last executing test programs: 19.973213732s ago: executing program 1 (id=4359): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xf, 0x803, 0x9) r2 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0x5000000000000000, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0x10000) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2) 17.645401609s ago: executing program 3 (id=4364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 17.434955133s ago: executing program 1 (id=4366): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14.483307854s ago: executing program 4 (id=4369): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x558410e9) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x33, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f00000001c0)={0x0, 0x4, 0x5, 0xd, 'syz1\x00', 0x6}) 14.105595078s ago: executing program 3 (id=4370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x800, r2}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) brk(0x4) r8 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000100)=""/192, 0xc0}], 0x9, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000003c0)=0xe4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, r9, &(0x7f0000000580)={0x2ce, 0x0, 0x1, 0x0, 0xf4e3, 0x7, 0x2, 0x9, 0x10}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x200000000005, 0x0, 0x5, 0x5}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) 12.790615425s ago: executing program 4 (id=4371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) 12.789205135s ago: executing program 0 (id=4381): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, &(0x7f0000000a40)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) write(0xffffffffffffffff, &(0x7f0000000100)="1c0000001a005f0214f9f4070009", 0xe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 12.787738395s ago: executing program 1 (id=4382): prlimit64(0x0, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xa3, &(0x7f0000000700)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x31, 0x0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xca, 0xb8, {0x7, 0x25, 0x1, 0x3, 0x3, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x0, "e4", 'i'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x9, "91"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0xa5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x5ef, 0x5b, 0x13, 0xfc, {0x7, 0x25, 0x1, 0x83, 0x6, 0x5}}}}}}}]}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 12.242101305s ago: executing program 2 (id=4372): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000009f461200"], 0x64}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x26022, 0x0) 11.308541771s ago: executing program 3 (id=4373): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r2, 0x408) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[]) memfd_secret(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 11.162405649s ago: executing program 2 (id=4374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) syz_open_dev$media(0x0, 0x4007, 0x0) r4 = socket(0x10, 0x2, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x8, 0x10, @remote, @loopback={0x0, 0xffff888101827518}, 0x20, 0x7, 0x5, 0xffffffff}}) timer_getoverrun(r5) 10.431993144s ago: executing program 0 (id=4375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000440)=""/171, 0xab}], 0x3}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) setns(r3, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x2, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) unshare(0x24060400) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x6, [0x1ff, 0xa, 0x5, 0x7, 0x80000000, 0x81]}}) setsockopt$inet_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) 9.995207978s ago: executing program 4 (id=4376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 9.633721555s ago: executing program 1 (id=4377): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4000010) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000740)='./file1\x00', &(0x7f0000000580)='./file0\x00') fchown(r0, 0x0, 0xee01) 8.954908653s ago: executing program 0 (id=4378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x2, 0x1, 0x3, {0x2, @win={{0x7fff, 0xfffffff0, 0xfffffffc, 0x7}, 0x3, 0x3, &(0x7f0000000400)={{0xffff, 0x1, 0xd09, 0xd4}, &(0x7f0000000500)={{0x5, 0x5, 0x1, 0x457758a3}}}, 0x80000002, &(0x7f0000000540)="e45a3335b0e0061a8989459b0b612fffdbf3868e410d238b6b9ebe1ca4d881746f95c0c8be7f8fa3fbeab0b9f906d0b2cf4457670d925c0826ebbff61a2ca09f321d3d7994761c3ddddddebd7c702a5d22e6380bcc80eaee66569f3c7ce0cc67b6e9bed4dca36b8abe38b0d0d2ff6b51bbcb692b335e15d332187556b8824885da06d4ade67c5da51bd711ad46307bce5e73d44e3fc2405af379aeeb9ce49d9f673120136c97809cf470861ba0000221c9cd958358dcc12aba97eaa4aec55e8f26382f8a77bfac63d019c90908da965a", 0xf6}}, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0x200306}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.869439364s ago: executing program 3 (id=4379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='update defauut u\x00er:({]{t%@\x00'], 0x1c, 0xfffffffffffffff9) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r3 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 5.56847822s ago: executing program 3 (id=4380): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x6b, 0xffffffffffffffff, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0x1, 0x15, 0x1, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) r5 = fsopen(&(0x7f0000000300)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex=r4, r2, 0x12, 0x4, 0x0, @void, @value=r6, @void, @void, r3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="2e0000000020030000009ba9", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r3], 0x20) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000180)=0x800004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r11, 0x40104593, &(0x7f0000000180)={0x20, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "5d7b68d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}]}, 0x24}}, 0x0) 5.567121539s ago: executing program 2 (id=4392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x8c) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000018c0)) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5.409043086s ago: executing program 4 (id=4383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) gettid() timer_create(0x0, 0x0, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) 5.156297585s ago: executing program 1 (id=4384): syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.753706204s ago: executing program 0 (id=4385): r0 = socket(0x40000000015, 0x5, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, &(0x7f0000000240)}) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@rc={0x1f, @none}, {0x0}, 0x0, 0x38}, 0xa0) 3.678163887s ago: executing program 2 (id=4386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000ac0)=""/172, 0xac}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000a80), 0x80002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000ac0)=@v={0x93, 0x4, 0x80, 0x1b, @MIDI_NOTEON=@note=0x4e, 0xcc, 0xf}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c", 0x2d}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRES8=0x0], 0x48) r6 = memfd_secret(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f89000000200000495101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './cgroup', [{0x20, '^Q'}, {0x20, 'user.incfs.metadata\x00'}, {0x20, ',\'\xdb>'}, {0x20, '{'}, {0x20, 'user.incfs.metadata\x00'}], 0xa, "d9116fb17ea74c75b9456133ac9d1e25db89fb7fab91d2892e89d6460ba08f27874c10a2fea6ebdb95ea6f56d0fc135c7a667f4d5edd5b94b39639"}, 0x7b) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000200000000000005a3318adee84cb576cd5a6ad3c038fe9d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x90) 3.592816491s ago: executing program 4 (id=4387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/34, &(0x7f00000002c0)=0x22) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1e94a"], 0x0) 2.811860542s ago: executing program 0 (id=4388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) 2.810588929s ago: executing program 2 (id=4389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x5c48, 0x0) unshare(0x6a040000) 2.112789399s ago: executing program 1 (id=4390): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010) syz_usb_disconnect(r2) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_disconnect(r2) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0, r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8a000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.88767178s ago: executing program 3 (id=4391): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0xb4b, 0x9, 0x6, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b46, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008efbb54820eb5d459a5e5302b49f12f5401e25b18ad13f2b8909028852e04e54516dbbd2af4af18e5ad24ccfc530dac04a50"], 0x1c}}, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x1c) 1.290144548s ago: executing program 4 (id=4393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r5, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 566.368563ms ago: executing program 2 (id=4394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=4395): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) kernel console output (not intermixed with test programs): led to get link speed/duplex [ 1802.867939][T32227] tap0: tun_chr_ioctl cmd 1074025677 [ 1802.873771][T32227] tap0: linktype set to 825 [ 1802.908074][T31840] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1803.438588][T32101] usb 3-1: USB disconnect, device number 74 [ 1805.263168][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1805.263189][ T30] audit: type=1326 audit(1760136545.216:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1805.298334][ T30] audit: type=1326 audit(1760136545.216:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1805.428005][ T30] audit: type=1326 audit(1760136545.216:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1805.467120][ T30] audit: type=1326 audit(1760136545.216:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1805.655738][ T30] audit: type=1326 audit(1760136545.216:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1805.752527][ T37] net_ratelimit: 14 callbacks suppressed [ 1805.752549][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1805.868541][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1805.977877][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1806.129782][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1806.207854][ T30] audit: type=1326 audit(1760136545.216:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1806.231922][ T30] audit: type=1326 audit(1760136545.226:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1806.259624][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1806.343763][ T30] audit: type=1326 audit(1760136545.226:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1806.366598][ T30] audit: type=1326 audit(1760136545.226:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1806.390336][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1806.517835][ T30] audit: type=1326 audit(1760136545.226:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32234 comm="syz.2.