last executing test programs: 25.821442869s ago: executing program 2 (id=5296): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 25.743602118s ago: executing program 2 (id=5297): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000100), 0x0, 0x0, 0x0, 0x55, r0}, 0x38) 25.641854976s ago: executing program 2 (id=5298): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 25.410527115s ago: executing program 2 (id=5299): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 25.308877333s ago: executing program 2 (id=5300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000009780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x804}}], 0x2, 0x0) 25.053491821s ago: executing program 2 (id=5304): openat$sndseq(0xffffffffffffff9c, &(0x7f0000001500), 0x42202) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) 24.611484951s ago: executing program 32 (id=5304): openat$sndseq(0xffffffffffffff9c, &(0x7f0000001500), 0x42202) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) 17.763400449s ago: executing program 3 (id=5359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x0, 0xa, 0xf4, 0x77, 0x5}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2", 0x5f, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 12.045948697s ago: executing program 3 (id=5412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 10.93137499s ago: executing program 3 (id=5423): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.893830961s ago: executing program 3 (id=5442): r0 = io_uring_setup(0x7f6b, &(0x7f0000000340)={0x0, 0x91bc, 0x1, 0x3, 0x5d}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000003c0), 0x1) 5.524976024s ago: executing program 3 (id=5457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4000, @fd=r1, 0xb, 0x0, 0x0, 0xb, 0x1, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.568702076s ago: executing program 5 (id=5463): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) unshare(0x40020e80) 4.269453132s ago: executing program 5 (id=5466): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0) 4.179112198s ago: executing program 0 (id=5467): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getresgid(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) 4.15775243s ago: executing program 5 (id=5468): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012160, 0x0) 4.036667227s ago: executing program 0 (id=5470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7c78, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0xf7}, 0x3f) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) r3 = socket(0x1a, 0x80000, 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40080c4) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="f007f8ff0100000081"]) socket(0x80000000000000a, 0xa, 0x9) 3.917779903s ago: executing program 5 (id=5472): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 3.86172508s ago: executing program 5 (id=5473): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x100, 0x1, 0x1, 0x5, 0x0, 0x8, {0x2, 0x7fffffffffffffff, 0xf, 0xb, 0x6, 0x7, 0x101, 0x6, 0xb, 0xc000, 0x2, 0x0, 0x0, 0x97, 0x6}}}, 0x90) read(r1, 0x0, 0x300) 3.858536931s ago: executing program 1 (id=5475): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0x18, 0xb2, 0x10, 0x4e8, 0x6889, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xe3, 0x0, 0x0, 0x53, 0x95, 0x8c}}]}}]}}, 0x0) 2.271914925s ago: executing program 4 (id=5482): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 2.192424347s ago: executing program 4 (id=5483): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 2.057698854s ago: executing program 4 (id=5484): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x157, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0xd, 0x29, 0x37}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 2.057120475s ago: executing program 1 (id=5485): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) 1.929791499s ago: executing program 4 (id=5486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) execve(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 1.871778991s ago: executing program 1 (id=5487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be", 0x13, 0x0, 0x0, 0x0) 1.721716784s ago: executing program 1 (id=5488): r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x220e}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10002, 0x0) 1.404202363s ago: executing program 1 (id=5489): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 1.373913635s ago: executing program 3 (id=5490): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 1.234522064s ago: executing program 1 (id=5491): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) 923.389266ms ago: executing program 0 (id=5492): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) 688.223064ms ago: executing program 5 (id=5493): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 384.165851ms ago: executing program 0 (id=5494): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x20000805, 0x0, 0x0) 381.227723ms ago: executing program 4 (id=5495): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 181.785474ms ago: executing program 0 (id=5496): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x157, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0xd, 0x29, 0x37}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 88.856768ms ago: executing program 4 (id=5497): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=5498): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x52af7000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) kernel console output (not intermixed with test programs): ][ T30] audit: type=1326 audit(1763507839.574:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.051233][ T30] audit: type=1326 audit(1763507839.574:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.154888][ T30] audit: type=1326 audit(1763507839.574:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.233605][ T30] audit: type=1326 audit(1763507839.574:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.302832][ T30] audit: type=1326 audit(1763507839.574:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.375980][ T30] audit: type=1326 audit(1763507839.574:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 458.455060][ T30] audit: type=1326 audit(1763507839.574:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.3.3436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x50000 [ 460.322531][T14407] team0: Port device team_slave_0 removed [ 460.562048][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'. [ 460.660930][T14412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.842234][T14420] netlink: 'syz.4.3462': attribute type 13 has an invalid length. [ 461.223328][T14432] sch_fq: defrate 4294967295 ignored. [ 462.051654][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 462.185972][T14449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.523951][T14460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.309222][T14477] wg0: Caught tx_queue_len zero misconfig [ 463.458463][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3486'. [ 463.608588][T14480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.830135][ T5938] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 463.858506][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 463.858526][ T30] audit: type=1326 audit(1763507845.714:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 463.926139][ T30] audit: type=1326 audit(1763507845.714:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 463.979875][ T30] audit: type=1326 audit(1763507845.764:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.041597][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.072020][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.100108][ T5938] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 464.109222][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.130228][ T30] audit: type=1326 audit(1763507845.764:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.166509][ T5938] usb 2-1: config 0 descriptor?? [ 464.200372][ T30] audit: type=1326 audit(1763507845.764:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.260509][ T30] audit: type=1326 audit(1763507845.804:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.321716][ T30] audit: type=1326 audit(1763507845.804:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.398775][ T30] audit: type=1326 audit(1763507845.804:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.470130][ T30] audit: type=1326 audit(1763507845.814:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.532715][ T30] audit: type=1326 audit(1763507845.824:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 464.701994][ T5938] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 464.719698][ T5938] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 464.748656][ T5938] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 464.771550][ T5938] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 464.810131][ T5938] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 464.850526][ T5938] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 464.980134][ T5938] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 9: -71 [ 465.022025][ T5938] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -71 [ 465.060607][ T5938] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 465.069441][ T5938] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 465.121782][ T5938] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 465.179150][ T5938] usb 2-1: USB disconnect, device number 29 [ 465.354381][T14510] kAFS: unable to lookup cell 'ÿ' [ 465.360428][T14510] kAFS: unable to lookup cell '(,c¾Ì' [ 467.211075][T14542] tipc: Failed to remove unknown binding: 66,1,1/0:823239388/823239390 [ 467.262918][T14542] tipc: Failed to remove unknown binding: 66,1,1/0:823239388/823239390 [ 467.300091][T14542] tipc: Failed to remove unknown binding: 66,1,1/0:823239388/823239390 [ 469.531215][T14582] lo: entered allmulticast mode [ 469.543680][T14582] tunl0: entered allmulticast mode [ 469.571398][T14582] gre0: entered allmulticast mode [ 469.630592][T14582] gretap0: entered allmulticast mode [ 469.750629][T14582] erspan0: entered allmulticast mode [ 469.784070][T14582] ip_vti0: entered allmulticast mode [ 469.832395][T14582] ip6_vti0: entered allmulticast mode [ 469.871557][T14582] sit0: entered allmulticast mode [ 469.902351][T14582] ip6tnl0: entered allmulticast mode [ 469.934248][T14582] ip6gre0: entered allmulticast mode [ 469.973606][T14582] syz_tun: entered allmulticast mode [ 470.006235][T14582] ip6gretap0: entered allmulticast mode [ 470.032024][T14582] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.040095][T14582] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.100318][T14582] bridge0: entered allmulticast mode [ 470.121355][T14582] vcan0: entered allmulticast mode [ 470.134500][T14582] bond0: entered allmulticast mode [ 470.160282][T14582] bond_slave_0: entered allmulticast mode [ 470.166079][T14582] bond_slave_1: entered allmulticast mode [ 470.198456][T14582] team0: entered allmulticast mode [ 470.231328][T14582] team_slave_0: entered allmulticast mode [ 470.237222][T14582] team_slave_1: entered allmulticast mode [ 470.278321][T14582] dummy0: entered allmulticast mode [ 470.321528][T14582] nlmon0: entered allmulticast mode [ 470.328898][T14582] caif0: entered allmulticast mode [ 470.392075][T14582] batadv0: entered allmulticast mode [ 470.422282][T14582] vxcan0: entered allmulticast mode [ 470.451613][T14582] vxcan1: entered allmulticast mode [ 470.458812][T14582] veth0: entered allmulticast mode [ 470.524818][T14582] veth1: entered allmulticast mode [ 470.546952][T14582] wg0: entered allmulticast mode [ 470.555969][T14582] wg1: entered allmulticast mode [ 470.571427][T14582] wg2: entered allmulticast mode [ 470.592645][T14582] veth0_to_bridge: entered allmulticast mode [ 470.624519][T14582] veth1_to_bridge: entered allmulticast mode [ 470.642585][T14582] veth0_to_bond: entered allmulticast mode [ 470.664012][T14582] veth1_to_bond: entered allmulticast mode [ 470.685666][T14582] veth0_to_team: entered allmulticast mode [ 470.706613][T14582] veth1_to_team: entered allmulticast mode [ 470.731328][T14582] veth0_to_batadv: entered allmulticast mode [ 470.743474][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.751695][T14582] batadv_slave_0: entered allmulticast mode [ 470.763366][T14582] veth1_to_batadv: entered allmulticast mode [ 470.787639][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.811128][T14582] batadv_slave_1: entered allmulticast mode [ 470.836978][T14582] xfrm0: entered allmulticast mode [ 470.862986][T14582] veth0_to_hsr: entered allmulticast mode [ 470.883250][T14582] hsr_slave_0: entered allmulticast mode [ 470.893550][T14582] veth1_to_hsr: entered allmulticast mode [ 470.916292][T14582] hsr_slave_1: entered allmulticast mode [ 470.947112][T14582] hsr0: entered allmulticast mode [ 470.971068][T14582] veth1_virt_wifi: entered allmulticast mode [ 470.993477][T14582] veth0_virt_wifi: entered allmulticast mode [ 471.016606][T14582] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 471.039584][T14582] veth1_vlan: entered allmulticast mode [ 471.125250][T14582] veth0_vlan: entered allmulticast mode [ 471.156337][T14582] vlan0: entered allmulticast mode [ 471.180832][T14582] vlan1: entered allmulticast mode [ 471.204553][T14582] macvlan0: entered allmulticast mode [ 471.233496][T14582] macvlan1: entered allmulticast mode [ 471.261184][T14582] ipvlan0: entered allmulticast mode [ 471.267138][T14582] ipvlan1: entered allmulticast mode [ 471.273881][T14582] veth1_macvtap: entered allmulticast mode [ 471.284903][T14582] veth0_macvtap: entered allmulticast mode [ 471.296850][T14582] macvtap0: entered allmulticast mode [ 471.332329][T14582] macsec0: entered allmulticast mode [ 471.363388][T14582] geneve0: