last executing test programs: 5m7.663676966s ago: executing program 3 (id=4): io_uring_setup(0x664, &(0x7f0000000300)={0x0, 0x8dd3, 0x1, 0x2, 0x29d}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x22800, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m50.921414901s ago: executing program 32 (id=4): io_uring_setup(0x664, &(0x7f0000000300)={0x0, 0x8dd3, 0x1, 0x2, 0x29d}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x22800, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m46.323645125s ago: executing program 0 (id=546): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket(0xa, 0x5, 0x0) dup(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000001) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 1m44.463644231s ago: executing program 2 (id=552): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0xc) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000006540)={0x2020}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008580)={{{@in=@private, @in=@local}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000008680)=0xe4) stat(&(0x7f00000086c0)='./file0\x00', &(0x7f0000008700)) eventfd(0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000009c40), 0x10000, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r5, 0x12, 0xd, 0x0, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) 1m43.44038695s ago: executing program 2 (id=555): socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) epoll_create(0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m42.971970414s ago: executing program 0 (id=558): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x71, 0x5}, {0x6, 0x24, 0x1a, 0x402, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xe, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 1m42.942078731s ago: executing program 2 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free_batched\x00', r0, 0x0, 0x3ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m41.823271324s ago: executing program 2 (id=562): unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000851) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x8, 0x3, 0x1ff, 0x3d, 0x1, 0x3, 0x0, 0x202, 0x1, 0xc}) 1m41.074865163s ago: executing program 0 (id=563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="50000000090601420000000000000000010000030900020073797a31000000000500010007000000280007800c000180080001407f0100010c00148008000140ac1414100c00028008000140"], 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d577c621506}, 0x44) syz_open_dev$vim2m(&(0x7f0000000280), 0x200001, 0x2) 1m40.017569862s ago: executing program 0 (id=566): socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x82}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, 0x0) epoll_create1(0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 1m36.745998718s ago: executing program 0 (id=570): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xfdea) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1m36.616056303s ago: executing program 2 (id=572): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 1m35.502296965s ago: executing program 2 (id=573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TIOCSTI(r0, 0x5412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r6, 0x25, 0x0, @val=@tcx}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r9, 0x4, r5}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1m34.997771035s ago: executing program 0 (id=575): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010001000"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100677470000400028008003a004ab1fed72417a4c95cc02365dac3b4e6a713398403fd19cf16e1b5e8244eb4cdbd9c4e66efa64e5fa4d262c7852bf6a285d27e36a6a5c79ff26c9c8f10b3bb9a93ceec6a7bbe49f6d837ff5f9de50326462bddfccf5d3c3e0eef397b2313c719e4e8a0eeb5bfd596eef82fa7af9ddc6967d6c7c65b110bd9aabdb8e2b081bdc772ccf002ca531cfbe97abd93afa2ef3281ef6c3c9ef78ec8806a05e13e17d02f86a0f53fe97b1b386d6595362ec02e58cdc70ef832ebb5b79c1d21d2344b4b3e330aef0c", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0xac, 0x40, 0x2, 0x70bd26, 0x25dfdbfc, {0x3}, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@loopback}, @generic="13eb98c523a715deacd889ba4a836a7ce84031cac5cbcb829de041a560b8b09b7b707e3a6d3a63a691c8ea774ae5389fc19c31e90c5664ae1f1ee3f9cb3ba3acacd206efa5506ae9e8b3ce7223359cef62855f497462b3e038cba6792db8e886c0bf5f5ba80bbe05dd58d734f8703567f4f5df23f8493b3f39360e8d6785da8bce67"]}, 0xac}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xfff1}, {0x9}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000002f00)={0x0, 0x0, r4}) 1m19.622935923s ago: executing program 33 (id=573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TIOCSTI(r0, 0x5412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r6, 0x25, 0x0, @val=@tcx}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r9, 0x4, r5}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1m19.567656202s ago: executing program 34 (id=575): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010001000"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100677470000400028008003a004ab1fed72417a4c95cc02365dac3b4e6a713398403fd19cf16e1b5e8244eb4cdbd9c4e66efa64e5fa4d262c7852bf6a285d27e36a6a5c79ff26c9c8f10b3bb9a93ceec6a7bbe49f6d837ff5f9de50326462bddfccf5d3c3e0eef397b2313c719e4e8a0eeb5bfd596eef82fa7af9ddc6967d6c7c65b110bd9aabdb8e2b081bdc772ccf002ca531cfbe97abd93afa2ef3281ef6c3c9ef78ec8806a05e13e17d02f86a0f53fe97b1b386d6595362ec02e58cdc70ef832ebb5b79c1d21d2344b4b3e330aef0c", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0xac, 0x40, 0x2, 0x70bd26, 0x25dfdbfc, {0x3}, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@loopback}, @generic="13eb98c523a715deacd889ba4a836a7ce84031cac5cbcb829de041a560b8b09b7b707e3a6d3a63a691c8ea774ae5389fc19c31e90c5664ae1f1ee3f9cb3ba3acacd206efa5506ae9e8b3ce7223359cef62855f497462b3e038cba6792db8e886c0bf5f5ba80bbe05dd58d734f8703567f4f5df23f8493b3f39360e8d6785da8bce67"]}, 0xac}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xfff1}, {0x9}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000002f00)={0x0, 0x0, r4}) 14.800897618s ago: executing program 5 (id=697): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0xb9) 11.074219317s ago: executing program 5 (id=702): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 11.072289318s ago: executing program 4 (id=703): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="a84eff9c2f5f9c32dcc2625e6a886b64", 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000300)={0x1f, @any, 0x6}, 0xa) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = io_uring_setup(0x4863, &(0x7f0000000280)={0x0, 0x3999, 0x1, 0x0, 0x2e7, 0x0, r1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) r4 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r4, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 10.923602083s ago: executing program 4 (id=704): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xfdea) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20040005) 10.797309093s ago: executing program 5 (id=705): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = dup(0xffffffffffffffff) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r5 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 9.8376131s ago: executing program 1 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x3ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9.44111562s ago: executing program 4 (id=707): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000003480)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x1000002, 0xad, &(0x7f0000000900)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$uhid(0xffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1bc) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="8908617d3ca9c65cf7fd64095e2994d0", 0x10}], 0x2, &(0x7f0000000140)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r4, 0x0, 0x6}, 0x18) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 8.824846608s ago: executing program 4 (id=708): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = dup(r2) r5 = openat$ocfs2_control(0xffffff9c, 0x0, 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r6 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) 7.865485313s ago: executing program 1 (id=709): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 6.860754112s ago: executing program 1 (id=710): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0xb9) 3.500031708s ago: executing program 1 (id=711): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041d0506c800070658149cb641d3a6"], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, r3}}, 0x48) 212.958414ms ago: executing program 1 (id=712): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) read$char_usb(r0, 0x0, 0x0) 204.419732ms ago: executing program 4 (id=713): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r0 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 198.412744ms ago: executing program 5 (id=714): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1, 0x0, 0xe}, 0x18) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 104.561673ms ago: executing program 1 (id=715): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xfdea) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20040005) 80.108141ms ago: executing program 5 (id=716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000003480)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x1000002, 0xad, &(0x7f0000000900)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$uhid(0xffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1bc) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="8908617d3ca9c65cf7fd64095e2994d0", 0x10}], 0x2, &(0x7f0000000140)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 76.648165ms ago: executing program 4 (id=717): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x2255, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x50, 0xffffffffffffffff, 0x505ec000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_open_dev$audion(&(0x7f0000000100), 0xc, 0x612000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="102000003e0007012ebd700000000000017c000004004280100001800c00060006"], 0x2010}, 0x1, 0x0, 0x0, 0x4048011}, 0xc084) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x4000) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/95) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1b3801) 0s ago: executing program 5 (id=718): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') kernel console output (not intermixed with test programs): netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.316598][ T5805] Bluetooth: hci3: command tx timeout [ 86.316613][ T5810] Bluetooth: hci1: command tx timeout [ 86.316649][ T5811] Bluetooth: hci2: command tx timeout [ 86.353320][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.396519][ T5811] Bluetooth: hci0: command tx timeout [ 86.413217][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.476492][ T5811] Bluetooth: hci4: command tx timeout [ 86.553908][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.604195][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.644631][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.695802][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.793201][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.822417][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.871932][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.903843][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.945341][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.014306][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.053409][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.054454][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.094746][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.094877][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.135639][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.219771][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.223462][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.263535][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.263699][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.311567][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311660][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.338426][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.381829][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.397517][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.397612][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.421905][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.424237][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.502235][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.572248][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.577082][ T1550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.584239][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.629838][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.630038][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.705255][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.753599][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.754418][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.795675][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.801173][ T1501] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.801365][ T1501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.102423][ T5814] veth0_vlan: entered promiscuous mode [ 88.132967][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.163578][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.198344][ T5814] veth1_vlan: entered promiscuous mode [ 88.361816][ T5814] veth0_macvtap: entered promiscuous mode [ 88.392301][ T5814] veth1_macvtap: entered promiscuous mode [ 88.456211][ T5802] veth0_vlan: entered promiscuous mode [ 88.493572][ T5802] veth1_vlan: entered promiscuous mode [ 88.515061][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.523807][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.560974][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.607322][ T2229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613906][ T2229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.618853][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.629672][ T2229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.635250][ T2229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.766282][ T5802] veth0_macvtap: entered promiscuous mode [ 88.855338][ T5802] veth1_macvtap: entered promiscuous mode [ 89.012080][ T5801] veth0_vlan: entered promiscuous mode [ 89.043594][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.053284][ T1501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.053311][ T1501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.104178][ T5801] veth1_vlan: entered promiscuous mode [ 89.114450][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.140128][ T5815] veth0_vlan: entered promiscuous mode [ 89.165892][ T5808] veth0_vlan: entered promiscuous mode [ 89.173199][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.173217][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.174185][ T3524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.184361][ T2229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.211532][ T2229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216603][ T2229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.237405][ T5815] veth1_vlan: entered promiscuous mode [ 89.247330][ T5808] veth1_vlan: entered promiscuous mode [ 89.505417][ T5801] veth0_macvtap: entered promiscuous mode [ 89.563557][ T5801] veth1_macvtap: entered promiscuous mode [ 89.635155][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.635175][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.637379][ T5808] veth0_macvtap: entered promiscuous mode [ 89.644819][ T5815] veth0_macvtap: entered promiscuous mode [ 89.705343][ T5808] veth1_macvtap: entered promiscuous mode [ 89.718581][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.719181][ T5815] veth1_macvtap: entered promiscuous mode [ 89.778530][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.780228][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780246][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.845139][ T2229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846162][ T2229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.866130][ T2229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870916][ T2229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.881017][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.896033][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.923669][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.940405][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.992063][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.019556][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.069690][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.075752][ T1129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.091554][ T1129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096073][ T1129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099723][ T1129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.164397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.164465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.506809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.166382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.166415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.266388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.266417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.716356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.916369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.107844][ T1129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.106215][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.161791][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.190621][ T5934] sit0: entered promiscuous mode [ 93.190646][ T5934] sit0: entered allmulticast mode [ 93.472749][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.472770][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.745230][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.745251][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.872061][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.872075][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.967880][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.967902][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.087771][ T1441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.087793][ T1441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.560158][ T5949] SQUASHFS error: Failed to read block 0x0: -5 [ 94.823440][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.823463][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.794942][ T5966] overlayfs: missing 'lowerdir' [ 96.296839][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.870287][ T5979] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 97.643162][ T5979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.239300][ T37] audit: type=1326 audit(1768525489.175:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6948aef749 code=0x0 [ 99.249410][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 99.578204][ T6012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 99.578232][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.582939][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 99.913730][ T6017] overlayfs: missing 'lowerdir' [ 100.007586][ T37] audit: type=1804 audit(1768525490.935:3): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.26" name="/newroot/7/bus/bus" dev="tmpfs" ino=61 res=1 errno=0 [ 100.058826][ T1239] usb 34-1: SetAddress Request (2) to port 0 [ 100.058907][ T1239] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.141563][ T6013] vhci_hcd: connection reset by peer [ 100.144570][ T59] vhci_hcd vhci_hcd.0: stop threads [ 100.145071][ T59] vhci_hcd vhci_hcd.0: release socket [ 100.145223][ T59] vhci_hcd vhci_hcd.0: disconnect device [ 101.540156][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 101.629713][ T6026] Zero length message leads to an empty skb [ 101.649839][ T6026] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 103.113756][ T37] audit: type=1326 audit(1768525494.075:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.113807][ T37] audit: type=1326 audit(1768525494.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.117530][ T37] audit: type=1326 audit(1768525494.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.117577][ T37] audit: type=1326 audit(1768525494.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.117612][ T37] audit: type=1326 audit(1768525494.075:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.117679][ T37] audit: type=1326 audit(1768525494.075:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.117718][ T37] audit: type=1326 audit(1768525494.075:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.253205][ T6046] pim6reg: entered allmulticast mode [ 103.260493][ T37] audit: type=1326 audit(1768525494.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260540][ T37] audit: type=1326 audit(1768525494.165:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260578][ T37] audit: type=1326 audit(1768525494.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260613][ T37] audit: type=1326 audit(1768525494.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260650][ T37] audit: type=1326 audit(1768525494.205:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260686][ T37] audit: type=1326 audit(1768525494.215:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260723][ T37] audit: type=1326 audit(1768525494.215:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260759][ T37] audit: type=1326 audit(1768525494.215:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260795][ T37] audit: type=1326 audit(1768525494.215:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.260831][ T37] audit: type=1326 audit(1768525494.225:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 103.854240][ T6058] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 104.766083][ T6061] overlayfs: missing 'lowerdir' [ 105.160375][ T1239] usb 34-1: device descriptor read/8, error -110 [ 106.466776][ T1239] usb usb34-port1: attempt power cycle [ 107.539526][ T1239] usb usb34-port1: unable to enumerate USB device [ 110.770413][ T5853] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.605508][ T6097] orangefs_mount: mount request failed with -4 [ 111.606231][ T6098] syz.1.47 (6098) used greatest stack depth: 18384 bytes left [ 112.117192][ T6108] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.078674][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.081047][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.103736][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.119239][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.119900][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.402142][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 114.402156][ T37] audit: type=1326 audit(1768525505.325:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402201][ T37] audit: type=1326 audit(1768525505.325:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402223][ T37] audit: type=1326 audit(1768525505.325:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402245][ T37] audit: type=1326 audit(1768525505.325:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402265][ T37] audit: type=1326 audit(1768525505.325:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402288][ T37] audit: type=1326 audit(1768525505.335:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402309][ T37] audit: type=1326 audit(1768525505.335:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402330][ T37] audit: type=1326 audit(1768525505.335:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402351][ T37] audit: type=1326 audit(1768525505.335:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.402372][ T37] audit: type=1326 audit(1768525505.335:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 114.944744][ T6127] pim6reg: entered allmulticast mode [ 115.027704][ T6129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.033335][ T6129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 115.558025][ T1082] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.764318][ T1082] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.764380][ T1082] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.764406][ T1082] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.764419][ T1082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.978679][ T1082] usbtmc 2-1:16.0: bulk endpoints not found [ 116.156535][ T5811] Bluetooth: hci5: command tx timeout [ 116.287594][ T6145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 116.287622][ T6145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.289328][ T6145] vhci_hcd vhci_hcd.0: Device attached [ 116.687681][ T10] usb 38-1: SetAddress Request (2) to port 0 [ 116.687735][ T10] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.751981][ T6122] chnl_net:caif_netlink_parms(): no params data found [ 116.823654][ T6146] vhci_hcd: connection reset by peer [ 116.838336][ T2229] vhci_hcd vhci_hcd.2: stop threads [ 116.838363][ T2229] vhci_hcd vhci_hcd.2: release socket [ 116.865649][ T2229] vhci_hcd vhci_hcd.2: disconnect device [ 117.213400][ T6153] netlink: 'syz.4.59': attribute type 6 has an invalid length. [ 118.236578][ T5811] Bluetooth: hci5: command tx timeout [ 118.297710][ T1082] usb 2-1: USB disconnect, device number 2 [ 118.548949][ T6161] orangefs_mount: mount request failed with -4 [ 118.672000][ T2229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.805002][ T6165] warning: `syz.0.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.949876][ T6181] cgroup: fork rejected by pids controller in /syz4 [ 120.164406][ T6180] orangefs_mount: mount request failed with -4 [ 120.316436][ T5811] Bluetooth: hci5: command tx timeout [ 120.801062][ T6172] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 121.293872][ T2229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.725463][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 121.725483][ T37] audit: type=1326 audit(1768525512.665:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 121.725531][ T37] audit: type=1326 audit(1768525512.665:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 121.762090][ T10] usb 38-1: device descriptor read/8, error -110 [ 122.031154][ T37] audit: type=1326 audit(1768525512.995:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 122.031201][ T37] audit: type=1326 audit(1768525512.995:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 122.100106][ T37] audit: type=1326 audit(1768525513.065:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 122.191419][ T10] usb usb38-port1: attempt power cycle [ 122.293520][ T6713] pim6reg: entered allmulticast mode [ 122.336396][ T37] audit: type=1326 audit(1768525513.255:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 122.336458][ T37] audit: type=1326 audit(1768525513.265:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6324 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 122.396598][ T5811] Bluetooth: hci5: command tx timeout [ 122.757410][ T10] usb usb38-port1: unable to enumerate USB device [ 122.774476][ T2229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.878110][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.882523][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.882697][ T6122] bridge_slave_0: entered allmulticast mode [ 122.884380][ T6122] bridge_slave_0: entered promiscuous mode [ 123.018251][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.018320][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.018482][ T6122] bridge_slave_1: entered allmulticast mode [ 123.081392][ T6122] bridge_slave_1: entered promiscuous mode [ 