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1806.659067][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1806.877254][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1807.078175][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1807.187942][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1807.667495][T32268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3858'. [ 1807.676905][T32268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3858'. [ 1810.858563][T31840] net_ratelimit: 19 callbacks suppressed [ 1810.858587][T31840] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1810.988358][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1811.033523][T32299] netlink: 'syz.0.3873': attribute type 10 has an invalid length. [ 1811.789134][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1811.901868][T32298] input: syz0 as /devices/virtual/input/input58 [ 1812.347013][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1812.477756][T31840] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1812.590533][T31840] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1812.767741][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1813.077354][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1813.428177][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1813.537793][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1814.087652][T32101] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1814.328341][T32101] usb 1-1: Using ep0 maxpacket: 16 [ 1814.337694][T32101] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1814.347472][T32101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.366049][T32101] usb 1-1: Product: syz [ 1814.509286][T32101] usb 1-1: Manufacturer: syz [ 1814.514715][T32101] usb 1-1: SerialNumber: syz [ 1814.557152][T32101] usb 1-1: config 0 descriptor?? [ 1814.922973][T32101] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1814.943615][T32101] usb 1-1: Detected FT-X [ 1815.141753][T32317] vlan0: entered allmulticast mode [ 1815.158444][T32317] bridge0: port 4(vlan0) entered blocking state [ 1815.170322][T32317] bridge0: port 4(vlan0) entered disabled state [ 1815.180644][T32317] vlan0: entered promiscuous mode [ 1815.341229][T32317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.352030][T32317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.373513][T32101] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1815.448243][T32101] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1815.465558][T32101] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1815.496662][T32101] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1815.637760][T32111] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1815.788757][T32101] usb 1-1: USB disconnect, device number 66 [ 1815.878181][T27229] net_ratelimit: 18 callbacks suppressed [ 1815.878208][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1815.927713][T32111] usb 5-1: Using ep0 maxpacket: 8 [ 1815.938752][T32111] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1815.947936][T32111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.960200][T32101] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1815.987742][T32111] usb 5-1: config 0 has no interface number 0 [ 1816.001554][T32111] usb 5-1: config 0 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1816.004941][T32101] ftdi_sio 1-1:0.0: device disconnected [ 1816.013385][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.042328][T32339] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1816.067248][T32111] usb 5-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1816.091387][T32111] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1816.104204][T32111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.119251][T32111] usb 5-1: Product: syz [ 1816.125321][T32111] usb 5-1: Manufacturer: syz [ 1816.130455][T32111] usb 5-1: SerialNumber: syz [ 1816.155994][T32111] usb 5-1: config 0 descriptor?? [ 1816.197901][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.298120][T32112] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1816.317826][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.427783][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.458714][T32112] usb 3-1: Using ep0 maxpacket: 32 [ 1816.469524][T32112] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1816.478621][T32112] usb 3-1: config 0 has no interface number 0 [ 1816.487149][T32112] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1816.538804][ T8302] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.586456][T32112] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1816.631668][T32112] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1816.647756][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.693485][T32112] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1816.745970][T32112] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1816.758445][T32112] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.771708][ T8302] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1816.785443][T32112] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1816.795312][T32112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.804488][T32112] usb 3-1: Product: syz [ 1816.810383][T32112] usb 3-1: Manufacturer: syz [ 1816.815289][T32112] usb 3-1: SerialNumber: syz [ 1816.824075][T32112] usb 3-1: config 0 descriptor?? [ 1816.830883][T32339] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1816.838644][T32339] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1816.852671][T32112] ipaq 3-1:0.19: PocketPC PDA converter detected [ 1816.861378][T32112] usb 3-1: active config #0 != 1 ?? [ 1816.889854][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1817.007890][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1817.092773][T32112] usb 3-1: USB disconnect, device number 75 [ 1817.259213][T32111] ath6kl: Failed to submit usb control message: -110 [ 1817.269400][T32111] ath6kl: unable to send the bmi data to the device: -110 [ 1817.317743][T32111] ath6kl: Unable to send get target info: -110 [ 1817.374937][T32111] ath6kl: Failed to init ath6kl core: -110 [ 1817.417924][T32111] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 1818.117880][T32111] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1818.217768][T32112] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1818.661955][T32111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1818.697750][T32111] usb 2-1: not running at top speed; connect to a high speed hub [ 1818.894805][T32112] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1818.924883][T32111] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1818.951763][T32112] usb 3-1: not running at top speed; connect to a high speed hub [ 1818.969790][T32111] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1818.996941][T32112] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 1819.018825][T32111] usb 2-1: config 2 has no interface number 0 [ 1819.027803][T32112] usb 3-1: config 129 has no interface number 0 [ 1819.037899][T32111] usb 2-1: config 2 has no interface number 1 [ 1819.044036][T32111] usb 2-1: config 2 interface 212 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1819.058219][T32112] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1819.078234][T32111] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1819.089790][T32112] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1819.102502][T32111] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1819.112735][T32112] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1819.127987][T32111] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1819.141598][T32112] usb 3-1: config 129 interface 28 has no altsetting 0 [ 1819.300393][T32101] usb 5-1: USB disconnect, device number 72 [ 1819.311396][T32112] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1819.336108][T32112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.366815][T32111] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1819.389030][T32111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.413804][T32112] usb 3-1: Product: syz [ 1819.422240][T32111] usb 2-1: Product: syz [ 1819.432136][T32112] usb 3-1: Manufacturer: syz [ 1819.444941][T32111] usb 2-1: Manufacturer: syz [ 1819.520881][T32112] usb 3-1: SerialNumber: syz [ 1819.543165][T32111] usb 2-1: SerialNumber: syz [ 1819.668540][T32358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1819.677378][T32356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1820.450452][T32112] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 1820.469914][T32112] etas_es58x 3-1:129.28: could not retrieve the product info string [ 1820.766545][T32112] usb 3-1: USB disconnect, device number 76 [ 1820.812355][T32112] etas_es58x 3-1:129.28: Disconnecting syz syz [ 1820.968131][ T8310] net_ratelimit: 25 callbacks suppressed [ 1820.968158][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1821.115134][T32374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1821.147745][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1821.257790][ T37] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1821.335804][T32374] netlink: 'syz.4.3882': attribute type 10 has an invalid length. [ 1821.343991][T32374] batadv0: left promiscuous mode [ 1821.353678][T32374] batadv0: left allmulticast mode [ 1821.536151][T32374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1821.564674][T32374] batadv0: entered promiscuous mode [ 1821.674976][T27242] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1821.714450][T32374] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1821.817850][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1821.968378][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1822.106585][T27242] usb 1-1: config 0 has no interfaces? [ 1822.319569][T27229] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1822.581719][ T8302] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1822.768182][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1822.795258][T27242] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1822.851191][T27242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.887944][ T8310] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1822.954024][T27242] usb 1-1: Product: syz [ 1823.009203][T27242] usb 1-1: Manufacturer: syz [ 1823.013865][T27242] usb 1-1: SerialNumber: syz [ 1823.021409][T32111] usb 2-1: USB disconnect, device number 72 [ 1823.062882][T27242] usb 1-1: config 0 descriptor?? [ 1823.077788][ T8302] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1824.118238][T32394] input: syz0 as /devices/virtual/input/input61 [ 1824.581284][T32401] netlink: 'syz.1.3896': attribute type 16 has an invalid length. [ 1824.600395][T32401] netlink: 'syz.1.3896': attribute type 17 has an invalid length. [ 1824.626781][T32401] lo: left promiscuous mode [ 1824.635635][T32401] tunl0: left promiscuous mode [ 1824.777298][T32401] gre0: left promiscuous mode [ 1824.838727][T32401] gretap0: left promiscuous mode [ 1824.846147][T32401] erspan0: left promiscuous mode [ 1824.854119][T32401] ip_vti0: left promiscuous mode [ 1824.862044][T32401] ip6_vti0: left promiscuous mode [ 1824.879578][T32401] sit0: left promiscuous mode [ 1824.887417][T32401] ip6tnl0: left promiscuous mode [ 1824.918679][T32401] ip6gre0: left promiscuous mode [ 1825.368923][T32401] syz_tun: left promiscuous mode [ 1825.382183][T32401] ip6gretap0: left promiscuous mode [ 1825.393441][T32401] nlmon0: left promiscuous mode [ 1825.401267][T32401] caif0: left promiscuous mode [ 1825.406430][T32401] batadv0: left allmulticast mode [ 1825.442160][T32401] sit1: left promiscuous mode [ 1825.478740][T32401] gretap1: left promiscuous mode [ 1825.484144][T32401] bond2: left promiscuous mode [ 1825.706410][T32401] gre1: left promiscuous mode [ 1825.777025][T32401] macvtap1: left promiscuous mode [ 1825.827529][T32401] macvtap1: left allmulticast mode [ 1825.890935][T32111] usb 1-1: USB disconnect, device number 67 [ 1825.934074][T32401] vlan2: left allmulticast mode [ 1825.970193][T32401] veth1: left allmulticast mode [ 1825.975490][T32401] tipc: Resetting bearer [ 1826.070084][T32401] syzkaller0: left promiscuous mode [ 1826.116201][T32401] syzkaller0: left allmulticast mode [ 1826.209458][T32401] geneve2: left promiscuous mode [ 1826.306613][T32401] geneve2: left allmulticast mode [ 1826.385323][T32401] veth7: left promiscuous mode [ 1826.401191][ T8310] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.063652][ T8310] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.151163][ T8310] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.357769][T32111] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1827.509854][T32111] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1827.519136][T32111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1827.558003][T32111] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1827.627770][T32111] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1827.665582][T32111] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1827.759464][T32111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1827.772357][T32111] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1827.781657][T32111] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1827.796864][T32111] usb 3-1: Product: syz [ 1827.801685][T32111] usb 3-1: Manufacturer: syz [ 1827.806559][T32111] usb 3-1: SerialNumber: syz [ 1827.816242][T32111] usb 3-1: config 0 descriptor?? [ 1827.825208][T32427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1827.838123][T32111] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1827.849560][T32111] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1829.907418][T32104] usb 3-1: USB disconnect, device number 77 [ 1829.930731][T32104] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1830.808177][T32104] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1831.001815][T32104] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1831.283067][T32466] syz.1.3900 (32466): drop_caches: 2 [ 1831.289734][T32466] syz.1.3900 (32466): drop_caches: 2 [ 1832.101475][T32464] fido_id[32464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1832.971625][T32474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1832.978988][T32474] IPv6: NLM_F_CREATE should be set when creating new route [ 1832.986419][T32474] IPv6: NLM_F_CREATE should be set when creating new route [ 1833.001641][T32472] bond5 (unregistering): Released all slaves [ 1833.439882][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1833.439909][ T30] audit: type=1400 audit(1760136573.406:1778): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1760136573.946:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32485 comm="syz.0.3907" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 1834.049813][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.493176][T32501] loop0: detected capacity change from 0 to 15 [ 1835.563408][T29335] buffer_io_error: 1 callbacks suppressed [ 1835.563427][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.579296][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.588334][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.596912][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.608377][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.620635][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.643925][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.690084][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.727916][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1836.098892][T29335] Buffer I/O error on dev loop0, logical block 0, async page read [ 1836.968857][T32512] net_ratelimit: 13 callbacks suppressed [ 1836.968913][T32512] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1837.536746][T32515] batadv_slave_1: entered promiscuous mode [ 1839.103639][T32515] batadv_slave_1: left promiscuous mode [ 1839.810936][T32104] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1840.212693][T32104] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1840.851357][T32541] fido_id[32541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1841.645789][T32554] input: syz0 as /devices/virtual/input/input62 [ 1842.487250][T32560] netlink: 'syz.4.3919': attribute type 3 has an invalid length. [ 1842.495767][T32560] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3919'. [ 1842.652089][T32104] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1842.879269][T32104] usb 1-1: Using ep0 maxpacket: 16 [ 1842.894906][T32104] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1842.907931][T32104] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1842.917561][T32104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.931420][T32104] usb 1-1: Product: syz [ 1842.935702][T32104] usb 1-1: Manufacturer: syz [ 1842.941301][T32104] usb 1-1: SerialNumber: syz [ 1842.994124][T32104] usb 1-1: config 0 descriptor?? [ 1843.446705][T32104] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1843.477381][T32572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1843.599629][T32104] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1843.608290][T32104] usb 3-1: not running at top speed; connect to a high speed hub [ 1843.629563][T32104] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 1843.641123][T32104] usb 3-1: config 129 has no interface number 0 [ 1843.763595][T32104] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1843.787078][T32104] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1843.809500][T32104] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1843.841127][T32104] usb 3-1: config 129 interface 28 has no altsetting 0 [ 1844.028837][T32578] pim6reg1: entered promiscuous mode [ 1844.030490][T32104] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1844.037730][T32578] pim6reg1: entered allmulticast mode [ 1844.084321][T32104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.104850][T32104] usb 3-1: Product: syz [ 1844.129549][T32104] usb 3-1: Manufacturer: syz [ 1844.134251][T32104] usb 3-1: SerialNumber: syz [ 1844.170557][T32568] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1844.424337][T32104] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 1844.443722][T32104] etas_es58x 3-1:129.28: could not retrieve the product info string [ 1844.580350][T32104] usb 3-1: USB disconnect, device number 78 [ 1844.599492][T32104] etas_es58x 3-1:129.28: Disconnecting syz syz [ 1846.231406][T32111] usb 1-1: USB disconnect, device number 68 [ 1846.600848][T32601] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[32601] [ 1848.959926][ T30] audit: type=1326 audit(1760136588.876:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1849.135457][ T30] audit: type=1326 audit(1760136588.876:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1849.295746][ T30] audit: type=1326 audit(1760136588.876:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1849.347701][ T30] audit: type=1326 audit(1760136588.876:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1849.584794][ T30] audit: type=1326 audit(1760136588.876:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1850.437964][ T30] audit: type=1326 