entered allmulticast mode [ 471.394046][T14582] geneve1: entered allmulticast mode [ 471.418062][T14582] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 471.462851][T14582] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 471.506739][T14582] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 471.542316][T14582] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 471.572148][T14602] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3536'. [ 471.597108][T14582] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 471.679359][T14582] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 471.754943][ T6273] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.772252][ T6273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.804460][T14602] gretap0: entered promiscuous mode [ 471.840934][ T6273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.870237][ T6275] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.288832][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 472.288855][ T30] audit: type=1326 audit(1763507854.144:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 472.360146][ T30] audit: type=1326 audit(1763507854.144:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 472.426016][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 472.430305][ T30] audit: type=1326 audit(1763507854.184:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 472.510154][ T30] audit: type=1326 audit(1763507854.184:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 472.575661][ T30] audit: type=1326 audit(1763507854.184:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 472.642048][T14626] tipc: Started in network mode [ 472.647315][T14626] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 472.669473][T14626] tipc: Enabled bearer , priority 18 [ 472.886851][ T30] audit: type=1326 audit(1763507854.734:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 472.965673][ T30] audit: type=1326 audit(1763507854.734:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 473.026819][ T30] audit: type=1326 audit(1763507854.744:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 473.087827][ T30] audit: type=1326 audit(1763507854.744:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 473.114526][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 473.154127][ T30] audit: type=1326 audit(1763507854.744:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 473.523592][T14667] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3567'. [ 473.582914][T14669] bridge: RTM_NEWNEIGH with invalid ether address [ 473.818423][T14677] netlink: 'syz.0.3572': attribute type 5 has an invalid length. [ 473.839767][ T5921] tipc: Node number set to 10005162 [ 474.662913][T14696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3571'. [ 474.684784][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 474.709286][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 474.974486][T14698] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3580'. [ 476.491641][ T6277] bridge_slave_1: left allmulticast mode [ 476.506014][ T6277] bridge_slave_1: left promiscuous mode [ 476.524140][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.564777][ T6277] bridge_slave_0: left allmulticast mode [ 476.575982][ T6277] bridge_slave_0: left promiscuous mode [ 476.590788][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.200831][T14745] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3601'. [ 477.245969][ T6277] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 477.535095][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.547662][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.563056][ T6277] bond0 (unregistering): Released all slaves [ 477.717227][ T6277] bond1 (unregistering): Released all slaves [ 477.876894][ T6277] bond2 (unregistering): Released all slaves [ 477.904855][ T6277] bond3 (unregistering): Released all slaves [ 478.038796][ T6277] bond4 (unregistering): Released all slaves [ 478.053111][ T6277] bond5 (unregistering): Released all slaves [ 478.144542][T14758] ip6erspan0: entered allmulticast mode [ 478.447142][T14768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 478.632605][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 478.683928][T14777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.758895][T14782] bond2: entered allmulticast mode [ 478.889586][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 478.889602][ T30] audit: type=1326 audit(1763507860.744:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 478.932865][ T30] audit: type=1326 audit(1763507860.744:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 478.959067][ T30] audit: type=1326 audit(1763507860.784:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 478.982062][ T30] audit: type=1326 audit(1763507860.784:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 479.168424][ T6277] hsr_slave_0: left promiscuous mode [ 479.189712][ T6277] hsr_slave_1: left promiscuous mode [ 479.199251][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.208306][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.219130][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.231655][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.270299][ T6277] veth1_macvtap: left promiscuous mode [ 479.276127][ T6277] veth0_macvtap: left promiscuous mode [ 479.283500][ T6277] veth1_vlan: left promiscuous mode [ 479.289082][ T6277] veth0_vlan: left promiscuous mode [ 479.544951][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3624'. [ 479.802150][ T6277] pim6reg (unregistering): left allmulticast mode [ 480.510994][ T5921] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 480.655447][ T6277] team0 (unregistering): Port device team_slave_1 removed [ 480.672684][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 480.682112][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 480.707453][ T5921] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 480.719022][ T5921] usb 2-1: config 13 has no interface number 0 [ 480.727098][ T5921] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 480.754722][ T5921] usb 2-1: config 13 interface 50 has no altsetting 0 [ 480.779149][ T6277] team0 (unregistering): Port device team_slave_0 removed [ 480.792694][ T5921] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 480.814762][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.836603][ T5921] usb 2-1: Product: syz [ 480.845318][ T5921] usb 2-1: Manufacturer: syz [ 480.854641][ T5921] usb 2-1: SerialNumber: syz [ 480.857451][ T30] audit: type=1326 audit(1763507862.714:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 480.896811][T14821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.900047][ T30] audit: type=1326 audit(1763507862.714:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 480.941534][ T30] audit: type=1326 audit(1763507862.744:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 480.977567][ T30] audit: type=1326 audit(1763507862.774:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 481.004714][ T30] audit: type=1326 audit(1763507862.774:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 481.035601][ T30] audit: type=1326 audit(1763507862.774:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 481.152874][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.160120][ T5921] usb 2-1: MIDIStreaming interface descriptor not found [ 481.265899][ T5921] usb 2-1: USB disconnect, device number 30 [ 481.382273][T14840] udevd[14840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.622189][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.985434][T14852] netlink: 'syz.1.3644': attribute type 4 has an invalid length. [ 482.064649][T14855] netlink: 'syz.1.3644': attribute type 4 has an invalid length. [ 482.309154][ T6277] IPVS: stop unused estimator thread 0... [ 482.846902][T14888] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 484.463439][T14945] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3678'. [ 489.311247][T15011] gretap0: left promiscuous mode [ 489.371351][T15011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.934287][T15023] netlink: 'syz.4.3712': attribute type 4 has an invalid length. [ 490.088362][ T5920] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 490.269214][ T5920] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 490.288900][ T5920] usb 1-1: config 0 has no interface number 0 [ 490.303741][ T5920] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 490.313402][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.340128][ T5920] usb 1-1: Product: syz [ 490.344371][ T5920] usb 1-1: Manufacturer: syz [ 490.349037][ T5920] usb 1-1: SerialNumber: syz [ 490.392618][ T5920] usb 1-1: config 0 descriptor?? [ 490.609088][ T5920] qmi_wwan 1-1:0.19: probe with driver qmi_wwan failed with error -22 [ 490.695267][ T5920] usb 1-1: USB disconnect, device number 29 [ 496.333205][T15127] netlink: 'syz.0.3756': attribute type 6 has an invalid length. [ 496.680161][ T5938] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 496.861818][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 496.891354][ T5938] usb 3-1: config 0 has no interfaces? [ 496.899735][ T5938] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 496.929304][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 496.960247][ T5938] usb 3-1: Product: syz [ 496.964484][ T5938] usb 3-1: Manufacturer: syz [ 496.969184][ T5938] usb 3-1: SerialNumber: syz [ 497.000917][ T5938] usb 3-1: config 0 descriptor?? [ 497.232755][ T5938] usb 3-1: USB disconnect, device number 21 [ 498.262554][T15141] lo: Caught tx_queue_len zero misconfig [ 498.332459][T15142] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 499.053704][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 499.053725][ T30] audit: type=1326 audit(1763507880.914:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.4.3778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 499.111178][ T30] audit: type=1326 audit(1763507880.944:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.4.3778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 499.135987][T15166] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 499.159666][ T30] audit: type=1326 audit(1763507880.954:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.4.3778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 499.196814][ T30] audit: type=1326 audit(1763507880.954:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.4.3778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 499.281667][ T30] audit: type=1326 audit(1763507880.954:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.4.3778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 499.364751][T15178] netlink: 556 bytes leftover after parsing attributes in process `syz.3.3786'. [ 499.374132][T15178] netlink: 556 bytes leftover after parsing attributes in process `syz.3.3786'. [ 499.593292][T15186] netlink: 'syz.3.3791': attribute type 13 has an invalid length. [ 499.630474][T15186] netlink: 'syz.3.3791': attribute type 17 has an invalid length. [ 499.765365][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 499.804416][T15186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.849516][ T30] audit: type=1326 audit(1763507881.704:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 499.936734][ T30] audit: type=1326 audit(1763507881.734:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 499.979873][ T30] audit: type=1326 audit(1763507881.744:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 500.056888][ T30] audit: type=1326 audit(1763507881.744:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 500.126205][ T30] audit: type=1326 audit(1763507881.744:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 500.143791][T15207] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3800'. [ 500.211888][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'. [ 500.398868][T15220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3805'. [ 500.899146][T15241] netlink: 'syz.0.3815': attribute type 12 has an invalid length. [ 501.621208][T15268] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 501.744958][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 501.749303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.762388][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.867183][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 501.876373][T15243] bridge_slave_1: left allmulticast mode [ 501.891128][T15243] bridge_slave_1: left promiscuous mode [ 501.911434][T15243] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.978627][T15243] bridge_slave_0: left allmulticast mode [ 502.001328][T15243] bridge_slave_0: left promiscuous mode [ 502.048327][T15243] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.396877][T15312] loop7: detected capacity change from 0 to 7 [ 503.432719][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.442054][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.456727][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.466086][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.474805][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.484020][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.504252][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.513495][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.524432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.533746][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.544000][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.553530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.563579][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.572808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.580876][T15312] ldm_validate_partition_table(): Disk read failed. [ 