661] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4952'. [ 517.120593][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4956'. [ 517.194125][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.195500][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 517.195539][ T5867] usb 4-1: can't read configurations, error -71 [ 517.791876][ T5792] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 517.974230][ T5792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 517.974269][ T5792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 517.974298][ T5792] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.974338][ T5792] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.974362][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.006046][T16682] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 518.093812][ T5792] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.094973][ T5792] usb 1-1: invalid MIDI out EP 0 [ 518.449129][T16676] udevd[16676]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.518391][ T5792] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 518.595274][ T5792] usb 1-1: USB disconnect, device number 9 [ 519.555989][T16750] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 519.556008][T16750] overlayfs: missing 'lowerdir' [ 520.947795][T16765] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4997'. [ 521.966196][T16786] can: request_module (can-proto-0) failed. [ 523.222480][T16828] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5028'. [ 523.222519][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5028'. [ 523.222534][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 523.417084][T16833] bridge_slave_0: invalid flags given to default FDB implementation [ 524.492428][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5054'. [ 524.492455][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5054'. [ 524.647017][T16898] netlink: 'syz.4.5056': attribute type 8 has an invalid length. [ 524.647048][T16898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5056'. [ 526.022416][T16957] netlink: 'syz.3.5086': attribute type 4 has an invalid length. [ 526.560821][T16971] syz.2.5093 (16971) used greatest stack depth: 16248 bytes left [ 526.982139][T17001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.566680][T17035] tmpfs: Unsupported parameter 'huge' [ 529.827322][T17124] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 530.262060][T17138] netlink: 'syz.2.5170': attribute type 4 has an invalid length. [ 531.025596][T17166] overlayfs: missing 'lowerdir' [ 532.144031][T17222] overlayfs: failed to resolve './file0': -2 [ 536.419544][T17343] netlink: 'syz.0.5267': attribute type 13 has an invalid length. [ 537.773099][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5296'. [ 538.144300][T17416] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 538.144322][T17416] overlayfs: missing 'lowerdir' [ 538.825132][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'. [ 538.907344][T17457] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5325'. [ 538.921017][T17457] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5325'. [ 539.027155][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5328'. [ 539.362044][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 541.220948][T17511] Process accounting resumed [ 542.773397][T17591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5387'. [ 543.762298][T17592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.422019][T17621] overlayfs: failed to resolve './file0': -2 [ 544.576266][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5404'. [ 545.086469][T17652] overlayfs: failed to resolve './file1': -2 [ 545.697522][T17689] overlayfs: failed to resolve './file1': -2 [ 546.189056][T17712] 9pnet_fd: Insufficient options for proto=fd [ 546.525367][T17724] overlayfs: failed to resolve './file1': -2 [ 547.152020][T17752] overlayfs: failed to resolve './file1': -2 [ 547.570151][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 548.790005][ T5813] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 548.968762][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 548.971543][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.971595][ T5813] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 548.971620][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.977280][ T5813] usb 3-1: config 0 descriptor?? [ 549.246676][ T5813] usbhid 3-1:0.0: can't add hid device: -71 [ 549.246810][ T5813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 549.272360][ T5813] usb 3-1: USB disconnect, device number 10 [ 549.379971][T17847] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 549.380004][T17847] CIFS mount error: No usable UNC path provided in device string! [ 549.380004][T17847] [ 549.380263][T17847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 549.863439][T17860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5513'. [ 550.166195][T17872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5520'. [ 552.254667][T17954] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 552.631902][T17975] veth0_virt_wifi: entered allmulticast mode [ 552.637148][T17973] veth0_virt_wifi: left allmulticast mode [ 552.807687][T17985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5573'. [ 552.807717][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5573'. [ 552.807734][T17985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5573'. [ 553.578589][ T37] audit: type=1800 audit(1763566240.568:4099): pid=18013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5585" name="bus" dev="tmpfs" ino=5820 res=0 errno=0 [ 554.592010][T18048] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 556.028122][ T37] audit: type=1326 audit(1763566243.028:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.3.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 556.028182][ T37] audit: type=1326 audit(1763566243.028:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.3.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 556.028231][ T37] audit: type=1326 audit(1763566243.028:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.3.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 556.028279][ T37] audit: type=1326 audit(1763566243.028:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.3.