last executing test programs: 26.860628109s ago: executing program 2 (id=2359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x59, r4}) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 25.759233046s ago: executing program 2 (id=2360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 25.275823144s ago: executing program 2 (id=2362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x6], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, 0x0, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0xfffffffe, 0x199}, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 21.732049879s ago: executing program 2 (id=2372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 21.617649271s ago: executing program 2 (id=2374): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x430, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 20.614286357s ago: executing program 2 (id=2378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 15.196196772s ago: executing program 3 (id=2391): syz_open_dev$ndb(0x0, 0x0, 0x200) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @remote, 0x8006, 0x7800, 0x3, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14.384621785s ago: executing program 3 (id=2393): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000540), 0x41, 0x1) socket(0x22, 0x800, 0xfffffffd) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) 13.546102008s ago: executing program 3 (id=2394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000440)=0x5) ioctl$TCSETA(r5, 0x8925, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 10.404657797s ago: executing program 3 (id=2400): syz_open_dev$ndb(0x0, 0x0, 0x200) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @remote, 0x8006, 0x7800, 0x3, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.860311831s ago: executing program 3 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 8.790066612s ago: executing program 3 (id=2403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) open(0x0, 0x16543e, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) futex(0x0, 0xb, 0x3d, 0x0, 0x0, 0x8000002) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) 5.282999337s ago: executing program 1 (id=2409): syz_open_dev$ndb(0x0, 0x0, 0x200) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @remote, 0x8006, 0x7800, 0x3, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.164899279s ago: executing program 0 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 4.561209149s ago: executing program 0 (id=2411): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000", @ANYRESHEX=r2], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000540), 0x41, 0x1) socket(0x22, 0x800, 0xfffffffd) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) 4.399121371s ago: executing program 1 (id=2412): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x430, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3.17063253s ago: executing program 1 (id=2413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 2.811001596s ago: executing program 1 (id=2414): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x6, &(0x7f0000001040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x15, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580)) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 2.738617587s ago: executing program 0 (id=2415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x810) 1.811033642s ago: executing program 0 (id=2416): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x59, r4}) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fb", 0xf) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 805.349537ms ago: executing program 0 (id=2417): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff00124000631177fbac141416e000030a94029f03", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r10, @ANYBLOB="9a"], 0x20}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 775.677678ms ago: executing program 1 (id=2418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 653.44125ms ago: executing program 1 (id=2419): syz_open_dev$ndb(0x0, 0x0, 0x200) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @remote, 0x8006, 0x7800, 0x3, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=2420): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x430, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) kernel console output (not intermixed with test programs): 513.060722][ T8] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 513.083729][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.119451][ T8] usb 4-1: Product: syz [ 513.130564][ T8] usb 4-1: Manufacturer: syz [ 513.137951][ T8] usb 4-1: SerialNumber: syz [ 513.157151][ T8] usb 4-1: config 0 descriptor?? [ 513.176861][ T8] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 019 [ 513.572843][ T8] (null): failure reading functionality [ 513.596249][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 513.914323][ T5812] usb 4-1: USB disconnect, device number 19 [ 514.136578][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1259'. [ 514.263900][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 514.263912][ T27] audit: type=1326 audit(1750520761.525:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.297744][ T27] audit: type=1326 audit(1750520761.525:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.320712][ T27] audit: type=1326 audit(1750520761.525:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.339142][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 514.342974][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 514.352396][ T27] audit: type=1326 audit(1750520761.525:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.387823][ T27] audit: type=1326 audit(1750520761.525:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.391773][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 514.410344][ T27] audit: type=1326 audit(1750520761.525:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.410384][ T27] audit: type=1326 audit(1750520761.525:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.410418][ T27] audit: type=1326 audit(1750520761.525:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.410451][ T27] audit: type=1326 audit(1750520761.525:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.410484][ T27] audit: type=1326 audit(1750520761.525:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 514.624414][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 514.634450][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.813349][ T8] usb 2-1: config 0 descriptor?? [ 514.961008][ T8] pwc: Creative Labs Webcam 5 detected. [ 515.321583][ T9939] mkiss: ax0: crc mode is auto. [ 516.736344][ T1194] IPVS: starting estimator thread 0... [ 516.863647][ T9948] IPVS: using max 18 ests per chain, 43200 per kthread [ 517.031025][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1269'. [ 519.091499][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 519.103023][ T8] pwc: Failed to set LED on/off time (-71) [ 519.122031][ T8] pwc: send_video_command error -71 [ 519.131025][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 519.157204][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 519.190547][ T8] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 519.203026][ T8] usb 2-1: USB disconnect, device number 17 [ 519.509908][ T9973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1278'. [ 520.766604][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 520.766616][ T27] audit: type=1326 audit(1750520768.025:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 520.887681][ T27] audit: type=1326 audit(1750520768.025:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 520.936704][ T27] audit: type=1326 audit(1750520768.025:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 520.939097][ T9987] ubi: mtd0 is already attached to ubi31 [ 520.976670][ T27] audit: type=1326 audit(1750520768.025:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 520.979810][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 521.031669][ T27] audit: type=1326 audit(1750520768.025:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.063225][ T27] audit: type=1326 audit(1750520768.025:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.094705][ T27] audit: type=1326 audit(1750520768.025:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.111815][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 521.141282][ T27] audit: type=1326 audit(1750520768.025:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.167909][ T27] audit: type=1326 audit(1750520768.025:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.192786][ T27] audit: type=1326 audit(1750520768.025:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 521.429131][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 522.412757][T10001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 522.419708][T10001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.640323][T10001] vhci_hcd vhci_hcd.0: Device attached [ 522.651121][T10005] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 522.660125][T10005] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 522.946561][T10004] vhci_hcd: connection closed [ 523.142023][ T12] vhci_hcd: stop threads [ 523.152001][ T12] vhci_hcd: release socket [ 523.158133][ T12] vhci_hcd: disconnect device [ 523.193683][ T5812] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 523.216479][ T5812] usb 37-1: enqueue for inactive port 0 [ 523.293746][ T5812] vhci_hcd: vhci_device speed not set [ 523.866880][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1296'. [ 524.508562][T10034] lo speed is unknown, defaulting to 1000 [ 526.688572][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 527.324498][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 527.324512][ T27] audit: type=1326 audit(1750520774.585:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.394818][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 527.397100][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 527.502425][ T27] audit: type=1326 audit(1750520774.585:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.558629][ T27] audit: type=1326 audit(1750520774.615:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.600039][T10062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'. [ 527.603216][ T27] audit: type=1326 audit(1750520774.615:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.612937][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 527.631858][ T27] audit: type=1326 audit(1750520774.615:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.667012][ T27] audit: type=1326 audit(1750520774.615:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.707586][ T27] audit: type=1326 audit(1750520774.615:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.718177][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 527.773814][ T27] audit: type=1326 audit(1750520774.615:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.812419][ T27] audit: type=1326 audit(1750520774.615:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.864487][ T27] audit: type=1326 audit(1750520774.615:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 527.874415][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 528.153883][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 528.173151][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.214609][ T9] usb 3-1: config 0 descriptor?? [ 528.276476][ T9] pwc: Creative Labs Webcam 5 detected. [ 529.247067][ T1126] Bluetooth: hci4: Frame reassembly failed (-84) [ 529.602234][T10096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1316'. [ 530.962643][ T9] pwc: Failed to set LED on/off time (-71) [ 530.974343][ T9] pwc: send_video_command error -71 [ 530.979588][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 531.018983][ T9] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 531.063312][ T9] usb 3-1: USB disconnect, device number 22 [ 531.314563][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 532.056941][T10124] overlayfs: overlapping lowerdir path [ 533.678727][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 533.678741][ T27] audit: type=1326 audit(1750520780.935:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 533.707956][ T27] audit: type=1326 audit(1750520780.935:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 533.730890][ T27] audit: type=1326 audit(1750520780.935:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 533.821257][ T8] IPVS: starting estimator thread 0... [ 533.913836][T10150] IPVS: using max 17 ests per chain, 40800 per kthread [ 533.936232][ T27] audit: type=1326 audit(1750520780.935:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.156092][ T27] audit: type=1326 audit(1750520780.935:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.275630][ T27] audit: type=1326 audit(1750520780.935:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.298504][ T27] audit: type=1326 audit(1750520780.935:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.321267][ T27] audit: type=1326 audit(1750520780.935:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.388870][ T27] audit: type=1326 audit(1750520780.935:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.434701][ T27] audit: type=1326 audit(1750520780.935:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 534.507283][T10154] overlayfs: overlapping lowerdir path [ 535.456129][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 535.713675][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 535.713706][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 536.042898][T10180] overlayfs: overlapping lowerdir path [ 537.229550][T10192] vlan2: entered allmulticast mode [ 537.522204][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 537.670104][ T134] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 537.743827][ T5855] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 538.155466][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 538.173562][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.183996][ T5855] usb 2-1: config 0 descriptor?? [ 538.318208][ T5855] pwc: Creative Labs Webcam 5 detected. [ 540.067246][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 540.067281][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 541.423240][ T5855] pwc: Failed to set LED on/off time (-71) [ 541.856108][ T5855] pwc: send_video_command error -71 [ 541.885180][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 541.925875][ T5855] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 542.043994][ T5855] usb 2-1: USB disconnect, device number 18 [ 544.708423][T10263] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 544.714989][T10263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.780292][T10263] vhci_hcd vhci_hcd.0: Device attached [ 544.796080][T10263] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 544.805912][T10263] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 545.083735][ T2128] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 545.497327][T10264] vhci_hcd: connection reset by peer [ 545.540436][ T2935] vhci_hcd: stop threads [ 545.577328][ T2935] vhci_hcd: release socket [ 545.591976][ T2935] vhci_hcd: disconnect device [ 546.950333][T10283] vlan2: entered allmulticast mode [ 547.083808][ T5812] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 547.439075][ T5812] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 547.450387][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.613702][ T1194] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 547.827236][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.920630][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 548.020963][ T1194] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.083706][ T1194] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 548.103076][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.185548][ T5812] usb 3-1: config 0 descriptor?? [ 548.185594][ T1194] usb 4-1: config 0 descriptor?? [ 548.203828][ T5812] pwc: Creative Labs Webcam 5 detected. [ 548.229125][T10290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.370686][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 548.666177][ T1194] uclogic 0003:5543:0004.0002: No inputs registered, leaving [ 548.738542][ T1194] uclogic 0003:5543:0004.0002: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 550.681517][ T2128] vhci_hcd: vhci_device speed not set [ 551.308763][ T5862] usb 4-1: USB disconnect, device number 20 [ 552.657627][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 552.723732][ T5812] pwc: Failed to set LED on/off time (-71) [ 553.069517][ T5812] pwc: send_video_command error -71 [ 553.090922][ T5812] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 553.098890][ T5812] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 553.108162][ T5812] usb 3-1: USB disconnect, device number 23 [ 553.517047][T10334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 553.523613][T10334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.554329][T10334] vhci_hcd vhci_hcd.0: Device attached [ 553.772737][T10334] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 553.783648][T10334] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 553.823586][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 554.003715][ T5812] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 554.625541][ T5812] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 554.643925][ T5812] usb 2-1: config 0 has no interface number 0 [ 554.650081][ T5812] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 554.722357][ T5812] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 554.742408][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 554.760372][ T5812] usb 2-1: Product: syz [ 554.768838][ T5812] usb 2-1: SerialNumber: syz [ 554.785470][ T5812] usb 2-1: config 0 descriptor?? [ 554.811415][ T5812] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 554.864449][T10341] vhci_hcd: connection reset by peer [ 554.870175][ T12] vhci_hcd: stop threads [ 554.876908][ T12] vhci_hcd: release socket [ 554.886500][ T12] vhci_hcd: disconnect device [ 555.010754][ T8] usb 2-1: USB disconnect, device number 19 [ 555.593768][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 557.213747][ T5855] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 558.243922][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 558.266688][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.295879][ T5855] usb 2-1: config 0 descriptor?? [ 558.315244][ T5855] pwc: Creative Labs Webcam 5 detected. [ 558.994604][ T9] vhci_hcd: vhci_device speed not set [ 559.275104][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 560.556982][T10409] overlayfs: overlapping lowerdir path [ 560.774467][ T5855] pwc: Failed to set LED on/off time (-71) [ 560.793257][ T5855] pwc: send_video_command error -71 [ 560.799191][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 560.823746][ T5855] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 560.842967][ T5855] usb 2-1: USB disconnect, device number 20 [ 561.924293][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 562.280798][T10429] vlan2: entered allmulticast mode [ 562.409339][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 562.409352][ T27] audit: type=1326 audit(1750520809.665:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.444665][T10433] ubi: mtd0 is already attached to ubi31 [ 562.456350][ T27] audit: type=1326 audit(1750520809.665:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.480985][ T27] audit: type=1326 audit(1750520809.665:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.515432][ T27] audit: type=1326 audit(1750520809.665:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.515529][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 562.558720][ T27] audit: type=1326 audit(1750520809.665:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.586248][ T27] audit: type=1326 audit(1750520809.665:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.609547][ T27] audit: type=1326 audit(1750520809.665:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.633341][ T27] audit: type=1326 audit(1750520809.675:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.663906][ T27] audit: type=1326 audit(1750520809.675:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 562.722115][ T27] audit: type=1326 audit(1750520809.675:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd4f8e929 code=0x7ffc0000 [ 563.084076][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.090520][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.513928][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 565.583701][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 566.798930][T10465] overlayfs: overlapping lowerdir path [ 567.320569][T10474] ubi: mtd0 is already attached to ubi31 [ 567.778613][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 567.778627][ T27] audit: type=1326 audit(1750520815.035:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 567.821580][ T27] audit: type=1326 audit(1750520815.035:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 567.904781][ T27] audit: type=1326 audit(1750520815.075:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 567.954612][ T27] audit: type=1326 audit(1750520815.075:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.013222][ T27] audit: type=1326 audit(1750520815.075:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.065105][T10486] vlan2: entered allmulticast mode [ 568.107928][ T27] audit: type=1326 audit(1750520815.075:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.227320][ T27] audit: type=1326 audit(1750520815.075:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.251911][ T27] audit: type=1326 audit(1750520815.075:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.279537][ T27] audit: type=1326 audit(1750520815.075:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 568.309541][ T27] audit: type=1326 audit(1750520815.075:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 569.270035][ T5862] IPVS: starting estimator thread 0... [ 569.363813][T10491] IPVS: using max 36 ests per chain, 86400 per kthread [ 570.677745][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 570.682444][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 570.797677][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 570.999532][T10504] overlayfs: overlapping lowerdir path [ 572.231935][T10518] ubi: mtd0 is already attached to ubi31 [ 574.047156][T10390] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 574.148813][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 574.995888][T10390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.006983][T10390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 575.041055][T10390] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.059195][T10390] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 575.068519][T10390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.079507][T10390] usb 2-1: config 0 descriptor?? [ 575.093570][T10522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 575.141647][T10540] overlayfs: overlapping lowerdir path [ 575.786813][T10390] uclogic 0003:5543:0004.0003: No inputs registered, leaving [ 575.804097][T10390] uclogic 0003:5543:0004.0003: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 575.875724][T10553] ubi: mtd0 is already attached to ubi31 [ 576.985833][T10562] mkiss: ax0: crc mode is auto. [ 578.347255][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 578.402066][ T5757] usb 2-1: USB disconnect, device number 21 [ 580.548691][T10584] ubi: mtd0 is already attached to ubi31 [ 581.678333][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 583.811958][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 585.152512][T10623] overlayfs: missing 'lowerdir' [ 585.749691][T10628] ubi: mtd0 is already attached to ubi31 [ 588.439450][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 588.439464][ T27] audit: type=1326 audit(1750520835.695:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10649 comm="syz.3.1487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd4f8e929 code=0x0 [ 590.706079][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 593.840573][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 595.700450][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 596.926924][ T5855] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 597.383722][ T5855] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 597.392822][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.434652][ T5855] usb 4-1: config 0 descriptor?? [ 597.471554][ T5855] pwc: Creative Labs Webcam 5 detected. [ 598.166449][T10741] vlan2: entered allmulticast mode [ 599.344105][T10748] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 599.581500][ T27] audit: type=1326 audit(1750520846.835:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 599.657804][ T27] audit: type=1326 audit(1750520846.835:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 599.717991][ T27] audit: type=1326 audit(1750520846.835:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 599.872749][ T27] audit: type=1326 audit(1750520846.835:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 599.922164][ T27] audit: type=1326 audit(1750520846.865:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 599.973744][ T27] audit: type=1326 audit(1750520846.865:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 600.019124][ T27] audit: type=1326 audit(1750520846.865:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 600.189458][ T27] audit: type=1326 audit(1750520846.875:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 600.212765][ T27] audit: type=1326 audit(1750520846.875:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 600.235907][ T27] audit: type=1326 audit(1750520846.875:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 601.053145][ T5855] pwc: Failed to set LED on/off time (-71) [ 601.074649][ T5855] pwc: send_video_command error -71 [ 601.085570][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 601.104229][ T5855] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 601.133648][ T5855] usb 4-1: USB disconnect, device number 21 [ 601.714786][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 601.721453][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 602.785804][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 606.171000][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 606.171015][ T27] audit: type=1326 audit(1750520853.275:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171062][ T27] audit: type=1326 audit(1750520853.275:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171099][ T27] audit: type=1326 audit(1750520853.275:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171137][ T27] audit: type=1326 audit(1750520853.275:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171174][ T27] audit: type=1326 audit(1750520853.275:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171210][ T27] audit: type=1326 audit(1750520853.275:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171247][ T27] audit: type=1326 audit(1750520853.275:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171283][ T27] audit: type=1326 audit(1750520853.275:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171325][ T27] audit: type=1326 audit(1750520853.275:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 606.171356][ T27] audit: type=1326 audit(1750520853.275:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 608.013828][T10829] mkiss: ax0: crc mode is auto. [ 608.353617][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 609.595167][T10831] overlayfs: missing 'lowerdir' [ 611.475934][T10850] vlan2: entered allmulticast mode [ 612.380295][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 612.380309][ T27] audit: type=1326 audit(1750520859.615:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.410270][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 612.435699][ T27] audit: type=1326 audit(1750520859.615:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.483308][ T27] audit: type=1326 audit(1750520859.615:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.533648][ T27] audit: type=1326 audit(1750520859.615:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.603645][ T27] audit: type=1326 audit(1750520859.615:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.653609][ T27] audit: type=1326 audit(1750520859.615:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.717073][ T27] audit: type=1326 audit(1750520859.615:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 612.823146][T10868] mkiss: ax0: crc mode is auto. [ 613.124182][ T27] audit: type=1326 audit(1750520859.615:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 614.433781][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 614.440167][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 614.626595][ T27] audit: type=1326 audit(1750520859.615:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 614.653932][ T27] audit: type=1326 audit(1750520859.615:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.2.