last executing test programs: 1m19.566989827s ago: executing program 0 (id=408): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 1m19.162980769s ago: executing program 0 (id=412): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x3, 0xff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1m17.094888534s ago: executing program 0 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x9, "93e9180c2678daee76c37cb8b0328ab70c175193a205e0b2115119e09edc88f8", 0x3, 0x3, 0x3, 0x20, 0x20133, 0x2}) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m16.656683404s ago: executing program 0 (id=427): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271) 1m16.190894573s ago: executing program 0 (id=430): socket$vsock_stream(0x28, 0x1, 0x0) lchown(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r2, &(0x7f0000000300)=""/4096, 0x1000) 1m15.516546067s ago: executing program 0 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m15.042585725s ago: executing program 32 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 40.607840293s ago: executing program 2 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000eee000/0x1000)=nil, 0x1000, 0xfea2}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 40.228133096s ago: executing program 2 (id=679): syz_io_uring_setup(0x716, &(0x7f0000000080)={0x0, 0xcfc2, 0x400, 0xfffffffa, 0x287}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(0x0, 0x84800) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4504b1023398a71226c014a93010902240001070000000904f70002ed49400009050b00000000e200090509d6"], 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast1, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 38.310915749s ago: executing program 2 (id=693): socket(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001680)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x2040400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 37.290932s ago: executing program 2 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x5}, 0x18) sigaltstack(0x0, 0x0) 34.331120003s ago: executing program 2 (id=707): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 33.653116752s ago: executing program 2 (id=709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c006a8bcc48edee2667ae79cc37", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 18.164444377s ago: executing program 33 (id=709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c006a8bcc48edee2667ae79cc37", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 8.142324993s ago: executing program 1 (id=906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 5.246781257s ago: executing program 1 (id=910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) 4.581180169s ago: executing program 6 (id=915): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001, 0x8) r0 = io_uring_setup(0x4c67, &(0x7f0000000080)={0x0, 0xb578, 0x1, 0xfffffffb, 0x2}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 4.225568131s ago: executing program 4 (id=916): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/warn_count', 0x100, 0x24) 3.964392535s ago: executing program 4 (id=920): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close(0x3) getdents64(r2, 0x0, 0x11) 3.680461247s ago: executing program 6 (id=921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="0ff1918765f30f2a290f01f60f01c8660f79db0f381c4d0f260f55f3b8ce000f00d83e660fc7b10088366567360f01d1", 0x30}], 0x1, 0x16, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x200000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.578752594s ago: executing program 4 (id=922): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000008000005c00000000000000", @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYRES32], 0x50) 3.346370803s ago: executing program 5 (id=923): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback, 0x18}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.72688601s ago: executing program 6 (id=925): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09000056033300"], 0x398}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.716789512s ago: executing program 5 (id=926): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendfile(r3, r3, &(0x7f0000000040)=0xfff, 0x2) 2.520047711s ago: executing program 5 (id=928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.373782022s ago: executing program 4 (id=929): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 2.373019186s ago: executing program 6 (id=930): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.346089977s ago: executing program 1 (id=931): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0xff, 0x9, 0x101, 0x45914, 0xffffffffffffffff, 0x9443, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) 1.970361684s ago: executing program 4 (id=932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.772331748s ago: executing program 6 (id=934): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 1.551676833s ago: executing program 6 (id=936): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x84, 0x3, "5c046a"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x20, 0xf, 0x24, "4502c2767018e48b12acc063ca200476190ead1fc52d583cdedfc35535839e1b1e7c9c12"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.389924301s ago: executing program 1 (id=938): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) unshare(0xc040400) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x14) fcntl$notify(r0, 0x402, 0x8000003d) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1.222379147s ago: executing program 5 (id=940): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) unshare(0x20000400) fcntl$lock(r5, 0x26, &(0x7f0000000080)) 1.20879585s ago: executing program 3 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 1.175891317s ago: executing program 1 (id=942): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 898.782505ms ago: executing program 4 (id=943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xbb8) 610.994596ms ago: executing program 3 (id=944): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x1000, 0x3, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) 573.261128ms ago: executing program 3 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$cachefiles(0xffffff9c, 0x0, 0x40, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 507.921021ms ago: executing program 1 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) 476.869521ms ago: executing program 3 (id=947): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040002004300000001"], 0x50) socket$inet6(0xa, 0x3, 0x89) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 245.73847ms ago: executing program 3 (id=948): mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45a], 0x0, 0x0, 0x1, 0x1}}, 0x40) 194.86736ms ago: executing program 5 (id=949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) unshare(0x2c060000) unshare(0x24020400) 40.847614ms ago: executing program 3 (id=950): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): ss (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.110108][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.121642][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.132132][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.150751][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.189196][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.200529][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.212522][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.228613][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.240194][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.271346][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.286220][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.327901][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.339372][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348358][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.357225][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.371224][ T5831] veth0_vlan: entered promiscuous mode [ 76.400556][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.402946][ T5831] veth1_vlan: entered promiscuous mode [ 76.417632][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.492247][ T5823] veth0_vlan: entered promiscuous mode [ 76.576162][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.588956][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.599363][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.636045][ T5831] veth0_macvtap: entered promiscuous mode [ 76.649362][ T5831] veth1_macvtap: entered promiscuous mode [ 76.664567][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.672409][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.678053][ T5823] veth1_vlan: entered promiscuous mode [ 76.733552][ T5828] Bluetooth: hci1: command tx timeout [ 76.733758][ T5835] Bluetooth: hci0: command tx timeout [ 76.739009][ T5841] Bluetooth: hci3: command tx timeout [ 76.782306][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.808755][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.825619][ T5841] Bluetooth: hci4: command tx timeout [ 76.825812][ T5835] Bluetooth: hci2: command tx timeout [ 76.840415][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.857903][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.867907][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.881934][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.892649][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.907044][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.921860][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.934073][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.944690][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.956045][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.966586][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.976549][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.987009][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.001620][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.023281][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.037169][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.041159][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.066321][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.078567][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087477][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163542][ T5823] veth0_macvtap: entered promiscuous mode [ 77.292381][ T5823] veth1_macvtap: entered promiscuous mode [ 77.396493][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.410939][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.422052][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.439787][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.450477][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.463442][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.473463][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.483970][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.501911][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.631551][ T5922] cgroup: Unexpected value for 'cpuset_v2_mode' [ 77.675407][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.717762][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.730481][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.742779][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.757831][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.769042][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.779783][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.797687][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.815315][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.842715][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.871010][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882845][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893999][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.909361][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.927754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.130902][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.159859][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.304199][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.312049][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.402835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.436032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.814879][ T5835] Bluetooth: hci0: command tx timeout [ 78.814896][ T5841] Bluetooth: hci3: command tx timeout [ 78.814927][ T5841] Bluetooth: hci1: command tx timeout [ 78.893503][ T5841] Bluetooth: hci4: command tx timeout [ 78.894575][ T5828] Bluetooth: hci2: command tx timeout [ 78.969993][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.577033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.595265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.600424][ T5963] dccp_close: ABORT with 36 bytes unread [ 79.618336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.192548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.215701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.296647][ T5958] ipvlan2: entered promiscuous mode [ 81.343254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.533524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.662931][ T5988] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.994086][ T5995] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 82.135963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 82.528952][ T5995] syzkaller1: entered promiscuous mode [ 82.560374][ T5995] syzkaller1: entered allmulticast mode [ 82.937647][ T30] audit: type=1326 audit(1743928494.043:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 82.994415][ T30] audit: type=1326 audit(1743928494.043:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.016627][ T6019] process 'syz.3.37' launched './file0' with NULL argv: empty string added [ 83.105655][ T30] audit: type=1326 audit(1743928494.063:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.202561][ T30] audit: type=1326 audit(1743928494.063:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.235316][ T30] audit: type=1326 audit(1743928494.