123.513132][ T2229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.805016][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.835018][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.170758][ T6731] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 126.662034][ T6737] orangefs_mount: mount request failed with -4 [ 128.014049][ T6122] team0: Port device team_slave_0 added [ 128.032229][ T6122] team0: Port device team_slave_1 added [ 128.073849][ T6755] overlayfs: missing 'workdir' [ 128.106680][ T37] audit: type=1804 audit(1768525519.065:66): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.84" name="/newroot/20/bus/bus" dev="tmpfs" ino=125 res=1 errno=0 [ 128.594806][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.594822][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.594844][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.764900][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.764912][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.764927][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.399477][ T37] audit: type=1326 audit(1768525520.305:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399510][ T37] audit: type=1326 audit(1768525520.305:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399531][ T37] audit: type=1326 audit(1768525520.315:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399552][ T37] audit: type=1326 audit(1768525520.315:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399573][ T37] audit: type=1326 audit(1768525520.315:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399593][ T37] audit: type=1326 audit(1768525520.315:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399614][ T37] audit: type=1326 audit(1768525520.315:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399634][ T37] audit: type=1326 audit(1768525520.315:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.399655][ T37] audit: type=1326 audit(1768525520.315:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 129.651774][ T2229] bridge_slave_1: left allmulticast mode [ 129.651943][ T2229] bridge_slave_1: left promiscuous mode [ 129.689323][ T2229] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.874440][ T6789] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 129.874468][ T6789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.875533][ T6789] vhci_hcd vhci_hcd.0: Device attached [ 130.109680][ T2229] bridge_slave_0: left allmulticast mode [ 130.109700][ T2229] bridge_slave_0: left promiscuous mode [ 130.109897][ T2229] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.186428][ T6790] vhci_hcd: connection closed [ 130.209330][ T3482] vhci_hcd vhci_hcd.4: stop threads [ 130.209347][ T3482] vhci_hcd vhci_hcd.4: release socket [ 130.211361][ T3482] vhci_hcd vhci_hcd.4: disconnect device [ 132.894524][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894582][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.438912][ T2229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.656919][ T2229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.447447][ T2229] bond0 (unregistering): Released all slaves [ 134.932811][ T6122] hsr_slave_0: entered promiscuous mode [ 134.933551][ T6122] hsr_slave_1: entered promiscuous mode [ 134.934029][ T6122] debugfs: 'hsr0' already exists in 'hsr' [ 134.934043][ T6122] Cannot create hsr debugfs directory [ 138.670274][ T6864] trusted_key: encrypted_key: insufficient parameters specified [ 138.678193][ T6864] tmpfs: Unknown parameter 'S' [ 140.266553][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 140.266571][ T37] audit: type=1326 audit(1768525531.215:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266613][ T37] audit: type=1326 audit(1768525531.215:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266650][ T37] audit: type=1326 audit(1768525531.215:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266683][ T37] audit: type=1326 audit(1768525531.215:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266716][ T37] audit: type=1326 audit(1768525531.215:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266751][ T37] audit: type=1326 audit(1768525531.215:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266785][ T37] audit: type=1326 audit(1768525531.215:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266823][ T37] audit: type=1326 audit(1768525531.215:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266861][ T37] audit: type=1326 audit(1768525531.215:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 140.266900][ T37] audit: type=1326 audit(1768525531.225:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6887 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c601adf90 code=0x7ffc0000 [ 140.291663][ T2229] hsr_slave_0: left promiscuous mode [ 140.605244][ T2229] hsr_slave_1: left promiscuous mode [ 140.621771][ T2229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.621870][ T2229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.660889][ T2229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.660916][ T2229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.015708][ T2229] veth1_macvtap: left promiscuous mode [ 141.016000][ T2229] veth0_macvtap: left promiscuous mode [ 141.016292][ T2229] veth1_vlan: left promiscuous mode [ 141.044876][ T2229] veth0_vlan: left promiscuous mode [ 144.788082][ T2229] team0 (unregistering): Port device team_slave_1 removed [ 144.998539][ T2229] team0 (unregistering): Port device team_slave_0 removed [ 147.268973][ T6890] pim6reg: entered allmulticast mode [ 148.173357][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 148.173374][ T37] audit: type=1326 audit(1768525538.935:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173410][ T37] audit: type=1326 audit(1768525538.945:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173445][ T37] audit: type=1326 audit(1768525538.945:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173478][ T37] audit: type=1326 audit(1768525538.965:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173507][ T37] audit: type=1326 audit(1768525538.965:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173536][ T37] audit: type=1326 audit(1768525538.975:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173566][ T37] audit: type=1326 audit(1768525538.975:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173597][ T37] audit: type=1326 audit(1768525538.985:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 148.173629][ T37] audit: type=1326 audit(1768525538.985:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e57fdf90 code=0x7ffc0000 [ 148.173662][ T37] audit: type=1326 audit(1768525539.015:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd4e5800f77 code=0x7ffc0000 [ 148.930140][ T6933] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.760684][ T6122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.657826][ T6122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.752065][ T6122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.838728][ T6122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.567307][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.672833][ T6993] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.808079][ T6122] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.818353][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.818503][ T2161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.844437][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.844554][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.197934][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 155.197954][ T37] audit: type=1326 audit(1768525545.805:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 155.197997][ T37] audit: type=1326 audit(1768525545.805:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 159.294502][ T7032] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 159.490271][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.006456][ T6103] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 160.076072][ T7052] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 160.220114][ T6103] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.220176][ T6103] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.220199][ T6103] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.220239][ T6103] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.220282][ T6103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.979214][ T6103] usbtmc 3-1:16.0: bulk endpoints not found [ 161.223436][ T7063] vivid-007: disconnect [ 161.259317][ T7063] netlink: 168 bytes leftover after parsing attributes in process `syz.1.154'. [ 161.699905][ T7073] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 161.721708][ T7074] overlayfs: failed to resolve './file1': -2 [ 161.956762][ T7056] vivid-007: reconnect [ 161.984524][ T6122] veth0_vlan: entered promiscuous mode [ 165.017852][ T7090] cgroup: fork rejected by pids controller in /syz0 [ 166.502372][ T6122] veth1_vlan: entered promiscuous mode [ 166.732090][ T5880] usb 3-1: USB disconnect, device number 2 [ 166.794206][ T6122] veth0_macvtap: entered promiscuous mode [ 166.908469][ T6122] veth1_macvtap: entered promiscuous mode [ 167.070152][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.228889][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.255501][ T5968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.256172][ T5968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.256210][ T5968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.256245][ T5968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.123890][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.123904][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.193883][ T8123] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 168.414972][ T2229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.414993][ T2229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.030383][ T8159] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 170.290619][ T8151] 9pnet_virtio: no channels available for device syz [ 170.295807][ T8151] SQUASHFS error: Failed to read block 0x0: -5 [ 170.706517][ T5973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.076525][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 171.080733][ T5973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.080756][ T5973] usb 1-1: config 0 has no interfaces? [ 171.130933][ T5973] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 171.130961][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.130981][ T5973] usb 1-1: Product: syz [ 171.130994][ T5973] usb 1-1: Manufacturer: syz [ 171.131007][ T5973] usb 1-1: SerialNumber: syz [ 171.177043][ T5973] usb 1-1: config 0 descriptor?? [ 173.599002][ T8198] 9pnet_virtio: no channels available for device syz [ 173.602004][ T8198] SQUASHFS error: Failed to read block 0x0: -5 [ 173.863676][ T6747] usb 1-1: USB disconnect, device number 3 [ 174.029147][ T8199] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.866942][ T8243] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 179.228647][ T8268] vivid-007: disconnect [ 179.237853][ T8267] vivid-007: reconnect [ 179.597332][ T8280] udevd[8280]: failed to send result of seq 12043 to main daemon: Connection refused [ 181.636814][ T8293] 9pnet_virtio: no channels available for device syz [ 181.641366][ T8293] SQUASHFS error: Failed to read block 0x0: -5 [ 181.949691][ T37] audit: type=1326 audit(1768525572.885:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 181.949902][ T37] audit: type=1326 audit(1768525572.885:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 181.994823][ T37] audit: type=1326 audit(1768525572.955:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 181.994923][ T37] audit: type=1326 audit(1768525572.955:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.109489][ T37] audit: type=1326 audit(1768525573.055:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.148157][ T37] audit: type=1326 audit(1768525573.075:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.148248][ T37] audit: type=1326 audit(1768525573.075:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.148397][ T37] audit: type=1326 audit(1768525573.085:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.148470][ T37] audit: type=1326 audit(1768525573.085:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.148509][ T37] audit: type=1326 audit(1768525573.085:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 182.193792][ T8289] IPv6: sit1: Disabled Multicast RS [ 183.084671][ T8302] tipc: Started in network mode [ 183.084707][ T8302] tipc: Node identity f2ae7215135d, cluster identity 4711 [ 183.085397][ T8302] tipc: Enabled bearer , priority 0 [ 183.424558][ T8297] tipc: Disabling bearer [ 185.574939][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.966977][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 185.967023][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 186.396615][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.396674][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.396724][ T9] usb 5-1: Product: syz [ 186.396772][ T9] usb 5-1: Manufacturer: syz [ 186.396786][ T9] usb 5-1: SerialNumber: syz [ 187.109514][ T8326] 9pnet_virtio: no channels available for device syz [ 187.115081][ T8326] SQUASHFS error: Failed to read block 0x0: -5 [ 188.132870][ T9] cdc_ncm 5-1:1.0: bind() failure [ 188.152762][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 188.152811][ T9] cdc_ncm 5-1:1.1: bind() failure [ 188.174352][ T9] usb 5-1: USB disconnect, device number 2 [ 188.864000][ T8351] tipc: Enabled bearer , priority 0 [ 189.449573][ T8341] tipc: Disabling bearer [ 189.575914][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 189.575931][ T37] audit: type=1326 audit(1768525580.525:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.575972][ T37] audit: type=1326 audit(1768525580.535:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.576240][ T37] audit: type=1326 audit(1768525580.535:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.576278][ T37] audit: type=1326 audit(1768525580.535:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.580026][ T37] audit: type=1326 audit(1768525580.535:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e57fdf90 code=0x7ffc0000 [ 189.580119][ T37] audit: type=1326 audit(1768525580.535:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.580238][ T37] audit: type=1326 audit(1768525580.535:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.580358][ T37] audit: type=1326 audit(1768525580.535:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.580473][ T37] audit: type=1326 audit(1768525580.535:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 189.580594][ T37] audit: type=1326 audit(1768525580.535:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 190.011498][ T8359] IPv6: sit1: Disabled Multicast RS [ 190.036019][ T5974] tipc: Node number set to 3790828053 [ 193.464634][ T8371] 9pnet_virtio: no channels available for device syz [ 193.542153][ T8371] SQUASHFS error: Failed to read block 0x0: -5 [ 194.226455][ T5974] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 194.340030][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340078][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.478683][ T5974] usb 3-1: Using ep0 maxpacket: 8 [ 194.596539][ T5974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.596569][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.596594][ T5974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.596617][ T5974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.596657][ T5974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.596679][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.877767][ T5974] usb 3-1: GET_CAPABILITIES returned 0 [ 194.877855][ T5974] usbtmc 3-1:16.0: can't read capabilities [ 195.447005][ T5974] usb 3-1: USB disconnect, device number 3 [ 197.715206][ T8394] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.030028][ T8403] tipc: Started in network mode [ 199.030135][ T8403] tipc: Node identity fe13a638ae46, cluster identity 4711 [ 199.041576][ T8403] tipc: Enabled bearer , priority 0 [ 200.026985][ T56] tipc: Node number set to 1347790392 [ 201.112433][ T8420] 9pnet_virtio: no channels available for device syz [ 201.189567][ T8420] SQUASHFS error: Failed to read block 0x0: -5 [ 201.544802][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 201.581498][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 201.581847][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 202.027401][ T8399] tipc: Disabling bearer [ 204.416231][ T8441] Bluetooth: MGMT ver 1.23 [ 205.080093][ T8462] 9pnet_virtio: no channels available for device syz [ 205.167170][ T8462] SQUASHFS error: Failed to read block 0x0: -5 [ 205.865178][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 206.689088][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 206.689104][ T37] audit: type=1326 audit(1768525597.635:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689151][ T37] audit: type=1326 audit(1768525597.635:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689189][ T37] audit: type=1326 audit(1768525597.635:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689225][ T37] audit: type=1326 audit(1768525597.635:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689262][ T37] audit: type=1326 audit(1768525597.635:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14fc41df90 code=0x7ffc0000 [ 206.689293][ T37] audit: type=1326 audit(1768525597.635:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689324][ T37] audit: type=1326 audit(1768525597.635:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689352][ T37] audit: type=1326 audit(1768525597.645:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689380][ T37] audit: type=1326 audit(1768525597.645:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 206.689408][ T37] audit: type=1326 audit(1768525597.645:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 212.157336][ T5973] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 212.860217][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.860248][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.860299][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.860322][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.122810][ T5973] usb 5-1: usb_control_msg returned -32 [ 213.122860][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 213.845857][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 213.845874][ T37] audit: type=1326 audit(1768525604.805:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.849930][ T37] audit: type=1326 audit(1768525604.815:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.853937][ T37] audit: type=1326 audit(1768525604.815:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.853978][ T37] audit: type=1326 audit(1768525604.815:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.854012][ T37] audit: type=1326 audit(1768525604.815:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.854056][ T37] audit: type=1326 audit(1768525604.815:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e57fdf90 code=0x7ffc0000 [ 213.854093][ T37] audit: type=1326 audit(1768525604.815:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.854132][ T37] audit: type=1326 audit(1768525604.815:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.854167][ T37] audit: type=1326 audit(1768525604.815:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 213.854202][ T37] audit: type=1326 audit(1768525604.815:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 215.526693][ T5989] usb 5-1: USB disconnect, device number 3 [ 216.887510][ T8557] tipc: Enabled bearer , priority 0 [ 217.911394][ T8552] tipc: Disabling bearer [ 218.688091][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 219.581457][ T8573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 219.581566][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.584140][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 219.739816][ T8576] vhci_hcd: connection closed [ 219.743259][ T8276] vhci_hcd vhci_hcd.2: stop threads [ 219.743314][ T8276] vhci_hcd vhci_hcd.2: release socket [ 219.744112][ T8276] vhci_hcd vhci_hcd.2: disconnect device [ 220.976611][ T5973] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 221.150632][ T5973] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.150698][ T5973] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.150816][ T5973] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.150841][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.927383][ T5973] usb 6-1: usb_control_msg returned -32 [ 221.927429][ T5973] usbtmc 6-1:16.0: can't read capabilities [ 223.846891][ T6005] usb 6-1: USB disconnect, device number 2 [ 224.358459][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.320'. [ 224.876373][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 224.876392][ T37] audit: type=1326 audit(1768525615.815:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876438][ T37] audit: type=1326 audit(1768525615.815:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876474][ T37] audit: type=1326 audit(1768525615.815:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876512][ T37] audit: type=1326 audit(1768525615.815:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42c0c8df90 code=0x7ffc0000 [ 224.876550][ T37] audit: type=1326 audit(1768525615.815:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876588][ T37] audit: type=1326 audit(1768525615.815:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876626][ T37] audit: type=1326 audit(1768525615.815:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876725][ T37] audit: type=1326 audit(1768525615.815:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876764][ T37] audit: type=1326 audit(1768525615.815:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 224.876802][ T37] audit: type=1326 audit(1768525615.815:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 225.061483][ T8613] IPv6: sit1: Disabled Multicast RS [ 227.549787][ T8642] tipc: Enabled bearer , priority 0 [ 227.890515][ T5123] Bluetooth: hci5: Malformed LE Event: 0x0d [ 227.981148][ T8652] qnx6: unable to read the first superblock [ 227.988595][ T5974] IPVS: starting estimator thread 0... [ 228.125260][ T8653] IPVS: using max 8 ests per chain, 19200 per kthread [ 230.895932][ T8636] tipc: Disabling bearer [ 231.866510][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 231.951552][ T8674] overlayfs: missing 'lowerdir' [ 233.276489][ T5989] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.426484][ T5989] usb 1-1: Using ep0 maxpacket: 8 [ 233.428885][ T5989] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.428902][ T5989] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.428915][ T5989] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.428934][ T5989] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.428973][ T5989] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.428996][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.528375][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.349'. [ 233.673011][ T5989] usb 1-1: GET_CAPABILITIES returned 0 [ 233.673152][ T5989] usbtmc 1-1:16.0: can't read capabilities [ 234.328451][ T5989] usb 1-1: USB disconnect, device number 4 [ 235.608333][ T8722] hub 8-0:1.0: USB hub found [ 235.623646][ T8722] hub 8-0:1.0: 1 port detected [ 236.769002][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 237.063038][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.361'. [ 237.356499][ T5123] Bluetooth: hci5: command 0x0406 tx timeout [ 239.426116][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 239.496585][ T804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 240.713384][ T804] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.713418][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.713442][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.713463][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.713502][ T804] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.713525][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.911470][ T804] usb 2-1: config 0 descriptor?? [ 241.059484][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 241.059500][ T37] audit: type=1326 audit(1768525632.005:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059541][ T37] audit: type=1326 audit(1768525632.005:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059583][ T37] audit: type=1326 audit(1768525632.005:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059617][ T37] audit: type=1326 audit(1768525632.005:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059652][ T37] audit: type=1326 audit(1768525632.005:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059689][ T37] audit: type=1326 audit(1768525632.005:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059725][ T37] audit: type=1326 audit(1768525632.005:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059763][ T37] audit: type=1326 audit(1768525632.005:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.059800][ T37] audit: type=1326 audit(1768525632.005:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.060025][ T37] audit: type=1326 audit(1768525632.005:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8779 comm="syz.4.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 241.632681][ T804] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.934447][ T804] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 241.983870][ T804] usb 2-1: USB disconnect, device number 3 [ 245.278193][ T8833] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 245.313828][ T8833] cramfs: wrong magic [ 250.137042][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 250.137057][ T37] audit: type=1326 audit(1768525641.095:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137083][ T37] audit: type=1326 audit(1768525641.095:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137105][ T37] audit: type=1326 audit(1768525641.095:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137127][ T37] audit: type=1326 audit(1768525641.095:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137148][ T37] audit: type=1326 audit(1768525641.095:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137169][ T37] audit: type=1326 audit(1768525641.095:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137191][ T37] audit: type=1326 audit(1768525641.095:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137213][ T37] audit: type=1326 audit(1768525641.095:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137234][ T37] audit: type=1326 audit(1768525641.095:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.137255][ T37] audit: type=1326 audit(1768525641.095:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8857 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd4e57ff749 code=0x7ffc0000 [ 250.193578][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 253.604073][ T8879] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'. [ 253.921555][ T8891] 9pnet_virtio: no channels available for device syz [ 255.389809][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 256.657130][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.657267][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.448257][ T8923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.419'. [ 259.956143][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 265.702982][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 265.702999][ T37] audit: type=1326 audit(1768525656.485:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8949 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 265.712553][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 265.721669][ T37] audit: type=1326 audit(1768525656.675:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8949 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 