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 618.614530][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 618.614544][ T27] audit: type=1326 audit(1750520865.875:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.659867][ T134] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.698773][ T27] audit: type=1326 audit(1750520865.905:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.755680][ T27] audit: type=1326 audit(1750520865.905:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.803675][ T27] audit: type=1326 audit(1750520865.905:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.831892][ T27] audit: type=1326 audit(1750520865.905:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.855572][ T27] audit: type=1326 audit(1750520865.905:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.878497][ T27] audit: type=1326 audit(1750520865.905:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.902230][ T27] audit: type=1326 audit(1750520865.905:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.929680][ T27] audit: type=1326 audit(1750520865.905:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 618.952616][ T27] audit: type=1326 audit(1750520865.905:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10907 comm="syz.1.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 619.167119][T10917] mkiss: ax0: crc mode is auto. [ 620.673644][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 621.814746][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 622.666258][T10954] mkiss: ax0: crc mode is auto. [ 625.027266][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 625.060141][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.074378][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.823884][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 626.253546][ T9] usb 4-1: device descriptor read/64, error -71 [ 627.813290][T10988] ubi: mtd0 is already attached to ubi31 [ 628.736495][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 629.363594][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 629.363612][ T27] audit: type=1326 audit(1750520876.595:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 629.402673][ T27] audit: type=1326 audit(1750520876.595:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 629.492520][ T1126] Bluetooth: hci4: Frame reassembly failed (-84) [ 629.556427][ T2913] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 629.577945][T11003] mkiss: ax0: crc mode is auto. [ 629.623746][ T27] audit: type=1326 audit(1750520876.655:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 629.878992][ T27] audit: type=1326 audit(1750520876.655:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 630.127931][ T27] audit: type=1326 audit(1750520876.655:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 630.559092][ T27] audit: type=1326 audit(1750520876.655:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 630.728577][ T27] audit: type=1326 audit(1750520876.655:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 630.888068][ T27] audit: type=1326 audit(1750520876.685:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 631.050520][ T27] audit: type=1326 audit(1750520876.685:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 631.196038][ T27] audit: type=1326 audit(1750520876.685:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 631.553705][ T5777] Bluetooth: hci4: command 0x1003 tx timeout [ 631.553732][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 633.226170][T11022] ubi: mtd0 is already attached to ubi31 [ 636.087097][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 643.935336][T11105] ubi: mtd0 is already attached to ubi31 [ 645.940423][T11126] mkiss: ax0: crc mode is auto. [ 647.243216][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 647.243229][ T27] audit: type=1326 audit(1750520894.495:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.0.1633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5954f8e929 code=0x0 [ 647.303688][T10390] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 647.463989][T10390] usb 4-1: device descriptor read/64, error -71 [ 647.856614][T10390] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 648.083279][T10390] usb 4-1: device descriptor read/64, error -71 [ 648.529453][T10390] usb usb4-port1: attempt power cycle [ 649.540456][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 651.048962][T11178] overlayfs: overlapping lowerdir path [ 655.201595][T11206] vlan2: entered allmulticast mode [ 655.845397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.852543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.333761][T11220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1657'. [ 656.426879][ T9] libceph: connect (1)[c::]:6789 error -101 [ 656.437818][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 656.457647][T11220] ceph: No mds server is up or the cluster is laggy [ 656.469750][ T9] libceph: connect (1)[c::]:6789 error -101 [ 656.479582][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 657.112835][ T27] audit: type=1326 audit(1750520904.365:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.1.1663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80feb8e929 code=0x0 [ 657.116389][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 657.134634][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.499046][T11241] vlan2: entered allmulticast mode [ 658.388044][T11248] overlayfs: overlapping lowerdir path [ 659.321889][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 659.374229][ T27] audit: type=1326 audit(1750520906.635:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd4f8e929 code=0x0 [ 660.168537][T11275] vlan2: entered allmulticast mode [ 660.947130][T11281] bridge_slave_0: left promiscuous mode [ 661.054793][T11281] bridge_slave_0: entered promiscuous mode [ 661.060657][T11281] bridge_slave_0: entered allmulticast mode [ 661.354927][T11284] overlayfs: overlapping lowerdir path [ 662.488402][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 662.503631][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 663.697896][ T8] usb 2-1: no configurations [ 663.702555][ T8] usb 2-1: can't read configurations, error -22 [ 663.751661][ T27] audit: type=1326 audit(1750520911.005:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.3.1687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd4f8e929 code=0x0 [ 664.063601][T11310] vlan2: entered allmulticast mode [ 664.608767][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 664.644677][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.671303][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.678632][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.684387][ T27] audit: type=1326 audit(1750520911.945:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11313 comm="syz.2.1698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3497d8e929 code=0x0 [ 664.822720][T11318] overlayfs: overlapping lowerdir path [ 667.178746][ T8] usb 2-1: device descriptor read/all, error -71 [ 667.211278][ T8] usb usb2-port1: attempt power cycle [ 667.352987][T11329] 9pnet_fd: Insufficient options for proto=fd [ 668.704635][T11352] overlayfs: overlapping lowerdir path [ 668.834379][ T5812] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 669.478522][T11354] 9pnet_fd: Insufficient options for proto=fd [ 669.864697][ T5812] usb 3-1: no configurations [ 669.869504][ T5812] usb 3-1: can't read configurations, error -22 [ 670.033902][ T5812] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 670.926009][ T5812] usb 3-1: no configurations [ 670.931826][ T5812] usb 3-1: can't read configurations, error -22 [ 670.955114][ T5812] usb usb3-port1: attempt power cycle [ 671.057780][T11376] vlan2: entered allmulticast mode [ 671.835699][T11383] overlayfs: overlapping lowerdir path [ 675.090055][T11405] ubi: mtd0 is already attached to ubi31 [ 676.153678][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 676.267560][ T27] audit: type=1326 audit(1750520923.525:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11416 comm="syz.2.1727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3497d8e929 code=0x0 [ 676.349413][ T8] usb 4-1: no configurations [ 676.356023][ T8] usb 4-1: can't read configurations, error -22 [ 676.524931][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 677.186920][ T8] usb 4-1: no configurations [ 677.271117][T11424] overlayfs: overlapping lowerdir path [ 677.621015][ T8] usb 4-1: can't read configurations, error -22 [ 678.000069][ T8] usb usb4-port1: attempt power cycle [ 678.373839][T11434] ubi: mtd0 is already attached to ubi31 [ 678.544044][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 679.001403][ T8] usb 4-1: device descriptor read/8, error -71 [ 679.383180][ T27] audit: type=1326 audit(1750520926.635:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.1.1738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80feb8e929 code=0x0 [ 679.631267][T11449] fuse: Invalid rootmode [ 679.688984][T11456] overlayfs: overlapping lowerdir path [ 682.789326][T11473] ubi: mtd0 is already attached to ubi31 [ 683.464245][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 683.627000][ T27] audit: type=1326 audit(1750520930.885:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.3.1750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd4f8e929 code=0x0 [ 683.695767][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.741390][T11487] overlayfs: overlapping lowerdir path [ 685.165040][ T8] usb 2-1: config 0 has no interfaces? [ 685.170642][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 685.179842][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.198118][ T8] usb 2-1: config 0 descriptor?? [ 685.808655][ T5855] usb 2-1: USB disconnect, device number 25 [ 685.957500][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.964089][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.441295][T11506] ubi: mtd0 is already attached to ubi31 [ 687.404444][T11514] overlayfs: overlapping lowerdir path [ 689.020087][ T27] audit: type=1326 audit(1750520936.275:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11516 comm="syz.2.1761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3497d8e929 code=0x0 [ 689.383862][ T5855] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 689.630450][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.641505][ T5855] usb 2-1: config 0 has no interfaces? [ 689.647193][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 689.656502][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.383563][ T5855] usb 2-1: config 0 descriptor?? [ 690.759426][T11534] ubi: mtd0 is already attached to ubi31 [ 691.605724][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 692.359654][T11545] overlayfs: overlapping lowerdir path [ 692.376165][ T28] usb 2-1: USB disconnect, device number 26 [ 694.505910][T11552] fuse: Bad value for 'fd' [ 694.584126][T11553] vlan2: entered allmulticast mode [ 696.236907][T11567] ubi: mtd0 is already attached to ubi31 [ 696.937649][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 697.538396][T11588] overlayfs: overlapping lowerdir path [ 697.593723][T10390] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 699.560217][T11595] vlan2: entered allmulticast mode [ 700.169116][T10390] usb 3-1: device descriptor read/all, error -71 [ 700.493869][ T27] audit: type=1326 audit(1750520947.725:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 700.511590][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 700.530132][ T27] audit: type=1326 audit(1750520947.725:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 700.533689][ T5777] Bluetooth: hci4: sending frame failed (-49) [ 700.560825][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 700.577953][ T27] audit: type=1326 audit(1750520947.725:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 700.670473][T11606] ubi: mtd0 is already attached to ubi31 [ 701.293727][ T27] audit: type=1326 audit(1750520947.725:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.317559][ T27] audit: type=1326 audit(1750520947.725:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.372849][ T27] audit: type=1326 audit(1750520947.725:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.400152][ T27] audit: type=1326 audit(1750520947.725:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.422743][ T27] audit: type=1326 audit(1750520947.725:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.445237][ T27] audit: type=1326 audit(1750520947.725:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.517940][ T27] audit: type=1326 audit(1750520947.725:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 701.851751][T11617] syz.3.1792: attempt to access beyond end of device [ 701.851751][T11617] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 701.865328][T11617] gfs2: error 10 reading superblock [ 703.893854][T11638] ubi: mtd0 is already attached to ubi31 [ 704.545995][ T5855] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 704.917395][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.928123][ T5855] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.940522][ T5855] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 704.949601][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.181034][ T5855] usb 3-1: config 0 descriptor?? [ 706.592157][ T5812] usb 3-1: USB disconnect, device number 29 [ 706.674004][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 706.704971][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.729045][T11657] bridge_slave_1: left allmulticast mode [ 706.735926][T11657] bridge_slave_1: left promiscuous mode [ 706.743595][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.769711][T11657] bond0: (slave bond_slave_0): Releasing backup interface [ 706.778026][T11657] bond_slave_0: left allmulticast mode [ 706.811994][T11657] bond0: (slave bond_slave_1): Releasing backup interface [ 706.829376][T11657] bond_slave_1: left allmulticast mode [ 706.862469][T11657] team0: Port device team_slave_0 removed [ 706.877252][T11665] siw: device registration error -23 [ 706.880453][T11657] team0: Port device team_slave_1 removed [ 706.895671][T11657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.906109][T11657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.356791][T11657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.463822][T11657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.621314][T11658] netlink: 