503.601915][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.611351][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.619646][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.628885][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.637115][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.646395][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 503.656245][T15312] Dev loop7: unable to read RDB block 0 [ 503.678179][T15312] loop7: unable to read partition table [ 503.708862][T15312] loop7: partition table beyond EOD, truncated [ 503.721670][T15312] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 503.775914][ T5197] ldm_validate_partition_table(): Disk read failed. [ 503.803237][ T5197] Dev loop7: unable to read RDB block 0 [ 503.812361][ T5197] loop7: unable to read partition table [ 503.818308][ T5197] loop7: partition table beyond EOD, truncated [ 503.843611][T15317] lo: left allmulticast mode [ 503.877311][T15317] tunl0: left allmulticast mode [ 503.884012][T15317] gre0: left allmulticast mode [ 503.912916][T15317] gretap0: left allmulticast mode [ 503.925849][T15317] erspan0: left allmulticast mode [ 503.942839][T15317] ip_vti0: left allmulticast mode [ 503.952004][T15317] ip6_vti0: left allmulticast mode [ 503.958692][T15317] sit0: left allmulticast mode [ 503.976305][T15317] ip6tnl0: left allmulticast mode [ 503.987410][T15317] ip6gre0: left allmulticast mode [ 503.997892][T15317] syz_tun: left allmulticast mode [ 504.007347][T15317] ip6gretap0: left allmulticast mode [ 504.040285][T15317] bridge0: left allmulticast mode [ 504.046933][T15317] vcan0: left allmulticast mode [ 504.221563][T15317] bond0: left allmulticast mode [ 504.227637][T15317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.265269][T15317] team0: left allmulticast mode [ 504.293033][T15317] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.321935][T15317] dummy0: left allmulticast mode [ 504.339041][T15317] nlmon0: left allmulticast mode [ 504.378045][T15317] caif0: left allmulticast mode [ 504.410855][T15317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.303111][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3864'. [ 505.921142][ T30] audit: type=1326 audit(1763507887.784:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.016087][ T30] audit: type=1326 audit(1763507887.784:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.058545][ T30] audit: type=1326 audit(1763507887.784:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.174848][ T30] audit: type=1326 audit(1763507887.784:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.243702][ T30] audit: type=1326 audit(1763507887.784:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.308430][ T30] audit: type=1326 audit(1763507887.784:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.380180][ T30] audit: type=1326 audit(1763507887.784:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.450222][ T30] audit: type=1326 audit(1763507887.784:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.526153][ T30] audit: type=1326 audit(1763507887.784:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 506.613091][ T30] audit: type=1326 audit(1763507887.784:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 512.697445][T15493] lo: entered promiscuous mode [ 512.717207][T15493] lo: entered allmulticast mode [ 512.762269][T15493] tunl0: entered promiscuous mode [ 512.790541][T15493] tunl0: entered allmulticast mode [ 512.830331][T15493] gre0: entered promiscuous mode [ 512.843203][T15493] gre0: entered allmulticast mode [ 512.921856][T15493] gretap0: entered promiscuous mode [ 512.930101][T15493] gretap0: entered allmulticast mode [ 512.953521][T15493] erspan0: entered promiscuous mode [ 512.970108][T15493] erspan0: entered allmulticast mode [ 513.002064][T15493] ip_vti0: entered promiscuous mode [ 513.013461][T15493] ip_vti0: entered allmulticast mode [ 513.044122][T15493] ip6_vti0: entered promiscuous mode [ 513.057960][T15493] ip6_vti0: entered allmulticast mode [ 513.085110][T15493] sit0: entered promiscuous mode [ 513.096782][T15493] sit0: entered allmulticast mode [ 513.143494][T15493] ip6tnl0: entered promiscuous mode [ 513.173690][T15493] ip6tnl0: entered allmulticast mode [ 513.226675][T15493] ip6gre0: entered promiscuous mode [ 513.250178][T15493] ip6gre0: entered allmulticast mode [ 513.303611][T15493] ip6gretap0: entered promiscuous mode [ 513.329304][T15493] ip6gretap0: entered allmulticast mode [ 513.371076][T15493] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.379004][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.400520][T15493] bridge0: entered promiscuous mode [ 513.405796][T15493] bridge0: entered allmulticast mode [ 513.501491][T15493] vcan0: entered promiscuous mode [ 513.534846][T15493] vcan0: entered allmulticast mode [ 513.571371][T15493] bond0: entered promiscuous mode [ 513.576463][T15493] bond_slave_0: entered promiscuous mode [ 513.625597][T15493] bond_slave_1: entered promiscuous mode [ 513.655366][T15493] bond0: entered allmulticast mode [ 513.680022][T15493] bond_slave_0: entered allmulticast mode [ 513.700982][T15493] bond_slave_1: entered allmulticast mode [ 513.727253][T15493] team0: entered promiscuous mode [ 513.749077][T15493] team_slave_0: entered promiscuous mode [ 513.767662][T15493] team_slave_1: entered promiscuous mode [ 513.785990][T15493] team0: entered allmulticast mode [ 513.802697][T15493] team_slave_0: entered allmulticast mode [ 513.819716][T15493] team_slave_1: entered allmulticast mode [ 513.850961][T15493] dummy0: entered promiscuous mode [ 513.865061][T15493] dummy0: entered allmulticast mode [ 513.895248][T15493] nlmon0: entered promiscuous mode [ 513.908471][T15493] nlmon0: entered allmulticast mode [ 513.917415][T15493] caif0: entered promiscuous mode [ 513.927426][T15493] caif0: entered allmulticast mode [ 513.933693][T15493] vxcan0: entered promiscuous mode [ 513.942090][T15493] vxcan0: entered allmulticast mode [ 513.949040][T15493] vxcan1: entered promiscuous mode [ 514.000180][T15493] vxcan1: entered allmulticast mode [ 514.021343][T15493] veth0: entered promiscuous mode [ 514.035415][T15493] veth0: entered allmulticast mode [ 514.060638][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 514.073272][T15493] veth1: entered promiscuous mode [ 514.130122][T15493] veth1: entered allmulticast mode [ 514.170596][T15493] wg0: entered promiscuous mode [ 514.190097][T15493] wg0: entered allmulticast mode [ 514.210883][T15493] wg1: entered promiscuous mode [ 514.228636][T15493] wg1: entered allmulticast mode [ 514.281092][T15493] veth0_to_bridge: entered promiscuous mode [ 514.293850][T15493] veth0_to_bridge: entered allmulticast mode [ 514.338293][T15493] veth1_to_bridge: entered promiscuous mode [ 514.357072][T15493] veth1_to_bridge: entered allmulticast mode [ 514.403408][T15493] veth0_to_bond: entered promiscuous mode [ 514.440235][T15493] veth0_to_bond: entered allmulticast mode [ 514.479427][T15493] veth1_to_bond: entered promiscuous mode [ 514.521952][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 514.536717][ T30] audit: type=1326 audit(1763507896.384:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 514.561587][ T30] audit: type=1326 audit(1763507896.384:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 514.584078][T15493] veth1_to_bond: entered allmulticast mode [ 514.605012][T15493] veth0_to_team: entered promiscuous mode [ 514.620865][ T30] audit: type=1326 audit(1763507896.394:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 514.622021][T15493] veth0_to_team: entered allmulticast mode [ 514.661186][ T30] audit: type=1326 audit(1763507896.394:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 514.703403][ T30] audit: type=1326 audit(1763507896.394:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 514.713272][T15493] veth1_to_team: entered promiscuous mode [ 514.770013][T15493] veth1_to_team: entered allmulticast mode [ 514.819258][T15493] veth0_to_batadv: entered promiscuous mode [ 514.870040][T15493] veth0_to_batadv: entered allmulticast mode [ 514.893505][T15493] batadv_slave_0: entered promiscuous mode [ 514.899378][T15493] batadv_slave_0: entered allmulticast mode [ 514.944757][T15493] veth1_to_batadv: entered promiscuous mode [ 514.980064][T15493] veth1_to_batadv: entered allmulticast mode [ 515.017925][T15493] batadv_slave_1: entered promiscuous mode [ 515.040010][T15493] batadv_slave_1: entered allmulticast mode [ 515.062021][T15493] xfrm0: entered promiscuous mode [ 515.088444][T15493] xfrm0: entered allmulticast mode [ 515.109693][T15493] veth0_to_hsr: entered promiscuous mode [ 515.138642][T15493] veth0_to_hsr: entered allmulticast mode [ 515.190482][T15493] hsr_slave_0: entered allmulticast mode [ 515.218820][T15493] veth1_to_hsr: entered promiscuous mode [ 515.245885][T15493] veth1_to_hsr: entered allmulticast mode [ 515.331315][T15493] hsr_slave_1: entered allmulticast mode [ 515.374008][T15493] hsr0: entered promiscuous mode [ 515.411603][T15493] hsr0: entered allmulticast mode [ 515.442904][T15493] veth1_virt_wifi: entered promiscuous mode [ 515.474955][T15493] veth1_virt_wifi: entered allmulticast mode [ 515.524907][T15493] veth0_virt_wifi: entered promiscuous mode [ 515.555252][T15493] veth0_virt_wifi: entered allmulticast mode [ 515.612229][T15493] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 515.629881][T15493] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 515.646402][T15493] veth1_vlan: entered allmulticast mode [ 515.666884][T15493] veth0_vlan: entered allmulticast mode [ 515.680978][T15493] tipc: Resetting bearer [ 515.697080][T15493] vlan0: entered promiscuous mode [ 515.703197][T15493] vlan0: entered allmulticast mode [ 515.708704][T15493] vlan1: entered promiscuous mode [ 515.718911][T15493] vlan1: entered allmulticast mode [ 515.745025][T15493] macvlan0: entered promiscuous mode [ 515.757210][T15493] macvlan0: entered allmulticast mode [ 515.790144][T15493] macvlan1: entered promiscuous mode [ 515.827903][T15493] macvlan1: entered allmulticast mode [ 515.851089][T15493] ipvlan0: entered promiscuous mode [ 515.866757][T15493] ipvlan0: entered allmulticast mode [ 515.879750][T15493] ipvlan1: entered promiscuous mode [ 515.897620][T15514] netlink: 'syz.4.3929': attribute type 4 has an invalid length. [ 515.905750][T15493] ipvlan1: entered allmulticast mode [ 515.911714][T15514] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3929'. [ 515.922515][T15493] veth1_macvtap: entered allmulticast mode [ 515.933162][T15493] veth0_macvtap: entered allmulticast mode [ 515.944062][T15493] macvtap0: entered promiscuous mode [ 515.950087][T15493] macvtap0: entered allmulticast mode [ 515.965777][T15493] macsec0: entered promiscuous mode [ 515.971970][T15493] macsec0: entered allmulticast mode [ 515.982836][T15493] geneve0: entered promiscuous mode [ 515.989735][T15493] geneve0: entered allmulticast mode [ 516.005689][T15493] geneve1: entered promiscuous mode [ 516.016024][T15493] geneve1: entered allmulticast mode [ 516.028993][T15493] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 516.045974][T15493] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 516.069743][T15493] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 516.079386][T15493] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 516.096011][T15493] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 516.112432][T15493] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 516.137292][T15493] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 516.155435][ T30] audit: type=1326 audit(1763507898.014:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15518 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 516.157079][T15493] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 516.198963][ T30] audit: type=1326 audit(1763507898.044:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15518 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 516.240167][ T30] audit: type=1326 audit(1763507898.044:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15518 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 516.277816][T15521] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3932'. [ 516.288772][ T30] audit: type=1326 audit(1763507898.044:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15518 comm="syz.2.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 516.318306][T15493] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 516.325638][T15493] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 516.351149][T15493] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 516.358503][T15493] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 516.373053][T15493] pim6reg: entered promiscuous mode [ 516.380559][T15493] vlan2: entered promiscuous mode [ 516.385794][T15493] vlan2: entered allmulticast mode [ 516.393724][T15493] mac80211_hwsim hwsim22 wlan2: entered promiscuous mode [ 516.402356][T15493] mac80211_hwsim hwsim22 wlan2: entered allmulticast mode [ 516.411276][T15493] bond1: entered promiscuous mode [ 516.416522][T15493] bond1: entered allmulticast mode [ 516.424978][T15493] syztnl2: entered promiscuous mode [ 516.430887][T15493] syztnl2: entered allmulticast mode [ 516.515985][ T6285] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.525197][ T6285] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.538274][ T6285] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.586133][ T6285] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.872003][T15548] tipc: Enabling of bearer rejected, failed to enable media [ 518.336804][ T30] audit: type=1326 audit(1763507900.194:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15566 comm="syz.2.