265.756975][ T37] audit: type=1326 audit(1768525656.725:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8949 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 265.757290][ T37] audit: type=1326 audit(1768525656.725:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8949 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc41f749 code=0x7ffc0000 [ 266.666474][ T1239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.706608][ T8982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.439'. [ 267.025220][ T1239] usb 5-1: Using ep0 maxpacket: 8 [ 267.280836][ T1239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.280900][ T1239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.280955][ T1239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.281033][ T1239] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.281168][ T1239] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.281224][ T1239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.258749][ T1239] usb 5-1: GET_CAPABILITIES returned 0 [ 268.258861][ T1239] usbtmc 5-1:16.0: can't read capabilities [ 270.026238][ T1239] usb 5-1: USB disconnect, device number 4 [ 270.116177][ T8997] hpfs: hpfs_map_sector(): read error [ 271.624229][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 272.539045][ T1239] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 272.709494][ T1239] usb 1-1: Using ep0 maxpacket: 8 [ 272.714154][ T1239] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.714172][ T1239] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.714185][ T1239] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.714198][ T1239] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.714222][ T1239] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.714234][ T1239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.761540][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.461'. [ 272.933974][ T1239] usb 1-1: GET_CAPABILITIES returned 0 [ 272.934003][ T1239] usbtmc 1-1:16.0: can't read capabilities [ 273.140330][ T1239] usb 1-1: USB disconnect, device number 5 [ 273.424504][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.467'. [ 275.530333][ T1239] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 275.849895][ T1239] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 275.849933][ T1239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.903202][ T1239] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 275.903239][ T1239] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 275.903257][ T1239] usb 6-1: Manufacturer: syz [ 276.003193][ T1239] usb 6-1: config 0 descriptor?? [ 276.121333][ T9076] 9pnet_virtio: no channels available for device syz [ 276.157360][ T1239] rc_core: IR keymap rc-hauppauge not found [ 276.157374][ T1239] Registered IR keymap rc-empty [ 276.162397][ T1239] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 276.183256][ T1239] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 277.621593][ T5974] usb 6-1: USB disconnect, device number 3 [ 279.256880][ T5974] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.498881][ T5974] usb 6-1: Using ep0 maxpacket: 8 [ 279.713696][ T5974] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 279.713906][ T5974] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.714463][ T5974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.767992][ T5974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.768058][ T5974] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.768578][ T5974] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.768632][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.176529][ T5974] usb 6-1: usb_control_msg returned -32 [ 280.176560][ T5974] usbtmc 6-1:16.0: can't read capabilities [ 280.296576][ T9112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'. [ 280.318335][ T9113] 9pnet_virtio: no channels available for device syz [ 282.279823][ T5974] usb 6-1: USB disconnect, device number 4 [ 283.570587][ T9151] usb usb7: usbfs: process 9151 (syz.1.504) did not claim interface 0 before use [ 284.036449][ T6005] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.190076][ T6005] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.190110][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.190135][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.190158][ T6005] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.190200][ T6005] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.190222][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.264594][ T6005] usb 2-1: config 0 descriptor?? [ 284.702517][ T6005] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 284.757892][ T6005] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 284.973186][ T9171] netlink: 64 bytes leftover after parsing attributes in process `syz.2.511'. [ 285.023759][ T1239] usb 2-1: USB disconnect, device number 4 [ 287.654598][ T9186] ======================================================= [ 287.654598][ T9186] WARNING: The mand mount option has been deprecated and [ 287.654598][ T9186] and is ignored by this kernel. Remove the mand [ 287.654598][ T9186] option from the mount to silence this warning. [ 287.654598][ T9186] ======================================================= [ 288.175842][ T37] audit: type=1326 audit(1768525678.605:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.175895][ T37] audit: type=1326 audit(1768525678.605:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.175934][ T37] audit: type=1326 audit(1768525678.615:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.175972][ T37] audit: type=1326 audit(1768525678.625:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.176009][ T37] audit: type=1326 audit(1768525678.625:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.176044][ T37] audit: type=1326 audit(1768525678.635:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9179 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 288.219275][ T9187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.418795][ T9192] vivid-007: disconnect [ 288.525953][ T9181] vivid-007: reconnect [ 289.396570][ T6005] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 289.553220][ T6005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 289.553240][ T6005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 289.555180][ T6005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.555198][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.555215][ T6005] usb 2-1: Product: syz [ 289.555223][ T6005] usb 2-1: Manufacturer: syz [ 289.555230][ T6005] usb 2-1: SerialNumber: syz [ 292.825766][ T6005] cdc_ncm 2-1:1.0: bind() failure [ 292.843213][ T6005] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 292.843262][ T6005] cdc_ncm 2-1:1.1: bind() failure [ 292.871471][ T6005] usb 2-1: USB disconnect, device number 5 [ 293.021304][ T37] audit: type=1326 audit(1768525683.975:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.021339][ T37] audit: type=1326 audit(1768525683.975:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.021362][ T37] audit: type=1326 audit(1768525683.975:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.021383][ T37] audit: type=1326 audit(1768525683.985:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.355367][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 293.355385][ T37] audit: type=1326 audit(1768525684.315:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.355732][ T37] audit: type=1326 audit(1768525684.315:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 293.459111][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 293.848983][ T37] audit: type=1326 audit(1768525684.815:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 294.069684][ T9230] orangefs_mount: mount request failed with -4 [ 294.105150][ T9228] pim6reg: entered allmulticast mode [ 294.116550][ T37] audit: type=1326 audit(1768525685.065:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 294.116611][ T37] audit: type=1326 audit(1768525685.065:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99be8f749 code=0x7ffc0000 [ 294.627086][ T8546] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 294.788698][ T8546] usb 1-1: Using ep0 maxpacket: 8 [ 294.797661][ T8546] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.797689][ T8546] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.797721][ T8546] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.797744][ T8546] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.797785][ T8546] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.797807][ T8546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.556625][ T8546] usb 1-1: usb_control_msg returned -71 [ 295.556678][ T8546] usbtmc 1-1:16.0: can't read capabilities [ 295.632512][ T8546] usb 1-1: USB disconnect, device number 6 [ 295.706564][ T6005] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.876984][ T6005] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 295.877017][ T6005] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 295.920241][ T6005] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.920272][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.920292][ T6005] usb 5-1: Product: syz [ 295.920306][ T6005] usb 5-1: Manufacturer: syz [ 295.920320][ T6005] usb 5-1: SerialNumber: syz [ 296.169182][ T6005] cdc_ncm 5-1:1.0: bind() failure [ 296.187682][ T6005] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 296.187732][ T6005] cdc_ncm 5-1:1.1: bind() failure [ 296.238885][ T6005] usb 5-1: USB disconnect, device number 5 [ 296.858861][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 296.947089][ T9274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 296.947107][ T9274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.947250][ T9274] vhci_hcd vhci_hcd.0: Device attached [ 297.136619][ T9278] vhci_hcd: connection closed [ 297.182656][ T3524] vhci_hcd vhci_hcd.1: stop threads [ 297.182683][ T3524] vhci_hcd vhci_hcd.1: release socket [ 297.182717][ T3524] vhci_hcd vhci_hcd.1: disconnect device [ 299.866475][ T6005] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 299.950101][ T5989] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.032837][ T6005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.032867][ T6005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.032909][ T6005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.032932][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.132839][ T5989] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 300.132928][ T5989] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 300.142647][ T5989] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.142732][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.142752][ T5989] usb 1-1: Product: syz [ 300.142766][ T5989] usb 1-1: Manufacturer: syz [ 300.142780][ T5989] usb 1-1: SerialNumber: syz [ 300.303249][ T6005] usb 5-1: usb_control_msg returned -32 [ 300.303297][ T6005] usbtmc 5-1:16.0: can't read capabilities [ 300.401456][ T5989] cdc_ncm 1-1:1.0: bind() failure [ 300.498837][ T5989] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 300.498887][ T5989] cdc_ncm 1-1:1.1: bind() failure [ 300.556534][ T5989] usb 1-1: USB disconnect, device number 7 [ 300.565682][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 302.709606][ T6005] usb 5-1: USB disconnect, device number 6 [ 303.760776][ T9346] vivid-007: disconnect [ 303.815817][ T9339] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 303.815843][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.815933][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 304.181421][ T9347] vhci_hcd: connection closed [ 304.198999][ T1129] vhci_hcd vhci_hcd.5: stop threads [ 304.199097][ T1129] vhci_hcd vhci_hcd.5: release socket [ 304.199210][ T1129] vhci_hcd vhci_hcd.5: disconnect device [ 304.364418][ T9341] vivid-007: reconnect [ 305.496790][ T1239] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 305.717628][ T1239] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x43, changing to 0x3 [ 305.717661][ T1239] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x3 has invalid maxpacket 65, setting to 64 [ 305.717682][ T1239] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.725960][ T1239] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.725990][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 305.726006][ T1239] usb 5-1: Product: syz [ 305.726013][ T1239] usb 5-1: Manufacturer: syz [ 305.726021][ T1239] usb 5-1: SerialNumber: syz [ 305.798415][ T1239] usb 5-1: config 0 descriptor?? [ 305.799162][ T9349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 305.833395][ T1239] usb 5-1: selecting invalid altsetting 0 [ 