'syz.3.1804': attribute type 10 has an invalid length. [ 707.644594][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.740294][T11658] bond0: (slave wlan1): Opening slave failed [ 712.183190][ T5812] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 712.468791][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.479137][ T5812] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.489247][ T5812] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 712.498442][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.558349][ T5812] usb 3-1: config 0 descriptor?? [ 712.870818][T11712] mkiss: ax0: crc mode is auto. [ 714.396689][T10390] usb 3-1: USB disconnect, device number 30 [ 716.886864][T11738] siw: device registration error -23 [ 719.722444][T11754] vlan2: entered allmulticast mode [ 721.454971][T11762] syz.2.1832: attempt to access beyond end of device [ 721.454971][T11762] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 721.468400][T11762] gfs2: error 10 reading superblock [ 723.178343][T11776] siw: device registration error -23 [ 724.088349][T11793] mkiss: ax0: crc mode is auto. [ 724.608616][T11792] vlan2: entered allmulticast mode [ 728.065373][T11821] syz.3.1850: attempt to access beyond end of device [ 728.065373][T11821] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 728.078753][T11821] gfs2: error 10 reading superblock [ 728.885865][T11836] mkiss: ax0: crc mode is auto. [ 730.584543][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 730.862415][T11843] overlayfs: missing 'lowerdir' [ 731.441885][T11860] syz.3.1864: attempt to access beyond end of device [ 731.441885][T11860] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 731.456198][T11860] gfs2: error 10 reading superblock [ 732.594051][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 732.813205][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 732.836468][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 732.847176][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.858461][ T8] usb 4-1: config 0 descriptor?? [ 733.020426][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 733.499618][T11873] overlayfs: missing 'lowerdir' [ 733.918694][T11880] bond0: (slave wlan1): Releasing backup interface [ 733.929893][T11880] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 734.645137][T11886] vlan2: entered allmulticast mode [ 735.893521][T11896] syz.1.1875: attempt to access beyond end of device [ 735.893521][T11896] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 735.907466][T11896] gfs2: error 10 reading superblock [ 736.557820][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 736.680344][ T8] usb 4-1: USB disconnect, device number 31 [ 736.705250][T11904] bridge_slave_0: left allmulticast mode [ 736.710954][T11904] bridge_slave_0: left promiscuous mode [ 736.749077][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.768860][T11904] bridge_slave_1: left allmulticast mode [ 736.795641][T11904] bridge_slave_1: left promiscuous mode [ 736.801446][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.834423][T11907] overlayfs: missing 'lowerdir' [ 736.859100][T11904] bond0: (slave bond_slave_0): Releasing backup interface [ 736.880825][T11904] bond_slave_0: left allmulticast mode [ 736.908219][T11904] bond0: (slave bond_slave_1): Releasing backup interface [ 736.919387][T11904] bond_slave_1: left allmulticast mode [ 736.971884][T11904] team0: Port device team_slave_0 removed [ 736.991192][T11904] team0: Port device team_slave_1 removed [ 737.044275][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.066746][T11904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.077167][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.085106][T11904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.269518][T11905] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 737.297371][T11916] overlayfs: overlapping lowerdir path [ 737.304934][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.313459][T11905] bond0: (slave wlan1): Opening slave failed [ 738.318002][T11928] vlan2: entered allmulticast mode [ 738.323172][T11928] bond0: entered allmulticast mode [ 739.090939][T11935] mkiss: ax0: crc mode is auto. [ 739.958445][T11940] syz.0.1887: attempt to access beyond end of device [ 739.958445][T11940] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 739.972058][T11940] gfs2: error 10 reading superblock [ 740.385399][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 740.566193][T11947] overlayfs: missing 'lowerdir' [ 740.713879][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 740.767723][T11952] overlayfs: overlapping lowerdir path [ 740.935809][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.983775][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 740.993229][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.036028][ T8] usb 2-1: config 0 descriptor?? [ 742.594376][T11969] vlan2: entered allmulticast mode [ 742.930273][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 743.023136][T11976] overlayfs: missing 'lowerdir' [ 743.223547][T11982] syz.2.1901: attempt to access beyond end of device [ 743.223547][T11982] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 743.240986][T11982] gfs2: error 10 reading superblock [ 743.700825][T11987] overlayfs: overlapping lowerdir path [ 745.101538][T11999] netlink: 'syz.0.1905': attribute type 10 has an invalid length. [ 745.248708][T11999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.256880][T11999] bond0: (slave wlan1): Opening slave failed [ 745.349188][ T5835] usb 2-1: USB disconnect, device number 27 [ 745.668847][T12003] netlink: 'syz.1.1906': attribute type 10 has an invalid length. [ 745.697564][T12003] bond0: (slave wlan1): Opening slave failed [ 746.633924][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 746.661900][T12013] overlayfs: missing 'lowerdir' [ 746.770749][T12017] overlayfs: overlapping lowerdir path [ 747.400212][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.419700][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.738195][T12025] syz.3.1913: attempt to access beyond end of device [ 747.738195][T12025] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 747.751685][T12025] gfs2: error 10 reading superblock [ 750.316276][T12053] overlayfs: overlapping lowerdir path [ 750.442395][T12054] overlayfs: missing 'workdir' [ 751.846455][T12060] syz.0.1924: attempt to access beyond end of device [ 751.846455][T12060] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 751.860697][T12060] gfs2: error 10 reading superblock [ 752.096755][T12065] siw: device registration error -23 [ 754.038357][T12085] overlayfs: overlapping lowerdir path [ 755.324339][T12090] overlayfs: missing 'workdir' [ 758.618546][T12097] syz.1.1938: attempt to access beyond end of device [ 758.618546][T12097] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 758.631828][T12097] gfs2: error 10 reading superblock [ 758.979828][T12117] overlayfs: missing 'workdir' [ 759.363909][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 759.607527][T12125] overlayfs: overlapping lowerdir path [ 759.802217][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 759.891145][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.085018][ T9] usb 4-1: config 0 descriptor?? [ 760.253922][ T9] pwc: Creative Labs Webcam 5 detected. [ 760.302528][T12127] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.317987][T12127] bridge_slave_1: left allmulticast mode [ 760.327628][T12127] bridge_slave_1: left promiscuous mode [ 760.333402][T12127] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.346035][T12127] bond0: (slave bond_slave_0): Releasing backup interface [ 760.354104][T12127] bond_slave_0: left allmulticast mode [ 760.369418][T12127] bond0: (slave bond_slave_1): Releasing backup interface [ 760.378649][T12127] bond_slave_1: left allmulticast mode [ 760.507195][T12127] team0: Port device team_slave_0 removed [ 761.313038][T12127] team0: Port device team_slave_1 removed [ 761.342358][T12127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.375611][T12127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.394657][T12127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.402138][T12127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.725427][T12151] syz.1.1952: attempt to access beyond end of device [ 762.725427][T12151] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 762.739299][T12151] gfs2: error 10 reading superblock [ 763.282437][T12155] overlayfs: missing 'lowerdir' [ 763.942396][T12166] overlayfs: missing 'lowerdir' [ 764.663001][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 765.304929][ T9] pwc: Failed to set LED on/off time (-71) [ 765.320517][ T9] pwc: send_video_command error -71 [ 765.326034][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 766.085113][ T9] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 766.153524][ T9] usb 4-1: USB disconnect, device number 32 [ 766.482793][T12187] overlayfs: missing 'lowerdir' [ 768.191637][T12202] syz.0.1966: attempt to access beyond end of device [ 768.191637][T12202] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 768.205255][T12202] gfs2: error 10 reading superblock [ 768.712181][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 768.948491][T12210] overlayfs: missing 'lowerdir' [ 770.745274][T12225] overlayfs: missing 'lowerdir' [ 770.872272][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 771.065612][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 771.086323][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.111642][ T9] usb 2-1: config 0 descriptor?? [ 771.126382][ T9] pwc: Creative Labs Webcam 5 detected. [ 771.570153][T12235] vlan2: entered allmulticast mode [ 771.598700][T12235] bond0: entered allmulticast mode [ 771.792659][ T9] pwc: Failed to set LED on/off time (-71) [ 771.803880][ T9] pwc: send_video_command error -71 [ 771.809120][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 771.821587][ T9] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 771.843959][ T9] usb 2-1: USB disconnect, device number 28 [ 772.715932][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 773.077350][T12250] ubi: mtd0 is already attached to ubi31 [ 773.784626][T12251] syz.0.1981: attempt to access beyond end of device [ 773.784626][T12251] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 773.798480][T12251] gfs2: error 10 reading superblock [ 774.389134][T12260] overlayfs: overlapping lowerdir path [ 774.890453][ T5855] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 775.706659][ T5855] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 775.732412][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.756681][ T5855] usb 4-1: config 0 descriptor?? [ 775.771319][ T5855] pwc: Creative Labs Webcam 5 detected. [ 776.489875][ T5855] pwc: Failed to set LED on/off time (-71) [ 776.515890][ T5855] pwc: send_video_command error -71 [ 776.523788][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 776.551730][ T5855] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 776.573947][ T5855] usb 4-1: USB disconnect, device number 33 [ 776.878745][T12282] vlan2: entered allmulticast mode [ 776.895314][T12282] bond0: entered allmulticast mode [ 777.899213][T12288] ubi: mtd0 is already attached to ubi31 [ 778.592994][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 778.696970][T12294] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 778.709999][T12294] bond0: (slave wlan1): Opening slave failed [ 779.771160][T12297] overlayfs: overlapping lowerdir path [ 781.108621][T12321] ubi: mtd0 is already attached to ubi31 [ 782.016534][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 782.223810][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 782.349245][T12330] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 782.380402][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.412852][T12330] bond0: (slave wlan1): Opening slave failed [ 782.470041][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 782.484716][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.523789][ T23] usb 4-1: config 0 descriptor?? [ 782.536764][ T23] pwc: Creative Labs Webcam 5 detected. [ 783.926466][T12340] overlayfs: overlapping lowerdir path [ 783.990193][T12339] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 784.027641][T12339] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 784.998803][ T23] pwc: Failed to set LED on/off time (-71) [ 785.026714][ T23] pwc: send_video_command error -71 [ 785.031986][ T23] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 785.081946][ T23] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 785.098362][ T23] usb 4-1: USB disconnect, device number 34 [ 785.162749][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 785.394502][T12359] overlayfs: missing 'lowerdir' [ 786.126878][T12362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2010'. [ 786.318894][T12369] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 786.341629][T12369] bond0: (slave wlan1): Opening slave failed [ 787.945136][T12379] overlayfs: overlapping lowerdir path [ 788.883586][ T5855] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 789.634456][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 789.665481][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.690993][ T5855] usb 2-1: config 0 descriptor?? [ 789.708602][ T5855] pwc: Creative Labs Webcam 5 detected. [ 790.064923][T12400] overlayfs: missing 'lowerdir' [ 791.173613][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 791.426842][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 791.435218][ T9] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 792.093208][ T9] usb 4-1: config 0 has no interface number 0 [ 792.100188][ T9] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 792.116421][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 792.143434][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 792.163617][ T9] usb 4-1: Product: syz [ 792.170311][ T9] usb 4-1: SerialNumber: syz [ 792.260677][T12416] overlayfs: overlapping lowerdir path [ 792.369806][ T9] usb 4-1: config 0 descriptor?? [ 792.378418][ T9] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 792.419920][T12418] vlan2: entered allmulticast mode [ 792.425134][T12418] bond0: entered allmulticast mode [ 792.583435][ T9] usb 4-1: USB disconnect, device number 35 [ 792.928057][T12421] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 792.944627][ T5855] pwc: Failed to set LED on/off time (-71) [ 792.948435][T12421] bond0: (slave wlan1): Opening