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 518.903962][T15583] netlink: 'syz.0.3958': attribute type 4 has an invalid length. [ 519.633003][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'. [ 520.860371][ T5897] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 521.042525][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.073419][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.113803][ T5897] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 521.140091][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.148144][ T5897] usb 2-1: SerialNumber: syz [ 521.417039][ T5897] usb 2-1: 0:2 : does not exist [ 521.487360][ T5897] usb 2-1: USB disconnect, device number 31 [ 521.618954][T15488] udevd[15488]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.337008][ T6283] bridge_slave_1: left allmulticast mode [ 522.346146][ T6283] bridge_slave_1: left promiscuous mode [ 522.366759][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.433537][ T6283] bridge_slave_0: left allmulticast mode [ 522.447996][ T6283] bridge_slave_0: left promiscuous mode [ 522.455593][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'. [ 522.471128][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.493068][T15658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3989'. [ 522.540730][T15658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3989'. [ 523.010317][T15664] input: syz0 as /devices/virtual/input/input23 [ 523.487154][ T6283] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 523.504091][ T6283] bridge0 (unregistering): left allmulticast mode [ 524.161547][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.200970][ T6283] bond_slave_0: left allmulticast mode [ 524.240850][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.275028][ T6283] bond_slave_1: left allmulticast mode [ 524.311104][ T6283] bond0 (unregistering): Released all slaves [ 524.804714][ T6283] bond1 (unregistering): Released all slaves [ 525.414297][ T6283] bond2 (unregistering): Released all slaves [ 525.496867][ T6283] bond3 (unregistering): Released all slaves [ 525.554852][ T6283] bond4 (unregistering): Released all slaves [ 525.783772][ T6283] tipc: Left network mode [ 526.329320][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.343757][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.360994][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.368526][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.412654][ T6283] veth1_macvtap: left promiscuous mode [ 526.420776][ T6283] veth0_macvtap: left promiscuous mode [ 526.427014][ T6283] veth1_vlan: left promiscuous mode [ 526.450385][ T6283] veth0_vlan: left promiscuous mode [ 526.776101][ T6283] pim6reg (unregistering): left allmulticast mode [ 527.379049][ T6283] team0 (unregistering): Port device team_slave_1 removed [ 527.816139][ T5897] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 527.970366][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 528.073340][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.114615][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 528.132078][ T5897] usb 5-1: can't read configurations, error -71 [ 528.421955][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 528.421974][ T30] audit: type=1326 audit(1763507910.284:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 528.491260][ T30] audit: type=1326 audit(1763507910.314:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 528.536817][ T30] audit: type=1326 audit(1763507910.314:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.4021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 528.740415][ T5920] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 528.923736][ T5920] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 528.934651][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.952072][ T5920] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 528.961970][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.993082][ T5920] usb 3-1: config 0 descriptor?? [ 529.212441][ T5920] usb 3-1: string descriptor 0 read error: -71 [ 529.263979][ T5920] usb 3-1: USB disconnect, device number 22 [ 529.607915][T15775] tipc: Started in network mode [ 529.616033][T15775] tipc: Node identity ac14141b, cluster identity 4711 [ 529.630706][T15775] tipc: New replicast peer: 172.20.20.187 [ 529.676583][T15775] tipc: Enabled bearer , priority 10 [ 530.586806][T15802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4050'. [ 530.800505][ T5938] tipc: Node number set to 2886997019 [ 530.854020][T15813] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 531.328205][ T30] audit: type=1326 audit(1763507913.184:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.401570][ T30] audit: type=1326 audit(1763507913.184:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.453185][ T30] audit: type=1326 audit(1763507913.184:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.504358][ T30] audit: type=1326 audit(1763507913.184:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.588893][ T30] audit: type=1326 audit(1763507913.184:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.682937][ T30] audit: type=1326 audit(1763507913.184:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.771414][ T30] audit: type=1326 audit(1763507913.184:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 532.352389][T15851] tipc: Failed to remove unknown binding: 66,1,1/0:4015758909/4015758911 [ 532.381789][T15851] tipc: Failed to remove unknown binding: 66,1,1/0:4015758909/4015758911 [ 534.088594][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 534.088616][ T30] audit: type=1326 audit(1763507915.944:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.0.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 534.170065][ T30] audit: type=1326 audit(1763507915.944:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.0.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 534.233419][ T30] audit: type=1326 audit(1763507915.944:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.0.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 534.290565][ T30] audit: type=1326 audit(1763507916.144:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.0.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 534.320863][ T30] audit: type=1326 audit(1763507916.154:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.0.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 536.737084][ T30] audit: type=1326 audit(1763507918.594:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 536.785740][ T30] audit: type=1326 audit(1763507918.614:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 536.846953][ T30] audit: type=1326 audit(1763507918.634:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 536.908786][ T30] audit: type=1326 audit(1763507918.634:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 536.978528][ T30] audit: type=1326 audit(1763507918.634:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 537.121821][T15981] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 537.727901][T16007] netlink: 392 bytes leftover after parsing attributes in process `syz.4.4143'. [ 539.663035][T15999] Bluetooth: hci4: command 0x0406 tx timeout [ 539.669410][T15999] Bluetooth: hci0: command 0x0406 tx timeout [ 539.715706][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 539.715727][ T30] audit: type=1326 audit(1763507921.574:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 539.860058][ T30] audit: type=1326 audit(1763507921.624:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 539.949754][ T30] audit: type=1326 audit(1763507921.644:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.001332][ T30] audit: type=1326 audit(1763507921.644:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.048548][ T30] audit: type=1326 audit(1763507921.644:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.104814][ T30] audit: type=1326 audit(1763507921.654:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.156485][ T30] audit: type=1326 audit(1763507921.654:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.182251][ T30] audit: type=1326 audit(1763507921.654:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 540.224668][ T30] audit: type=1326 audit(1763507921.654:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 541.093501][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4190'. [ 541.360688][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 541.392024][T16116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.413408][T16116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.446276][T16116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.454333][T16116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.660049][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 542.810078][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 542.820326][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.830618][ T5920] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 542.850622][ T5920] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 542.900782][ T5920] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.930052][ T5920] usb 3-1: config 12 interface 0 has no altsetting 0 [ 542.951677][ T5920] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 542.961241][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.969447][ T5920] usb 3-1: Product: syz [ 542.990039][ T5920] usb 3-1: Manufacturer: syz [ 543.001857][ T5920] usb 3-1: SerialNumber: syz [ 543.238336][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.438174][ T5920] usb 3-1: selecting invalid altsetting 0 [ 543.532103][ T5920] usb 3-1: USB disconnect, device number 23 [ 543.654221][T16144] udevd[16144]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.293300][ T30] audit: type=1326 audit(1763507930.154:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.1.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 548.370039][ T30] audit: type=1326 audit(1763507930.204:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.1.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 548.447849][ T30] audit: type=1326 audit(1763507930.204:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.1.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 548.500273][T16259] netlink: 'syz.2.4244': attribute type 12 has an invalid length. [ 548.544611][ T30] audit: type=1326 audit(1763507930.204:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.1.4241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 549.450158][ T5938] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 549.626899][ T5938] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 549.650787][ T5938] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 549.683565][ T5938] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.700236][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.732400][ T5938] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.826465][ T5938] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 549.844871][T16285] udevd[16285]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.932836][ T5938] usb 4-1: USB disconnect, device number 26 [ 551.517468][T16326] bridge: RTM_NEWNEIGH with invalid ether address [ 552.385560][T16355] sch_tbf: peakrate 263 is lower than or equals to rate 62733 ! [ 554.326961][T16410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4300'. [ 554.670385][ T5920] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 554.841443][ T5920] usb 1-1: not running at top speed; connect to a high speed hub [ 554.863084][ T5920] usb 1-1: config 4 has an invalid interface number: 107 but max is 1 [ 554.889998][ T5920] usb 1-1: config 4 has no interface number 0 [ 554.896480][ T5920] usb 1-1: config 4 interface 1 has no altsetting 0 [ 554.919900][ T5920] usb 1-1: config 4 interface 107 has no altsetting 0 [ 554.942411][ T5920] usb 1-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=90.2b [ 554.951818][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.959849][ T5920] usb 1-1: Product: syz [ 554.999070][ T5920] usb 1-1: Manufacturer: syz [ 555.005303][ T5920] usb 1-1: SerialNumber: syz [ 555.021029][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 555.268290][ T5920] ftdi_sio 1-1:4.1: FTDI USB Serial Device converter detected [ 555.297884][ T5920] ftdi_sio ttyUSB0: unknown device type: 0x902b [ 555.298409][ T30] audit: type=1326 audit(1763507937.154:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.325347][ T5920] usb 1-1: USB disconnect, device number 30 [ 555.370273][ T5920] ftdi_sio 1-1:4.1: device disconnected [ 555.407761][ T30] audit: type=1326 audit(1763507937.154:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.476412][ T30] audit: type=1326 audit(1763507937.204:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.540861][ T30] audit: type=1326 audit(1763507937.204:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.584536][ T30] audit: type=1326 audit(1763507937.204:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.636131][ T30] audit: type=1326 audit(1763507937.204:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.721413][ T30] audit: type=1326 audit(1763507937.204:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.776527][ T30] audit: type=1326 audit(1763507937.204:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.857203][ T30] audit: type=1326 audit(1763507937.204:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 555.930559][ T30] audit: type=1326 audit(1763507937.204:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.3.4308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 556.812002][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 557.371222][T16477] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4329'. [ 559.906202][T16545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4358'. [ 560.227543][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 560.934333][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 560.934354][ T30] audit: type=1326 audit(1763507942.794:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.012232][ T30] audit: type=1326 audit(1763507942.794:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.060051][ T30] audit: type=1326 audit(1763507942.794:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.120121][ T30] audit: type=1326 audit(1763507942.794:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.160048][ T30] audit: type=1326 audit(1763507942.794:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.220070][ T30] audit: type=1326 audit(1763507942.794:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.260354][ T30] audit: type=1326 audit(1763507942.794:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 561.554559][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'. [ 563.213445][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.219988][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.610134][T16617] wireguard0: entered promiscuous mode [ 564.642297][T16617] wireguard0: entered allmulticast mode [ 565.775112][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 565.828581][T16640] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4399'. [ 566.251374][T16649] tipc: Enabled bearer , priority 10 [ 566.473823][ T30] audit: type=1326 audit(1763507948.334:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.550079][ T30] audit: type=1326 audit(1763507948.334:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.621021][ T30] audit: type=1326 audit(1763507948.364:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.690021][ T30] audit: type=1326 audit(1763507948.364:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.755400][T16660] netlink: 'syz.3.4409': attribute type 4 has an invalid length. [ 566.793792][ T30] audit: type=1326 audit(1763507948.364:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.860022][ T30] audit: type=1326 audit(1763507948.364:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.942586][ T30] audit: type=1326 audit(1763507948.364:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 566.990095][ T30] audit: type=1326 audit(1763507948.364:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 567.048851][ T30] audit: type=1326 audit(1763507948.364:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 567.100353][ T30] audit: type=1326 audit(1763507948.364:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 568.522651][T16715] netlink: 'syz.4.4435': attribute type 11 has an invalid length. [ 568.532073][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4435'. [ 569.440377][T16727] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4439'. [ 570.283066][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4447'. [ 571.517987][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4464'. [ 572.503954][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4483'. [ 572.911381][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 572.911401][ T30] audit: type=1326 audit(1763507954.774:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16843 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 572.988299][ T30] audit: type=1326 audit(1763507954.774:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.037214][ T30] audit: type=1326 audit(1763507954.774:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.095649][ T30] audit: type=1326 audit(1763507954.774:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.129805][ T30] audit: type=1326 audit(1763507954.774:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.153326][ T30] audit: type=1326 audit(1763507954.774:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.178588][ T30] audit: type=1326 audit(1763507954.784:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.232985][ T30] audit: type=1326 audit(1763507954.784:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.257599][ T30] audit: type=1326 audit(1763507954.784:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.4.4489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 573.331797][ T30] audit: type=1326 audit(1763507954.804:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16843 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 573.363834][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 573.390650][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 573.427712][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 573.836685][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 573.875563][T16873] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4503'. [ 573.905757][T16873] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4503'. [ 575.209589][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 575.322049][T16913] bond0: (slave bond_slave_1): Releasing backup interface [ 575.581387][T16928] netlink: 'syz.0.4527': attribute type 4 has an invalid length. [ 576.501203][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 576.523382][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 577.287249][T16984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4552'. [ 579.942900][T17027] fuse: Bad value for 'fd' [ 580.202737][T17059] netlink: 95 bytes leftover after parsing attributes in process `syz.1.4587'. [ 580.455828][T17072] bridge0: entered promiscuous mode [ 580.463730][T17072] bridge0: port 3(vlan2) entered blocking state [ 580.471052][T17072] bridge0: port 3(vlan2) entered disabled state [ 580.477699][T17072] vlan2: entered allmulticast mode [ 580.483530][T17072] bridge0: entered allmulticast mode [ 580.504306][T17072] vlan2: left allmulticast mode [ 580.519619][T17072] bridge0: left allmulticast mode [ 580.532791][T17072] bridge0: left promiscuous mode [ 581.315615][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 581.315635][ T30] audit: type=1326 audit(1763507963.174:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.411875][ T30] audit: type=1326 audit(1763507963.174:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.600084][ T30] audit: type=1326 audit(1763507963.204:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.670032][ T30] audit: type=1326 audit(1763507963.204:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.747797][ T30] audit: type=1326 audit(1763507963.204:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.812947][ T30] audit: type=1326 audit(1763507963.204:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.890619][ T30] audit: type=1326 audit(1763507963.204:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.950046][ T30] audit: type=1326 audit(1763507963.204:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 581.990325][ T30] audit: type=1326 audit(1763507963.204:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 582.060154][ T30] audit: type=1326 audit(1763507963.204:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.1.4600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 582.520038][ T5920] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 582.670076][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 582.677671][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.710018][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.732647][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.751227][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.760385][ T5920] usb 4-1: Product: syz [ 582.770332][ T5920] usb 4-1: Manufacturer: syz [ 582.782392][ T5920] usb 4-1: SerialNumber: syz [ 582.797015][T17120] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4613'. [ 583.040432][ T5920] usb 4-1: 0:2 : does not exist [ 583.062865][ T5920] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 583.220139][ T5920] usb 4-1: USB disconnect, device number 27 [ 583.401420][T16803] udevd[16803]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.270629][T17162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4631'. [ 584.301504][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4631'. [ 584.530143][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'. [ 584.766683][T17186] veth1_macvtap: left promiscuous mode [ 584.780053][T17186] macsec0: entered promiscuous mode [ 585.248547][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'. [ 585.976982][T17227] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4655'. [ 586.399657][T17239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4650'. [ 586.504215][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4650'. [ 586.525691][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4661'. [ 588.175077][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4675'. [ 588.908023][T17313] tap0: tun_chr_ioctl cmd 35108 [ 588.928105][T17313] tap0: tun_chr_ioctl cmd 1074025676 [ 590.564669][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 590.564690][ T30] audit: type=1326 audit(1763507972.424:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.628018][ T30] audit: type=1326 audit(1763507972.464:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.678753][ T30] audit: type=1326 audit(1763507972.464:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.748634][ T30] audit: type=1326 audit(1763507972.464:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.829237][ T30] audit: type=1326 audit(1763507972.464:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.893350][ T30] audit: type=1326 audit(1763507972.464:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 590.964972][ T30] audit: type=1326 audit(1763507972.464:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 591.051603][ T30] audit: type=1326 audit(1763507972.464:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 591.092394][T17397] netlink: 'syz.1.4727': attribute type 27 has an invalid length. [ 591.094368][ T30] audit: type=1326 audit(1763507972.464:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 591.178137][ T30] audit: type=1326 audit(1763507972.464:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.2.4720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 591.327191][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.335141][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.386956][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4733'. [ 591.422800][T17404] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4733'. [ 591.448895][T17404] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4733'. [ 591.574719][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4736'. [ 591.747797][T17397] bond1: left allmulticast mode [ 591.757875][T17397] ip6erspan0: left allmulticast mode [ 591.912197][T17399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.941706][T17399] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.967321][T17399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.057681][ T6279] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.070091][ T6279] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.182980][ T6279] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.204079][ T6279] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.500245][ T5469] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 593.666907][ T5469] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 593.685787][ T5469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.702218][T17464] netlink: 'syz.4.4754': attribute type 4 has an invalid length. [ 593.711610][ T5469] usb 4-1: Product: syz [ 593.716509][ T5469] usb 4-1: Manufacturer: syz [ 593.721411][ T5469] usb 4-1: SerialNumber: syz [ 593.745447][ T5469] usb 4-1: config 0 descriptor?? [ 594.024431][ T5469] usb 4-1: USB disconnect, device number 28 [ 594.738263][T17487] netlink: 'syz.1.4764': attribute type 11 has an invalid length. [ 595.820104][ T5921] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 595.975522][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.986740][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.066895][ T5921] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.083334][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.099473][ T5921] usb 5-1: SerialNumber: syz [ 596.323473][ T5921] usb 5-1: 0:2 : does not exist [ 596.371565][ T5921] usb 5-1: USB disconnect, device number 29 [ 596.442425][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 596.473112][T17457] udevd[17457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.712087][ T5921] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 596.726832][ T5921] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 598.850119][ T5921] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 599.033463][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.046092][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 599.224922][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.269895][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.286771][ T5921] usb 4-1: config 0 descriptor?? [ 599.381984][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4800'. [ 599.392525][T17581] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4800'. [ 599.402664][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4800'. [ 599.412671][ T5921] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 599.422129][T17581] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4800'. [ 599.736597][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 599.747782][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 600.114522][T17614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.832181][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 600.832202][ T30] audit: type=1326 audit(1763507982.694:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.1.4831" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x0 [ 601.515009][ T5921] usb 4-1: USB disconnect, device number 29 [ 601.590748][ T5469] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 601.922651][ T5469] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 601.933059][ T5469] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.944146][ T5469] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.957525][ T5469] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 601.966893][ T5469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.007155][ T5469] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.150556][ T5921] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 602.154026][ T5469] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 602.209655][ T5938] usb 5-1: USB disconnect, device number 30 [ 602.310126][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 602.326846][ T5921] usb 4-1: config 0 has no interfaces? [ 602.336831][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 602.351013][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4838'. [ 602.360176][T17668] bridge_slave_1: left allmulticast mode [ 602.366080][T17668] bridge_slave_1: left promiscuous mode [ 602.371915][T17668] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.380374][ T5921] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 602.382063][T17668] bridge_slave_0: left allmulticast mode [ 602.396493][ T5921] usb 4-1: Manufacturer: syz [ 602.406937][T17668] bridge_slave_0: left promiscuous mode [ 602.414109][ T5921] usb 4-1: config 0 descriptor?? [ 602.420333][T17668] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.751245][T17661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 602.776830][T17661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 603.311532][T17687] bridge0: entered allmulticast mode [ 603.477630][T17695] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4851'. [ 603.490889][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 603.501313][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 604.587268][T17715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 604.661973][ T5889] usb 4-1: USB disconnect, device number 30 [ 604.855253][T17721] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4860'. [ 605.049533][T17727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 606.030223][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 606.311118][T17783] fuse: Bad value for 'user_id' [ 606.316173][T17783] fuse: Bad value for 'user_id' [ 606.420041][ T5469] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 606.603897][ T5469] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 606.612556][ T5469] usb 2-1: config 0 has no interface number 0 [ 606.622076][ T5469] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 606.631663][ T5469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.639767][ T5469] usb 2-1: Product: syz [ 606.646270][ T5469] usb 2-1: Manufacturer: syz [ 606.651297][ T5469] usb 2-1: SerialNumber: syz [ 606.667764][ T5469] usb 2-1: config 0 descriptor?? [ 606.677676][ T5469] asix 2-1:0.195: probe with driver asix failed with error -22 [ 606.895244][ T5469] usb 2-1: USB disconnect, device number 32 [ 608.261563][T17868] fuse: Bad value for 'rootmode' [ 608.786175][T17886] binder: 17881:17886 ioctl c018620c 800002c0 returned -1 [ 611.230013][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4945'. [ 611.692939][T17915] input: syz1 as /devices/virtual/input/input25 [ 611.918614][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4949'. [ 612.048681][T17930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4952'. [ 612.062810][T17930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4952'. [ 612.633417][T17944] netlink: 'syz.0.4955': attribute type 27 has an invalid length. [ 613.294800][T17953] netlink: 'syz.2.4962': attribute type 4 has an invalid length. [ 613.463484][T17961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4964'. [ 614.913781][T17993] tipc: Enabling of bearer rejected, failed to enable media [ 615.640039][ T5921] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 615.866198][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 615.881465][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.890909][ T5921] usb 5-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.909880][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 615.929454][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 615.939126][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.948217][ T5921] usb 5-1: Product: syz [ 615.953459][ T5921] usb 5-1: Manufacturer: syz [ 615.958280][ T5921] usb 5-1: SerialNumber: syz [ 616.544668][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input26 [ 616.583533][ T5182] bcm5974 5-1:1.0: could not read from device [ 616.594992][ T5921] usb 5-1: USB disconnect, device number 31 [ 616.796779][T17516] udevd[17516]: Error opening device "/dev/input/event4": No such file or directory [ 616.854094][T17516] udevd[17516]: Unable to EVIOCGABS device "/dev/input/event4" [ 616.872294][T17516] udevd[17516]: Unable to EVIOCGABS device "/dev/input/event4" [ 616.893718][T17516] udevd[17516]: Unable to EVIOCGABS device "/dev/input/event4" [ 616.904477][T17516] udevd[17516]: Unable to EVIOCGABS device "/dev/input/event4" [ 617.257643][ T30] audit: type=1326 audit(1763507999.044:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.287753][ T30] audit: type=1326 audit(1763507999.044:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.310056][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.317411][ T5897] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 617.346480][ T30] audit: type=1326 audit(1763507999.044:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.376864][ T30] audit: type=1326 audit(1763507999.044:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.427246][ T30] audit: type=1326 audit(1763507999.044:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.533886][ T5897] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 617.545562][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.560292][ T30] audit: type=1326 audit(1763507999.044:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.608858][ T5897] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.618485][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.627362][ T30] audit: type=1326 audit(1763507999.044:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18035 comm="syz.4.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 617.658143][ T5897] usb 2-1: Product: syz [ 617.669189][ T5897] usb 2-1: Manufacturer: syz [ 617.680067][ T5897] usb 2-1: SerialNumber: syz [ 617.702036][ T5897] usb 2-1: config 0 descriptor?? [ 617.753649][ T5897] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 617.930177][T17457] udevd[17457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.960512][T18030] input: syz0 as /devices/virtual/input/input27 [ 618.208894][ T5889] usb 2-1: USB disconnect, device number 33 [ 618.685076][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 619.890256][ T5897] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 620.129969][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 620.144924][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.157755][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.172131][ T5897] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 620.181767][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.192071][ T5897] usb 2-1: config 0 descriptor?? [ 620.731297][ T5897] greenasia 0003:0E8F:0012.0019: item fetching failed at offset 0/3 [ 620.743456][ T5897] greenasia 0003:0E8F:0012.0019: parse failed [ 621.024499][ T5897] greenasia 0003:0E8F:0012.0019: probe with driver greenasia failed with error -22 [ 621.164727][ T5897] usb 2-1: USB disconnect, device number 34 [ 624.623098][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.629683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.430564][ T5921] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 626.600653][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 626.608692][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 626.618828][ T5921] usb 5-1: config 127 has an invalid interface number: 158 but max is 0 [ 626.630183][ T5921] usb 5-1: config 127 has no interface number 0 [ 626.636686][ T5921] usb 5-1: config 127 interface 158 has no altsetting 0 [ 626.646530][ T5921] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 626.656484][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.665576][ T5921] usb 5-1: Product: syz [ 626.670293][ T5921] usb 5-1: Manufacturer: syz [ 626.675179][ T5921] usb 5-1: SerialNumber: syz [ 626.907543][ T5921] comedi comedi5: could not switch to alternate setting 1 [ 626.916138][ T5921] usbduxfast 5-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 626.931743][ T5921] usb 5-1: USB disconnect, device number 32 [ 627.573422][T18243] program syz.0.5078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.577437][T18245] netlink: 'syz.1.5077': attribute type 27 has an invalid length. [ 629.080416][T18254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5081'. [ 629.100809][T18254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5081'. [ 630.554817][T18270] fuse: Unknown parameter '00000000000000000007' [ 630.758527][T18285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 630.997045][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5101'. [ 631.011737][T18302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5101'. [ 632.134013][T18357] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 633.453431][T18391] netlink: 'syz.4.5143': attribute type 4 has an invalid length. [ 633.505121][T18395] netlink: 'syz.4.5143': attribute type 4 has an invalid length. [ 634.437347][T18431] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 634.493740][T18434] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5154'. [ 634.827281][T18444] netlink: 'syz.1.5157': attribute type 4 has an invalid length. [ 636.831303][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5179'. [ 636.860052][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5179'. [ 638.460985][ T5920] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 638.623351][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 638.632787][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 638.641811][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.681154][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.707016][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.730939][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.765190][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 638.788076][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.029593][ T5920] usb 5-1: GET_CAPABILITIES returned 0 [ 639.050950][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 639.297792][T18562] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 639.322861][ T5920] usb 5-1: USB disconnect, device number 33 [ 640.736332][T18603] ip6tnl0: Caught tx_queue_len zero misconfig [ 641.982950][T18628] binder: 18627:18628 ioctl 4018620d 0 returned -22 [ 642.001122][T18628] binder: 18627:18628 ioctl 50009418 0 returned -22 [ 642.707498][T18639] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5205'. [ 642.770234][T18639] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5205'. [ 643.877122][ T30] audit: type=1326 audit(1763508025.734:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.4.5222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 643.920051][ T30] audit: type=1326 audit(1763508025.734:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.4.5222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 643.968626][ T30] audit: type=1326 audit(1763508025.734:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.4.5222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 643.992270][ T30] audit: type=1326 audit(1763508025.734:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.4.5222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 644.016635][ T30] audit: type=1326 audit(1763508025.734:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.4.5222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 647.422809][T18718] misc userio: Invalid payload size [ 647.429986][T18718] misc userio: Invalid payload size [ 647.442150][T18718] usb usb8: usbfs: process 18718 (syz.0.5243) did not claim interface 0 before use [ 648.554478][T18736] netlink: 'syz.4.5252': attribute type 1 has an invalid length. [ 648.692878][T18736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 649.087773][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5254'. [ 649.384305][T18744] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5255'. [ 649.394066][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5255'. [ 649.774855][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5258'. [ 650.790748][T18763] binder: 18762:18763 ioctl c0306201 0 returned -14 [ 651.349167][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5266'. [ 651.806652][T18775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.818194][T18775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.850322][T18775] bond0 (unregistering): Released all slaves [ 652.259813][T18794] binder: 18792:18794 ioctl 80089418 800000c0 returned -22 [ 653.722463][T18811] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 653.770468][T18811] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 653.780485][T18811] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 653.792110][T18811] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 653.821007][T18811] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 653.829591][T18811] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 653.847837][T18811] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 653.866922][T18811] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 653.881643][T18811] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 653.899114][T18811] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 654.310182][ T5921] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 654.464095][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 654.499189][ T5921] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 