306.055730][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.061734][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.062152][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.062540][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.062918][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.063315][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.063699][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.064089][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.064485][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.064858][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.065248][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.065849][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.066230][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.068198][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.068593][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.068962][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.069369][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.069746][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.070133][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.070510][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.070881][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.071267][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.071653][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.072025][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.072420][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.072794][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.073172][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.073568][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.073935][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.074330][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.074691][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.075227][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.075701][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.098027][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.098433][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.098831][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.099203][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.099583][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.099969][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.100339][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.100713][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.101105][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.101477][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.101859][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.102230][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.102604][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.102990][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.103362][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.103794][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.104176][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.104568][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.104936][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.105314][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.105691][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.106075][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.112868][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.113264][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.113664][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.114164][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.114545][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.115006][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.115377][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.115753][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.116215][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.654955][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.698514][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.704355][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.731240][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.731940][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.732330][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.780575][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.801816][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.819732][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.841023][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.847917][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.855220][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.880886][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.885500][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.898287][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.924352][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.933535][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.943902][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.952811][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.977677][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.979114][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.980854][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 306.982413][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.005466][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.007414][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.028919][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.079908][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.088022][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.092181][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.098608][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.104339][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.106185][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.106719][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.115285][ T9349] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 307.200874][ T1239] usb 5-1: USB disconnect, device number 7 [ 307.628563][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.571'. [ 309.542315][ T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 309.764244][ T56] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 309.764313][ T56] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 310.642811][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.642870][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.642920][ T56] usb 5-1: Product: syz [ 310.642967][ T56] usb 5-1: Manufacturer: syz [ 310.642982][ T56] usb 5-1: SerialNumber: syz [ 311.859825][ T56] usb 5-1: can't set config #1, error -71 [ 311.974402][ T56] usb 5-1: USB disconnect, device number 8 [ 314.022677][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.153977][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.202721][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202790][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.257720][ T9363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.282337][ T9363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.386389][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 323.386495][ T12] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.435781][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.453458][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.458887][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.460787][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.467114][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.568984][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.574464][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.582521][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.583818][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.585036][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.979866][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.236887][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.438461][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.517047][ T5810] Bluetooth: hci1: command tx timeout [ 325.678681][ T5810] Bluetooth: hci6: command tx timeout [ 327.596522][ T5810] Bluetooth: hci1: command tx timeout [ 327.803632][ T5810] Bluetooth: hci6: command tx timeout [ 329.685044][ T5810] Bluetooth: hci1: command tx timeout [ 329.836553][ T5810] Bluetooth: hci6: command tx timeout [ 331.756824][ T5810] Bluetooth: hci1: command tx timeout [ 331.916754][ T5810] Bluetooth: hci6: command tx timeout [ 334.713885][ T9486] orangefs_mount: mount request failed with -4 [ 336.164901][ T9510] binder: 9502:9510 ioctl c0306201 200000000040 returned -22 [ 336.167309][ T9510] process 'syz.5.615' launched './file2' with NULL argv: empty string added [ 336.282564][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 336.454877][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 341.091107][ T9539] orangefs_mount: mount request failed with -4 [ 341.399838][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.399908][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.400075][ T9443] bridge_slave_0: entered allmulticast mode [ 341.401701][ T9443] bridge_slave_0: entered promiscuous mode [ 341.877866][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.878038][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.878347][ T9443] bridge_slave_1: entered allmulticast mode [ 341.884118][ T9443] bridge_slave_1: entered promiscuous mode [ 342.267116][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 344.429741][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.430156][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.430371][ T9445] bridge_slave_0: entered allmulticast mode [ 344.433093][ T9445] bridge_slave_0: entered promiscuous mode [ 344.510876][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 344.513574][ T5989] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 344.513634][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.513658][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.513683][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.513706][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.513758][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.513782][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.627687][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.627924][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.628301][ T9445] bridge_slave_1: entered allmulticast mode [ 344.637288][ T9445] bridge_slave_1: entered promiscuous mode [ 344.681134][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.842785][ T5989] usb 6-1: usb_control_msg returned -32 [ 344.842873][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 345.701984][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.702244][ T1501] bridge_slave_1: left allmulticast mode [ 345.702264][ T1501] bridge_slave_1: left promiscuous mode [ 345.702493][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.793104][ T1501] bridge_slave_0: left allmulticast mode [ 345.793132][ T1501] bridge_slave_0: left promiscuous mode [ 345.798836][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.056801][ T56] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 346.106487][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 346.229808][ T56] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.229840][ T56] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.229887][ T56] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.229910][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.261404][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.261434][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.261453][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.261506][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.263742][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.263769][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.263789][ T10] usb 5-1: Product: syz [ 346.263803][ T10] usb 5-1: Manufacturer: syz [ 346.296121][ T5899] usb 6-1: USB disconnect, device number 5 [ 346.369403][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 346.369426][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 346.387115][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 346.387144][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 346.456049][ T56] usb 2-1: usb_control_msg returned -32 [ 346.456097][ T56] usbtmc 2-1:16.0: can't read capabilities [ 346.488464][ T56] usb 5-1: USB disconnect, device number 9 [ 347.187232][ T5974] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 347.276893][ T9584] orangefs_mount: mount request failed with -4 [ 347.398768][ T5974] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.398797][ T5974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.398815][ T5974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.398866][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.400566][ T5974] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.400584][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.400602][ T5974] usb 5-1: Product: syz [ 347.400616][ T5974] usb 5-1: Manufacturer: syz [ 347.444441][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 347.444462][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 347.451909][ T5974] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 347.451930][ T5974] cdc_wdm 5-1:1.0: Unknown control protocol [ 348.787037][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.819283][ T5974] usb 2-1: USB disconnect, device number 6 [ 348.847030][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.870004][ T1501] bond0 (unregistering): Released all slaves [ 349.239132][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 349.419866][ T56] usb 5-1: USB disconnect, device number 10 [ 350.049890][ T1501] bond1 (unregistering): Released all slaves [ 350.707875][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.172948][ T9615] 9pnet_virtio: no channels available for device syz [ 352.221899][ T9615] SQUASHFS error: Failed to read block 0x0: -5 [ 353.095660][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.277870][ T9443] team0: Port device team_slave_0 added [ 353.356693][ T1239] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 353.369368][ T9443] team0: Port device team_slave_1 added [ 353.506525][ T1239] usb 2-1: Using ep0 maxpacket: 8 [ 353.509031][ T1239] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 353.509116][ T1239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.509139][ T1239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.509165][ T1239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.509195][ T1239] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.509237][ T1239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.509260][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.544405][ T5989] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 353.719615][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.719648][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.719741][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.719775][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.742783][ T1239] usb 2-1: usb_control_msg returned -32 [ 353.742831][ T1239] usbtmc 2-1:16.0: can't read capabilities [ 353.985130][ T9445] team0: Port device team_slave_0 added [ 353.997512][ T5989] usb 6-1: usb_control_msg returned -32 [ 353.997561][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 354.091847][ T9445] team0: Port device team_slave_1 added [ 354.206562][ T1501] hsr_slave_0: left promiscuous mode [ 354.246790][ T1501] hsr_slave_1: left promiscuous mode [ 354.248045][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.297244][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.397426][ T1501] pim6reg (unregistering): left allmulticast mode [ 354.423611][ T5974] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 354.586970][ T5974] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 354.588271][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.588328][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.588348][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.589603][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.589655][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.589695][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.590733][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.590787][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.590814][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.591901][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.591960][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.591986][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.593010][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.593061][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.593087][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.594135][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.594185][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.594210][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.595569][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.595613][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.595627][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.600387][ T5974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.600441][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.600468][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.639471][ T5974] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 354.639501][ T5974] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 354.639521][ T5974] usb 5-1: Product: syz [ 354.639535][ T5974] usb 5-1: Manufacturer: syz [ 354.639551][ T5974] usb 5-1: SerialNumber: syz [ 354.645405][ T5974] usb 5-1: config 0 descriptor?? [ 354.690229][ T5974] yurex 5-1:0.0: USB YUREX device now attached to Yurex #2 [ 355.262414][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.262771][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.138871][ T5974] usb 2-1: USB disconnect, device number 7 [ 356.280860][ T5853] usb 6-1: USB disconnect, device number 6 [ 357.180960][ T5853] usb 5-1: USB disconnect, device number 11 [ 357.188461][ T5853] yurex 5-1:0.0: USB YUREX #2 now disconnected [ 358.703596][ T9642] 9pnet_virtio: no channels available for device syz [ 358.707056][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 359.517330][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 359.686586][ T8868] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 359.861205][ T8868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.861226][ T8868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.861251][ T8868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.861263][ T8868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.078699][ T8868] usb 5-1: usb_control_msg returned -32 [ 360.078729][ T8868] usbtmc 5-1:16.0: can't read capabilities [ 362.404404][ T1239] usb 5-1: USB disconnect, device number 12 [ 362.501576][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.501595][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.501622][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.951120][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.951134][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.951150][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.955439][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.955449][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.955464][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.188041][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.188052][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.188069][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.335319][ T8868] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.418614][ T9443] hsr_slave_0: entered promiscuous mode [ 363.422503][ T9443] hsr_slave_1: entered promiscuous mode [ 363.439944][ T9443] debugfs: 'hsr0' already exists in 'hsr' [ 363.439965][ T9443] Cannot create hsr debugfs directory [ 363.488109][ T8868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.488130][ T8868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.488142][ T8868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.488166][ T8868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.488179][ T8868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.491052][ T8868] usb 6-1: config 0 descriptor?? [ 364.981189][ T9445] hsr_slave_0: entered promiscuous mode [ 364.981934][ T9445] hsr_slave_1: entered promiscuous mode [ 364.982411][ T9445] debugfs: 'hsr0' already exists in 'hsr' [ 364.982426][ T9445] Cannot create hsr debugfs directory [ 365.852827][ T8868] usbhid 6-1:0.0: can't add hid device: -71 [ 365.852918][ T8868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 365.874912][ T8868] usb 6-1: USB disconnect, device number 7 [ 367.510494][ T9693] 9pnet_virtio: no channels available for device syz [ 367.836835][ T9692] SQUASHFS error: Failed to read block 0x0: -5 [ 368.316303][ T9702] 9pnet_virtio: no channels available for device syz [ 368.870216][ T1501] IPVS: stop unused estimator thread 0... [ 371.060304][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 371.919412][ T1501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.902882][ T1501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.183285][ T1501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.191495][ T9738] netlink: 372 bytes leftover after parsing attributes in process `syz.5.673'. [ 374.240548][ T9740] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 374.523006][ T1501] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.682325][ T9740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.802975][ T9443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 374.846073][ T9443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 374.932914][ T9443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.046594][ T6103] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 375.205241][ T6103] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.205260][ T6103] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.205299][ T6103] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.205311][ T6103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.210908][ T6103] usb 5-1: config 0 descriptor?? [ 375.243556][ T6103] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 375.491935][ T9443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 377.320066][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 377.631556][ T9445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.685980][ T9445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.723137][ T1501] bridge_slave_1: left allmulticast mode [ 377.723158][ T1501] bridge_slave_1: left promiscuous mode [ 377.732819][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.854294][ T5973] usb 5-1: USB disconnect, device number 13 [ 377.864583][ T1501] bridge_slave_0: left allmulticast mode [ 377.864601][ T1501] bridge_slave_0: left promiscuous mode [ 377.865216][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.693667][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726467][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.603597][ T9787] netlink: 372 bytes leftover after parsing attributes in process `syz.1.685'. [ 381.286570][ T8546] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 381.548989][ T8546] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.549227][ T8546] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.549855][ T8546] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.550146][ T8546] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.118751][ T8546] usb 6-1: usb_control_msg returned -32 [ 382.118871][ T8546] usbtmc 6-1:16.0: can't read capabilities [ 382.303417][ T8546] usb 6-1: USB disconnect, device number 8 [ 382.808194][ T37] audit: type=1326 audit(1768525773.775:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 382.809535][ T37] audit: type=1326 audit(1768525773.775:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 382.889419][ T37] audit: type=1326 audit(1768525773.775:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 382.969277][ T37] audit: type=1326 audit(1768525773.935:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 382.972673][ T37] audit: type=1326 audit(1768525773.935:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c601af749 code=0x7ffc0000 [ 384.576470][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 384.595777][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.660815][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.665049][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.666570][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.683294][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.691927][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.700887][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.707641][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.708585][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.732905][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.732933][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.732975][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.732998][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.799590][ T10] usb 2-1: config 0 descriptor?? [ 384.856801][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.877553][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 386.167081][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.228516][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.248996][ T1501] bond0 (unregistering): Released all slaves [ 386.287538][ T9445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.371411][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 386.401487][ T1501] tipc: Left network mode [ 386.812629][ T5123] Bluetooth: hci4: command tx timeout [ 386.956743][ T5123] Bluetooth: hci3: command tx timeout [ 387.503392][ T9817] orangefs_mount: mount request failed with -4 [ 387.660239][ T5973] usb 2-1: USB disconnect, device number 8 [ 388.126465][ T1239] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 388.126521][ T56] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 388.276457][ T1239] usb 2-1: Using ep0 maxpacket: 8 [ 388.284832][ T1239] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 388.284836][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.284863][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.284889][ T1239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 388.284906][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.284915][ T1239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.284930][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.284948][ T1239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 388.284973][ T1239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 388.284996][ T1239] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.285033][ T1239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.285055][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.641573][ T1239] usb 2-1: usb_control_msg returned -32 [ 388.641622][ T1239] usbtmc 2-1:16.0: can't read capabilities [ 388.654119][ T56] usb 5-1: usb_control_msg returned -32 [ 388.654168][ T56] usbtmc 5-1:16.0: can't read capabilities [ 388.676568][ T56] usb 5-1: USB disconnect, device number 14 [ 388.877027][ T5810] Bluetooth: hci4: command tx timeout [ 389.038111][ T5810] Bluetooth: hci3: command tx timeout [ 389.277796][ T37] audit: type=1326 audit(1768525780.245:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.278122][ T37] audit: type=1326 audit(1768525780.245:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.284474][ T37] audit: type=1326 audit(1768525780.245:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.352643][ T37] audit: type=1326 audit(1768525780.245:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.353015][ T37] audit: type=1326 audit(1768525780.315:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.384483][ T37] audit: type=1326 audit(1768525780.345:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.384535][ T37] audit: type=1326 audit(1768525780.345:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.386942][ T37] audit: type=1326 audit(1768525780.345:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.387372][ T37] audit: type=1326 audit(1768525780.355:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 389.388212][ T37] audit: type=1326 audit(1768525780.355:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42c0c8f749 code=0x7ffc0000 [ 390.431418][ T9841] orangefs_mount: mount request failed with -4 [ 390.599958][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 390.933411][ T1239] usb 2-1: USB disconnect, device number 9 [ 390.956679][ T5810] Bluetooth: hci4: command tx timeout [ 391.060705][ T1501] hsr_slave_0: left promiscuous mode [ 391.124654][ T5810] Bluetooth: hci3: command tx timeout [ 391.147722][ T1501] hsr_slave_1: left promiscuous mode [ 