slave failed [ 792.963717][ T5855] pwc: send_video_command error -71 [ 792.968961][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 792.993757][ T5855] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 793.002796][ T5855] usb 2-1: USB disconnect, device number 29 [ 793.428581][T12424] syz.0.2030: attempt to access beyond end of device [ 793.428581][T12424] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 793.507765][T12424] gfs2: error 10 reading superblock [ 794.780013][T12436] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 794.798637][T12436] bond0: (slave wlan1): Opening slave failed [ 796.156846][T12447] overlayfs: overlapping lowerdir path [ 797.081633][T12454] overlayfs: overlapping lowerdir path [ 799.110399][T12470] syz.0.2043: attempt to access beyond end of device [ 799.110399][T12470] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 799.123859][T12470] gfs2: error 10 reading superblock [ 799.538524][T12471] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 799.550079][T12471] bond0: (slave wlan1): Opening slave failed [ 799.604931][ T5855] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 799.824788][T12479] overlayfs: overlapping lowerdir path [ 800.588451][ T5855] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 800.602701][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.621654][ T5855] usb 3-1: config 0 descriptor?? [ 800.690156][T12492] overlayfs: overlapping lowerdir path [ 800.717808][ T5855] pwc: Creative Labs Webcam 5 detected. [ 803.506829][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 803.506844][ T27] audit: type=1326 audit(1750521050.765:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.559428][T12511] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 803.589014][T12511] bond0: (slave wlan1): Opening slave failed [ 803.603732][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 803.606614][ T27] audit: type=1326 audit(1750521050.795:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.657067][ T27] audit: type=1326 audit(1750521050.795:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.707122][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 803.764217][ T27] audit: type=1326 audit(1750521050.795:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.831793][ T27] audit: type=1326 audit(1750521050.795:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.903697][ T27] audit: type=1326 audit(1750521050.955:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 803.983608][ T27] audit: type=1326 audit(1750521050.955:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80feb8e929 code=0x7ffc0000 [ 804.044695][ T5855] pwc: Failed to set LED on/off time (-71) [ 804.067287][ T5855] pwc: send_video_command error -71 [ 804.081850][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 804.100230][ T5855] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 804.120591][ T5855] usb 3-1: USB disconnect, device number 31 [ 804.305105][T12519] overlayfs: overlapping lowerdir path [ 805.087579][T12524] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 805.101319][T12524] bond0: (slave wlan1): Opening slave failed [ 805.158004][T12528] overlayfs: overlapping lowerdir path [ 805.645062][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 805.651544][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 806.134570][T12537] mkiss: ax0: crc mode is auto. [ 807.133071][ T5835] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 807.964565][T12552] overlayfs: overlapping lowerdir path [ 808.116028][ T5835] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 808.125241][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.152088][ T5835] usb 2-1: config 0 descriptor?? [ 808.183943][ T5835] pwc: Creative Labs Webcam 5 detected. [ 808.223272][T12566] overlayfs: failed to resolve './file1/file0': -2 [ 808.384059][T12565] netlink: 'syz.2.2070': attribute type 10 has an invalid length. [ 808.842133][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.862963][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.880687][T12565] bond0: (slave wlan1): Opening slave failed [ 810.395879][ T5835] pwc: Failed to set LED on/off time (-71) [ 810.443936][ T5835] pwc: send_video_command error -71 [ 810.449190][ T5835] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 810.481631][ T5835] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 810.506429][ T5835] usb 2-1: USB disconnect, device number 30 [ 811.608976][T12592] overlayfs: overlapping lowerdir path [ 812.242897][T12600] overlayfs: failed to resolve './file1/file0': -2 [ 814.481199][T12621] overlayfs: overlapping lowerdir path [ 816.340253][T12633] overlayfs: failed to resolve './file1/file0': -2 [ 816.506148][T12637] overlayfs: missing 'lowerdir' [ 820.186454][T12648] vlan2: entered allmulticast mode [ 820.191630][T12648] bond0: entered allmulticast mode [ 822.720696][T12660] overlayfs: overlapping lowerdir path [ 824.303326][T12682] overlayfs: missing 'workdir' [ 826.128963][T12690] netlink: 'syz.1.2108': attribute type 10 has an invalid length. [ 826.142695][T12690] bond0: (slave wlan1): Opening slave failed [ 826.242440][T12693] fuse: Bad value for 'fd' [ 826.346352][T12696] overlayfs: overlapping lowerdir path [ 828.039245][T12717] vlan2: entered allmulticast mode [ 828.044447][T12717] bond0: entered allmulticast mode [ 828.423667][T12724] fuse: Bad value for 'fd' [ 828.851101][T12733] kvm: pic: non byte write [ 828.858154][T12733] kvm: vcpu 0: requested 80 ns lapic timer period limited to 200000 ns [ 829.962070][T12744] vlan2: entered allmulticast mode [ 829.967251][T12744] bond0: entered allmulticast mode [ 830.832048][T12757] overlayfs: missing 'workdir' [ 832.084004][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 832.383742][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 832.391130][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.499247][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 832.581223][T12779] vlan2: entered allmulticast mode [ 832.767254][ T8] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 832.923624][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.956543][T12780] syz.0.2139: attempt to access beyond end of device [ 832.956543][T12780] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 832.978789][T12780] gfs2: error 10 reading superblock [ 833.060165][ T8] hub 2-1:1.0: bad descriptor, ignoring hub [ 833.160139][ T8] hub: probe of 2-1:1.0 failed with error -5 [ 833.646960][ T5812] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 833.891775][T12791] syz.2.2144: attempt to access beyond end of device [ 833.891775][T12791] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 833.907134][T12791] syz.2.2144: attempt to access beyond end of device [ 833.907134][T12791] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 833.923343][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 833.935124][T12791] syz.2.2144: attempt to access beyond end of device [ 833.935124][T12791] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 833.948883][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 833.960550][T12791] syz.2.2144: attempt to access beyond end of device [ 833.960550][T12791] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 833.975880][T12791] syz.2.2144: attempt to access beyond end of device [ 833.975880][T12791] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 833.988993][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 833.998815][T12791] syz.2.2144: attempt to access beyond end of device [ 833.998815][T12791] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 834.060102][T12795] ubi: mtd0 is already attached to ubi31 [ 834.257236][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 834.289215][T12791] syz.2.2144: attempt to access beyond end of device [ 834.289215][T12791] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 834.303040][T12791] syz.2.2144: attempt to access beyond end of device [ 834.303040][T12791] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 834.321514][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 834.343974][T12791] syz.2.2144: attempt to access beyond end of device [ 834.343974][T12791] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 834.357166][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 834.373991][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 834.398699][T12791] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 834.410168][T12791] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 834.420640][ T5812] usb 2-1: USB disconnect, device number 31 [ 835.831742][ T27] audit: type=1800 audit(1750521082.445:523): pid=12803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2146" name="bus" dev="overlay" ino=3134 res=0 errno=0 [ 836.203701][ T5812] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 836.613364][T12818] vlan2: entered allmulticast mode [ 837.129634][T12821] gfs2: error 10 reading superblock [ 837.347632][ T5812] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 837.370588][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.416015][ T5812] usb 2-1: config 0 descriptor?? [ 837.447035][ T5812] pwc: Creative Labs Webcam 5 detected. [ 839.948743][ T5812] pwc: Failed to set LED on/off time (-71) [ 840.013686][ T5812] pwc: send_video_command error -71 [ 840.018926][ T5812] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 840.063872][ T5812] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 840.105687][ T5812] usb 2-1: USB disconnect, device number 32 [ 840.114346][ T27] audit: type=1326 audit(1750521087.345:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.142866][ T27] audit: type=1326 audit(1750521087.345:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.165490][ T27] audit: type=1326 audit(1750521087.345:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.188532][ T27] audit: type=1326 audit(1750521087.345:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.211602][ T27] audit: type=1326 audit(1750521087.355:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.234298][ T27] audit: type=1326 audit(1750521087.365:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.264768][ T27] audit: type=1326 audit(1750521087.375:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.299934][ T27] audit: type=1326 audit(1750521087.375:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.395519][ T27] audit: type=1326 audit(1750521087.375:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5954f8e929 code=0x7ffc0000 [ 840.487734][T12849] sctp: [Deprecated]: syz.1.2161 (pid 12849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.487734][T12849] Use struct sctp_sack_info instead [ 840.785332][T12853] ubi: mtd0 is already attached to ubi31 [ 840.919267][T12855] vlan2: entered allmulticast mode [ 842.300435][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 844.242681][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 844.242695][ T27] audit: type=1326 audit(1750521091.495:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 844.266886][ T2935] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 844.282075][ T27] audit: type=1326 audit(1750521091.495:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 844.332762][ T27] audit: type=1326 audit(1750521091.495:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.066410][ T27] audit: type=1326 audit(1750521091.495:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.089206][ T27] audit: type=1326 audit(1750521091.505:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.111984][ T27] audit: type=1326 audit(1750521091.505:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.136912][ T27] audit: type=1326 audit(1750521091.505:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.163630][ T27] audit: type=1326 audit(1750521091.505:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.186178][ T27] audit: type=1326 audit(1750521091.505:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 845.212868][ T27] audit: type=1326 audit(1750521091.505:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3497d8e929 code=0x7ffc0000 [ 846.273645][ T5777] Bluetooth: hci4: command 0x1003 tx timeout [ 846.280519][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 847.119037][T12923] bio_check_eod: 4 callbacks suppressed [ 847.119053][T12923] syz.2.2186: attempt to access beyond end of device [ 847.119053][T12923] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 847.142559][T12923] syz.2.2186: attempt to access beyond end of device [ 847.142559][T12923] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 847.158338][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 847.168497][T12923] syz.2.2186: attempt to access beyond end of device [ 847.168497][T12923] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 847.193688][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 847.214473][T12923] syz.2.2186: attempt to access beyond end of device [ 847.214473][T12923] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 847.249142][T12923] syz.2.2186: attempt to access beyond end of device [ 847.249142][T12923] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 847.263984][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 847.300194][T12923] syz.2.2186: attempt to access beyond end of device [ 847.300194][T12923] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 847.421085][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 848.226398][T12923] syz.2.2186: attempt to access beyond end of device [ 848.226398][T12923] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 848.248040][T12923] syz.2.2186: attempt to access beyond end of device [ 848.248040][T12923] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 848.262181][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 848.273637][T12923] syz.2.2186: attempt to access beyond end of device [ 848.273637][T12923] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 848.286812][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 848.305035][T12923] syz.2.2186: attempt to access beyond end of device [ 848.305035][T12923] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 848.327630][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 848.348165][T12923] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 848.359165][T12923] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 848.946906][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 848.961295][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 848.974617][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 