654.508086][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.526245][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.547789][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.561057][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.583338][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 654.598164][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.992701][ T5921] usb 5-1: GET_CAPABILITIES returned 0 [ 654.998324][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 655.640307][ T30] audit: type=1400 audit(1763508037.494:832): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18850 comm="syz.2.5296" [ 655.750750][ T5920] usb 5-1: USB disconnect, device number 34 [ 656.649998][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 656.831923][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 656.841134][ T5920] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.860936][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.901004][ T5920] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 656.938103][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.979746][ T5920] usb 2-1: config 0 descriptor?? [ 657.531759][ T5920] aquacomputer_d5next 0003:0C70:F00E.001A: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 657.871028][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.891712][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.940492][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.011965][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.061296][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.065626][T18861] warning: `syz.1.5302' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 658.158679][T18861] dvmrp8: entered allmulticast mode [ 658.191559][T18861] dvmrp8: left allmulticast mode [ 658.265729][T18883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.275718][T18883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.302735][ T5938] usb 2-1: USB disconnect, device number 35 [ 658.597775][T18879] chnl_net:caif_netlink_parms(): no params data found [ 658.950389][T18879] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.957815][T18879] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.981866][T18879] bridge_slave_0: entered allmulticast mode [ 658.995844][T18879] bridge_slave_0: entered promiscuous mode [ 659.012356][T18879] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.022820][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.031218][T18879] bridge_slave_1: entered allmulticast mode [ 659.039686][T18879] bridge_slave_1: entered promiscuous mode [ 659.098394][T18879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.115447][T18879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.305568][T18879] team0: Port device team_slave_0 added [ 659.314008][T18879] team0: Port device team_slave_1 added [ 659.409170][T18923] input: syz0 as /devices/virtual/input/input29 [ 659.471761][T18879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.479055][T18879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.619647][T18879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.813526][T18879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.831953][T18879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.963286][T18879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.140177][ T5832] Bluetooth: hci3: command tx timeout [ 660.405950][T18879] hsr_slave_0: entered promiscuous mode [ 660.431848][T18879] hsr_slave_1: entered promiscuous mode [ 660.467576][T18879] debugfs: 'hsr0' already exists in 'hsr' [ 660.499487][T18879] Cannot create hsr debugfs directory [ 660.881024][ T30] audit: type=1326 audit(1763508042.624:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.303977][ T30] audit: type=1326 audit(1763508042.624:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.357132][ T30] audit: type=1326 audit(1763508042.624:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.440676][ T30] audit: type=1326 audit(1763508042.624:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.464017][ T30] audit: type=1326 audit(1763508042.624:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.560065][ T30] audit: type=1326 audit(1763508042.634:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.592536][ T30] audit: type=1326 audit(1763508042.634:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.615158][ T30] audit: type=1326 audit(1763508042.634:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.639619][ T30] audit: type=1326 audit(1763508042.634:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.680208][ T30] audit: type=1326 audit(1763508042.634:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.4.5334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 661.839587][T18953] fuse: Bad value for 'user_id' [ 661.874653][T18953] fuse: Bad value for 'user_id' [ 661.958949][T18879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.983202][T18879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.002765][T18879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.034275][T18879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.221615][ T5832] Bluetooth: hci3: command tx timeout [ 662.256508][T18879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.288678][T18879] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.307473][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.314729][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.348936][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.356276][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.466654][T18879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.565233][T18879] veth0_vlan: entered promiscuous mode [ 662.616072][T18879] veth1_vlan: entered promiscuous mode [ 662.705706][T18879] veth0_macvtap: entered promiscuous mode [ 662.734463][T18879] veth1_macvtap: entered promiscuous mode [ 662.789806][T18879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.832777][T18879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.858565][T16203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.872044][T16203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.885560][T16203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.903388][T16203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.130157][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.138038][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.150062][ T5889] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 663.223644][T16203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.232745][T16203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.324666][ T5889] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.360222][ T5889] usb 5-1: config 1 interface 0 has no altsetting 0 [ 663.376172][ T5889] usb 5-1: string descriptor 0 read error: -22 [ 663.389151][ T5889] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 663.398742][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.623470][ T5889] usbhid 5-1:1.0: can't add hid device: -71 [ 663.638725][ T5889] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 663.656578][ T5889] usb 5-1: USB disconnect, device number 35 [ 664.068621][ T5920] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 664.307067][ T5832] Bluetooth: hci3: command tx timeout [ 664.349596][ T5920] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 664.358006][ T5920] usb 4-1: config 7 has no interface number 0 [ 664.364922][ T5920] usb 4-1: config 7 interface 252 has no altsetting 0 [ 664.414902][ T5920] usb 4-1: string descriptor 0 read error: -22 [ 664.422714][ T5920] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 664.433003][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.144907][ T5920] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 666.231501][T19069] netlink: 'syz.4.5382': attribute type 4 has an invalid length. [ 666.302723][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 666.313174][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.337325][ T5920] usb 2-1: config 0 descriptor?? [ 666.380480][ T5828] Bluetooth: hci3: command tx timeout [ 666.663896][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5387'. [ 666.808921][ T5920] ath6kl: Failed to read usb control message: -71 [ 666.816133][ T5920] ath6kl: Unable to read the bmi data from the device: -71 [ 666.835071][ T5920] ath6kl: Unable to recv target info: -71 [ 666.876584][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 666.907128][ T5920] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 666.972804][ T5920] usb 2-1: USB disconnect, device number 36 [ 667.405712][T19097] fuse: Unknown parameter '%' [ 667.629207][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5400'. [ 667.672042][T19107] netlink: 'syz.4.5400': attribute type 1 has an invalid length. [ 668.545728][T19127] binder: 19126:19127 ioctl 40046205 0 returned -22 [ 668.570069][ T5938] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 668.721936][ T5938] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 668.731573][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.743737][ T5938] usb 6-1: config 0 descriptor?? [ 668.753073][ T5938] cp210x 6-1:0.0: cp210x converter detected [ 669.205814][ T5938] usb 6-1: cp210x converter now attached to ttyUSB0 [ 669.269128][ T5938] usb 4-1: USB disconnect, device number 31 [ 669.363536][ T43] usb 6-1: USB disconnect, device number 2 [ 669.375714][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 669.470727][ T43] cp210x 6-1:0.0: device disconnected [ 669.829483][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5416'. [ 669.839106][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5416'. [ 669.848291][ T5938] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 669.915474][T19149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5418'. [ 670.011795][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.025297][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.044514][ T5938] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 670.055777][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.097951][ T5938] usb 2-1: config 0 descriptor?? [ 670.479173][T19139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.488474][T19139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.555851][ T5938] usb 2-1: USB disconnect, device number 37 [ 672.203964][ T5828] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 672.413931][T19192] fuseblk: Bad value for 'fd' [ 674.293485][T19217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5446'. [ 676.007426][T19243] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 676.019579][T19243] bond0: (slave lo): Error: Device can not be enslaved while up [ 676.031906][T19243] snd_aloop snd_aloop.0: control 2:1883:2954:syz1:64272 is already present [ 676.258144][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5456'. [ 676.439980][ T5920] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 676.622086][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 676.639801][ T5920] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 11 [ 676.659564][ T5920] usb 2-1: config 3 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 676.672822][ T5920] usb 2-1: config 3 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 676.684715][ T5920] usb 2-1: config 3 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 676.696008][ T5920] usb 2-1: config 3 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 676.706646][ T5920] usb 2-1: config 3 interface 0 has no altsetting 0 [ 676.716711][ T5920] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 676.726016][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.736852][T19257] tipc: Enabled bearer , priority 0 [ 676.747574][T19257] syzkaller0: entered promiscuous mode [ 676.748625][ T5920] ums-sddr09 2-1:3.0: USB Mass Storage device detected [ 676.794417][T19257] syzkaller0: entered allmulticast mode [ 676.823418][ T5920] ums-sddr09 2-1:3.0: probe with driver ums-sddr09 failed with error -22 [ 676.886042][T19257] tipc: Resetting bearer [ 676.900474][T19255] tipc: Resetting bearer [ 676.929068][T19255] tipc: Disabling bearer [ 676.981600][ T5920] usb 2-1: USB disconnect, device number 38 [ 677.341127][T19277] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5469'. [ 677.568960][T19286] misc userio: Invalid payload size [ 677.575662][T19286] misc userio: Invalid payload size [ 677.607470][T19286] usb usb8: usbfs: process 19286 (syz.0.5470) did not claim interface 0 before use [ 677.950122][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 678.030176][ T5940] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 678.140213][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 678.147703][ T5889] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 678.156803][ T5889] usb 6-1: config 0 has no interface number 0 [ 678.163826][ T5889] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 678.180117][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 678.188247][ T5940] usb 2-1: config 6 has an invalid interface number: 227 but max is 0 [ 678.199379][ T5940] usb 2-1: config 6 has no interface number 0 [ 678.207874][ T5889] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 678.270640][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.309931][ T5889] usb 6-1: Product: syz [ 678.330105][ T5889] usb 6-1: Manufacturer: syz [ 678.340609][ T5889] usb 6-1: SerialNumber: syz [ 678.381066][ T5940] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 678.408842][ T5889] usb 6-1: config 0 descriptor?? [ 678.426248][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.452471][ T5889] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 678.482540][ T5940] usb 2-1: Product: syz [ 678.486809][ T5940] usb 2-1: Manufacturer: syz [ 678.493256][ T5889] em28xx 6-1:0.132: Video interface 132 found: [ 678.500849][ T5940] usb 2-1: SerialNumber: syz [ 678.580103][ T5940] kalmia 2-1:6.227: probe with driver kalmia failed with error -22 [ 678.771909][ T5940] usb 2-1: USB disconnect, device