audit(1760136588.886:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1850.507738][ T30] audit: type=1326 audit(1760136588.886:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1850.995250][ T30] audit: type=1326 audit(1760136588.886:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1851.231795][ T30] audit: type=1326 audit(1760136588.886:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1851.339726][T32104] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1851.559574][ T30] audit: type=1326 audit(1760136588.886:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32622 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1851.947670][T32104] usb 2-1: Using ep0 maxpacket: 8 [ 1852.039996][T32104] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1852.060710][T32104] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 1852.091229][T32104] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1852.530615][T32104] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1852.677144][T32104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.692601][T32104] usb 2-1: Product: syz [ 1852.699381][T32104] usb 2-1: Manufacturer: syz [ 1852.704016][T32104] usb 2-1: SerialNumber: syz [ 1852.735445][T32104] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1852.755974][T32104] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1852.778202][T32104] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1852.826896][T27242] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1853.189320][T32104] usb 2-1: USB disconnect, device number 73 [ 1853.550757][T27242] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.561907][T27242] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1853.653352][T27242] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1853.692195][T27242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.745415][T27242] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1853.979991][T27242] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1855.559533][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1855.559556][ T30] audit: type=1400 audit(1760136595.476:1811): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1855.785351][T32673] netlink: 'syz.4.3942': attribute type 8 has an invalid length. [ 1855.823450][T32101] usb 1-1: USB disconnect, device number 69 [ 1855.997854][T32104] usb 2-1: Using ep0 maxpacket: 16 [ 1856.116196][T32104] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1856.131544][T32104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.144744][T32104] usb 2-1: Product: syz [ 1856.150064][T32104] usb 2-1: Manufacturer: syz [ 1856.154812][T32104] usb 2-1: SerialNumber: syz [ 1856.185732][T32104] usb 2-1: config 0 descriptor?? [ 1856.307454][T32685] futex_wake_op: syz.2.3943 tries to shift op by 32; fix this program [ 1856.459495][T32104] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1856.529838][T32101] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1856.579949][T32104] usb 2-1: clie_3_5_startup: get config number failed: -32 [ 1856.590793][T32104] visor 2-1:0.0: probe with driver visor failed with error -32 [ 1856.698735][T32101] usb 1-1: Using ep0 maxpacket: 32 [ 1856.779800][T32101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.066858][T32101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.076844][T32101] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1857.163036][T32687] pim6reg1: entered promiscuous mode [ 1857.197686][T32687] pim6reg1: entered allmulticast mode [ 1857.217658][T32101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.368735][T32101] usb 1-1: config 0 descriptor?? [ 1857.863252][T32101] ft260 0003:0403:6030.0016: unknown main item tag 0x7 [ 1858.058664][T32101] ft260 0003:0403:6030.0016: chip code: 6424 8183 [ 1858.266571][T32101] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1858.383994][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.390462][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.447968][T27242] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1858.470227][T32101] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 1858.686310][T32101] ft260 0003:0403:6030.0016: failed to retrieve status: -32 [ 1858.817783][ T30] audit: type=1326 audit(1760136598.776:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1858.840849][T27242] usb 3-1: Using ep0 maxpacket: 8 [ 1858.888285][T27242] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1858.908996][T27242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1858.927779][T27242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1858.938194][ T30] audit: type=1326 audit(1760136598.776:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1858.981989][T27242] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.003998][T27242] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1859.012971][ T30] audit: type=1326 audit(1760136598.776:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.227891][T32101] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 1859.286622][ T30] audit: type=1326 audit(1760136598.776:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.329736][T27242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.347548][ T30] audit: type=1326 audit(1760136598.776:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.524022][ T30] audit: type=1326 audit(1760136598.776:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.562779][ T30] audit: type=1326 audit(1760136598.776:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.635131][ T30] audit: type=1326 audit(1760136598.776:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.654339][T32111] usb 2-1: USB disconnect, device number 74 [ 1859.685952][T27242] usb 3-1: GET_CAPABILITIES returned 0 [ 1859.694624][ T30] audit: type=1326 audit(1760136598.776:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 1859.781487][T27242] usbtmc 3-1:16.0: can't read capabilities [ 1859.903969][T32694] raw_sendmsg: syz.2.3948 forgot to set AF_INET. Fix it! [ 1860.016003][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.025515][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.034622][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.106740][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.115891][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.155257][T32104] usb 1-1: USB disconnect, device number 70 [ 1860.191743][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.202613][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.211765][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.220874][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.308726][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.317943][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.327082][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.336504][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.345622][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.354716][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.370393][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1860.388984][T32111] usb 3-1: USB disconnect, device number 79 [ 1862.268006][T32731] gtp0: entered promiscuous mode [ 1862.273018][T32731] gtp0: entered allmulticast mode [ 1863.630716][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1863.630737][ T30] audit: type=1400 audit(1760136603.616:1836): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1866.470602][T32104] usb 3-1: Using ep0 maxpacket: 32 [ 1866.483396][T32104] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1866.492016][T32104] usb 3-1: config 0 has no interface number 0 [ 1866.545294][T32104] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1866.555723][T32104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.577769][T32104] usb 3-1: Product: syz [ 1866.592644][T32104] usb 3-1: Manufacturer: syz [ 1866.597290][T32104] usb 3-1: SerialNumber: syz [ 1866.630141][T32104] usb 3-1: config 0 descriptor?? [ 1866.675168][T32104] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1866.688512][T32104] usb 3-1: selecting invalid altsetting 1 [ 1866.695666][T32104] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1866.708898][T32104] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1866.753650][T32104] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1866.788619][T32104] usb 3-1: media controller created [ 1866.830836][T32104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1867.400788][T32765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.418537][T32765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.474687][T32104] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1867.494590][T32104] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1867.512381][T32104] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1867.658492][T32104] usb 3-1: USB disconnect, device number 80 [ 1867.678491][T32111] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1867.994733][T32111] usb 1-1: Using ep0 maxpacket: 16 [ 1868.014049][T32111] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1868.046095][T32111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.204617][T32111] usb 1-1: Product: syz [ 1868.209141][T32111] usb 1-1: Manufacturer: syz [ 1868.213790][T32111] usb 1-1: SerialNumber: syz [ 1868.287776][T32111] usb 1-1: config 0 descriptor?? [ 1868.299223][T32111] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1868.509962][T32111] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 1868.510122][T32111] visor 1-1:0.0: probe with driver visor failed with error -32 [ 1868.794587][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'. [ 1869.277762][T27242] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1869.668971][T32104] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1869.724981][T27242] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1869.752142][T27242] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1869.776166][T27242] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1869.831120][T32104] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1869.834679][T27242] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1869.852208][T32104] usb 