848.996428][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 849.088312][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 849.100380][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 849.111426][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 849.121910][T12939] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 849.131997][T12939] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 849.172588][T12941] overlayfs: overlapping lowerdir path [ 850.075210][T12958] gfs2: error 10 reading superblock [ 850.681194][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 852.984378][T12978] overlayfs: overlapping lowerdir path [ 853.010265][T12977] bio_check_eod: 15 callbacks suppressed [ 853.010280][T12977] syz.0.2201: attempt to access beyond end of device [ 853.010280][T12977] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 853.047621][T12977] syz.0.2201: attempt to access beyond end of device [ 853.047621][T12977] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 853.077430][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 853.104251][T12977] syz.0.2201: attempt to access beyond end of device [ 853.104251][T12977] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 853.142250][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 853.202916][T12977] syz.0.2201: attempt to access beyond end of device [ 853.202916][T12977] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 853.223927][T12977] syz.0.2201: attempt to access beyond end of device [ 853.223927][T12977] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 853.237271][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 853.252415][T12977] syz.0.2201: attempt to access beyond end of device [ 853.252415][T12977] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 853.265595][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 853.297237][T12977] syz.0.2201: attempt to access beyond end of device [ 853.297237][T12977] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 853.313364][T12977] syz.0.2201: attempt to access beyond end of device [ 853.313364][T12977] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 853.326579][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 853.341394][T12977] syz.0.2201: attempt to access beyond end of device [ 853.341394][T12977] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 853.354653][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 853.373590][T12977] syz.0.2201: attempt to access beyond end of device [ 853.373590][T12977] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 853.389779][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 853.407671][T12977] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 853.418459][T12977] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 854.178483][T12992] gfs2: error 10 reading superblock [ 854.830632][T13006] overlayfs: overlapping lowerdir path [ 854.983723][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 855.255463][ T8] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 855.287655][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.582949][ T8] usb 4-1: config 0 descriptor?? [ 856.594918][T13000] @: renamed from vlan0 (while UP) [ 856.969132][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 856.983836][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 857.011328][ T8] usb 4-1: USB disconnect, device number 36 [ 858.098096][T13044] overlayfs: overlapping lowerdir path [ 858.247981][T13049] mkiss: ax0: crc mode is auto. [ 860.257790][T13054] bio_check_eod: 3 callbacks suppressed [ 860.257826][T13054] syz.2.2224: attempt to access beyond end of device [ 860.257826][T13054] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 860.279637][T13054] gfs2: error 10 reading superblock [ 861.290863][T13074] program syz.3.2232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.303168][T13074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 861.373868][ T5855] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 861.844354][ T5855] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 861.863695][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.872130][ T5855] usb 2-1: Product: syz [ 861.876988][ T5855] usb 2-1: Manufacturer: syz [ 861.881607][ T5855] usb 2-1: SerialNumber: syz [ 861.894380][ T5855] usb 2-1: config 0 descriptor?? [ 861.916320][ T5855] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 864.548917][ T5855] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 864.563751][ T5855] sq905c 2-1:0.0: Reading version command failed [ 864.595609][ T5855] sq905c: probe of 2-1:0.0 failed with error -110 [ 864.645636][ T5855] usb 2-1: USB disconnect, device number 33 [ 865.140732][T13095] syz.1.2237: attempt to access beyond end of device [ 865.140732][T13095] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 865.154373][T13095] gfs2: error 10 reading superblock [ 865.791514][T13102] syz.2.2239: attempt to access beyond end of device [ 865.791514][T13102] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 865.812097][T13102] syz.2.2239: attempt to access beyond end of device [ 865.812097][T13102] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 865.828879][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 865.846680][T13102] syz.2.2239: attempt to access beyond end of device [ 865.846680][T13102] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 865.870100][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 865.882431][T13102] syz.2.2239: attempt to access beyond end of device [ 865.882431][T13102] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 865.900475][T13102] syz.2.2239: attempt to access beyond end of device [ 865.900475][T13102] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 865.915094][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 865.932062][T13102] syz.2.2239: attempt to access beyond end of device [ 865.932062][T13102] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 865.951699][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 865.962309][T13102] syz.2.2239: attempt to access beyond end of device [ 865.962309][T13102] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 865.975895][T13102] syz.2.2239: attempt to access beyond end of device [ 865.975895][T13102] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 865.989079][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 865.999294][T13102] syz.2.2239: attempt to access beyond end of device [ 865.999294][T13102] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 866.012674][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 866.023141][T13102] syz.2.2239: attempt to access beyond end of device [ 866.023141][T13102] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 866.037288][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 866.047834][T13102] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 866.057482][T13102] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 866.402931][T13111] lo speed is unknown, defaulting to 1000 [ 868.007562][T13124] program syz.3.2246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.017587][T13124] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 868.393663][ T5855] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 868.864530][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 868.871844][ T5855] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 868.880900][ T5855] usb 2-1: config 0 has no interface number 0 [ 868.888155][ T5855] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 868.901277][ T5855] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 868.912616][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 868.920986][ T5855] usb 2-1: Product: syz [ 868.933432][T13135] overlayfs: overlapping lowerdir path [ 868.939263][ T5855] usb 2-1: SerialNumber: syz [ 868.955721][ T5855] usb 2-1: config 0 descriptor?? [ 868.970660][ T5855] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 868.992189][ T5855] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 869.691022][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 869.731421][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 869.772962][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 869.811237][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 869.828939][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 869.857189][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 869.876672][T13149] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2252'. [ 869.897605][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 869.913218][T13144] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 869.923025][T13144] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 869.958115][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 869.965475][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.972651][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.979782][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.986802][ T5855] usb 2-1: USB disconnect, device number 34 [ 869.992708][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.992719][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 870.053040][ T5855] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 870.254345][T13155] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 870.305379][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.314038][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.937743][T13155] bond0: (slave wlan1): Opening slave failed [ 872.424994][T13170] overlayfs: overlapping lowerdir path [ 872.860942][ T5855] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 873.294401][T13178] siw: device registration error -23 [ 873.780082][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 873.797193][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.834827][ T5855] usb 2-1: config 0 descriptor?? [ 875.041842][ T5855] pwc: Creative Labs Webcam 5 detected. [ 875.074060][T13184] IPv6: Can't replace route, no match found [ 876.347365][T13194] binder: 13189:13194 ioctl 4018620d 0 returned -22 [ 876.489639][T13195] vlan2: entered allmulticast mode [ 876.495081][T13195] bond0: entered allmulticast mode [ 876.865242][ T5855] pwc: Failed to set LED on/off time (-71) [ 876.871598][ T5855] pwc: send_video_command error -71 [ 876.892799][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 876.911448][ T5855] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 876.982650][ T5855] usb 2-1: USB disconnect, device number 35 [ 881.188233][T13228] vlan0: entered allmulticast mode [ 881.193406][T13228] bond0: entered allmulticast mode [ 881.338064][T13231] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 881.352200][T13231] bond0: (slave wlan1): Opening slave failed [ 882.436854][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 882.436886][ T27] audit: type=1800 audit(1750521129.105:565): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2279" name="bus" dev="overlay" ino=3199 res=0 errno=0 [ 885.001719][T13265] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 885.051886][T13265] bond0: (slave wlan1): Opening slave failed [ 886.723750][ T27] audit: type=1800 audit(1750521133.955:566): pid=13281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2292" name="bus" dev="overlay" ino=3157 res=0 errno=0 [ 887.629843][T13290] mkiss: ax0: crc mode is auto. [ 888.784374][T13293] IPv6: Can't replace route, no match found [ 890.783480][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.806946][T13306] bond0: (slave rose0): Enslaving as an active interface with an up link [ 891.394327][ T27] audit: type=1800 audit(1750521138.655:567): pid=13326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2303" name="bus" dev="overlay" ino=3256 res=0 errno=0 [ 894.025904][T13351] IPv6: Can't replace route, no match found [ 894.128142][T13353] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 894.238323][T13353] bond0: (slave wlan1): Opening slave failed [ 894.466577][ T1126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.526506][T13369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.544301][T13369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.562768][T13369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.583362][T13369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.616066][T13369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 894.651767][T13369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.817645][ T1126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.911249][ T27] audit: type=1800 audit(1750521142.165:568): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2315" name="bus" dev="overlay" ino=3295 res=0 errno=0 [ 895.574185][ T1126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.596347][T13364] lo speed is unknown, defaulting to 1000 [ 896.418475][ T1126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.690842][T13389] lo speed is unknown, defaulting to 1000 [ 896.759293][T13369] Bluetooth: hci0: command tx timeout [ 896.921320][T11659] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 897.127721][T11659] usb 3-1: Using ep0 maxpacket: 16 [ 897.160662][T11659] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 897.190586][T11659] usb 3-1: config 0 has no interface number 0 [ 897.227148][T11659] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 897.290619][T11659] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 897.310644][T11659] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 897.337234][T11659] usb 3-1: Product: syz [ 897.361561][T11659] usb 3-1: SerialNumber: syz [ 897.415757][T11659] usb 3-1: config 0 descriptor?? [ 897.445201][T11659] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 897.503028][T11659] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 897.596327][T13364] chnl_net:caif_netlink_parms(): no params data found [ 897.924682][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 897.931871][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.939129][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.946293][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.953437][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.960571][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.967753][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.974968][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.982150][ T5812] usb 3-1: USB disconnect, device number 32 [ 897.982314][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 897.982332][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 898.160101][ T5812] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 