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.257556][ T30] audit: type=1326 audit(1743928494.073:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.386100][ T30] audit: type=1326 audit(1743928494.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.424113][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.443196][ T30] audit: type=1326 audit(1743928494.113:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 83.494026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.502552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.603303][ T6033] ptrace attach of "./syz-executor exec"[6035] was attempted by "./syz-executor exec"[6033] [ 83.639846][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 83.751634][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.880753][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.018237][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.143142][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.214620][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.343630][ T24] usb 5-1: Product: syz [ 84.411683][ T24] usb 5-1: Manufacturer: syz [ 84.502820][ T24] usb 5-1: SerialNumber: syz [ 85.687133][ T24] usb 5-1: 0:2 : does not exist [ 86.385268][ T30] audit: type=1326 audit(1743928494.113:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 86.406761][ T30] audit: type=1326 audit(1743928494.113:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6017 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7ffc0000 [ 86.738741][ T976] cfg80211: failed to load regulatory.db [ 86.825384][ T5985] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.023202][ T5985] usb 1-1: Using ep0 maxpacket: 8 [ 87.030327][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.041755][ T5985] usb 1-1: config 0 has no interfaces? [ 87.082159][ T5985] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.112304][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.132547][ T5985] usb 1-1: Product: syz [ 87.161106][ T5985] usb 1-1: Manufacturer: syz [ 87.171782][ T5985] usb 1-1: SerialNumber: syz [ 87.205499][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 87.242746][ T5985] usb 1-1: config 0 descriptor?? [ 87.251378][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.341762][ T6072] bridge_slave_1 (unregistering): left allmulticast mode [ 87.366328][ T6072] bridge_slave_1 (unregistering): left promiscuous mode [ 87.499471][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.530660][ T24] usb 5-1: USB disconnect, device number 2 [ 88.582274][ T5985] usb 1-1: USB disconnect, device number 2 [ 88.604915][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.977846][ T6100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.312960][ T6096] cgroup: fork rejected by pids controller in /syz1 [ 89.840894][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 89.840910][ T30] audit: type=1326 audit(1743928500.933:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 89.878294][ T30] audit: type=1326 audit(1743928500.943:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.012168][ T30] audit: type=1326 audit(1743928500.943:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.142947][ T30] audit: type=1326 audit(1743928500.943:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.331131][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 90.395119][ T30] audit: type=1326 audit(1743928500.943:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.443908][ T30] audit: type=1326 audit(1743928500.943:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.514346][ T30] audit: type=1326 audit(1743928500.943:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.627370][ T30] audit: type=1326 audit(1743928500.943:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.652200][ T30] audit: type=1326 audit(1743928500.943:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 90.677347][ T30] audit: type=1326 audit(1743928500.943:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6107 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x7fc00000 [ 91.216033][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.375957][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 91.388212][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.412570][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.479890][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 91.530362][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.572362][ T976] usb 3-1: config 0 descriptor?? [ 91.838913][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 91.866148][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.888083][ T976] usb 3-1: USB disconnect, device number 2 [ 92.553303][ T5878] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.725183][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.763226][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.800787][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.811753][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.851594][ T5878] usb 2-1: Product: syz [ 92.856221][ T5878] usb 2-1: Manufacturer: syz [ 92.860804][ T5878] usb 2-1: SerialNumber: syz [ 92.923210][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.102908][ T5878] usb 2-1: 0:2 : does not exist [ 93.116185][ T5907] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.132922][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.150824][ T5878] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 93.161324][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.184489][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.212562][ T5907] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.232956][ T5878] usb 2-1: USB disconnect, device number 2 [ 93.272791][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.315121][ T5907] usb 5-1: Product: syz [ 93.321556][ T5907] usb 5-1: Manufacturer: syz [ 93.378287][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 93.394129][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 93.405060][ T5907] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 93.431404][ T5907] cdc_wdm 5-1:1.0: Unknown control protocol [ 93.472779][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.503878][ T6217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.530232][ T6221] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 93.539407][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.85'. [ 93.576179][ T6221] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 93.589266][ T6221] team0: Failed to send options change via netlink (err -105) [ 93.596810][ T6221] team0: Port device geneve0 added [ 93.615812][ T976] usb 5-1: USB disconnect, device number 3 [ 93.668985][ T6217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.864199][ T6217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.964293][ T6217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.023350][ T5985] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.073612][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.167406][ T6217] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.187368][ T5985] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 94.208971][ T6217] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.217491][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.245624][ T976] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.262059][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.292186][ T5985] usb 2-1: config 0 descriptor?? [ 94.297640][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.329532][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.377341][ T976] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.389153][ T6217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.416344][ T976] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.439245][ T976] usb 5-1: Product: syz [ 94.455076][ T976] usb 5-1: Manufacturer: syz [ 94.471759][ T6217] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.484581][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 94.495531][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 94.516281][ T976] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 94.522217][ T976] cdc_wdm 5-1:1.0: Unknown control protocol [ 94.647133][ T6249] capability: warning: `syz.3.97' uses deprecated v2 capabilities in a way that may be insecure [ 94.772851][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.779677][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.787321][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.793941][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.800332][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.806946][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.813297][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.819914][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.826426][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.833044][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.840317][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.846934][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.854167][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.860790][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.866998][ T976] usb 5-1: USB disconnect, device number 4 [ 94.867088][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.867108][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.867123][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 95.343865][ T6266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 96.197613][ T5985] pegasus 2-1:0.0: setup Pegasus II specific registers [ 96.401630][ T5985] pegasus 2-1:0.0: can't locate MII phy, using default [ 96.447987][ T5985] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, aa:2d:c7:91:d8:21 [ 96.488027][ T5985] usb 2-1: USB disconnect, device number 3 [ 96.753316][ T976] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 96.940824][ T976] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 96.963114][ T976] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 97.016078][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.073197][ T976] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 97.082153][ T976] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 97.143146][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 97.199463][ T976] usb 1-1: string descriptor 0 read error: -22 [ 97.206436][ T976] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 97.223584][ T5985] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 97.226063][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.259634][ T976] usb 1-1: config 0 descriptor?? [ 97.278386][ T976] hub 1-1:0.0: bad descriptor, ignoring hub [ 97.303183][ T976] hub 1-1:0.0: probe with driver hub failed with error -5 [ 97.415145][ T5985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.480992][ T5985] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.509858][ T5985] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 97.545639][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.560599][ T6295] overlayfs: failed to clone upperpath [ 97.573791][ T5985] usb 2-1: config 0 descriptor?? [ 97.599207][ T5985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.635969][ T5985] dvb-usb: bulk message failed: -22 (3/0) [ 97.661032][ T5985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.682577][ T5985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.710737][ T5985] usb 2-1: media controller created [ 97.745391][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.816117][ T5985] dvb-usb: bulk message failed: -22 (6/0) [ 97.840642][ T5985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 97.859884][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 97.892552][ T5985] dvb-usb: schedule remote query interval to 150 msecs. [ 97.908777][ T5985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 97.934355][ T976] usb 1-1: USB disconnect, device number 3 [ 98.064336][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 98.070226][ T59] dvb-usb: error while querying for an remote control event. [ 98.257088][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 98.268956][ T59] dvb-usb: error while querying for an remote control event. [ 98.391017][ T59] usb 2-1: USB disconnect, device number 4 [ 98.481984][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 98.677306][ T6325] kvm: pic: non byte write [ 98.733502][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.893531][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 98.925916][ T5878] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 98.944747][ T6331] netlink: 'syz.0.127': attribute type 12 has an invalid length. [ 98.954935][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.963065][ T5878] usb 5-1: Product: syz [ 98.968042][ T5878] usb 5-1: Manufacturer: syz [ 98.972658][ T5878] usb 5-1: SerialNumber: syz [ 98.980451][ T5878] usb 5-1: config 0 descriptor?? [ 98.989525][ T5878] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 99.390628][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 99.400554][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:2 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 99.400576][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.400588][ T5828] Workqueue: hci4 hci_rx_work [ 99.400628][ T5828] Call Trace: [ 