5-1: not running at top speed; connect to a high speed hub [ 1869.891495][T32104] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 1869.900905][T32104] usb 5-1: config 129 has no interface number 0 [ 1869.907536][T32104] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1870.039284][T27242] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1870.057949][T32104] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1870.069963][T27242] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1870.069997][T27242] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1870.097411][T32104] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1870.113895][T32104] usb 5-1: config 129 interface 28 has no altsetting 0 [ 1870.125706][T32104] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1870.135546][T32104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.144136][T32104] usb 5-1: Product: syz [ 1870.241521][T27242] usb 2-1: Product: syz [ 1870.250315][T32104] usb 5-1: Manufacturer: syz [ 1870.254782][T27242] usb 2-1: Manufacturer: syz [ 1870.260485][T32104] usb 5-1: SerialNumber: syz [ 1870.283256][T27242] cdc_wdm 2-1:1.0: skipping garbage [ 1870.297347][T27242] cdc_wdm 2-1:1.0: skipping garbage [ 1870.314101][T27242] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1870.329744][ T332] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1870.330728][T27242] cdc_wdm 2-1:1.0: Unknown control protocol [ 1870.585980][T32104] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 1870.595404][T32104] etas_es58x 5-1:129.28: could not retrieve the product info string [ 1870.962155][T32100] usb 1-1: USB disconnect, device number 71 [ 1871.106347][T32104] usb 5-1: USB disconnect, device number 73 [ 1871.130527][T32104] etas_es58x 5-1:129.28: Disconnecting syz syz [ 1871.219704][T27242] usb 2-1: USB disconnect, device number 75 [ 1873.018061][ T30] audit: type=1326 audit(1760136612.976:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1873.107970][ T364] input: syz0 as /devices/virtual/input/input63 [ 1873.410942][ T30] audit: type=1326 audit(1760136612.986:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1873.869491][ T30] audit: type=1326 audit(1760136612.986:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1873.965814][ T30] audit: type=1326 audit(1760136612.986:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.314904][ T30] audit: type=1326 audit(1760136612.986:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.365026][ T30] audit: type=1326 audit(1760136612.986:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.409653][ T30] audit: type=1326 audit(1760136612.986:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.440548][ T30] audit: type=1326 audit(1760136612.986:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.727281][ T30] audit: type=1326 audit(1760136612.996:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1874.897688][ T30] audit: type=1326 audit(1760136612.996:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=347 comm="syz.0.3971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1876.579352][ T396] wireguard0: entered promiscuous mode [ 1876.585561][ T400] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[400] [ 1876.626033][ T396] wireguard0: entered allmulticast mode [ 1876.636916][ T397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.656078][ T397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1877.847799][T32111] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1878.003462][T32111] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1878.064603][T32111] usb 5-1: not running at top speed; connect to a high speed hub [ 1878.417793][T32111] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 1878.426113][T32111] usb 5-1: config 129 has no interface number 0 [ 1878.432632][T32111] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1878.445064][T32111] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1878.498301][T32104] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1878.513300][T32111] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1878.530363][T32111] usb 5-1: config 129 interface 28 has no altsetting 0 [ 1878.546627][T32111] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1878.572304][T32111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.592256][T32111] usb 5-1: Product: syz [ 1878.600053][T32111] usb 5-1: Manufacturer: syz [ 1878.612872][T32111] usb 5-1: SerialNumber: syz [ 1878.646727][ T406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1878.667763][T32104] usb 3-1: Using ep0 maxpacket: 16 [ 1878.699573][T32104] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1878.709192][T32104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.733198][T32104] usb 3-1: Product: syz [ 1878.744346][T32104] usb 3-1: Manufacturer: syz [ 1878.749993][T32104] usb 3-1: SerialNumber: syz [ 1878.762828][T32104] usb 3-1: config 0 descriptor?? [ 1878.784347][T32104] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1878.986293][ T415] bond2 (unregistering): Released all slaves [ 1879.031519][T32111] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 1879.043014][T32111] etas_es58x 5-1:129.28: could not retrieve the product info string [ 1879.049830][T32104] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 1879.072785][T32104] visor 3-1:0.0: probe with driver visor failed with error -32 [ 1879.095644][T32111] usb 5-1: USB disconnect, device number 74 [ 1879.104415][T32111] etas_es58x 5-1:129.28: Disconnecting syz syz [ 1879.404961][ T421] pim6reg1: entered promiscuous mode [ 1879.416753][ T421] pim6reg1: entered allmulticast mode [ 1879.771006][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1879.771028][ T30] audit: type=1326 audit(1760136619.746:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1879.817807][ T425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1879.877914][ T30] audit: type=1326 audit(1760136619.746:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1879.900718][ T30] audit: type=1326 audit(1760136619.756:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1879.923133][ T30] audit: type=1326 audit(1760136619.756:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1879.945751][ T30] audit: type=1326 audit(1760136619.756:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1879.971313][ T30] audit: type=1326 audit(1760136619.756:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1880.000478][ T30] audit: type=1326 audit(1760136619.756:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1880.027991][ T30] audit: type=1326 audit(1760136619.756:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1880.074593][ T30] audit: type=1326 audit(1760136619.756:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1880.419580][ T439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1880.432901][ T439] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1880.439791][ T439] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1880.466266][ T439] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1880.497141][ T30] audit: type=1326 audit(1760136619.756:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=422 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1882.198338][T32112] usb 3-1: USB disconnect, device number 81 [ 1885.928159][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1885.928181][ T30] audit: type=1400 audit(1760136625.906:1897): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1886.757699][T32104] usb 3-1: config 0 has no interfaces? [ 1886.840785][T32104] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1886.885221][T32104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.924280][T32104] usb 3-1: Product: syz [ 1886.938996][T32104] usb 3-1: Manufacturer: syz [ 1886.996949][T32104] usb 3-1: SerialNumber: syz [ 1887.025345][T32104] usb 3-1: config 0 descriptor?? [ 1887.371254][ T527] bond3 (unregistering): Released all slaves [ 1888.560107][ T534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4005'. [ 1889.075291][T32111] usb 3-1: USB disconnect, device number 82 [ 1892.175576][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 1892.404954][ T568] veth0: entered promiscuous mode [ 1892.414028][ T568] batman_adv: batadv0: Adding interface: macvlan0 [ 1892.437802][ T568] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.509208][ T568] batman_adv: batadv0: Interface activated: macvlan0 [ 1893.968393][T32104] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1894.167701][T32104] usb 1-1: Using ep0 maxpacket: 8 [ 1894.378650][T32104] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1894.502572][ T597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1894.511785][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1894.585781][T32104] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 1894.603978][T32104] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1895.387251][T32104] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1895.478090][T32104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.506658][T32104] usb 1-1: Product: syz [ 1895.637891][T32111] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1895.696391][T32104] usb 1-1: Manufacturer: syz [ 1895.927956][T32104] usb 1-1: SerialNumber: syz [ 1895.938811][T32111] usb 5-1: config 0 has no interfaces? [ 1895.955845][T32111] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1895.985429][T32111] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1896.016555][T32111] usb 5-1: Product: syz [ 1896.026207][T32111] usb 5-1: Manufacturer: syz [ 1896.042080][T32111] usb 5-1: config 0 descriptor?? [ 1896.160599][T32104] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1896.205009][T32104] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1896.360170][ T602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4019'. [ 1896.387883][T32104] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1896.529164][ T609] bond6 (unregistering): Released all slaves [ 1896.745546][T32104] usb 1-1: USB disconnect, device number 72 [ 1897.017512][T27242] usb 5-1: USB disconnect, device number 75 [ 1897.033771][ T614] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1897.293967][ T614] batadv_slave_0: entered promiscuous mode [ 1897.300775][ T614] batadv_slave_0: entered allmulticast mode [ 1897.307978][ T614] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1897.333478][ T614] netlink: 'syz.3.4021': attribute type 8 has an invalid length. [ 1898.573484][ T621] block device autoloading is deprecated and will be removed. [ 1899.603973][ T30] audit: type=1400 audit(1760136639.576:1898): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1760136640.026:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1900.167195][ T657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1900.397653][ T30] audit: type=1326 audit(1760136640.356:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1900.730526][ T30] audit: type=1326 audit(1760136640.566:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1900.797692][ T30] audit: type=1326 audit(1760136640.566:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1900.904378][ T30] audit: type=1326 audit(1760136640.566:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=632 comm="syz.1.