898.209912][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.243878][T13364] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.263764][T13364] bridge_slave_0: entered allmulticast mode [ 898.387867][T13364] bridge_slave_0: entered promiscuous mode [ 898.835202][T13369] Bluetooth: hci0: command tx timeout [ 899.077584][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.090487][T13364] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.099577][T13364] bridge_slave_1: entered allmulticast mode [ 899.127345][T13364] bridge_slave_1: entered promiscuous mode [ 899.384619][T13430] IPv6: Can't replace route, no match found [ 899.509824][T13364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.551678][T13364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.564206][ T1126] IPVS: stopping master sync thread 8428 ... [ 899.947730][T13453] ubi: mtd0 is already attached to ubi31 [ 900.617481][T13364] team0: Port device team_slave_0 added [ 900.763285][T13364] team0: Port device team_slave_1 added [ 900.925565][T13369] Bluetooth: hci0: command tx timeout [ 901.159497][T13464] lo speed is unknown, defaulting to 1000 [ 901.168350][T13364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.177916][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.223657][T11659] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 901.228528][T13364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.297784][T13364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.309246][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.342151][T13364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.368308][ T1126] hsr_slave_0: left promiscuous mode [ 901.388461][ T1126] hsr_slave_1: left promiscuous mode [ 901.423085][ T1126] veth1_macvtap: left promiscuous mode [ 901.433339][ T1126] veth0_macvtap: left promiscuous mode [ 901.444938][T11659] usb 2-1: Using ep0 maxpacket: 16 [ 901.456498][ T1126] veth1_vlan: left promiscuous mode [ 901.467557][T11659] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 901.478478][ T1126] veth0_vlan: left promiscuous mode [ 901.500234][T11659] usb 2-1: config 0 has no interface number 0 [ 901.521300][T11659] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 901.561571][T11659] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 901.580529][T11659] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 901.590222][T11659] usb 2-1: Product: syz [ 901.595873][T11659] usb 2-1: SerialNumber: syz [ 901.626776][T11659] usb 2-1: config 0 descriptor?? [ 901.641959][T11659] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 901.671774][T11659] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 903.005767][T13369] Bluetooth: hci0: command tx timeout [ 903.091082][T13477] ubi: mtd0 is already attached to ubi31 [ 903.311501][ T1126] bond0 (unregistering): Released all slaves [ 903.472030][T13474] IPv6: Can't replace route, no match found [ 903.482849][ T9] lo speed is unknown, defaulting to 1000 [ 903.512905][T13364] hsr_slave_0: entered promiscuous mode [ 903.538525][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 903.545853][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.553034][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.560202][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.567642][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.574858][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.582017][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.589194][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.596381][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.603648][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.610800][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 903.656486][T13364] hsr_slave_1: entered promiscuous mode [ 903.700835][T13364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.712921][T13364] Cannot create hsr debugfs directory [ 903.775424][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 903.785348][ T2128] usb 2-1: USB disconnect, device number 36 [ 903.854896][ T2128] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 904.881774][ T1126] IPVS: stop unused estimator thread 0... [ 905.114933][T13511] IPv6: Can't replace route, no match found [ 905.519755][T13518] ubi: mtd0 is already attached to ubi31 [ 906.222189][T13364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 906.275153][T13364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 906.294336][T13364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 906.322001][T13364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 907.536883][T13364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.497861][T13364] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.623853][T13557] IPv6: Can't replace route, no match found [ 908.644887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.652046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.662054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.669349][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.803820][ T5855] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 908.983697][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 908.998429][ T5855] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 909.019114][ T5855] usb 2-1: config 0 has no interface number 0 [ 909.038312][ T5855] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 909.092049][ T5855] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 909.102535][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 909.112732][ T5855] usb 2-1: Product: syz [ 909.118552][ T5855] usb 2-1: SerialNumber: syz [ 909.118555][T13574] ubi: mtd0 is already attached to ubi31 [ 909.130590][ T5855] usb 2-1: config 0 descriptor?? [ 909.145724][ T5855] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 909.166790][ T5855] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 909.478282][T13364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.564360][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 909.571603][ C0] cm109_urb_ctl_callback: 800 callbacks suppressed [ 909.571621][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 909.577083][ T5812] usb 2-1: USB disconnect, device number 37 [ 909.578125][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 909.604741][T13364] veth0_vlan: entered promiscuous mode [ 909.615170][ T5812] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 909.619223][T13364] veth1_vlan: entered promiscuous mode [ 909.736819][T13364] veth0_macvtap: entered promiscuous mode [ 909.748360][T13364] veth1_macvtap: entered promiscuous mode [ 909.770125][T13364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.781767][T13364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.809635][T13364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.826861][T13364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.836639][T13364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.850535][T13364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.988884][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.008698][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.090629][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.100954][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.415309][T13617] ubi: mtd0 is already attached to ubi31 [ 915.009153][T13640] ax25_connect(): syz.3.2373 uses autobind, please contact jreuter@yaina.de [ 915.399831][T13646] ubi: mtd0 is already attached to ubi31 [ 915.994671][T13648] lo speed is unknown, defaulting to 1000 [ 916.001083][T13648] lo speed is unknown, defaulting to 1000 [ 916.012594][T13648] lo speed is unknown, defaulting to 1000 [ 916.064516][T13648] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 917.575060][T13648] lo speed is unknown, defaulting to 1000 [ 917.591394][T13648] lo speed is unknown, defaulting to 1000 [ 917.608106][T13648] lo speed is unknown, defaulting to 1000 [ 917.645389][T13648] lo speed is unknown, defaulting to 1000 [ 917.652546][T13648] lo speed is unknown, defaulting to 1000 [ 918.877599][T13678] ubi: mtd0 is already attached to ubi31 [ 919.544078][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 919.553172][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 919.561304][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 919.569666][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 919.578187][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 919.586041][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 919.708789][T13681] lo speed is unknown, defaulting to 1000 [ 920.681985][T13693] lo speed is unknown, defaulting to 1000 [ 920.741583][ T2913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.944977][ T2913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.077996][ T2913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.210574][ T2913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.246448][T13681] chnl_net:caif_netlink_parms(): no params data found [ 921.364825][T13681] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.380397][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.387829][T13681] bridge_slave_0: entered allmulticast mode [ 921.395348][T13681] bridge_slave_0: entered promiscuous mode [ 921.418751][T13681] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.432359][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.439751][T13681] bridge_slave_1: entered allmulticast mode [ 921.447280][T13681] bridge_slave_1: entered promiscuous mode [ 921.581324][T13681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.599626][T13681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.610706][T13716] siw: device registration error -23 [ 921.633946][ T5773] Bluetooth: hci2: command tx timeout [ 922.300671][T13681] team0: Port device team_slave_0 added [ 922.875611][T13681] team0: Port device team_slave_1 added [ 923.019582][T13681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.028532][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.115976][T13681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.198136][T13681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.218926][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.261230][T13681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.713777][ T5773] Bluetooth: hci2: command tx timeout [ 923.737339][T13737] mkiss: ax0: crc mode is auto. [ 925.243099][T13743] ubi: mtd0 is already attached to ubi31 [ 925.803759][ T5773] Bluetooth: hci2: command tx timeout [ 926.225987][T13681] hsr_slave_0: entered promiscuous mode [ 926.255169][T13681] hsr_slave_1: entered promiscuous mode [ 926.513227][T13681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.604136][T13681] Cannot create hsr debugfs directory [ 927.048128][T13758] siw: device registration error -23 [ 927.883928][ T5773] Bluetooth: hci2: command tx timeout [ 927.937212][ T2913] hsr_slave_0: left promiscuous mode [ 927.946864][ T2913] hsr_slave_1: left promiscuous mode [ 927.977959][ T2913] veth1_macvtap: left promiscuous mode [ 927.983710][ T2913] veth0_macvtap: left promiscuous mode [ 927.989351][ T2913] veth1_vlan: left promiscuous mode [ 928.002358][ T2913] veth0_vlan: left promiscuous mode [ 928.323281][T13771] ubi: mtd0 is already attached to ubi31 [ 929.013587][ T5855] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 929.207166][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 929.238608][ T5855] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 929.260109][ T5855] usb 4-1: config 0 has no interface number 0 [ 929.272173][ T5855] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.306426][ T5855] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 929.330422][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 929.340036][ T5855] usb 4-1: Product: syz [ 929.344432][ T5855] usb 4-1: SerialNumber: syz [ 929.352041][ T5855] usb 4-1: config 0 descriptor?? [ 929.391179][ T5855] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 929.410890][ T5855] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 931.093812][ T2913] bond0 (unregistering): Released all slaves [ 931.238811][T13780] netlink: 'syz.0.2406': attribute type 10 has an invalid length. [ 931.257160][T13780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 931.316293][T13766] lo speed is unknown, defaulting to 1000 [ 931.718747][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.725307][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.765395][T13807] ubi: mtd0 is already attached to ubi31 [ 933.801599][ T2913] IPVS: stop unused estimator thread 0... [ 935.798637][T13681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 935.900567][T13681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 935.964798][T13681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 935.985958][T13681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 936.068533][T13830] bond0: (slave wlan1): Releasing backup interface [ 936.142188][T13830] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 936.215917][T13830] bond0: (slave wlan1): Opening slave failed [ 936.680808][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 936.687820][ C0] ------------[ cut here ]------------ [ 936.693294][ C0] URB ffff888025b09f00 submitted while active [ 936.700043][ C0] WARNING: CPU: 0 PID: 13766 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf95/0x1850 [ 936.709751][ C0] Modules linked in: [ 936.713661][ C0] CPU: 0 PID: 13766 Comm: syz.3.2403 Not tainted 6.6.94-syzkaller #0 [ 936.721729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.731785][ C0] RIP: 0010:usb_submit_urb+0xf95/0x1850 [ 936.737346][ C0] Code: 04 00 00 eb 58 e8 7b fa 35 fb e9 1a f1 ff ff e8 71 fa 35 fb c6 05 9f c0 e4 07 01 48 c7 c7 80 b3 4a 8b 48 89 de e8 5b 5f 00 fb <0f> 0b e9 e5 f0 ff ff e8 4f fa 35 fb eb 11 e8 48 fa 35 fb bd 80 00 [ 936.756954][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 936.763018][ C0] RAX: 6923e538ba004600 RBX: ffff888025b09f00 RCX: 0000000000040000 [ 936.770986][ C0] RDX: ffffc90002111000 RSI: 000000000000634d RDI: 000000000000634e [ 936.778964][ C0] RBP: 000000000000000f R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 936.786933][ C0] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff1100315a70a [ 936.794903][ C0] R13: dffffc0000000000 R14: ffff888025b09f08 R15: 0000000000000820 [ 936.802874][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 936.811801][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.818376][ C0] CR2: 00007f80ffa90f98 CR3: 000000005da7c000 CR4: 00000000003506f0 [ 936.826349][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 