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 556.030330][ T37] audit: type=1326 audit(1763566243.038:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18096 comm="syz.3.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2db5f749 code=0x7ffc0000 [ 556.290659][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 556.741611][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5640'. [ 557.314595][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5657'. [ 559.609457][T18277] team_slave_0: Caught tx_queue_len zero misconfig [ 559.618613][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 559.781062][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 559.781099][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 559.781135][ T9] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.781172][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.781196][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.798309][T18264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 559.847092][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.856207][ T9] usb 3-1: invalid MIDI out EP 0 [ 560.138120][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 560.157285][T18270] udevd[18270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.219718][ T9] usb 3-1: USB disconnect, device number 11 [ 562.826039][T18415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 562.826102][T18415] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 563.799787][T18462] lo: Caught tx_queue_len zero misconfig [ 565.369661][T18528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5827'. [ 567.711373][T18637] veth1_to_bond: entered allmulticast mode [ 567.711920][T18635] veth1_to_bond: left allmulticast mode [ 567.715209][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5881'. [ 568.440055][T18677] overlayfs: missing 'lowerdir' [ 568.486697][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.486773][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.167586][ T5867] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 569.330986][ T5867] usb 4-1: config 0 has no interfaces? [ 569.331037][ T5867] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 569.331063][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.351248][ T5867] usb 4-1: config 0 descriptor?? [ 569.564363][ T5867] usb 4-1: USB disconnect, device number 12 [ 571.897195][T18783] tmpfs: Bad value for 'huge' [ 574.370644][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 574.370677][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6016'. [ 574.370691][T18913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6016'. [ 574.648558][ T5813] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 574.762714][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'. [ 574.798924][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 574.801315][ T5813] usb 5-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 574.801344][ T5813] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 574.801397][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.801420][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 574.801446][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 574.801470][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 574.801492][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.801535][ T5813] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 574.801560][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.915276][ T5813] usb 5-1: config 0 descriptor?? [ 574.941140][ T5813] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 574.982477][ T5813] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 575.412958][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6036'. [ 575.423913][T18957] sit2: entered allmulticast mode [ 575.694656][ T5813] usb 5-1: USB disconnect, device number 9 [ 575.778942][ T5813] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 575.809119][ T5813] kobil_sct 5-1:0.0: device disconnected [ 581.153646][T19081] netlink: 536 bytes leftover after parsing attributes in process `syz.3.6092'. [ 581.153677][T19081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6092'. [ 584.359652][T19128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.359717][T19128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.016613][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'. [ 585.375612][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6131'. [ 586.738573][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 586.891739][ T9] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 586.891770][ T9] usb 1-1: config 0 has no interface number 0 [ 586.891825][ T9] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 586.891854][ T9] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 586.964864][ T9] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 586.964899][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.964928][ T9] usb 1-1: Product: syz [ 586.964942][ T9] usb 1-1: Manufacturer: syz [ 586.964957][ T9] usb 1-1: SerialNumber: syz [ 587.016813][ T9] usb 1-1: config 0 descriptor?? [ 587.017690][T19218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 587.042194][ T9] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 587.226560][ T5867] usb 1-1: USB disconnect, device number 10 [ 587.314332][T19244] veth0_to_bond: Caught tx_queue_len zero misconfig [ 587.439278][T19247] 9pnet: Could not find request transport: f [ 588.047886][T19279] overlayfs: missing 'lowerdir' [ 589.454764][T19345] overlayfs: missing 'workdir' [ 590.130558][T19381] overlayfs: missing 'workdir' [ 590.837227][T19414] tmpfs: Unknown parameter 'm' [ 590.898979][ T993] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 591.053344][ T993] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 591.053383][ T993] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 591.053412][ T993] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.053452][ T993] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.053476][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.115785][T19402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 591.156645][ T993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.157883][ T993] usb 4-1: invalid MIDI out EP 0 [ 591.371128][ T993] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 591.406707][ T993] usb 4-1: USB disconnect, device number 13 [ 591.457417][T19432] udevd[19432]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.421873][T19473] cgroup2: Unknown parameter 'workdir' [ 592.588068][T19479] overlay: Unknown parameter 'seclabel' [ 593.122871][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6276'. [ 594.493810][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6288'. [ 594.789634][T19525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6294'. [ 596.306094][T19553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6307'. [ 596.306140][T19553] syz_tun: entered promiscuous mode [ 596.306162][T19553] syz_tun: entered allmulticast mode [ 598.878578][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 598.983431][ T37] audit: type=1326 audit(1763566285.988:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.983864][ T37] audit: type=1326 audit(1763566285.988:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.984383][ T37] audit: type=1326 audit(1763566285.988:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.984814][ T37] audit: type=1326 audit(1763566285.988:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.985027][ T37] audit: type=1326 audit(1763566285.988:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.985326][ T37] audit: type=1326 audit(1763566285.988:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.985608][ T37] audit: type=1326 audit(1763566285.988:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.985920][ T37] audit: type=1326 audit(1763566285.988:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.986327][ T37] audit: type=1326 audit(1763566285.988:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 598.986646][ T37] audit: type=1326 audit(1763566285.988:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19604 comm="syz.0.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61efc8f749 code=0x7ffc0000 [ 599.048597][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 599.051464][ T9] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 599.051494][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.056846][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.056881][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.056904][ T9] usb 3-1: Product: syz [ 599.056922][ T9] usb 3-1: Manufacturer: syz [ 599.056939][ T9] usb 3-1: SerialNumber: syz [ 599.336826][ T9] usb 3-1: 0:2 : does not exist [ 599.359503][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 599.438697][ T9] usb 3-1: USB disconnect, device number 12 [ 599.594343][T19221] udevd[19221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.021890][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.194770][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.235448][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.286077][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.802702][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.120058][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.874620][T19663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6355'. [ 602.925003][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.121120][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.164720][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.566460][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.504592][T19724] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6384'. [ 607.074559][T19793] netlink: 536 bytes leftover after parsing attributes in process `syz.0.6414'. [ 608.208682][T19819] netlink: 'syz.3.6426': attribute type 4 has an invalid length. [ 608.208707][T19819] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6426'. [ 608.572942][T19841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6436'. [ 609.958563][T19888] overlayfs: failed to resolve './file0': -2 [ 610.350183][T19902] netlink: 'syz.4.6466': attribute type 13 has an invalid length. [ 610.749241][T19912] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6470'. [ 612.738551][ T44] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 612.893966][ T44] usb 3-1: config 0 has no interfaces? [ 612.894008][ T44] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 612.894034][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.924349][ T44] usb 3-1: config 0 descriptor?? [ 613.131480][ T44] usb 3-1: USB disconnect, device number 13 [ 615.531315][T20067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6544'. [ 615.536039][T20066] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6543'. [ 615.575979][T20066] gretap0: entered promiscuous mode [ 615.813950][T20086] overlayfs: failed to clone upperpath [ 617.493740][T20165] netlink: 'syz.3.6591': attribute type 4 has an invalid length. [ 617.493765][T20165] netlink: 'syz.3.6591': attribute type 5 has an invalid length. [ 617.493778][T20165] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6591'. [ 617.553124][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 617.553145][ T37] audit: type=1326 audit(1763566304.558:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.553418][ T37] audit: type=1326 audit(1763566304.558:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.553894][ T37] audit: type=1326 audit(1763566304.558:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.554350][ T37] audit: type=1326 audit(1763566304.558:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.589319][ T37] audit: type=1326 audit(1763566304.598:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.598578][ T37] audit: type=1326 audit(1763566304.598:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 617.693222][ T993] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 617.841017][ T993] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 617.867409][T20173] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6595'. [ 618.196451][T20185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6600'. [ 618.307674][ T37] audit: type=1326 audit(1763566305.308:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 618.307984][ T37] audit: type=1326 audit(1763566305.308:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a64f749 code=0x7ffc0000 [ 618.494728][T20195] overlayfs: missing 'lowerdir' [ 618.752744][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6610'. [ 619.118761][T20221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6618'. [ 620.766111][T20279] 9pnet_fd: Insufficient options for proto=fd [ 621.743782][T20296] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6654'. [ 621.855831][T20299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6657'. [ 622.101043][T20310] netlink: 'syz.4.6658': attribute type 13 has an invalid length. [ 622.380655][T20323] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6665'. [ 622.380694][T20323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6665'. [ 622.464709][T20331] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6671'. [ 622.931651][ T5825] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3 [ 623.177269][T20368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6689'. [ 623.804984][T20394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6699'. [ 623.932360][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6701'. [ 624.078215][T20401] overlayfs: failed to clone upperpath [ 624.083846][T20404] overlayfs: missing 'lowerdir' [ 624.767520][T20429] netlink: 'syz.3.6716': attribute type 8 has an invalid length. [ 624.767557][T20429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6716'. [ 625.628556][ T5792] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 625.791672][ T5792] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 625.791703][ T5792] usb 3-1: config 0 has no interface number 0 [ 625.791757][ T5792] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 625.791788][ T5792] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.839809][ T5792] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 625.839841][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.839861][ T5792] usb 3-1: Product: syz [ 625.839875][ T5792] usb 3-1: Manufacturer: syz [ 625.839889][ T5792] usb 3-1: SerialNumber: syz [ 625.917260][ T5792] usb 3-1: config 0 descriptor?? [ 625.918225][T20455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 625.937637][ T5792] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 626.139620][ T5792] usb 3-1: USB disconnect, device number 14 [ 629.222710][T20576] 9pnet_fd: Insufficient options for proto=fd [ 629.927293][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.927370][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.437412][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6812'. [ 630.749915][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 630.910890][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 630.929194][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 630.930258][ T5813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 630.930291][ T5813] usb 3-1: can't read configurations, error -71 [ 631.788205][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6847'. [ 632.288577][ T5813] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 632.472374][ T5813] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 632.472410][ T5813] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 632.472438][ T5813] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.472478][ T5813] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.472503][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.045295][T20719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 633.054905][ T5813] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.056150][ T5813] usb 5-1: invalid MIDI out EP 0 [ 633.367914][T20458] udevd[20458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.502336][ T5813] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 633.543533][ T5813] usb 5-1: USB disconnect, device number 10 [ 633.788172][T20748] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6867'. [ 634.684861][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6888'. [ 637.207610][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6918'. [ 637.680102][T20882] binder: 20880:20882 ioctl c0306201 0 returned -14 [ 638.126784][ C0] ------------[ cut here ]------------ [ 638.126803][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 638.127992][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 638.128044][ C0] Modules linked in: [ 638.128083][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.128112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.128131][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 638.128158][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 ef f9 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 1f b0 4b f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 638.128179][ C0] RSP: 0018:ffffc900001571f0 EFLAGS: 00010246 [ 638.128200][ C0] RAX: 87e602c15cef8400 RBX: 000000000000000c RCX: ffff88801b2d5a00 [ 638.128219][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 638.128234][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 638.128251][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff88802fbe8528 [ 638.128268][ C0] R13: 0000000000000000 R14: ffff88805d851060 R15: ffff88805d853c38 [ 638.128286][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 638.128306][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.128322][ C0] CR2: 0000001b2f821ff8 CR3: 0000000032a22000 CR4: 00000000003526f0 [ 638.128343][ C0] Call Trace: [ 638.128411][ C0] [ 638.128443][ C0] rate_control_send_low+0x1a7/0x7b0 [ 638.128477][ C0] rate_control_get_rate+0x20b/0x5f0 [ 638.128514][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 638.128558][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 638.128616][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 638.128671][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 638.128730][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.128768][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.128799][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 638.128829][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.128873][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 638.128915][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 638.128959][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 638.129000][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 638.129034][ C0] __iterate_interfaces+0x2ab/0x590 [ 638.129060][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 638.129096][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 638.129125][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 638.129162][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 638.129195][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 638.129228][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 638.129256][ C0] __hrtimer_run_queues+0x552/0xd40 [ 638.129319][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 638.129353][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 638.129397][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 638.129427][ C0] handle_softirqs+0x22f/0x710 [ 638.129469][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 638.129513][ C0] run_ktimerd+0xcf/0x190 [ 638.129546][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 638.129575][ C0] ? schedule+0x91/0x360 [ 638.129617][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 638.129646][ C0] smpboot_thread_fn+0x542/0xa60 [ 638.129679][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 638.129720][ C0] kthread+0x711/0x8a0 [ 638.129760][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 638.129790][ C0] ? __pfx_kthread+0x10/0x10 [ 638.129822][ C0] ? rt_spin_unlock+0x150/0x200 [ 638.129856][ C0] ? rt_spin_unlock+0x161/0x200 [ 638.129882][ C0] ? __pfx_kthread+0x10/0x10 [ 638.129925][ C0] ret_from_fork+0x4bc/0x870 [ 638.129959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 638.129997][ C0] ? __switch_to_asm+0x39/0x70 [ 638.130020][ C0] ? __switch_to_asm+0x33/0x70 [ 638.130042][ C0] ? __pfx_kthread+0x10/0x10 [ 638.130079][ C0] ret_from_fork_asm+0x1a/0x30 [ 638.130131][ C0] [ 638.130150][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 638.130168][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.130196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.130211][ C0] Call Trace: [ 638.130220][ C0] [ 638.130229][ C0] dump_stack_lvl+0x99/0x250 [ 638.130267][ C0] ? __asan_memcpy+0x40/0x70 [ 638.130296][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.130332][ C0] ? __pfx__printk+0x10/0x10 [ 638.130378][ C0] vpanic+0x237/0x6d0 [ 638.130402][ C0] ? __pfx_vpanic+0x10/0x10 [ 638.130437][ C0] panic+0xb9/0xc0 [ 638.130460][ C0] ? __pfx_panic+0x10/0x10 [ 638.130504][ C0] __warn+0x31b/0x4b0 [ 638.130526][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 638.130552][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 638.130576][ C0] report_bug+0x2be/0x4f0 [ 638.130608][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 638.130633][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 638.130656][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 638.130679][ C0] handle_bug+0x84/0x160 [ 638.130705][ C0] exc_invalid_op+0x1a/0x50 [ 638.130729][ C0] asm_exc_invalid_op+0x1a/0x20 [ 638.130751][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 638.130776][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 ef f9 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 1f b0 4b f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 638.130797][ C0] RSP: 0018:ffffc900001571f0 EFLAGS: 00010246 [ 638.130818][ C0] RAX: 87e602c15cef8400 RBX: 000000000000000c RCX: ffff88801b2d5a00 [ 638.130836][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 638.130851][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 638.130867][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff88802fbe8528 [ 638.130885][ C0] R13: 0000000000000000 R14: ffff88805d851060 R15: ffff88805d853c38 [ 638.130950][ C0] rate_control_send_low+0x1a7/0x7b0 [ 638.130982][ C0] rate_control_get_rate+0x20b/0x5f0 [ 638.131018][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 638.131061][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 638.131118][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 638.131173][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 638.131232][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.131269][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.131300][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 638.131330][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 638.131374][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 638.131408][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 638.131452][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 638.131491][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 638.131525][ C0] __iterate_interfaces+0x2ab/0x590 [ 638.131551][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 638.131588][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 638.131617][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 638.131653][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 638.131686][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 638.131718][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 638.131747][ C0] __hrtimer_run_queues+0x552/0xd40 [ 638.131808][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 638.131843][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 638.131887][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 638.131922][ C0] handle_softirqs+0x22f/0x710 [ 638.131964][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 638.132007][ C0] run_ktimerd+0xcf/0x190 [ 638.132039][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 638.132070][ C0] ? schedule+0x91/0x360 [ 638.132111][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 638.132140][ C0] smpboot_thread_fn+0x542/0xa60 [ 638.132172][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 638.132213][ C0] kthread+0x711/0x8a0 [ 638.132253][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 638.132283][ C0] ? __pfx_kthread+0x10/0x10 [ 638.132315][ C0] ? rt_spin_unlock+0x150/0x200 [ 638.132348][ C0] ? rt_spin_unlock+0x161/0x200 [ 638.132374][ C0] ? __pfx_kthread+0x10/0x10 [ 638.132411][ C0] ret_from_fork+0x4bc/0x870 [ 638.132442][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 638.132481][ C0] ? __switch_to_asm+0x39/0x70 [ 638.132504][ C0] ? __switch_to_asm+0x33/0x70 [ 638.132525][ C0] ? __pfx_kthread+0x10/0x10 [ 638.132562][ C0] ret_from_fork_asm+0x1a/0x30 [ 638.132609][ C0] [ 638.133084][ C0] Kernel Offset: disabled