99.400636][ T5828] [ 99.400643][ T5828] dump_stack_lvl+0x241/0x360 [ 99.400672][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.400694][ T5828] ? __pfx__printk+0x10/0x10 [ 99.400721][ T5828] ? kernfs_path_from_node+0x2b/0x250 [ 99.400748][ T5828] ? kernfs_path_from_node+0x217/0x250 [ 99.400772][ T5828] sysfs_create_dir_ns+0x2fd/0x3f0 [ 99.400796][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 99.400826][ T5828] kobject_add_internal+0x435/0x8d0 [ 99.400857][ T5828] kobject_add+0x15b/0x230 [ 99.400877][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0 [ 99.400899][ T5828] ? device_add+0x3e7/0xbf0 [ 99.400924][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 99.400947][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 99.400968][ T5828] ? get_device_parent+0x165/0x410 [ 99.400991][ T5828] device_add+0x4e5/0xbf0 [ 99.401019][ T5828] hci_conn_add_sysfs+0xe8/0x200 [ 99.401044][ T5828] le_conn_complete_evt+0xc6e/0x12a0 [ 99.401078][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 99.401095][ T5828] ? __mutex_unlock_slowpath+0x229/0x800 [ 99.401118][ T5828] ? __skb_clone+0x5c/0x6d0 [ 99.401139][ T5828] ? skb_pull_data+0x112/0x230 [ 99.401164][ T5828] hci_le_conn_complete_evt+0x18c/0x420 [ 99.401191][ T5828] hci_event_packet+0xa5c/0x1550 [ 99.401220][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 99.401243][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 99.401271][ T5828] ? kcov_remote_start+0x470/0x7d0 [ 99.401292][ T5828] ? lockdep_hardirqs_on+0x9d/0x150 [ 99.401316][ T5828] ? hci_send_to_monitor+0xdc/0x530 [ 99.401338][ T5828] hci_rx_work+0x3f3/0xdb0 [ 99.401371][ T5828] ? process_scheduled_works+0x9cb/0x18e0 [ 99.401388][ T5828] process_scheduled_works+0xac3/0x18e0 [ 99.401436][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.401465][ T5828] ? assign_work+0x367/0x3d0 [ 99.401488][ T5828] worker_thread+0x870/0xd50 [ 99.401523][ T5828] ? __kthread_parkme+0x1a8/0x200 [ 99.401546][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 99.401564][ T5828] kthread+0x7b7/0x940 [ 99.401585][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 99.401604][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401622][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401641][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401660][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401679][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.401694][ T5828] ? lockdep_hardirqs_on+0x9d/0x150 [ 99.401711][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401732][ T5828] ret_from_fork+0x4b/0x80 [ 99.401747][ T5828] ? __pfx_kthread+0x10/0x10 [ 99.401768][ T5828] ret_from_fork_asm+0x1a/0x30 [ 99.401806][ T5828] [ 99.401834][ T5828] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.704805][ T5828] Bluetooth: hci4: failed to register connection device [ 99.864396][ T5878] gspca_ov534_9: reg_w failed -71 [ 100.233158][ T5878] gspca_ov534_9: Unknown sensor 0000 [ 100.233260][ T5878] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 100.255941][ T5878] usb 5-1: USB disconnect, device number 5 [ 100.641404][ T6368] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.143'. [ 100.654685][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 101.241978][ T6382] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 101.454505][ T6384] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 101.621386][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 101.621404][ T30] audit: type=1326 audit(1743928512.733:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6389 comm="syz.2.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f8d78d169 code=0x0 [ 101.648665][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.088273][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 102.100253][ T6404] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 102.123248][ T6404] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 102.156081][ T6404] netlink: 'syz.1.157': attribute type 3 has an invalid length. [ 102.930691][ T6413] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 102.982460][ T6414] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 103.713254][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.893223][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 103.941860][ T5907] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 103.963857][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.985989][ T5907] usb 3-1: config 0 has no interface number 0 [ 104.011807][ T5907] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 104.052343][ T5907] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.129292][ T5907] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 104.151352][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.171576][ T5907] usb 3-1: Product: syz [ 104.181911][ T5907] usb 3-1: Manufacturer: syz [ 104.195842][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 104.219201][ T5907] usb 3-1: SerialNumber: syz [ 104.232725][ T5907] usb 3-1: config 0 descriptor?? [ 104.247200][ T6416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.271273][ T5907] usb-storage 3-1:0.231: USB Mass Storage device detected [ 104.303052][ T6428] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.312797][ T6428] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.321561][ T6428] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.330426][ T6428] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.377207][ T6428] vxlan0: entered promiscuous mode [ 104.397789][ T6437] netlink: 64 bytes leftover after parsing attributes in process `syz.0.167'. [ 104.488712][ T24] usb 3-1: USB disconnect, device number 3 [ 104.809659][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 105.451410][ T6466] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 105.463308][ T6466] netlink: 'syz.4.178': attribute type 2 has an invalid length. [ 105.603031][ T30] audit: type=1804 audit(1743928516.703:49): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.179" name="/newroot/39/file0" dev="tmpfs" ino=228 res=1 errno=0 [ 105.603606][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.833213][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 105.854111][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.889076][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.922638][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.965816][ T5878] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.984934][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.048639][ T5878] usb 3-1: config 0 descriptor?? [ 106.516129][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.547193][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.623137][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.640602][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.688423][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.702878][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.763188][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.783840][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.804303][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.822960][ T5878] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.849858][ T5878] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 106.889676][ T5878] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 106.915102][ T5878] microsoft 0003:045E:07DA.0001: no inputs found [ 106.925741][ T5878] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 106.963534][ T5878] usb 3-1: USB disconnect, device number 4 [ 107.066775][ T6508] lo speed is unknown, defaulting to 1000 [ 107.072673][ T6508] lo speed is unknown, defaulting to 1000 [ 107.080994][ T6508] lo speed is unknown, defaulting to 1000 [ 107.091297][ T6508] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.105629][ T6508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.130443][ T6508] lo speed is unknown, defaulting to 1000 [ 107.137596][ T6508] lo speed is unknown, defaulting to 1000 [ 107.144480][ T6508] lo speed is unknown, defaulting to 1000 [ 107.151555][ T6508] lo speed is unknown, defaulting to 1000 [ 107.158340][ T6508] lo speed is unknown, defaulting to 1000 [ 107.715475][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.826668][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 107.886772][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 107.907608][ T5878] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 107.919028][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.929693][ T5878] usb 1-1: Product: syz [ 107.937397][ T5878] usb 1-1: Manufacturer: syz [ 107.953552][ T5878] usb 1-1: SerialNumber: syz [ 107.960297][ T5878] usb 1-1: config 0 descriptor?? [ 107.976194][ T5878] gspca_main: se401-2.14.0 probing 047d:5003 [ 108.057290][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.204'. [ 108.071422][ T6535] unsupported nlmsg_type 40 [ 108.324667][ T5878] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 108.422467][ T30] audit: type=1804 audit(1743928519.533:50): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.207" name="/newroot/29/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 108.743676][ T6556] nbd1: detected capacity change from 0 to 67108884 [ 108.782806][ T6556] block nbd1: Send control failed (result -89) [ 108.821409][ T6556] block nbd1: Request send failed, requeueing [ 108.833982][ T5828] block nbd1: Receive control failed (result -32) [ 108.845939][ T25] block nbd1: Dead connection, failed to find a fallback [ 108.853236][ T25] block nbd1: shutting down sockets [ 108.859147][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.871701][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.880955][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.938374][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.946693][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.957356][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.966801][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.976217][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.984506][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.006519][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.040778][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.079809][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.100634][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.140047][ T5878] gspca_se401: read req failed req 0x06 error -19 [ 109.150448][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.161119][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.180995][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.190005][ T6556] ldm_validate_partition_table(): Disk read failed. [ 109.197257][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.215090][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.225849][ T5878] usb 1-1: USB disconnect, device number 4 [ 109.273412][ T6556] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.303146][ T6556] Buffer I/O error on dev nbd1, logical block 0, async page read [ 109.395337][ T6556] Dev nbd1: unable to read RDB block 0 [ 109.552985][ T6556] nbd1: unable to read partition table [ 109.592949][ T5824] ldm_validate_partition_table(): Disk read failed. [ 109.602425][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 109.629418][ T5824] Dev nbd1: unable to read RDB block 0 [ 109.658705][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 109.700053][ T5824] nbd1: unable to read partition table [ 109.733973][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 109.749955][ T5824] ldm_validate_partition_table(): Disk read failed. [ 109.787184][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 109.803455][ T5824] Dev nbd1: unable to read RDB block 0 [ 109.833521][ T5824] nbd1: unable to read partition table [ 109.867767][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 109.901801][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 109.935516][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 109.951387][ T6602] overlayfs: failed to clone upperpath [ 109.964648][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 110.023848][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 110.034358][ T6601] syzkaller1: entered promiscuous mode [ 110.039846][ T6601] syzkaller1: entered allmulticast mode [ 110.043231][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 110.121254][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 110.155843][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 110.191301][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 110.258130][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 110.298696][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 110.328205][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 110.341963][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 110.352889][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 110.364500][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 110.382857][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 110.437166][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 110.548474][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 110.565855][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 110.608258][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 110.632184][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 110.646933][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 110.662312][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 110.866755][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 111.095767][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 111.302626][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 111.573936][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 