936.834316][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 936.842282][ C0] Call Trace: [ 936.845565][ C0] [ 936.848406][ C0] ? _raw_spin_lock+0x40/0x40 [ 936.853101][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 936.858130][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 936.863331][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 936.868709][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 936.874090][ C0] dummy_timer+0x8a3/0x31b0 [ 936.878617][ C0] ? mark_lock+0x94/0x320 [ 936.882946][ C0] ? lock_chain_count+0x20/0x20 [ 936.887799][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 936.893702][ C0] ? dummy_free_streams+0x530/0x530 [ 936.898893][ C0] ? debug_object_deactivate+0x67/0x350 [ 936.904464][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 936.909666][ C0] ? dummy_free_streams+0x530/0x530 [ 936.914867][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 936.919974][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 936.926050][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 936.931163][ C0] handle_softirqs+0x280/0x820 [ 936.935924][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 936.940688][ C0] ? do_softirq+0x180/0x180 [ 936.945187][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 936.950388][ C0] __irq_exit_rcu+0xc7/0x190 [ 936.954973][ C0] ? irq_exit_rcu+0x20/0x20 [ 936.959476][ C0] irq_exit_rcu+0x9/0x20 [ 936.963711][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 936.969342][ C0] [ 936.972268][ C0] [ 936.975194][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 936.981171][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 936.987238][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 8c 17 c4 0c 48 89 de 5b e9 83 d6 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 20 24 7e 7e 65 8b 15 21 24 7e 7e 81 e2 00 01 ff 00 74 [ 937.006860][ C0] RSP: 0018:ffffc90004dbeee8 EFLAGS: 00000246 [ 937.012931][ C0] RAX: ffffffff813a9b13 RBX: ffffffff8ecbc39c RCX: 0000000000000003 [ 937.020906][ C0] RDX: ffffffff813a9a02 RSI: ffffffff8cb9e0e0 RDI: 0000000000000005 [ 937.028889][ C0] RBP: ffffc90004dbf078 R08: ffff88802f1c1e00 R09: 0000000000000008 [ 937.036861][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc90004dbf028 [ 937.044829][ C0] R13: dffffc0000000000 R14: 0000000000000005 R15: ffffffff8ecbc3a0 [ 937.052802][ C0] ? unwind_next_frame+0x853/0x2970 [ 937.058009][ C0] ? unwind_next_frame+0x742/0x2970 [ 937.063217][ C0] unwind_next_frame+0x853/0x2970 [ 937.068251][ C0] ? __unwind_start+0x2d2/0x7e0 [ 937.073113][ C0] __unwind_start+0x66a/0x7e0 [ 937.077800][ C0] ? stack_trace_save+0xe0/0xe0 [ 937.082651][ C0] arch_stack_walk+0xf8/0x190 [ 937.087327][ C0] ? __unwind_start+0x2d2/0x7e0 [ 937.092183][ C0] stack_trace_save+0x9c/0xe0 [ 937.096859][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 937.101969][ C0] ? mark_lock+0x94/0x320 [ 937.106304][ C0] save_stack+0xf7/0x1f0 [ 937.110546][ C0] ? __reset_page_owner+0x190/0x190 [ 937.115742][ C0] ? seqcount_lockdep_reader_access+0x103/0x180 [ 937.121995][ C0] ? get_page_from_freelist+0x6a8/0x19f0 [ 937.127627][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 937.132653][ C0] __set_page_owner+0x1d/0x60 [ 937.137327][ C0] post_alloc_hook+0x1cd/0x210 [ 937.142086][ C0] get_page_from_freelist+0x195c/0x19f0 [ 937.147638][ C0] ? __lock_acquire+0x1260/0x7c80 [ 937.152661][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 937.158033][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 937.163319][ C0] __alloc_pages+0x1e3/0x460 [ 937.167908][ C0] ? zone_statistics+0x170/0x170 [ 937.172936][ C0] ? alloc_pages+0x4dc/0x740 [ 937.177536][ C0] ? lock_chain_count+0x20/0x20 [ 937.182383][ C0] alloc_slab_page+0x5d/0x170 [ 937.187059][ C0] new_slab+0x87/0x2e0 [ 937.191122][ C0] ___slab_alloc+0xc6d/0x12f0 [ 937.196247][ C0] ? __alloc_skb+0x108/0x2c0 [ 937.200855][ C0] kmem_cache_alloc_node+0x1ea/0x330 [ 937.206139][ C0] ? __alloc_skb+0x108/0x2c0 [ 937.210730][ C0] __alloc_skb+0x108/0x2c0 [ 937.215146][ C0] alloc_uevent_skb+0x7d/0x230 [ 937.219916][ C0] kobject_uevent_net_broadcast+0x2e6/0x530 [ 937.225820][ C0] kobject_uevent_env+0x550/0x8c0 [ 937.230847][ C0] ? gadget_unbind_driver+0x302/0x420 [ 937.236238][ C0] ? gadget_bind_driver+0x750/0x750 [ 937.241447][ C0] device_release_driver_internal+0x468/0x7a0 [ 937.247522][ C0] driver_detach+0x1f3/0x2d0 [ 937.252114][ C0] bus_remove_driver+0x221/0x2f0 [ 937.257054][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 937.262777][ C0] raw_release+0xda/0x260 [ 937.267103][ C0] ? raw_open+0x520/0x520 [ 937.271430][ C0] __fput+0x234/0x970 [ 937.275423][ C0] task_work_run+0x1ce/0x250 [ 937.280023][ C0] ? task_work_cancel+0x240/0x240 [ 937.285055][ C0] do_exit+0x903/0x23c0 [ 937.289220][ C0] ? put_task_struct+0xc0/0xc0 [ 937.293991][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 937.299971][ C0] ? get_signal+0x1068/0x1400 [ 937.304655][ C0] ? lock_chain_count+0x20/0x20 [ 937.309501][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 937.314552][ C0] do_group_exit+0x21b/0x2d0 [ 937.319591][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 937.324792][ C0] get_signal+0x12fc/0x1400 [ 937.329320][ C0] arch_do_signal_or_restart+0x96/0x780 [ 937.334871][ C0] ? kmem_cache_free+0xf8/0x280 [ 937.339720][ C0] ? get_sigframe_size+0x20/0x20 [ 937.344667][ C0] ? sighand_ctor+0x50/0x50 [ 937.349224][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 937.354699][ C0] exit_to_user_mode_loop+0x70/0x110 [ 937.359987][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 937.365548][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 937.371007][ C0] do_syscall_64+0x61/0xb0 [ 937.375429][ C0] ? clear_bhb_loop+0x40/0x90 [ 937.380193][ C0] ? clear_bhb_loop+0x40/0x90 [ 937.384868][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.390767][ C0] RIP: 0033:0x7fb91e18e929 [ 937.395183][ C0] Code: Unable to access opcode bytes at 0x7fb91e18e8ff. [ 937.402193][ C0] RSP: 002b:00007fb91ef5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 937.410604][ C0] RAX: fffffffffffffffc RBX: 00007fb91e3b5fa0 RCX: 00007fb91e18e929 [ 937.418572][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 937.426539][ C0] RBP: 00007fb91e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 937.434504][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.442469][ C0] R13: 0000000000000000 R14: 00007fb91e3b5fa0 R15: 00007ffc1185b498 [ 937.450446][ C0] [ 937.453459][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 937.460726][ C0] CPU: 0 PID: 13766 Comm: syz.3.2403 Not tainted 6.6.94-syzkaller #0 [ 937.468783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 937.478831][ C0] Call Trace: [ 937.482118][ C0] [ 937.484956][ C0] dump_stack_lvl+0x16c/0x230 [ 937.489873][ C0] ? show_regs_print_info+0x20/0x20 [ 937.495074][ C0] ? load_image+0x3b0/0x3b0 [ 937.499584][ C0] panic+0x2c0/0x710 [ 937.503480][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 937.507997][ C0] __warn+0x2e0/0x470 [ 937.511973][ C0] ? usb_submit_urb+0xf95/0x1850 [ 937.516915][ C0] ? usb_submit_urb+0xf95/0x1850 [ 937.521850][ C0] report_bug+0x2be/0x4f0 [ 937.526182][ C0] ? usb_submit_urb+0xf95/0x1850 [ 937.531120][ C0] ? usb_submit_urb+0xf95/0x1850 [ 937.536055][ C0] ? usb_submit_urb+0xf97/0x1850 [ 937.540994][ C0] handle_bug+0xcf/0x120 [ 937.545245][ C0] exc_invalid_op+0x1a/0x50 [ 937.549748][ C0] asm_exc_invalid_op+0x1a/0x20 [ 937.554602][ C0] RIP: 0010:usb_submit_urb+0xf95/0x1850 [ 937.560149][ C0] Code: 04 00 00 eb 58 e8 7b fa 35 fb e9 1a f1 ff ff e8 71 fa 35 fb c6 05 9f c0 e4 07 01 48 c7 c7 80 b3 4a 8b 48 89 de e8 5b 5f 00 fb <0f> 0b e9 e5 f0 ff ff e8 4f fa 35 fb eb 11 e8 48 fa 35 fb bd 80 00 [ 937.579750][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 937.585813][ C0] RAX: 6923e538ba004600 RBX: ffff888025b09f00 RCX: 0000000000040000 [ 937.593780][ C0] RDX: ffffc90002111000 RSI: 000000000000634d RDI: 000000000000634e [ 937.601744][ C0] RBP: 000000000000000f R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 937.609711][ C0] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff1100315a70a [ 937.617677][ C0] R13: dffffc0000000000 R14: ffff888025b09f08 R15: 0000000000000820 [ 937.625657][ C0] ? _raw_spin_lock+0x40/0x40 [ 937.630340][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 937.635363][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 937.640565][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 937.645943][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 937.651323][ C0] dummy_timer+0x8a3/0x31b0 [ 937.655844][ C0] ? mark_lock+0x94/0x320 [ 937.660173][ C0] ? lock_chain_count+0x20/0x20 [ 937.665037][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 937.670936][ C0] ? dummy_free_streams+0x530/0x530 [ 937.676128][ C0] ? debug_object_deactivate+0x67/0x350 [ 937.681683][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 937.686881][ C0] ? dummy_free_streams+0x530/0x530 [ 937.692082][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 937.697187][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 937.703269][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 937.708379][ C0] handle_softirqs+0x280/0x820 [ 937.713140][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 937.717900][ C0] ? do_softirq+0x180/0x180 [ 937.722399][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 937.727599][ C0] __irq_exit_rcu+0xc7/0x190 [ 937.732271][ C0] ? irq_exit_rcu+0x20/0x20 [ 937.736774][ C0] irq_exit_rcu+0x9/0x20 [ 937.741007][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 937.746636][ C0] [ 937.749556][ C0] [ 937.752478][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 937.758542][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 937.764608][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 8c 17 c4 0c 48 89 de 5b e9 83 d6 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 20 24 7e 7e 65 8b 15 21 24 7e 7e 81 e2 00 01 ff 00 74 [ 937.784224][ C0] RSP: 0018:ffffc90004dbeee8 EFLAGS: 00000246 [ 937.790289][ C0] RAX: ffffffff813a9b13 RBX: ffffffff8ecbc39c RCX: 0000000000000003 [ 937.798252][ C0] RDX: ffffffff813a9a02 RSI: ffffffff8cb9e0e0 RDI: 0000000000000005 [ 937.806224][ C0] RBP: ffffc90004dbf078 R08: ffff88802f1c1e00 R09: 0000000000000008 [ 937.814188][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc90004dbf028 [ 937.822159][ C0] R13: dffffc0000000000 R14: 0000000000000005 R15: ffffffff8ecbc3a0 [ 937.830161][ C0] ? unwind_next_frame+0x853/0x2970 [ 937.835368][ C0] ? unwind_next_frame+0x742/0x2970 [ 937.840573][ C0] unwind_next_frame+0x853/0x2970 [ 937.845606][ C0] ? __unwind_start+0x2d2/0x7e0 [ 937.850464][ C0] __unwind_start+0x66a/0x7e0 [ 937.855147][ C0] ? stack_trace_save+0xe0/0xe0 [ 937.859994][ C0] arch_stack_walk+0xf8/0x190 [ 937.864667][ C0] ? __unwind_start+0x2d2/0x7e0 [ 937.869521][ C0] stack_trace_save+0x9c/0xe0 [ 937.874196][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 937.879309][ C0] ? mark_lock+0x94/0x320 [ 937.883642][ C0] save_stack+0xf7/0x1f0 [ 937.887883][ C0] ? __reset_page_owner+0x190/0x190 [ 937.893076][ C0] ? seqcount_lockdep_reader_access+0x103/0x180 [ 937.899322][ C0] ? get_page_from_freelist+0x6a8/0x19f0 [ 937.904948][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 937.909974][ C0] __set_page_owner+0x1d/0x60 [ 937.914648][ C0] post_alloc_hook+0x1cd/0x210 [ 937.919408][ C0] get_page_from_freelist+0x195c/0x19f0 [ 937.924960][ C0] ? __lock_acquire+0x1260/0x7c80 [ 937.929985][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 937.935355][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 937.940638][ C0] __alloc_pages+0x1e3/0x460 [ 937.945231][ C0] ? zone_statistics+0x170/0x170 [ 937.950170][ C0] ? alloc_pages+0x4dc/0x740 [ 937.955191][ C0] ? lock_chain_count+0x20/0x20 [ 937.960043][ C0] alloc_slab_page+0x5d/0x170 [ 937.964719][ C0] new_slab+0x87/0x2e0 [ 937.968784][ C0] ___slab_alloc+0xc6d/0x12f0 [ 937.973457][ C0] ? __alloc_skb+0x108/0x2c0 [ 937.978051][ C0] kmem_cache_alloc_node+0x1ea/0x330 [ 937.983329][ C0] ? __alloc_skb+0x108/0x2c0 [ 937.987917][ C0] __alloc_skb+0x108/0x2c0 [ 937.992332][ C0] alloc_uevent_skb+0x7d/0x230 [ 937.997102][ C0] kobject_uevent_net_broadcast+0x2e6/0x530 [ 938.003031][ C0] kobject_uevent_env+0x550/0x8c0 [ 938.008053][ C0] ? gadget_unbind_driver+0x302/0x420 [ 938.013426][ C0] ? gadget_bind_driver+0x750/0x750 [ 938.018629][ C0] device_release_driver_internal+0x468/0x7a0 [ 938.024700][ C0] driver_detach+0x1f3/0x2d0 [ 938.029290][ C0] bus_remove_driver+0x221/0x2f0 [ 938.034227][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 938.039947][ C0] raw_release+0xda/0x260 [ 938.044276][ C0] ? raw_open+0x520/0x520 [ 938.048599][ C0] __fput+0x234/0x970 [ 938.052583][ C0] task_work_run+0x1ce/0x250 [ 938.057177][ C0] ? task_work_cancel+0x240/0x240 [ 938.062223][ C0] do_exit+0x903/0x23c0 [ 938.066387][ C0] ? put_task_struct+0xc0/0xc0 [ 938.071154][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 938.077135][ C0] ? get_signal+0x1068/0x1400 [ 938.081814][ C0] ? lock_chain_count+0x20/0x20 [ 938.086749][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 938.091775][ C0] do_group_exit+0x21b/0x2d0 [ 938.096368][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 938.101561][ C0] get_signal+0x12fc/0x1400 [ 938.106083][ C0] arch_do_signal_or_restart+0x96/0x780 [ 938.111632][ C0] ? kmem_cache_free+0xf8/0x280 [ 938.116476][ C0] ? get_sigframe_size+0x20/0x20 [ 938.121419][ C0] ? sighand_ctor+0x50/0x50 [ 938.125916][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 938.131378][ C0] exit_to_user_mode_loop+0x70/0x110 [ 938.136662][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 938.142209][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 938.147663][ C0] do_syscall_64+0x61/0xb0 [ 938.152169][ C0] ? clear_bhb_loop+0x40/0x90 [ 938.156900][ C0] ? clear_bhb_loop+0x40/0x90 [ 938.161587][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.167488][ C0] RIP: 0033:0x7fb91e18e929 [ 938.171914][ C0] Code: Unable to access opcode bytes at 0x7fb91e18e8ff. [ 938.178929][ C0] RSP: 002b:00007fb91ef5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 938.187344][ C0] RAX: fffffffffffffffc RBX: 00007fb91e3b5fa0 RCX: 00007fb91e18e929 [ 938.195311][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 938.203275][ C0] RBP: 00007fb91e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 938.211237][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.219204][ C0] R13: 0000000000000000 R14: 00007fb91e3b5fa0 R15: 00007ffc1185b498 [ 938.227185][ C0] [ 938.230426][ C0] Kernel Offset: disabled [ 938.234817][ C0] Rebooting in 86400 seconds..