number 39 [ 678.926839][ T5889] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 679.027409][T19305] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5480'. [ 679.039543][T19305] gretap0: entered promiscuous mode [ 679.186780][T19309] binder: 19308:19309 ioctl c0306201 0 returned -14 [ 680.064124][ T5889] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 680.076687][ T5889] em28xx 6-1:0.132: board has no eeprom [ 680.151889][ T5889] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 680.180668][ T5889] em28xx 6-1:0.132: analog set to bulk mode. [ 680.197064][ T5938] em28xx 6-1:0.132: Registering V4L2 extension [ 680.263848][ T5889] usb 6-1: USB disconnect, device number 3 [ 680.311399][ T5938] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 680.323256][ T5889] em28xx 6-1:0.132: Disconnecting em28xx [ 680.450252][ T5897] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 680.776089][ T5897] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 680.787180][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 680.806905][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 680.820195][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 680.860459][ T5897] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 680.881106][ T5897] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 680.889340][ T5897] usb 2-1: Manufacturer: syz [ 680.921336][ T5897] usb 2-1: config 0 descriptor?? [ 680.927470][ T5938] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 680.945815][ T5897] igorplugusb 2-1:0.0: endpoint incorrect [ 680.970093][ T5938] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 680.977272][ T5938] em28xx 6-1:0.132: No AC97 audio processor [ 681.044420][ T5938] usb 6-1: Decoder not found [ 681.049177][ T5938] em28xx 6-1:0.132: failed to create media graph [ 681.080011][ T5938] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 681.140400][ T5920] usb 2-1: USB disconnect, device number 40 [ 681.459104][ T5938] em28xx 6-1:0.132: Remote control support is not available for this card. [ 681.459660][T19339] ================================================================== [ 681.469109][ T5889] em28xx 6-1:0.132: Closing input extension [ 681.476069][T19339] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 681.476105][T19339] Read of size 8 at addr ffff888039604740 by task v4l_id/19339 [ 681.476123][T19339] [ 681.476135][T19339] CPU: 1 UID: 0 PID: 19339 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 681.476160][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.476172][T19339] Call Trace: [ 681.476180][T19339] [ 681.476188][T19339] dump_stack_lvl+0x189/0x250 [ 681.476215][T19339] ? __virt_addr_valid+0x1c8/0x5c0 [ 681.476240][T19339] ? rcu_is_watching+0x15/0xb0 [ 681.476261][T19339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.476284][T19339] ? rcu_is_watching+0x15/0xb0 [ 681.476304][T19339] ? lock_release+0x4b/0x3e0 [ 681.476323][T19339] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 681.476348][T19339] ? __virt_addr_valid+0x1c8/0x5c0 [ 681.476372][T19339] ? __virt_addr_valid+0x4a5/0x5c0 [ 681.476398][T19339] print_report+0xca/0x240 [ 681.476420][T19339] ? v4l2_fh_open+0xac/0x420 [ 681.476437][T19339] kasan_report+0x118/0x150 [ 681.476457][T19339] ? v4l2_fh_open+0xac/0x420 [ 681.476478][T19339] v4l2_fh_open+0xac/0x420 [ 681.476497][T19339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 681.476526][T19339] em28xx_v4l2_open+0x157/0x9a0 [ 681.476565][T19339] v4l2_open+0x1bf/0x3a0 [ 681.476587][T19339] chrdev_open+0x4cc/0x5e0 [ 681.476606][T19339] ? __pfx_chrdev_open+0x10/0x10 [ 681.476625][T19339] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 681.476647][T19339] ? __pfx_chrdev_open+0x10/0x10 [ 681.476663][T19339] do_dentry_open+0x953/0x13f0 [ 681.476690][T19339] vfs_open+0x3b/0x340 [ 681.476707][T19339] ? path_openat+0x2ecd/0x3830 [ 681.476731][T19339] path_openat+0x2ee5/0x3830 [ 681.476766][T19339] ? __pfx_path_openat+0x10/0x10 [ 681.476796][T19339] do_filp_open+0x1fa/0x410 [ 681.476818][T19339] ? __lock_acquire+0xab9/0xd20 [ 681.476836][T19339] ? __pfx_do_filp_open+0x10/0x10 [ 681.476867][T19339] ? _raw_spin_unlock+0x28/0x50 [ 681.476889][T19339] ? alloc_fd+0x64c/0x6c0 [ 681.476918][T19339] do_sys_openat2+0x121/0x1c0 [ 681.476941][T19339] ? __pfx_do_sys_openat2+0x10/0x10 [ 681.476962][T19339] ? exc_page_fault+0x82/0x100 [ 681.476988][T19339] ? do_user_addr_fault+0xc85/0x1380 [ 681.477008][T19339] __x64_sys_openat+0x138/0x170 [ 681.477031][T19339] do_syscall_64+0xfa/0xfa0 [ 681.477057][T19339] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.477082][T19339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.477100][T19339] ? clear_bhb_loop+0x60/0xb0 [ 681.477120][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.477138][T19339] RIP: 0033:0x7fa45f4a7407 [ 681.477156][T19339] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 681.477172][T19339] RSP: 002b:00007ffe42a3b1a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 681.477193][T19339] RAX: ffffffffffffffda RBX: 00007fa45fb87880 RCX: 00007fa45f4a7407 [ 681.477208][T19339] RDX: 0000000000000000 RSI: 00007ffe42a3cf1c RDI: ffffffffffffff9c [ 681.477221][T19339] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 681.477233][T19339] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 681.477244][T19339] R13: 00007ffe42a3b3f0 R14: 00007fa45fc8c000 R15: 00005566901934d8 [ 681.477266][T19339] [ 681.477273][T19339] [ 681.805312][T19339] Allocated by task 5938: [ 681.809643][T19339] kasan_save_track+0x3e/0x80 [ 681.814334][T19339] __kasan_kmalloc+0x93/0xb0 [ 681.818947][T19339] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 681.824352][T19339] em28xx_v4l2_init+0x10b/0x2e70 [ 681.829496][T19339] em28xx_init_extension+0x120/0x1c0 [ 681.834821][T19339] process_scheduled_works+0xae1/0x17b0 [ 681.840380][T19339] worker_thread+0x8a0/0xda0 [ 681.844985][T19339] kthread+0x711/0x8a0 [ 681.849167][T19339] ret_from_fork+0x4bc/0x870 [ 681.853768][T19339] ret_from_fork_asm+0x1a/0x30 [ 681.858533][T19339] [ 681.860855][T19339] Freed by task 5938: [ 681.864838][T19339] kasan_save_track+0x3e/0x80 [ 681.869535][T19339] __kasan_save_free_info+0x46/0x50 [ 681.874824][T19339] __kasan_slab_free+0x5c/0x80 [ 681.879609][T19339] kfree+0x19a/0x6d0 [ 681.883601][T19339] em28xx_v4l2_init+0x1683/0x2e70 [ 681.888636][T19339] em28xx_init_extension+0x120/0x1c0 [ 681.893941][T19339] process_scheduled_works+0xae1/0x17b0 [ 681.899595][T19339] worker_thread+0x8a0/0xda0 [ 681.904188][T19339] kthread+0x711/0x8a0 [ 681.908286][T19339] ret_from_fork+0x4bc/0x870 [ 681.912877][T19339] ret_from_fork_asm+0x1a/0x30 [ 681.917638][T19339] [ 681.920162][T19339] The buggy address belongs to the object at ffff888039604000 [ 681.920162][T19339] which belongs to the cache kmalloc-8k of size 8192 [ 681.934737][T19339] The buggy address is located 1856 bytes inside of [ 681.934737][T19339] freed 8192-byte region [ffff888039604000, ffff888039606000) [ 681.949063][T19339] [ 681.951570][T19339] The buggy address belongs to the physical page: [ 681.958098][T19339] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39600 [ 681.967518][T19339] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 681.976014][T19339] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 681.983569][T19339] page_type: f5(slab) [ 681.988168][T19339] raw: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 681.996750][T19339] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 682.005351][T19339] head: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 682.014023][T19339] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 682.022690][T19339] head: 00fff00000000003 ffffea0000e58001 00000000ffffffff 00000000ffffffff [ 682.031448][T19339] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 682.040112][T19339] page dumped because: kasan: bad access detected [ 682.046517][T19339] page_owner tracks the page as allocated [ 682.052230][T19339] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 19257, tgid 19255 (syz.4.5462), ts 676747529280, free_ts 675493054841 [ 682.072484][T19339] post_alloc_hook+0x234/0x290 [ 682.077261][T19339] get_page_from_freelist+0x2365/0x2440 [ 682.082896][T19339] __alloc_frozen_pages_noprof+0x181/0x370 [ 682.088706][T19339] alloc_pages_mpol+0x232/0x4a0 [ 682.093680][T19339] allocate_slab+0x96/0x350 [ 682.098184][T19339] ___slab_alloc+0xf56/0x1990 [ 682.102953][T19339] __slab_alloc+0x65/0x100 [ 682.107392][T19339] __kvmalloc_node_noprof+0x6ba/0x910 [ 682.112861][T19339] pfifo_fast_init+0x372/0x6c0 [ 682.117632][T19339] qdisc_create_dflt+0x13b/0x4e0 [ 682.122656][T19339] dev_activate+0x378/0x1150 [ 682.127333][T19339] __dev_open+0x69c/0x880 [ 682.131666][T19339] __dev_change_flags+0x1ea/0x6d0 [ 682.136789][T19339] netif_change_flags+0x88/0x1a0 [ 682.141750][T19339] dev_change_flags+0x130/0x260 [ 682.146657][T19339] dev_ioctl+0x7b4/0x1150 [ 682.151001][T19339] page last free pid 19221 tgid 19220 stack trace: [ 682.157533][T19339] __free_frozen_pages+0xbc4/0xd30 [ 682.162656][T19339] __folio_put+0x21b/0x2c0 [ 682.167255][T19339] mptcp_destroy_common+0xce/0x320 [ 682.172634][T19339] mptcp_destroy+0x84/0x120 [ 682.177145][T19339] __mptcp_destroy_sock+0x156/0x350 [ 682.182416][T19339] __mptcp_close+0x698/0xa10 [ 682.187011][T19339] mptcp_close+0x28/0x1a0 [ 682.191381][T19339] inet_release+0x144/0x190 [ 682.195904][T19339] sock_close+0xc3/0x240 [ 682.200148][T19339] __fput+0x44c/0xa70 [ 682.204161][T19339] task_work_run+0x1d4/0x260 [ 682.208756][T19339] get_signal+0x11ec/0x1340 [ 682.213259][T19339] arch_do_signal_or_restart+0xa0/0x790 [ 682.218821][T19339] exit_to_user_mode_loop+0x72/0x130 [ 682.224104][T19339] __do_fast_syscall_32+0x1f4/0x2b0 [ 682.229393][T19339] do_fast_syscall_32+0x34/0x80 [ 682.234385][T19339] [ 682.236793][T19339] Memory state around the buggy address: [ 682.242422][T19339] ffff888039604600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 682.250574][T19339] ffff888039604680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 682.258635][T19339] >ffff888039604700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 682.266776][T19339] ^ [ 682.273181][T19339] ffff888039604780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 682.281240][T19339] ffff888039604800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 682.289298][T19339] ================================================================== [ 682.297458][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 682.639340][T19339] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 682.646692][T19339] CPU: 1 UID: 0 PID: 19339 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 682.655752][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.665938][T19339] Call Trace: [ 682.669245][T19339] [ 682.672204][T19339] dump_stack_lvl+0x99/0x250 [ 682.676917][T19339] ? __asan_memcpy+0x40/0x70 [ 682.681554][T19339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.686784][T19339] ? __pfx__printk+0x10/0x10 [ 682.691393][T19339] vpanic+0x237/0x6d0 [ 682.695414][T19339] ? __pfx_vpanic+0x10/0x10 [ 682.699940][T19339] ? preempt_schedule+0xae/0xc0 [ 682.704905][T19339] ? __pfx_preempt_schedule+0x10/0x10 [ 682.710566][T19339] panic+0xb9/0xc0 [ 682.714494][T19339] ? __pfx_panic+0x10/0x10 [ 682.718918][T19339] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 682.724905][T19339] ? is_module_address+0x17/0xf0 [ 682.729841][T19339] ? v4l2_fh_open+0xac/0x420 [ 682.734425][T19339] check_panic_on_warn+0x89/0xb0 [ 682.739456][T19339] ? v4l2_fh_open+0xac/0x420 [ 682.744058][T19339] end_report+0x78/0x160 [ 682.748414][T19339] kasan_report+0x129/0x150 [ 682.752931][T19339] ? v4l2_fh_open+0xac/0x420 [ 682.757536][T19339] v4l2_fh_open+0xac/0x420 [ 682.762131][T19339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 682.768124][T19339] em28xx_v4l2_open+0x157/0x9a0 [ 682.772991][T19339] v4l2_open+0x1bf/0x3a0 [ 682.777414][T19339] chrdev_open+0x4cc/0x5e0 [ 682.781916][T19339] ? __pfx_chrdev_open+0x10/0x10 [ 682.787028][T19339] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 682.793358][T19339] ? __pfx_chrdev_open+0x10/0x10 [ 682.798383][T19339] do_dentry_open+0x953/0x13f0 [ 682.803163][T19339] vfs_open+0x3b/0x340 [ 682.807244][T19339] ? path_openat+0x2ecd/0x3830 [ 682.812012][T19339] path_openat+0x2ee5/0x3830 [ 682.816617][T19339] ? __pfx_path_openat+0x10/0x10 [ 682.821739][T19339] do_filp_open+0x1fa/0x410 [ 682.826337][T19339] ? __lock_acquire+0xab9/0xd20 [ 682.831191][T19339] ? __pfx_do_filp_open+0x10/0x10 [ 682.836326][T19339] ? _raw_spin_unlock+0x28/0x50 [ 682.841458][T19339] ? alloc_fd+0x64c/0x6c0 [ 682.846040][T19339] do_sys_openat2+0x121/0x1c0 [ 682.850927][T19339] ? __pfx_do_sys_openat2+0x10/0x10 [ 682.856154][T19339] ? exc_page_fault+0x82/0x100 [ 682.861458][T19339] ? do_user_addr_fault+0xc85/0x1380 [ 682.866847][T19339] __x64_sys_openat+0x138/0x170 [ 682.871807][T19339] do_syscall_64+0xfa/0xfa0 [ 682.876409][T19339] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.881706][T19339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.887788][T19339] ? clear_bhb_loop+0x60/0xb0 [ 682.892555][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.898451][T19339] RIP: 0033:0x7fa45f4a7407 [ 682.902875][T19339] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 682.922499][T19339] RSP: 002b:00007ffe42a3b1a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 682.931020][T19339] RAX: ffffffffffffffda RBX: 00007fa45fb87880 RCX: 00007fa45f4a7407 [ 682.939088][T19339] RDX: 0000000000000000 RSI: 00007ffe42a3cf1c RDI: ffffffffffffff9c [ 682.947117][T19339] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 682.955176][T19339] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 682.963246][T19339] R13: 00007ffe42a3b3f0 R14: 00007fa45fc8c000 R15: 00005566901934d8 [ 682.971230][T19339] [ 682.974557][T19339] Kernel Offset: disabled [ 682.978959][T19339] Rebooting in 86400 seconds..