111.655328][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 111.668380][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 111.678940][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 111.689518][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 111.707009][ T6556] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 111.716696][ T6556] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 112.753655][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.772753][ T6653] Bluetooth: MGMT ver 1.23 [ 112.913300][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 112.923061][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.945727][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.964789][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.981000][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.001016][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.047918][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.255728][ T6668] dccp_close: ABORT with 2 bytes unread [ 113.310719][ T5907] usb 3-1: GET_CAPABILITIES returned 0 [ 113.320520][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 113.538714][ T5907] usb 3-1: USB disconnect, device number 5 [ 114.514490][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.697203][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 114.721888][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 114.773173][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.781199][ T9] usb 3-1: Product: syz [ 114.793475][ T9] usb 3-1: Manufacturer: syz [ 114.798096][ T9] usb 3-1: SerialNumber: syz [ 114.818443][ T9] usb 3-1: config 0 descriptor?? [ 114.845094][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 115.084844][ T6714] Zero length message leads to an empty skb [ 115.610564][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 115.622332][ T6720] cgroup: fork rejected by pids controller in /syz3 [ 115.636521][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 116.088652][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 116.104633][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 116.638957][ T6781] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.671845][ T9] gspca_sonixj: reg_r err -71 [ 116.688687][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 116.735965][ T9] usb 3-1: USB disconnect, device number 6 [ 117.761212][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 118.390900][ T6818] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 118.601665][ T6829] netlink: 'syz.4.289': attribute type 12 has an invalid length. [ 120.386533][ T59] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.559982][ T59] usb 3-1: config 0 has no interfaces? [ 120.577795][ T6895] overlayfs: failed to clone upperpath [ 120.588679][ T59] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.619474][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.628357][ T59] usb 3-1: SerialNumber: syz [ 120.652128][ T59] usb 3-1: config 0 descriptor?? [ 120.700077][ T6900] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 121.233883][ T9] libceph: connect (1)[c::]:6789 error -101 [ 121.246813][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 121.515029][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 121.528081][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 121.860127][ T24] usb 3-1: USB disconnect, device number 7 [ 121.966882][ T6906] ceph: No mds server is up or the cluster is laggy [ 122.076255][ T9] libceph: connect (1)[c::]:6789 error -101 [ 122.656164][ T6937] gtp0: entered promiscuous mode [ 122.723396][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 123.949503][ T30] audit: type=1326 audit(1743928535.063:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.0.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f63b8d169 code=0x0 [ 124.294429][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 124.329145][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.353582][ T6971] batadv_slave_0: entered promiscuous mode [ 124.547743][ T6983] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.866334][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 125.123295][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.313215][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 125.362950][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 125.511570][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.689360][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.931964][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.083138][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.140270][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.210485][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.259378][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.311812][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.341443][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.383908][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.391362][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.460627][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.492674][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.530411][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.563276][ T5985] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.577540][ T24] usb 1-1: string descriptor 0 read error: -22 [ 126.584270][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.599840][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.636398][ T24] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.715551][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.767779][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.811899][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.820416][ T5985] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 126.872026][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.902929][ T24] usb 1-1: USB disconnect, device number 5 [ 126.922591][ T5985] usb 5-1: config 0 descriptor?? [ 127.390455][ T5985] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 127.410307][ T5985] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 127.423789][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.445808][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.456711][ T5985] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 127.475671][ T5985] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 127.483467][ T5985] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 127.501850][ T5985] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 127.790166][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.812394][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.963294][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.978993][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 128.101951][ T5985] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 128.116466][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 128.132685][ T5985] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 128.146514][ T5985] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 128.157714][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 128.157757][ T5985] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 128.163140][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.171436][ T5985] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 128.206889][ T5985] usb 5-1: USB disconnect, device number 6 [ 128.453159][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 128.460037][ T9] usb 1-1: config index 0 descriptor too short (expected 8978, got 18) [ 128.469182][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.481352][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 128.490822][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.499410][ T9] usb 1-1: Product: syz [ 128.507917][ T9] usb 1-1: Manufacturer: syz [ 128.512654][ T9] usb 1-1: SerialNumber: syz [ 128.540723][ T9] usb 1-1: config 0 descriptor?? [ 130.814202][ T5878] usb 1-1: USB disconnect, device number 6 [ 132.235321][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 132.265772][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 132.819679][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826819][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.663265][ T5827] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.888772][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.908226][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.929228][ T5827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.969480][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.987069][ T5827] usb 1-1: SerialNumber: syz [ 135.520517][ T5827] usb 1-1: 0:2 : does not exist [ 135.539502][ T5827] usb 1-1: unit 5: unexpected type 0x0a [ 135.617773][ T5827] usb 1-1: USB disconnect, device number 7 [ 135.860998][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.106768][ T30] audit: type=1326 audit(1743928547.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.213200][ T30] audit: type=1326 audit(1743928547.223:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.280081][ T30] audit: type=1326 audit(1743928547.253:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.330717][ T30] audit: type=1326 audit(1743928547.253:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.399504][ T30] audit: type=1326 audit(1743928547.253:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.499588][ T30] audit: type=1326 audit(1743928547.253:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 136.563405][ T30] audit: type=1326 audit(1743928547.253:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ad8d169 code=0x7fc00000 [ 137.752219][ T30] audit: type=1800 audit(1743928548.863:59): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.434" name="file1" dev="overlay" ino=385 res=0 errno=0 [ 138.406391][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 138.422664][ T7267] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.442'. [ 138.462887][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 138.639241][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 138.725026][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.743362][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.751953][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.760691][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.769170][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.846505][ T7277] lo speed is unknown, defaulting to 1000 [ 139.108738][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 139.314351][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.331684][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.360916][ T7277] bridge_slave_0: entered allmulticast mode [ 139.378341][ T7277] bridge_slave_0: entered promiscuous mode [ 139.392239][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.420164][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.430302][ T7277] bridge_slave_1: entered allmulticast mode [ 139.468475][ T7277] bridge_slave_1: entered promiscuous mode [ 139.594809][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.634372][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.703921][ T7304] overlayfs: failed to clone upperpath [ 139.891319][ T7277] team0: Port device team_slave_0 added [ 139.908703][ T7277] team0: Port device team_slave_1 added [ 140.469087][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.485510][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.566308][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.613833][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.620795][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.727441][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.760584][ T7324] bridge: RTM_NEWNEIGH with invalid ether address [ 140.819338][ T5828] Bluetooth: hci1: command tx timeout [ 142.570344][ T7352] Driver unsupported XDP return value 0 on prog (id 93) dev N/A, expect packet loss! [ 142.895857][ T5828] Bluetooth: hci1: command tx timeout [ 143.590648][ T7339] tipc: Enabling of bearer rejected, failed to enable media [ 143.621861][ T7277] hsr_slave_0: entered promiscuous mode [ 143.661369][ T7277] hsr_slave_1: entered promiscuous mode [ 143.684254][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.691834][ T7277] Cannot create hsr debugfs directory [ 143.901082][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.248647][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.511771][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 144.528928][ T7388] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 144.647325][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.736733][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.911431][ T7393] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 144.975007][ T5828] Bluetooth: hci1: command tx timeout [ 145.124878][ T7277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.179152][ T7277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.244013][ T7277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.307520][ T7277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.311952][ T7402] overlayfs: failed to clone upperpath [ 145.367967][ T7400] lo: entered allmulticast mode [ 145.414657][ T7400] dvmrp1: entered allmulticast mode [ 145.436067][ T7399] lo: left allmulticast mode [ 145.453516][ T7399] dvmrp1: left allmulticast mode [ 145.574425][ T12] bridge_slave_1: left allmulticast mode [ 145.584094][ T12] bridge_slave_1: left promiscuous mode [ 145.590981][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.720780][ T12] bridge_slave_0: left allmulticast mode [ 145.738380][ T12] bridge_slave_0: left promiscuous mode [ 145.760258][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.671960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.687014][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.697350][ T12] bond0 (unregistering): Released all slaves [ 146.738951][ T7449] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.900642][ T7456] mmap: syz.3.502 (7456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.912945][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.053394][ T5828] Bluetooth: hci1: command tx timeout [ 147.083122][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 147.093924][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 147.109780][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.135853][ T9] usb 3-1: Product: syz [ 147.140038][ T9] usb 3-1: Manufacturer: syz [ 147.147166][ T9] usb 3-1: SerialNumber: syz [ 147.176390][ T9] usb 3-1: config 0 descriptor?? [ 147.253615][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.372697][ T12] hsr_slave_0: left promiscuous mode [ 147.394853][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.424578][ T12] hsr_slave_1: left promiscuous mode [ 147.446920][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.480504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.522622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.549658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.631726][ T12] veth1_macvtap: left promiscuous mode [ 147.644602][ T12] veth0_macvtap: left promiscuous mode [ 147.651225][ T12] veth1_vlan: left promiscuous mode [ 147.657756][ T12] veth0_vlan: left promiscuous mode [ 147.843272][ T5879] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 148.018169][ T5879] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 148.030049][ T5879] usb 2-1: config 0 has no interface number 0 [ 148.038988][ T5879] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.052987][ T5879] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.065852][ T5879] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 148.078079][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.090672][ T5879] usb 2-1: config 0 descriptor?? [ 148.244745][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 148.260145][ T9] usb 3-1: USB disconnect, device number 8 [ 148.378439][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.410663][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.518982][ T5879] uclogic 0003:5543:0522.0003: collection stack underflow [ 148.526211][ T5879] uclogic 0003:5543:0522.0003: item 0 1 0 12 parsing failed [ 148.534884][ T5879] uclogic 0003:5543:0522.0003: parse failed [ 148.540909][ T5879] uclogic 0003:5543:0522.0003: probe with driver uclogic failed with error -22 [ 148.649183][ T7500] netlink: 'syz.3.515': attribute type 13 has an invalid length. [ 148.736392][ T5985] usb 2-1: USB disconnect, device number 5 [ 148.988836][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.996605][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.089071][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.100683][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.172816][ T7500] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.181227][ T7500] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.193117][ T7500] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.201473][ T7500] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.277034][ T9] lo speed is unknown, defaulting to 1000 [ 149.287268][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.289855][ T9] syz2: Port: 1 Link DOWN [ 149.341498][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.348675][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.409664][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.416882][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.619716][ T7518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.519'. [ 149.668055][ T7518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'. [ 149.839943][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.013448][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 150.020621][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.547861][ T7277] veth0_vlan: entered promiscuous mode [ 150.600826][ T7277] veth1_vlan: entered promiscuous mode [ 150.680159][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 150.776369][ T7277] veth0_macvtap: entered promiscuous mode [ 150.805776][ T7277] veth1_macvtap: entered promiscuous mode [ 150.861112][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.904110][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.935533][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.962609][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.996538][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.054778][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.115648][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.152088][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.176442][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.202320][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.235210][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.267347][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.385782][ T7277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.410608][ T7277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.423122][ T7277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.433146][ T7277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.688494][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.725360][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.863007][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.884277][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.211599][ T7611] overlayfs: failed to clone upperpath [ 152.403584][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.437'. [ 152.681006][ T30] audit: type=1800 audit(1743928563.793:60): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.545" name="bus" dev="tmpfs" ino=940 res=0 errno=0 [ 154.844743][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.554'. [ 156.068713][ T976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.263016][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.309018][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.333756][ T976] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 156.382339][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.497917][ T976] usb 2-1: config 0 descriptor?? [ 156.942249][ T7730] tipc: Failed to remove unknown binding: 66,1,1/0:2046605108/2046605110 [ 156.943480][ T976] hid-led 0003:1D34:0004.0004: unbalanced collection at end of report description [ 156.974860][ T976] hid-led 0003:1D34:0004.0004: probe with driver hid-led failed with error -22 [ 157.137473][ T5985] usb 2-1: USB disconnect, device number 6 [ 158.661638][ T7799] tipc: Failed to remove unknown binding: 66,1,1/0:830530915/830530917 [ 158.670891][ T7799] tipc: Failed to remove unknown binding: 66,1,1/0:830530915/830530917 [ 158.761730][ T7802] netlink: 'syz.5.584': attribute type 1 has an invalid length. [ 158.773542][ T7802] netlink: 3 bytes leftover after parsing attributes in process `syz.5.584'. [ 158.796970][ T7802] batadv1: entered promiscuous mode [ 158.810778][ T7802] batadv1: entered allmulticast mode [ 159.066408][ T7816] nbd4: detected capacity change from 0 to 67108884 [ 159.078998][ T6054] block nbd4: Send control failed (result -89) [ 159.087246][ T6054] block nbd4: Request send failed, requeueing [ 159.135316][ T5828] block nbd4: Receive control failed (result -32) [ 159.294850][ T25] block nbd4: Dead connection, failed to find a fallback [ 159.301942][ T25] block nbd4: shutting down sockets [ 159.307352][ T25] blk_print_req_error: 154 callbacks suppressed [ 159.307365][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.323192][ T25] buffer_io_error: 114 callbacks suppressed [ 159.323205][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.337095][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.349548][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.357812][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.366910][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.374937][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.384288][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.392157][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.401203][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.409286][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.418347][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.426260][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.435300][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.443238][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.452543][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.460394][ T6054] ldm_validate_partition_table(): Disk read failed. [ 159.467079][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.476147][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.499660][ T6054] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.552606][ T6054] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.586719][ T6054] Dev nbd4: unable to read RDB block 0 [ 159.606159][ T6054] nbd4: unable to read partition table [ 159.630165][ T7816] ldm_validate_partition_table(): Disk read failed. [ 159.674630][ T7816] Dev nbd4: unable to read RDB block 0 [ 159.719366][ T7816] nbd4: unable to read partition table [ 159.763783][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 159.774955][ T6054] ldm_validate_partition_table(): Disk read failed. [ 159.821009][ T6054] Dev nbd4: unable to read RDB block 0 [ 159.830833][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 159.867709][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 159.875711][ T6054] nbd4: unable to read partition table [ 159.898008][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 159.952302][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 160.028040][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 160.109829][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 160.152514][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 160.224045][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 160.249847][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 160.296766][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 160.311111][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 160.328998][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 160.340267][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 160.356803][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 160.370112][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 160.399203][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 160.415494][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 160.444391][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 160.459624][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 160.471031][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 160.495234][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 160.515714][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 160.563718][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 160.586215][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 160.613559][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 160.647919][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 160.682362][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 160.726522][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 160.763365][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 160.790876][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 160.826445][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 160.877366][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 160.936587][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 160.955726][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'. [ 160.984977][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 160.997643][ T7816] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 161.052352][ T7816] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 161.780319][ T7885] evm: overlay not supported [ 161.830029][ T7890] netlink: 'syz.5.613': attribute type 1 has an invalid length. [ 161.861067][ T7890] netlink: 224 bytes leftover after parsing attributes in process `syz.5.613'. [ 163.564623][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.626'. [ 163.701484][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.892504][ T7949] bridge_slave_1 (unregistering): left allmulticast mode [ 163.938349][ T7949] bridge_slave_1 (unregistering): left promiscuous mode [ 163.963929][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.974657][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.143187][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 164.196903][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.219126][ T30] audit: type=1800 audit(1743928575.333:61): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.631" name="nullb0" dev="tmpfs" ino=1049 res=0 errno=0 [ 164.253283][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.280516][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 164.334063][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.398293][ T24] hub 2-1:4.0: USB hub found [ 164.981812][ T24] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 165.373607][ T5879] usb 2-1: USB disconnect, device number 7 [ 166.343823][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.360033][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.370904][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.390628][ T8005] block nbd0: Unsupported socket: shutdown callout must be supported. [ 167.794564][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 167.803932][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 