391.181103][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.181134][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.302326][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.302358][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.583258][ T1501] veth1_macvtap: left promiscuous mode [ 391.583364][ T1501] veth0_macvtap: left promiscuous mode [ 391.583628][ T1501] veth1_vlan: left promiscuous mode [ 391.583803][ T1501] veth0_vlan: left promiscuous mode [ 391.652075][ T9852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 391.655501][ T9852] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.922738][ T9859] 9pnet_virtio: no channels available for device syz [ 391.971138][ T9859] SQUASHFS error: Failed to read block 0x0: -5 [ 393.039766][ T5810] Bluetooth: hci4: command tx timeout [ 393.246506][ T5810] Bluetooth: hci3: command tx timeout [ 393.685601][ T9864] orangefs_mount: mount request failed with -4 [ 393.726183][ T9870] netlink: 372 bytes leftover after parsing attributes in process `syz.4.707'. [ 394.255128][ T1501] pim6reg (unregistering): left allmulticast mode [ 394.697560][ T9875] orangefs_mount: mount request failed with -4 [ 398.777983][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 399.067039][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 402.353614][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 402.597553][ T9900] netlink: 372 bytes leftover after parsing attributes in process `syz.5.716'. [ 403.740594][ T9901] ================================================================== [ 403.740612][ T9901] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 403.740646][ T9901] Read of size 1 at addr ffff88805de04200 by task syz.1.715/9901 [ 403.740663][ T9901] [ 403.740686][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.740708][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.740724][ T9901] Call Trace: [ 403.740734][ T9901] [ 403.740741][ T9901] dump_stack_lvl+0xe8/0x150 [ 403.740765][ T9901] print_report+0xca/0x240 [ 403.740784][ T9901] ? rt_spin_lock+0x88/0x3e0 [ 403.740804][ T9901] kasan_report+0x118/0x150 [ 403.740830][ T9901] ? rt_spin_lock+0x88/0x3e0 [ 403.740861][ T9901] ? __wake_up_common_lock+0x2f/0x1e0 [ 403.740881][ T9901] __kasan_check_byte+0x2a/0x40 [ 403.740904][ T9901] lock_acquire+0x84/0x340 [ 403.740924][ T9901] ? rt_mutex_slowunlock+0x668/0x8a0 [ 403.740947][ T9901] ? reacquire_held_locks+0x104/0x190 [ 403.740973][ T9901] rt_spin_lock+0x88/0x3e0 [ 403.740993][ T9901] ? __wake_up_common_lock+0x2f/0x1e0 [ 403.741012][ T9901] ? __pfx_rt_spin_lock+0x10/0x10 [ 403.741033][ T9901] ? rt_spin_unlock+0x161/0x200 [ 403.741054][ T9901] ? __wake_up_common_lock+0x18a/0x1e0 [ 403.741074][ T9901] __wake_up_common_lock+0x2f/0x1e0 [ 403.741093][ T9901] ? snd_pcm_post_stop+0x14a/0x1e0 [ 403.741112][ T9901] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 403.741128][ T9901] snd_pcm_action+0x1f4/0x240 [ 403.741154][ T9901] loopback_trigger+0xb82/0x1b60 [ 403.741174][ T9901] ? rcu_is_watching+0x15/0xb0 [ 403.741193][ T9901] snd_pcm_do_start+0xb7/0x180 [ 403.741210][ T9901] snd_pcm_action+0xe7/0x240 [ 403.741235][ T9901] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 403.741258][ T9901] ? __pfx_interleaved_copy+0x10/0x10 [ 403.741278][ T9901] ? __pfx_default_write_copy+0x10/0x10 [ 403.741298][ T9901] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.741318][ T9901] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 403.741335][ T9901] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 403.741358][ T9901] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.741383][ T9901] ? snd_pcm_oss_write3+0x1a2/0x350 [ 403.741400][ T9901] snd_pcm_oss_write3+0x1bc/0x350 [ 403.741419][ T9901] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 403.741442][ T9901] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 403.741472][ T9901] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 403.741498][ T9901] snd_pcm_oss_write+0xa31/0xf20 [ 403.741521][ T9901] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 403.741540][ T9901] ? rw_verify_area+0x25b/0x4e0 [ 403.741562][ T9901] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 403.741579][ T9901] vfs_write+0x287/0xb40 [ 403.741605][ T9901] ? __pfx_vfs_write+0x10/0x10 [ 403.741626][ T9901] ? __fget_files+0x2a/0x420 [ 403.741644][ T9901] ? __fget_files+0x2a/0x420 [ 403.741659][ T9901] ? __fget_files+0x3a6/0x420 [ 403.741674][ T9901] ? __fget_files+0x2a/0x420 [ 403.741692][ T9901] ksys_write+0x14b/0x260 [ 403.741714][ T9901] ? __pfx_ksys_write+0x10/0x10 [ 403.741738][ T9901] do_syscall_64+0xec/0xf80 [ 403.741755][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.741772][ T9901] ? trace_irq_disable+0x37/0x100 [ 403.741790][ T9901] ? clear_bhb_loop+0x60/0xb0 [ 403.741809][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.741826][ T9901] RIP: 0033:0x7f0c601af749 [ 403.741851][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.741870][ T9901] RSP: 002b:00007f0c5e3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.741890][ T9901] RAX: ffffffffffffffda RBX: 00007f0c60406090 RCX: 00007f0c601af749 [ 403.741903][ T9901] RDX: 000000000000fdea RSI: 00002000000012c0 RDI: 0000000000000008 [ 403.741915][ T9901] RBP: 00007f0c60233f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.741926][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.741936][ T9901] R13: 00007f0c60406128 R14: 00007f0c60406090 R15: 00007ffce6ca1328 [ 403.741957][ T9901] [ 403.741963][ T9901] [ 403.741967][ T9901] Allocated by task 9898: [ 403.741976][ T9901] kasan_save_track+0x3e/0x80 [ 403.741997][ T9901] __kasan_kmalloc+0x93/0xb0 [ 403.742017][ T9901] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 403.742037][ T9901] snd_pcm_attach_substream+0x5b7/0xb30 [ 403.742055][ T9901] snd_pcm_open_substream+0xb6/0x2410 [ 403.742077][ T9901] snd_pcm_oss_open+0xf2a/0x1bd0 [ 403.742091][ T9901] chrdev_open+0x4cf/0x5e0 [ 403.742103][ T9901] do_dentry_open+0x7d0/0x1270 [ 403.742118][ T9901] vfs_open+0x3b/0x350 [ 403.742131][ T9901] path_openat+0x342a/0x3df0 [ 403.742149][ T9901] do_filp_open+0x1fa/0x410 [ 403.742165][ T9901] do_sys_openat2+0x121/0x200 [ 403.742179][ T9901] __x64_sys_openat+0x138/0x170 [ 403.742194][ T9901] do_syscall_64+0xec/0xf80 [ 403.742211][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.742228][ T9901] [ 403.742233][ T9901] Freed by task 9898: [ 403.742242][ T9901] kasan_save_track+0x3e/0x80 [ 403.742261][ T9901] kasan_save_free_info+0x46/0x50 [ 403.742279][ T9901] __kasan_slab_free+0x5c/0x80 [ 403.742301][ T9901] kfree+0x1bd/0x900 [ 403.742319][ T9901] snd_pcm_detach_substream+0x1e1/0x290 [ 403.742338][ T9901] snd_pcm_oss_release+0x184/0x250 [ 403.742353][ T9901] __fput+0x45b/0xa80 [ 403.742370][ T9901] task_work_run+0x1d4/0x260 [ 403.742394][ T9901] get_signal+0x11c4/0x1310 [ 403.742411][ T9901] arch_do_signal_or_restart+0x9a/0x7a0 [ 403.742437][ T9901] exit_to_user_mode_loop+0x87/0x4e0 [ 403.742459][ T9901] do_syscall_64+0x2c1/0xf80 [ 403.742484][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.742501][ T9901] [ 403.742506][ T9901] The buggy address belongs to the object at ffff88805de04000 [ 403.742506][ T9901] which belongs to the cache kmalloc-2k of size 2048 [ 403.742523][ T9901] The buggy address is located 512 bytes inside of [ 403.742523][ T9901] freed 2048-byte region [ffff88805de04000, ffff88805de04800) [ 403.742544][ T9901] [ 403.742550][ T9901] The buggy address belongs to the physical page: [ 403.742571][ T9901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de00 [ 403.742588][ T9901] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 403.742604][ T9901] flags: 0x80000000000040(head|node=0|zone=1) [ 403.742626][ T9901] page_type: f5(slab) [ 403.742642][ T9901] raw: 0080000000000040 ffff88813ff27000 ffffea0000a3c000 dead000000000002 [ 403.742657][ T9901] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 403.742676][ T9901] head: 0080000000000040 ffff88813ff27000 ffffea0000a3c000 dead000000000002 [ 403.742692][ T9901] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 403.742706][ T9901] head: 0080000000000003 ffffea0001778001 00000000ffffffff 00000000ffffffff [ 403.742719][ T9901] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 403.742728][ T9901] page dumped because: kasan: bad access detected [ 403.742740][ T9901] page_owner tracks the page as allocated [ 403.742746][ T9901] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 95019082859, free_ts 0 [ 403.742773][ T9901] post_alloc_hook+0x234/0x290 [ 403.742796][ T9901] get_page_from_freelist+0x28c0/0x2960 [ 403.742812][ T9901] __alloc_frozen_pages_noprof+0x181/0x370 [ 403.742829][ T9901] alloc_pages_mpol+0xd1/0x380 [ 403.742846][ T9901] allocate_slab+0x86/0x3b0 [ 403.742865][ T9901] ___slab_alloc+0xb10/0x13e0 [ 403.742883][ T9901] __slab_alloc+0xc6/0x1f0 [ 403.742900][ T9901] __kmalloc_noprof+0x15f/0x7e0 [ 403.742923][ T9901] ___neigh_create+0x722/0x2330 [ 403.742942][ T9901] ip6_finish_output2+0x1082/0x13c0 [ 403.742961][ T9901] ip6_output+0x340/0x550 [ 403.742987][ T9901] NF_HOOK+0x9e/0x380 [ 403.743003][ T9901] mld_sendpack+0x8d4/0xe60 [ 403.743020][ T9901] mld_ifc_work+0x83e/0xd60 [ 403.743034][ T9901] process_scheduled_works+0xad1/0x1770 [ 403.743054][ T9901] worker_thread+0x8a0/0xda0 [ 403.743079][ T9901] page_owner free stack trace missing [ 403.743087][ T9901] [ 403.743091][ T9901] Memory state around the buggy address: [ 403.743103][ T9901] ffff88805de04100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.743117][ T9901] ffff88805de04180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.743131][ T9901] >ffff88805de04200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.743141][ T9901] ^ [ 403.743151][ T9901] ffff88805de04280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.743164][ T9901] ffff88805de04300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 403.743173][ T9901] ================================================================== [ 403.757163][ T9901] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.757188][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.757203][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.757211][ T9901] Call Trace: [ 403.757215][ T9901] [ 403.757220][ T9901] vpanic+0x1e0/0x670 [ 403.757240][ T9901] panic+0xb9/0xc0 [ 403.757254][ T9901] ? __pfx_panic+0x10/0x10 [ 403.757268][ T9901] ? preempt_schedule_thunk+0x16/0x30 [ 403.757281][ T9901] ? preempt_schedule_thunk+0x16/0x30 [ 403.757293][ T9901] ? rt_spin_lock+0x88/0x3e0 [ 403.757307][ T9901] check_panic_on_warn+0x89/0xb0 [ 403.757323][ T9901] ? rt_spin_lock+0x88/0x3e0 [ 403.757337][ T9901] end_report+0x6f/0x140 [ 403.757353][ T9901] kasan_report+0x129/0x150 [ 403.757376][ T9901] ? rt_spin_lock+0x88/0x3e0 [ 403.757393][ T9901] ? __wake_up_common_lock+0x2f/0x1e0 [ 403.757406][ T9901] __kasan_check_byte+0x2a/0x40 [ 403.757422][ T9901] lock_acquire+0x84/0x340 [ 403.757437][ T9901] ? rt_mutex_slowunlock+0x668/0x8a0 [ 403.757451][ T9901] ? reacquire_held_locks+0x104/0x190 [ 403.757476][ T9901] rt_spin_lock+0x88/0x3e0 [ 403.757491][ T9901] ? __wake_up_common_lock+0x2f/0x1e0 [ 403.757504][ T9901] ? __pfx_rt_spin_lock+0x10/0x10 [ 403.757519][ T9901] ? rt_spin_unlock+0x161/0x200 [ 403.757533][ T9901] ? __wake_up_common_lock+0x18a/0x1e0 [ 403.757547][ T9901] __wake_up_common_lock+0x2f/0x1e0 [ 403.757560][ T9901] ? snd_pcm_post_stop+0x14a/0x1e0 [ 403.757572][ T9901] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 403.757582][ T9901] snd_pcm_action+0x1f4/0x240 [ 403.757597][ T9901] loopback_trigger+0xb82/0x1b60 [ 403.757611][ T9901] ? rcu_is_watching+0x15/0xb0 [ 403.757622][ T9901] snd_pcm_do_start+0xb7/0x180 [ 403.757633][ T9901] snd_pcm_action+0xe7/0x240 [ 403.757648][ T9901] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 403.757662][ T9901] ? __pfx_interleaved_copy+0x10/0x10 [ 403.757674][ T9901] ? __pfx_default_write_copy+0x10/0x10 [ 403.757686][ T9901] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.757698][ T9901] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 403.757709][ T9901] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 403.757723][ T9901] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.757739][ T9901] ? snd_pcm_oss_write3+0x1a2/0x350 [ 403.757750][ T9901] snd_pcm_oss_write3+0x1bc/0x350 [ 403.757762][ T9901] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 403.757777][ T9901] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 403.757790][ T9901] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 403.757805][ T9901] snd_pcm_oss_write+0xa31/0xf20 [ 403.757818][ T9901] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 403.757830][ T9901] ? rw_verify_area+0x25b/0x4e0 [ 403.757844][ T9901] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 403.757854][ T9901] vfs_write+0x287/0xb40 [ 403.757869][ T9901] ? __pfx_vfs_write+0x10/0x10 [ 403.757883][ T9901] ? __fget_files+0x2a/0x420 [ 403.757895][ T9901] ? __fget_files+0x2a/0x420 [ 403.757905][ T9901] ? __fget_files+0x3a6/0x420 [ 403.757915][ T9901] ? __fget_files+0x2a/0x420 [ 403.757927][ T9901] ksys_write+0x14b/0x260 [ 403.757941][ T9901] ? __pfx_ksys_write+0x10/0x10 [ 403.757957][ T9901] do_syscall_64+0xec/0xf80 [ 403.757968][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.757979][ T9901] ? trace_irq_disable+0x37/0x100 [ 403.757990][ T9901] ? clear_bhb_loop+0x60/0xb0 [ 403.758001][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.758012][ T9901] RIP: 0033:0x7f0c601af749 [ 403.758023][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.758032][ T9901] RSP: 002b:00007f0c5e3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.758045][ T9901] RAX: ffffffffffffffda RBX: 00007f0c60406090 RCX: 00007f0c601af749 [ 403.758054][ T9901] RDX: 000000000000fdea RSI: 00002000000012c0 RDI: 0000000000000008 [ 403.758062][ T9901] RBP: 00007f0c60233f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.758069][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.758076][ T9901] R13: 00007f0c60406128 R14: 00007f0c60406090 R15: 00007ffce6ca1328 [ 403.758088][ T9901] [ 403.758519][ T9901] Kernel Offset: disabled