168.040226][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 168.295461][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 168.552452][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 168.563943][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 169.541385][ T9] libceph: connect (1)[c::]:6789 error -101 [ 169.553432][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 169.813846][ T976] libceph: connect (1)[c::]:6789 error -101 [ 169.861216][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 170.172707][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 170.277367][ T8082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.311387][ T8085] macsec1: entered promiscuous mode [ 170.321318][ T8085] bond1: entered promiscuous mode [ 170.340178][ T8066] ceph: No mds server is up or the cluster is laggy [ 170.405928][ T8085] bond1: left promiscuous mode [ 170.725496][ T5200] udevd[5200]: worker [6054] terminated by signal 33 (Unknown signal 33) [ 170.778952][ T5200] udevd[5200]: worker [6054] failed while handling '/devices/virtual/block/loop5' [ 172.132163][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 172.183588][ T8124] bridge_slave_1 (unregistering): left allmulticast mode [ 172.211117][ T8124] bridge_slave_1 (unregistering): left promiscuous mode [ 172.239152][ T8130] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.248670][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.833330][ T8146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.367020][ T5985] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.544684][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 173.551262][ T5985] usb 3-1: config 7 has an invalid interface number: 247 but max is 0 [ 173.587568][ T5985] usb 3-1: config 7 has no interface number 0 [ 173.620670][ T5985] usb 3-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.675896][ T5985] usb 3-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.705817][ T5985] usb 3-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 173.802806][ T8175] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.804940][ T5985] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 173.825745][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 173.827985][ T8175] overlayfs: failed to set xattr on upper [ 173.851374][ T8175] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.863319][ T5985] usb 3-1: Product: syz [ 173.866158][ T8175] overlayfs: ...falling back to index=off. [ 173.872027][ T5985] usb 3-1: Manufacturer: syz [ 173.877919][ T8175] overlayfs: ...falling back to uuid=null. [ 173.944768][ T5985] usb 3-1: SerialNumber: syz [ 174.081790][ T8181] overlayfs: failed to clone upperpath [ 174.096813][ T5985] ni6501 3-1:7.247: driver 'ni6501' failed to auto-configure device. [ 174.185000][ T5985] usb 3-1: USB disconnect, device number 9 [ 174.295608][ T30] audit: type=1804 audit(1743928585.413:62): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.689" name="file0" dev="tmpfs" ino=1109 res=1 errno=0 [ 174.327204][ T8190] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.150456][ T8231] syzkaller1: entered promiscuous mode [ 176.164076][ T8231] syzkaller1: entered allmulticast mode [ 176.278414][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.954251][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 177.143207][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 177.183179][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 177.206428][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.271396][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.564920][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.583282][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.895186][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 177.949746][ T9] usbtmc 3-1:16.0: can't read capabilities [ 178.051689][ T24] usb 3-1: USB disconnect, device number 10 [ 180.983180][ T5985] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.143219][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 181.164004][ T5985] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 181.193269][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.230152][ T5985] usb 6-1: config 0 descriptor?? [ 181.459603][ T5985] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 183.079547][ T5985] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 183.110533][ T5985] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 183.124250][ T5985] asix 6-1:0.0: probe with driver asix failed with error -71 [ 183.168940][ T5985] usb 6-1: USB disconnect, device number 2 [ 183.264319][ T8357] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 183.298518][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.722'. [ 183.346139][ T8354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.359261][ T8354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.392554][ T8357] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 183.402398][ T8357] team0: Failed to send options change via netlink (err -105) [ 183.411609][ T8357] team0: Port device geneve0 added [ 183.521235][ T8354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.537751][ T8354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.598164][ T8364] overlayfs: failed to clone upperpath [ 184.139134][ T8371] capability: warning: `syz.5.728' uses 32-bit capabilities (legacy support in use) [ 184.141923][ T8354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.162953][ T8354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.197931][ T8367] pimreg3: entered allmulticast mode [ 184.204906][ T8366] pimreg3: left allmulticast mode [ 184.257894][ T8354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.268254][ T8354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.497331][ T8354] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.506292][ T8354] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.533549][ T8354] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.544038][ T8354] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.571432][ T8354] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.580954][ T8354] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.618209][ T8354] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.648887][ T8354] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.790559][ T8387] syz_tun: entered allmulticast mode [ 184.802350][ T8387] lo: entered allmulticast mode [ 184.842187][ T8386] syz_tun: left allmulticast mode [ 185.787805][ T8412] bridge0: entered promiscuous mode [ 185.818061][ T8412] bridge0: port 2(macsec1) entered blocking state [ 185.825894][ T8412] bridge0: port 2(macsec1) entered disabled state [ 185.835061][ T8412] macsec1: entered allmulticast mode [ 185.840524][ T8412] bridge0: entered allmulticast mode [ 185.847939][ T8412] macsec1: left allmulticast mode [ 185.853603][ T8412] bridge0: left allmulticast mode [ 185.860301][ T8412] bridge0: left promiscuous mode [ 185.920218][ T8417] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.746'. [ 185.976450][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 187.093209][ T5827] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.255400][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 187.280740][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 105, changing to 10 [ 187.334955][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1998, setting to 1024 [ 187.346568][ T5827] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 187.398979][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.428002][ T5827] usb 6-1: config 0 descriptor?? [ 187.461637][ T8431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.551257][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 187.910872][ T5827] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 188.158868][ T5827] usb 6-1: USB disconnect, device number 3 [ 188.453150][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.613301][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 188.621458][ T5878] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 188.631751][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.639835][ T5878] usb 2-1: Product: syz [ 188.644125][ T5878] usb 2-1: Manufacturer: syz [ 188.648727][ T5878] usb 2-1: SerialNumber: syz [ 188.656229][ T5878] usb 2-1: config 0 descriptor?? [ 188.866881][ T5878] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.966449][ T8474] overlayfs: failed to clone lowerpath [ 188.978367][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 189.235350][ T8487] syz_tun: entered allmulticast mode [ 189.248035][ T8487] syz_tun: left allmulticast mode [ 189.485751][ T5878] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 189.531205][ T5878] usb 2-1: USB disconnect, device number 8 [ 189.635253][ T8504] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 189.863127][ T5985] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.033288][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 190.050355][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.090888][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.107126][ T5985] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 190.116674][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.128994][ T5985] usb 5-1: config 0 descriptor?? [ 190.551664][ T5985] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 190.752489][ T24] usb 5-1: USB disconnect, device number 7 [ 191.949647][ T8571] ======================================================= [ 191.949647][ T8571] WARNING: The mand mount option has been deprecated and [ 191.949647][ T8571] and is ignored by this kernel. Remove the mand [ 191.949647][ T8571] option from the mount to silence this warning. [ 191.949647][ T8571] ======================================================= [ 192.009130][ T8571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.893261][ T5985] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.923263][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.053399][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 193.073463][ T5985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.083215][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 193.091710][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 193.100099][ T9] usb 2-1: config 0 has no interface number 0 [ 193.111226][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 193.119973][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 193.132034][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.145709][ T9] usb 2-1: Product: syz [ 193.157828][ T9] usb 2-1: Manufacturer: syz [ 193.166973][ T9] usb 2-1: SerialNumber: syz [ 193.172676][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 193.187329][ T9] usb 2-1: config 0 descriptor?? [ 193.187485][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 193.269224][ T5985] usb 5-1: SerialNumber: syz [ 193.291335][ T5985] usb 5-1: config 0 descriptor?? [ 193.436227][ T5985] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 193.444865][ T5985] usb 5-1: No valid video chain found. [ 193.643959][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.662916][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.701339][ T5879] usb 5-1: USB disconnect, device number 8 [ 193.849368][ T8609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=892417585 (1784835170 ns) > initial count (1751674978 ns). Using initial count to start timer. [ 193.882437][ T8609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3442273030 (55076368480 ns) > initial count (33921318416 ns). Using initial count to start timer. [ 193.917467][ T8613] overlayfs: failed to clone upperpath [ 194.133674][ T8622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.156454][ T8622] veth0_to_batadv: entered promiscuous mode [ 194.166408][ T8622] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 194.259772][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273130][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287057][ T5879] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.377960][ T8631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.443142][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 194.455728][ T5879] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 194.470954][ T5879] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.483770][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.494767][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.505293][ T5879] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.519380][ T5879] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.528646][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.756181][ T5879] usb 6-1: usb_control_msg returned -32 [ 194.764672][ T5879] usbtmc 6-1:16.0: can't read capabilities [ 195.046597][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 195.081016][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 195.119387][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 195.146608][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 195.168981][ T8638] usbtmc 6-1:16.0: control status returned 0 [ 195.202522][ T9] usb 2-1: USB disconnect, device number 9 [ 195.418087][ T5879] usb 6-1: USB disconnect, device number 4 [ 195.803527][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 195.928621][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 195.966473][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.990112][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.998950][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.006330][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.019904][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.030257][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.148229][ T8655] lo speed is unknown, defaulting to 1000 [ 196.171108][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.202809][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.220634][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.270713][ T24] usb 5-1: config 0 descriptor?? [ 196.334536][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 196.340734][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.347209][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 196.519832][ T5985] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.738789][ T24] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 196.766307][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input7 [ 196.778952][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 196.835352][ T5985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.872190][ T5985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.919502][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.922155][ T5985] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 196.938459][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.950653][ T8655] bridge_slave_0: entered allmulticast mode [ 196.961417][ T8655] bridge_slave_0: entered promiscuous mode [ 197.000086][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.019117][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.029462][ T8655] bridge_slave_1: entered allmulticast mode [ 197.031710][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.049526][ T5985] usb 2-1: SerialNumber: syz [ 197.067574][ T24] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 197.071975][ T8655] bridge_slave_1: entered promiscuous mode [ 197.329777][ T9] usb 5-1: USB disconnect, device number 9 [ 197.338023][ T5985] usb 2-1: 0:2 : does not exist [ 197.428163][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.453443][ T5985] usb 2-1: USB disconnect, device number 10 [ 197.466236][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.580981][ T8655] team0: Port device team_slave_0 added [ 197.615953][ T8655] team0: Port device team_slave_1 added [ 197.734967][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.768967][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.801379][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.815931][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.822944][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.893495][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.103437][ T5835] Bluetooth: hci5: command tx timeout [ 198.197512][ T8655] hsr_slave_0: entered promiscuous mode [ 198.237151][ T8655] hsr_slave_1: entered promiscuous mode [ 198.623485][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.793146][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 198.811421][ T5878] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 198.816469][ T8655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.837343][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.846190][ T8655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.887092][ T5878] usb 6-1: config 0 descriptor?? [ 198.900460][ T8655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.919561][ T8655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.108705][ T5878] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 199.111110][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.176191][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.199903][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.207086][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.241091][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.248283][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.333013][ T8655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.606702][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.636840][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.815134][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 199.822717][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.845758][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.880133][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 199.891340][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.916446][ T24] usb 2-1: config 0 descriptor?? [ 200.169509][ T8655] veth0_vlan: entered promiscuous mode [ 200.175230][ T5835] Bluetooth: hci5: command tx timeout [ 200.199824][ T8655] veth1_vlan: entered promiscuous mode [ 200.239240][ T8655] veth0_macvtap: entered promiscuous mode [ 200.250379][ T8655] veth1_macvtap: entered promiscuous mode [ 200.301885][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.316015][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.326309][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.337817][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.340571][ T24] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 200.348128][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.348175][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.349759][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.373148][ T24] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 200.399962][ T24] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 200.405461][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.427147][ T24] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 200.436725][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.437680][ T24] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 200.459164][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.462123][ T24] appleir 0003:05AC:8241.0008: No inputs registered, leaving [ 200.482391][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.494410][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.506044][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.518031][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.529987][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.542514][ T24] appleir 0003:05AC:8241.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 200.562431][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.580561][ T8655] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.599192][ T8655] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.602852][ T9] usb 2-1: USB disconnect, device number 11 [ 200.619259][ T8655] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.639052][ T8655] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.731345][ T5878] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 200.761149][ T5878] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 200.787505][ T5878] asix 6-1:0.0: probe with driver asix failed with error -71 [ 200.826632][ T5878] usb 6-1: USB disconnect, device number 5 [ 200.870023][ T6042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.895584][ T6042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.966146][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.986943][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.080455][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 201.133267][ T8758] netlink: 260 bytes leftover after parsing attributes in process `syz.4.874'. [ 201.388069][ T8769] macsec1: entered promiscuous mode [ 201.408519][ T8769] gretap0: entered promiscuous mode [ 201.429689][ T8769] macsec1: entered allmulticast mode [ 201.446209][ T8769] gretap0: entered allmulticast mode [ 201.464566][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 201.485553][ T8769] gretap0: left allmulticast mode [ 201.490617][ T8769] gretap0: left promiscuous mode [ 201.521127][ T8777] vcan0: tx drop: invalid sa for name 0x0000000400000000 [ 201.650410][ T8780] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 201.713514][ T8780] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 201.758942][ T8784] tipc: Enabling of bearer rejected, failed to enable media [ 201.993405][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.183232][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 202.201994][ T9] usb 6-1: config 0 has no interfaces? [ 202.221130][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 202.252454][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.263262][ T5835] Bluetooth: hci5: command tx timeout [ 202.283081][ T9] usb 6-1: Product: syz [ 202.293422][ T9] usb 6-1: Manufacturer: syz [ 202.303091][ T9] usb 6-1: SerialNumber: syz [ 202.320295][ T9] usb 6-1: config 0 descriptor?? [ 202.551399][ T9] usb 6-1: USB disconnect, device number 6 [ 202.933219][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.113686][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 203.121377][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 203.129198][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.151605][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.208596][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.252950][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.271560][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 203.280155][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.306949][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.374753][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.513265][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.526148][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 203.534332][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.558788][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.570723][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.584174][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.598745][ T24] usb 2-1: string descriptor 0 read error: -22 [ 203.607514][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.616756][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.663153][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 204.113580][ T9] usb 2-1: USB disconnect, device number 12 [ 204.334657][ T5835] Bluetooth: hci5: command tx timeout [ 206.243097][ T8842] syz.6.903: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.342050][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.6.903 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 206.342082][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.342092][ T8842] Call Trace: [ 206.342100][ T8842] [ 206.342108][ T8842] dump_stack_lvl+0x241/0x360 [ 206.342151][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.342174][ T8842] ? __pfx__printk+0x10/0x10 [ 206.342202][ T8842] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 206.342230][ T8842] ? __rcu_read_unlock+0xa1/0x110 [ 206.342257][ T8842] warn_alloc+0x27c/0x410 [ 206.342284][ T8842] ? __pfx_warn_alloc+0x10/0x10 [ 206.342311][ T8842] ? packet_set_ring+0x6e7/0x24b0 [ 206.342333][ T8842] ? __get_vm_area_node+0x1c8/0x2d0 [ 206.342351][ T8842] ? __get_vm_area_node+0x25c/0x2d0 [ 206.342376][ T8842] __vmalloc_node_range_noprof+0x634/0x1390 [ 206.342427][ T8842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.342453][ T8842] ? rcu_is_watching+0x15/0xb0 [ 206.342475][ T8842] ? packet_set_ring+0x6e7/0x24b0 [ 206.342496][ T8842] vzalloc_noprof+0x79/0x90 [ 206.342515][ T8842] ? packet_set_ring+0x6e7/0x24b0 [ 206.342535][ T8842] packet_set_ring+0x6e7/0x24b0 [ 206.342582][ T8842] ? __pfx_packet_set_ring+0x10/0x10 [ 206.342625][ T8842] ? _copy_from_user+0x95/0xb0 [ 206.342653][ T8842] packet_setsockopt+0x1024/0x1870 [ 206.342675][ T8842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.342701][ T8842] ? __pfx_packet_setsockopt+0x10/0x10 [ 206.342727][ T8842] ? futex_wait+0x287/0x370 [ 206.342746][ T8842] ? __pfx_futex_wait+0x10/0x10 [ 206.342774][ T8842] ? __lock_acquire+0xad5/0xd80 [ 206.342795][ T8842] ? __lock_acquire+0xad5/0xd80 [ 206.342819][ T8842] ? __pfx_packet_setsockopt+0x10/0x10 [ 206.342839][ T8842] do_sock_setsockopt+0x3b1/0x710 [ 206.342864][ T8842] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.342879][ T8842] ? __fget_files+0x2a/0x420 [ 206.342904][ T8842] ? __fget_files+0x39d/0x420 [ 206.342921][ T8842] ? __fget_files+0x2a/0x420 [ 206.342949][ T8842] __x64_sys_setsockopt+0x1ee/0x280 [ 206.342973][ T8842] do_syscall_64+0xf3/0x230 [ 206.342994][ T8842] ? clear_bhb_loop+0x45/0xa0 [ 206.343014][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.343033][ T8842] RIP: 0033:0x7f95f118d169 [ 206.343052][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.343072][ T8842] RSP: 002b:00007f95f2091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.343089][ T8842] RAX: ffffffffffffffda RBX: 00007f95f13a6080 RCX: 00007f95f118d169 [ 206.343100][ T8842] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 206.343109][ T8842] RBP: 00007f95f120e2a0 R08: 000000000000001c R09: 0000000000000000 [ 206.343118][ T8842] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 206.343127][ T8842] R13: 0000000000000000 R14: 00007f95f13a6080 R15: 00007ffd221193a8 [ 206.343152][ T8842] [ 206.799854][ T8842] Mem-Info: [ 206.803131][ T8842] active_anon:359 inactive_anon:6556 isolated_anon:0 [ 206.803131][ T8842] active_file:12700 inactive_file:39518 isolated_file:0 [ 206.803131][ T8842] unevictable:780 dirty:325 writeback:0 [ 206.803131][ T8842] slab_reclaimable:10696 slab_unreclaimable:118800 [ 206.803131][ T8842] mapped:30613 shmem:1458 pagetables:1102 [ 206.803131][ T8842] sec_pagetables:0 bounce:0 [ 206.803131][ T8842] kernel_misc_reclaimable:0 [ 206.803131][ T8842] free:1295909 free_pcp:3511 free_cma:0 [ 206.848878][ T8842] Node 0 active_anon:1436kB inactive_anon:26224kB active_file:50724kB inactive_file:158072kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:122452kB dirty:1300kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11588kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.885118][ T8842] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.916778][ T8842] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.096031][ T8842] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 207.115726][ T8842] Node 0 DMA32 free:1274064kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:1432kB inactive_anon:27392kB active_file:50632kB inactive_file:158060kB unevictable:4084kB writepending:1328kB present:3129332kB managed:2547752kB mlocked:2500kB bounce:0kB free_pcp:4048kB local_pcp:2432kB free_cma:0kB [ 207.179896][ T8842] lowmem_reserve[]: 0 0 0 0 0 [ 207.206272][ T8842] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.251514][ T8842] lowmem_reserve[]: 0 0 0 0 0 [ 207.277150][ T8842] Node 1 Normal free:3892888kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6100kB local_pcp:5844kB free_cma:0kB [ 207.313080][ T8842] lowmem_reserve[]: 0 0 0 0 0 [ 207.320509][ T8842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.354348][ T8842] Node 0 DMA32: 19*4kB (UME) 10*8kB (UME) 62*16kB (ME) 476*32kB (ME) 236*64kB (UME) 39*128kB (UME) 15*256kB (UM) 30*512kB (UM) 19*1024kB (UME) 4*2048kB (UM) 290*4096kB (M) = 1271164kB [ 207.392025][ T8842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.437597][ T8842] Node 1 Normal: 2*4kB (ME) 4*8kB (UME) 9*16kB (UME) 13*32kB (UME) 7*64kB (ME) 3*128kB (UME) 17*256kB (UME) 8*512kB (UME) 10*1024kB (UME) 5*2048kB (UE) 943*4096kB (M) = 3892888kB [ 207.457174][ T8842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.466949][ T8842] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 207.477600][ T8842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.487918][ T8842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.497426][ T8842] 55201 total pagecache pages [ 207.502186][ T8842] 0 pages in swap cache [ 207.506507][ T8842] Free swap = 124996kB [ 207.512337][ T8842] Total swap = 124996kB [ 207.516645][ T8842] 2097051 pages RAM [ 207.520594][ T8842] 0 pages HighMem/MovableOnly [ 207.525495][ T8842] 428454 pages reserved [ 207.529770][ T8842] 0 pages cma reserved [ 208.426681][ T8869] 9pnet_fd: p9_fd_create_unix (8869): problem connecting socket: ./file0: -111 [ 210.622898][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.925'. [ 210.733592][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.774891][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.896021][ T13] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 210.939171][ T30] audit: type=1326 audit(1743928622.053:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 210.970778][ T30] audit: type=1326 audit(1743928622.053:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.022787][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.035552][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.053479][ T30] audit: type=1326 audit(1743928622.053:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.079255][ T8909] bond0: (slave rose0): Enslaving as an active interface with an up link [ 211.099622][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.119033][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.130778][ T30] audit: type=1326 audit(1743928622.053:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.155389][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.172851][ T30] audit: type=1326 audit(1743928622.053:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.208053][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.231071][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.238902][ T30] audit: type=1326 audit(1743928622.053:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.272639][ T30] audit: type=1326 audit(1743928622.053:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.301901][ T30] audit: type=1326 audit(1743928622.053:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.333146][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.340979][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.377339][ T30] audit: type=1326 audit(1743928622.053:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.418973][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.428543][ T8929] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.932'. [ 211.438038][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 211.447961][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.511870][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.520301][ T30] audit: type=1326 audit(1743928622.053:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8911 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca18d169 code=0x7ffc0000 [ 211.557386][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.584970][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.597049][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.718080][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.734284][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.806734][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.814844][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.895027][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.920710][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.933435][ T5985] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 212.032769][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.052941][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.096837][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.105441][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 212.128343][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.137058][ T5985] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.146239][ T5985] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.166090][ T5985] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.228630][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.260818][ T5985] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.295502][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.513133][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.541467][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.553103][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.576297][ T5985] usb 7-1: Product: syz [ 212.598411][ T5985] usb 7-1: Manufacturer: syz [ 212.652383][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.669904][ T5985] usb 7-1: SerialNumber: syz [ 212.696583][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.724157][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.732019][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.857370][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.902227][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.005774][ T6045] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 213.120064][ T5985] usb 7-1: 0:2 : does not exist [ 213.139612][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.162722][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.227424][ T1309] ------------[ cut here ]------------ [ 213.233463][ T1309] WARNING: CPU: 1 PID: 1309 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3f8/0x470 [ 213.243878][ T1309] Modules linked in: [ 213.247987][ T1309] CPU: 1 UID: 0 PID: 1309 Comm: kworker/u8:6 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 213.260107][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.270443][ T1309] Workqueue: cfg80211 cfg80211_event_work [ 213.276395][ T1309] RIP: 0010:__cfg80211_ibss_joined+0x3f8/0x470 [ 213.282541][ T1309] Code: 0f 85 86 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 04 23 47 f6 90 0f 0b 90 eb b9 e8 f9 22 47 f6 90 <0f> 0b 90 49 bd 00 00 00 00 00 fc ff df eb a4 e8 e4 22 47 f6 90 0f [ 213.302425][ T1309] RSP: 0018:ffffc90004347980 EFLAGS: 00010293 [ 213.308848][ T1309] RAX: ffffffff8b7c2387 RBX: 0000000000000006 RCX: ffff888028245a00 [ 213.317697][ T1309] RDX: 0000000000000000 RSI: ffffffff8e687a2c RDI: ffffffff8ca0e220 [ 213.326210][ T1309] RBP: ffffc90004347a60 R08: ffffffff905eb677 R09: 1ffffffff20bd6ce [ 213.334312][ T1309] R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: ffff88807e9b0d90 [ 213.342341][ T1309] R13: dffffc0000000000 R14: ffff8880285f3338 R15: ffffffff93657020 [ 213.350378][ T1309] FS: 0000000000000000(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000 [ 213.359346][ T1309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.365955][ T1309] CR2: 000000110c2e7263 CR3: 000000002a9de000 CR4: 00000000003526f0 [ 213.373962][ T1309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.381934][ T1309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.389934][ T1309] Call Trace: [ 213.393253][ T1309] [ 213.396186][ T1309] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 213.402083][ T1309] ? lockdep_hardirqs_on+0x9d/0x150 [ 213.407305][ T1309] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 213.413490][ T1309] ? cfg80211_event_work+0x24/0x60 [ 213.418602][ T1309] ? __pfx___mutex_lock+0x10/0x10 [ 213.423997][ T1309] ? __pfx_preempt_schedule+0x10/0x10 [ 213.429469][ T1309] cfg80211_process_wdev_events+0x3af/0x510 [ 213.435441][ T1309] cfg80211_process_rdev_events+0xac/0x110 [ 213.441276][ T1309] ? process_scheduled_works+0x9cb/0x18e0 [ 213.447065][ T1309] cfg80211_event_work+0x2c/0x60 [ 213.452007][ T1309] process_scheduled_works+0xac3/0x18e0 [ 213.458284][ T1309] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.464884][ T1309] ? assign_work+0x367/0x3d0 [ 213.469494][ T1309] worker_thread+0x870/0xd50 [ 213.474211][ T1309] ? __kthread_parkme+0x1a8/0x200 [ 213.479250][ T1309] ? __pfx_worker_thread+0x10/0x10 [ 213.484400][ T1309] kthread+0x7b7/0x940 [ 213.488463][ T1309] ? __pfx_worker_thread+0x10/0x10 [ 213.493590][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.498166][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.502745][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.507356][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.511936][ T1309] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.517385][ T1309] ? lockdep_hardirqs_on+0x9d/0x150 [ 213.522578][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.527358][ T1309] ret_from_fork+0x4b/0x80 [ 213.531763][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.536520][ T1309] ret_from_fork_asm+0x1a/0x30 [ 213.541295][ T1309] [ 213.544341][ T1309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.551605][ T1309] CPU: 1 UID: 0 PID: 1309 Comm: kworker/u8:6 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 213.563386][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.573422][ T1309] Workqueue: cfg80211 cfg80211_event_work [ 213.579134][ T1309] Call Trace: [ 213.582397][ T1309] [ 213.585312][ T1309] dump_stack_lvl+0x241/0x360 [ 213.589977][ T1309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.595158][ T1309] ? __pfx__printk+0x10/0x10 [ 213.599741][ T1309] ? vscnprintf+0x5d/0x90 [ 213.604060][ T1309] panic+0x349/0x880 [ 213.607939][ T1309] ? __warn+0x174/0x4d0 [ 213.612078][ T1309] ? __pfx_panic+0x10/0x10 [ 213.616502][ T1309] ? ret_from_fork_asm+0x1a/0x30 [ 213.621447][ T1309] __warn+0x344/0x4d0 [ 213.625413][ T1309] ? __cfg80211_ibss_joined+0x3f8/0x470 [ 213.630946][ T1309] report_bug+0x2b3/0x500 [ 213.635261][ T1309] ? __cfg80211_ibss_joined+0x3f8/0x470 [ 213.640886][ T1309] ? __cfg80211_ibss_joined+0x3f8/0x470 [ 213.646413][ T1309] ? __cfg80211_ibss_joined+0x3fa/0x470 [ 213.651941][ T1309] handle_bug+0x89/0x170 [ 213.656180][ T1309] exc_invalid_op+0x1a/0x50 [ 213.660670][ T1309] asm_exc_invalid_op+0x1a/0x20 [ 213.665522][ T1309] RIP: 0010:__cfg80211_ibss_joined+0x3f8/0x470 [ 213.671680][ T1309] Code: 0f 85 86 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 04 23 47 f6 90 0f 0b 90 eb b9 e8 f9 22 47 f6 90 <0f> 0b 90 49 bd 00 00 00 00 00 fc ff df eb a4 e8 e4 22 47 f6 90 0f [ 213.691266][ T1309] RSP: 0018:ffffc90004347980 EFLAGS: 00010293 [ 213.697318][ T1309] RAX: ffffffff8b7c2387 RBX: 0000000000000006 RCX: ffff888028245a00 [ 213.705274][ T1309] RDX: 0000000000000000 RSI: ffffffff8e687a2c RDI: ffffffff8ca0e220 [ 213.713251][ T1309] RBP: ffffc90004347a60 R08: ffffffff905eb677 R09: 1ffffffff20bd6ce [ 213.721213][ T1309] R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: ffff88807e9b0d90 [ 213.729165][ T1309] R13: dffffc0000000000 R14: ffff8880285f3338 R15: ffffffff93657020 [ 213.737125][ T1309] ? __cfg80211_ibss_joined+0x3f7/0x470 [ 213.742662][ T1309] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 213.748534][ T1309] ? lockdep_hardirqs_on+0x9d/0x150 [ 213.753720][ T1309] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 213.759596][ T1309] ? cfg80211_event_work+0x24/0x60 [ 213.764702][ T1309] ? __pfx___mutex_lock+0x10/0x10 [ 213.769706][ T1309] ? __pfx_preempt_schedule+0x10/0x10 [ 213.775060][ T1309] cfg80211_process_wdev_events+0x3af/0x510 [ 213.780939][ T1309] cfg80211_process_rdev_events+0xac/0x110 [ 213.786747][ T1309] ? process_scheduled_works+0x9cb/0x18e0 [ 213.792447][ T1309] cfg80211_event_work+0x2c/0x60 [ 213.797368][ T1309] process_scheduled_works+0xac3/0x18e0 [ 213.802909][ T1309] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.808874][ T1309] ? assign_work+0x367/0x3d0 [ 213.813447][ T1309] worker_thread+0x870/0xd50 [ 213.818024][ T1309] ? __kthread_parkme+0x1a8/0x200 [ 213.823041][ T1309] ? __pfx_worker_thread+0x10/0x10 [ 213.828406][ T1309] kthread+0x7b7/0x940 [ 213.832460][ T1309] ? __pfx_worker_thread+0x10/0x10 [ 213.837553][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.842125][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.846698][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.851269][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.855845][ T1309] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.861021][ T1309] ? lockdep_hardirqs_on+0x9d/0x150 [ 213.866200][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.870772][ T1309] ret_from_fork+0x4b/0x80 [ 213.875180][ T1309] ? __pfx_kthread+0x10/0x10 [ 213.879750][ T1309] ret_from_fork_asm+0x1a/0x30 [ 213.884504][ T1309] [ 213.887750][ T1309] Kernel Offset: disabled [ 213.892060][ T1309] Rebooting in 86400 seconds..