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1901.600594][ T662] syz.2.4031 (662): drop_caches: 2 [ 1903.078967][ T668] usb usb8: usbfs: process 668 (syz.0.4032) did not claim interface 0 before use [ 1903.703890][ T686] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1903.716454][ T686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1904.565948][ T689] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1905.320028][ T700] bond2 (unregistering): Released all slaves [ 1906.157753][T32111] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1906.235584][ T721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.254265][ T721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1906.709693][T32111] usb 5-1: Using ep0 maxpacket: 16 [ 1907.270046][T32111] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1907.297675][T32111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.305721][T32111] usb 5-1: Product: syz [ 1907.325883][T32111] usb 5-1: Manufacturer: syz [ 1907.331801][T32111] usb 5-1: SerialNumber: syz [ 1907.349854][T32111] usb 5-1: config 0 descriptor?? [ 1907.384123][T32111] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1907.558993][T32111] usb 5-1: clie_3_5_startup: get config number failed: -32 [ 1907.601462][T32111] visor 5-1:0.0: probe with driver visor failed with error -32 [ 1907.676297][ T30] audit: type=1400 audit(1760136647.656:1904): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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chedule: port zero only supported in persistent services, check your ipvs configuration [ 1907.942057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.961434][ T737] pim6reg1: entered promiscuous mode [ 1908.011431][ T737] pim6reg1: entered allmulticast mode [ 1908.813453][ T30] audit: type=1400 audit(1760136648.796:1905): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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input: syz0 as /devices/virtual/input/input66 [ 1909.070858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1909.542895][T32104] usb 5-1: USB disconnect, device number 76 [ 1909.607769][T32100] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1910.140085][T32100] usb 3-1: config 0 has no interfaces? [ 1910.205524][T32100] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1910.218640][T32100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.269776][T32100] usb 3-1: Product: syz [ 1910.277382][T32100] usb 3-1: Manufacturer: syz [ 1910.302872][T32100] usb 3-1: SerialNumber: syz [ 1910.335466][T32100] usb 3-1: config 0 descriptor?? [ 1912.794694][T32101] usb 3-1: USB disconnect, device number 83 [ 1914.678245][ T790] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1914.830019][ T801] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1914.850203][ T801] batadv_slave_0: entered promiscuous mode [ 1914.861559][ T801] batadv_slave_0: entered allmulticast mode [ 1914.871280][ T801] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1915.024189][ T801] netlink: 'syz.1.4056': attribute type 8 has an invalid length. [ 1915.280302][T27242] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1915.490617][T27242] usb 3-1: Using ep0 maxpacket: 32 [ 1915.867676][T27242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1915.899509][T27242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1915.928667][T27242] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1915.943521][T27242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.966591][T27242] usb 3-1: config 0 descriptor?? [ 1916.634796][T27242] glorious 0003:258A:0033.0017: unknown main item tag 0x2 [ 1916.683628][T27242] glorious 0003:258A:0033.0017: unknown main item tag 0x2 [ 1916.996752][T27242] glorious 0003:258A:0033.0017: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 1917.154412][ T30] audit: type=1326 audit(1760136657.106:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.176363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1917.264880][ T30] audit: type=1326 audit(1760136657.106:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.379679][ T30] audit: type=1326 audit(1760136657.106:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.684088][ T30] audit: type=1326 audit(1760136657.106:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.827719][ T30] audit: type=1326 audit(1760136657.106:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.887785][ T30] audit: type=1326 audit(1760136657.106:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.954155][ T30] audit: type=1326 audit(1760136657.106:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1917.978050][ T30] audit: type=1326 audit(1760136657.106:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1918.440607][ T30] audit: type=1326 audit(1760136657.106:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1918.604016][T27242] usb 3-1: USB disconnect, device number 84 [ 1918.962237][ T30] audit: type=1326 audit(1760136657.106:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=819 comm="syz.1.4060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1919.823094][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.829886][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.240017][ T864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1921.257870][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1923.847384][ T883] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1923.906158][ T883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.924996][ T903] pimreg: entered allmulticast mode [ 1928.041787][ T947] wireguard0: entered promiscuous mode [ 1928.053467][ T947] wireguard0: entered allmulticast mode [ 1928.169600][ T951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.250475][ T956] usb usb8: usbfs: process 956 (syz.2.4080) did not claim interface 0 before use [ 1928.293036][ T951] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1928.337335][ T951] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1928.419041][ T951] batman_adv: batadv0: Interface deactivated: macvlan0 [ 1928.437885][ T951] batman_adv: batadv0: Removing interface: macvlan0 [ 1928.834985][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1928.835005][ T30] audit: type=1326 audit(1760136668.806:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1928.998025][ T951] bridge0: port 3(batadv0) entered disabled state [ 1929.419672][ T30] audit: type=1326 audit(1760136668.806:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1929.535845][ T30] audit: type=1326 audit(1760136668.806:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.071080][ T30] audit: type=1326 audit(1760136668.806:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.177645][ T30] audit: type=1326 audit(1760136668.806:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.283310][ T30] audit: type=1326 audit(1760136668.806:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.389957][ T30] audit: type=1326 audit(1760136668.806:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.471201][ T30] audit: type=1326 audit(1760136668.806:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.573672][ T30] audit: type=1326 audit(1760136668.806:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1930.944527][ T30] audit: type=1326 audit(1760136668.806:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=959 comm="syz.3.4094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1932.843435][ T1000] netlink: 'syz.2.4087': attribute type 12 has an invalid length. [ 1933.819338][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 1933.936415][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 1936.493132][ T1035] ALSA: mixer_oss: invalid OSS volume '' [ 1936.568308][ T1035] ALSA: mixer_oss: invalid OSS volume '' [ 1936.621089][ T1039] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[1039] [ 1938.737994][ T1068] wireguard0: entered promiscuous mode [ 1938.743750][ T1068] wireguard0: entered allmulticast mode [ 1938.769503][ T1061] lo: left promiscuous mode [ 1938.797755][ T1061] tunl0: left promiscuous mode [ 1938.850067][ T1060] usb usb8: usbfs: process 1060 (syz.1.4100) did not claim interface 0 before use [ 1938.885885][ T1061] gre0: left promiscuous mode [ 1938.893086][ T1061] gretap0: left promiscuous mode [ 1939.056567][ T1061] erspan0: left promiscuous mode [ 1939.084143][ T1061] ip_vti0: left promiscuous mode [ 1939.328112][ T1061] ip6_vti0: left promiscuous mode [ 1939.365310][ T1061] sit0: left promiscuous mode [ 1939.438028][ T1061] ip6tnl0: left promiscuous mode [ 1939.443570][ T1061] ip6gre0: left promiscuous mode [ 1939.454212][ T1061] tipc: Resetting bearer [ 1939.460139][ T1061] ip6gretap0: left promiscuous mode [ 1939.470351][ T1061] bond0: left promiscuous mode [ 1939.475178][ T1061] bond_slave_0: left promiscuous mode [ 1939.480958][ T1061] bond_slave_1: left promiscuous mode [ 1939.486920][ T1061] bridge0: left promiscuous mode [ 1939.492818][ T1061] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1939.502533][ T1061] nlmon0: left promiscuous mode [ 1939.529695][ T1061] caif0: left promiscuous mode [ 1939.534728][ T1061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1939.610523][ T1069] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1939.668239][ T1069] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1939.708057][T27242] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1939.735115][ T1069] bond0: (slave batadv0): Releasing backup interface [ 1939.747463][ T1069] batadv0 (unregistering): left promiscuous mode [ 1940.273742][T27242] usb 3-1: Using ep0 maxpacket: 16 [ 1940.360101][T27242] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1940.369040][T27242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1940.398474][T27242] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1940.439096][T27242] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1940.453245][T27242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.502752][T27242] usb 3-1: Product: syz [ 1940.517111][T27242] usb 3-1: Manufacturer: syz [ 1940.534990][T27242] usb 3-1: SerialNumber: syz [ 1940.562626][T27242] usb 3-1: config 0 descriptor?? [ 1941.786840][ T1090] bond6 (unregistering): Released all slaves [ 1941.834374][ T1099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1941.971572][T27242] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 1941.998948][T27242] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 1942.179839][T27242] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 1942.192939][T27242] usb 3-1: USB disconnect, device number 85 [ 1942.557683][T32100] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1942.925124][T32100] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.938061][T32100] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1942.958545][T32100] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1942.968302][T32100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.985976][T32100] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1943.243291][ T1105] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1943.603462][ T1115] vti0: entered promiscuous mode [ 1943.609415][ T1115] vti0: entered allmulticast mode [ 1943.746324][T32100] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1943.897735][T32101] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1944.059506][T32101] usb 3-1: Using ep0 maxpacket: 16 [ 1944.073308][T32101] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1944.081852][T32101] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.092219][T32101] usb 3-1: config 0 has no interface number 0 [ 1944.112806][T32101] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1944.123548][T32101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.132016][T32101] usb 3-1: Product: syz [ 1944.136303][T32101] usb 3-1: Manufacturer: syz [ 1944.141351][T32101] usb 3-1: SerialNumber: syz [ 1944.153164][T32101] usb 3-1: config 0 descriptor?? [ 1945.810706][T27242] usb 5-1: USB disconnect, device number 77 [ 1945.834658][ T1105] delete_channel: no stack [ 1946.116984][T27242] usb 3-1: USB disconnect, device number 86 [ 1946.712565][ T1133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1946.750112][ T1133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1946.800708][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1946.800731][ T30] audit: type=1326 audit(1760136686.766:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1946.865212][ T30] audit: type=1326 audit(1760136686.766:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1947.564756][ T30] audit: type=1326 audit(1760136686.836:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1947.586778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1948.044305][ T30] audit: type=1326 audit(1760136686.836:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1948.254468][ T30] audit: type=1326 audit(1760136686.836:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1948.724275][ T30] audit: type=1326 audit(1760136686.836:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1948.972071][ T30] audit: type=1326 audit(1760136686.846:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1948.996014][ T30] audit: type=1326 audit(1760136686.886:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1949.025178][ T30] audit: type=1326 audit(1760136686.886:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1949.051244][ T30] audit: type=1326 audit(1760136686.886:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1121 comm="syz.0.4120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1951.227164][ T1176] fuse: Unknown parameter '0xffffffffffffffff' [ 1951.244284][ T1176] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1952.397658][T32112] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1952.591142][T32112] usb 3-1: Using ep0 maxpacket: 8 [ 1953.362570][T32112] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1953.375223][T32112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.391113][T32112] usb 3-1: Product: syz [ 1953.407063][T32112] usb 3-1: Manufacturer: syz [ 1953.411908][T32112] usb 3-1: SerialNumber: syz [ 1953.424201][T32112] usb 3-1: config 0 descriptor?? [ 1954.058724][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1954.058748][ T30] audit: type=1326 audit(1760136693.656:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.103842][T32112] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1954.132855][ T30] audit: type=1326 audit(1760136693.656:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.213959][ T30] audit: type=1326 audit(1760136693.666:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.247819][ T30] audit: type=1326 audit(1760136693.666:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.303023][ T30] audit: type=1326 audit(1760136693.666:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.805847][ T30] audit: type=1326 audit(1760136693.666:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.841759][ T30] audit: type=1326 audit(1760136693.666:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.868140][ T30] audit: type=1326 audit(1760136693.666:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1954.947783][ T30] audit: type=1326 audit(1760136693.666:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1955.371414][ T30] audit: type=1326 audit(1760136693.666:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1192 comm="syz.1.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1956.071729][ T1214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1956.537913][T32112] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1956.849114][T32112] usb 3-1: USB disconnect, device number 87 [ 1957.884028][ T1234] tipc: Resetting bearer [ 1957.892732][ T1234] tipc: Resetting bearer [ 1957.947503][ T1234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1959.069632][ T1246] : renamed from bridge_slave_0 [ 1961.088604][ T1262] netlink: 'syz.0.4135': attribute type 12 has an invalid length. [ 1963.147008][ T1278] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1965.632783][ T1307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1965.639460][ T1307] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1965.882993][ T1307] vhci_hcd vhci_hcd.0: Device attached [ 1965.931069][ T1313] vhci_hcd vhci_hcd.0: port 0 already used [ 1966.018615][ T1307] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 1966.025284][ T1307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1966.046495][ T1307] vhci_hcd vhci_hcd.0: Device attached [ 1966.163189][ T1313] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 1966.169863][ T1313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1966.190970][ T1313] vhci_hcd vhci_hcd.0: Device attached [ 1966.210151][ T1307] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 1966.216815][ T1307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1966.230492][ T1307] vhci_hcd vhci_hcd.0: Device attached [ 1966.818625][ T1320] vhci_hcd: connection closed [ 1966.822610][ T1309] vhci_hcd: connection closed [ 1966.828114][ T1318] vhci_hcd: connection closed [ 1966.848106][ T1316] vhci_hcd: connection closed [ 1966.853154][ T8310] vhci_hcd: stop threads [ 1966.868107][ T8310] vhci_hcd: release socket [ 1966.874177][ T8310] vhci_hcd: disconnect device [ 1966.892772][ T8310] vhci_hcd: stop threads [ 1966.897099][ T8310] vhci_hcd: release socket [ 1966.906270][ T8310] vhci_hcd: disconnect device [ 1966.957488][ T8310] vhci_hcd: stop threads [ 1966.962206][ T8310] vhci_hcd: release socket [ 1966.969106][ T8310] vhci_hcd: disconnect device [ 1966.985200][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1967.014842][ T8310] vhci_hcd: stop threads [ 1967.027639][ T8310] vhci_hcd: release socket [ 1967.035431][ T8310] vhci_hcd: disconnect device [ 1967.747744][ T1330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1968.427670][T32112] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1968.587873][T32112] usb 1-1: Using ep0 maxpacket: 16 [ 1970.113155][ T1361] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1970.154986][ T1361] nvme_fabrics: unknown parameter or missing value 'Ô' in ctrl creation request [ 1970.392937][ T1363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1970.402253][ T1363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1971.520280][T32100] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1971.880589][T32100] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.927715][T32100] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1972.452173][T32112] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1972.508560][T32100] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1972.512987][T32112] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1972.561185][T32100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.580160][T32112] usb 1-1: can't read configurations, error -71 [ 1972.635006][T32100] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1972.765502][T32100] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1972.781775][T29335] udevd[29335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1972.827095][ T1371] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1973.414680][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1973.414696][ T30] audit: type=1326 audit(1760136713.396:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1973.538484][ T30] audit: type=1326 audit(1760136713.526:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1973.561198][ T30] audit: type=1326 audit(1760136713.526:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1973.666617][ T30] audit: type=1326 audit(1760136713.526:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1974.956879][ T1371] delete_channel: no stack [ 1974.966225][T32100] usb 3-1: USB disconnect, device number 88 [ 1975.233212][ T1405] wireguard0: entered promiscuous mode [ 1975.267729][ T1405] wireguard0: entered allmulticast mode [ 1975.566922][ T1410] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1979.397685][T32100] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1979.557798][T32100] usb 3-1: Using ep0 maxpacket: 32 [ 1979.609386][T32100] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1979.618093][T32100] usb 3-1: config 0 has no interface number 0 [ 1979.640749][T32100] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1979.657776][T32100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.686330][T32100] usb 3-1: Product: syz [ 1979.706661][T32100] usb 3-1: Manufacturer: syz [ 1979.731765][T32100] usb 3-1: SerialNumber: syz [ 1979.791862][T32100] usb 3-1: config 0 descriptor?? [ 1979.801776][T32100] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1980.010558][T32100] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1980.031388][T32100] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1980.791870][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1980.799891][T32100] usb 3-1: USB disconnect, device number 89 [ 1980.988365][ T1454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1980.998008][T32100] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1981.289939][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.297136][T32100] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1981.314516][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.324590][T32100] quatech2 3-1:0.51: device disconnected [ 1981.852954][ T1458] input: syz1 as /devices/virtual/input/input71 [ 1982.537703][ T1474] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1984.057937][T32112] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1984.469680][T32112] usb 1-1: Using ep0 maxpacket: 32 [ 1984.820451][T32112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.830697][T32112] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1984.949681][T32112] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1985.073357][T32112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.126371][T32112] usb 1-1: config 0 descriptor?? [ 1985.220318][T32112] hub 1-1:0.0: bad descriptor, ignoring hub [ 1985.226299][T32112] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1985.356285][T32112] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1987.848318][T32112] usb 1-1: USB disconnect, device number 75 [ 1996.583643][ T30] audit: type=1400 audit(1760136736.566:2030): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1998.388700][ T1609] binder: 1606:1609 ioctl c0306201 80000100 returned -11 [ 2001.279176][ T1640] pimreg: entered allmulticast mode [ 2001.297476][ T1639] pimreg: left allmulticast mode [ 2001.352654][ T1638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4203'. [ 2001.381572][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 2002.524733][ T1644] netlink: 'syz.4.4208': attribute type 20 has an invalid length. [ 2002.533147][ T1644] IPv6: NLM_F_CREATE should be specified when creating new route [ 2002.564148][ T1644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2002.571548][ T1644] IPv6: NLM_F_CREATE should be set when creating new route [ 2004.787911][ T1665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2005.234463][ T1671] random: crng reseeded on system resumption [ 2008.512857][ T1706] netlink: 'syz.4.4219': attribute type 2 has an invalid length. [ 2010.755224][ T30] audit: type=1400 audit(1760136750.736:2031): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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random: crng reseeded on system resumption [ 2016.970251][ T1785] netlink: 'syz.1.4233': attribute type 2 has an invalid length. [ 2018.107677][T32112] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2018.300310][T32112] usb 5-1: Using ep0 maxpacket: 16 [ 2018.772266][ T1797] use of bytesused == 0 is deprecated and will be removed in the future, [ 2018.792128][ T1797] use the actual size instead. [ 2019.735855][ T1808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4237'. [ 2019.755347][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4237'. [ 2020.158884][ T1813] netlink: 'syz.2.4238': attribute type 20 has an invalid length. [ 2020.173381][ T1813] IPv6: NLM_F_CREATE should be specified when creating new route [ 2021.214712][T32112] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2021.348386][T32112] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2021.365712][T32112] usb 5-1: can't read configurations, error -71 [ 2024.012484][ T1841] tipc: Enabling of bearer rejected, already enabled [ 2024.022802][ T1841] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[1841] [ 2025.387894][T32112] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2025.687794][T32112] usb 5-1: Using ep0 maxpacket: 16 [ 2025.697064][T32112] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2025.707760][T32112] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.718300][T32112] usb 5-1: config 0 has no interface number 0 [ 2025.858664][T32112] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2025.869353][T32112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.877462][T32112] usb 5-1: Product: syz [ 2025.890575][T32112] usb 5-1: Manufacturer: syz [ 2025.895396][T32112] usb 5-1: SerialNumber: syz [ 2025.942438][T32112] usb 5-1: config 0 descriptor?? [ 2025.978467][T32112] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 2026.242114][ T1854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.277113][ T1854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.651248][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.671929][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.252607][ T1871] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2027.357732][ T1871] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2027.373896][ T1871] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2027.383263][ T1871] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 2027.394343][ T1871] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2027.460970][ T1871] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 2027.477809][ T1871] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2027.501254][ T1871] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 2027.609053][ T1871] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 2027.638930][ T1871] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 2027.707963][T32112] usb 5-1: USB disconnect, device number 80 [ 2029.599572][ T1894] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2032.190654][ T1922] netlink: 'syz.4.4261': attribute type 3 has an invalid length. [ 2032.319662][ T1922] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4261'. [ 2033.482974][ T30] audit: type=1400 audit(1760136773.466:2032): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 2035.037297][T27242] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 2035.270819][T27242] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2036.931435][ T1964] fido_id[1964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2038.227681][T27242] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2038.277839][ T1981] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2038.465039][T27242] usb 3-1: Using ep0 maxpacket: 16 [ 2038.489483][T27242] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2038.514721][T27242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.727002][T27242] usb 3-1: Product: syz [ 2038.772907][T27242] usb 3-1: Manufacturer: syz [ 2038.819605][T27242] usb 3-1: SerialNumber: syz [ 2038.843323][T27242] usb 3-1: config 0 descriptor?? [ 2038.939726][T27242] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 2039.150568][T27242] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 2039.159441][T27242] visor 3-1:0.0: probe with driver visor failed with error -5 [ 2039.707213][ T1974] pim6reg1: entered promiscuous mode [ 2039.712686][ T1974] pim6reg1: entered allmulticast mode [ 2041.676330][ T2012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4278'. [ 2041.857008][ T2012] bond3: option ad_select: invalid value (4) [ 2041.870578][ T2012] bond3 (unregistering): Released all slaves [ 2042.067631][T27242] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 2042.100783][T32112] usb 3-1: USB disconnect, device number 90 [ 2042.651721][T27242] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2042.665996][T27242] usb 5-1: not running at top speed; connect to a high speed hub [ 2042.718502][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.725025][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.797204][T27242] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2042.808070][T27242] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2042.852630][T27242] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2043.309124][T27242] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2043.320957][T27242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.388007][T27242] usb 5-1: Product: syz [ 2043.392244][T27242] usb 5-1: Manufacturer: syz [ 2043.396914][T27242] usb 5-1: SerialNumber: syz [ 2044.551001][ T30] audit: type=1326 audit(1760136784.516:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2044.597168][ T30] audit: type=1326 audit(1760136784.516:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2044.653434][ T30] audit: type=1326 audit(1760136784.516:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2044.875002][ T30] audit: type=1326 audit(1760136784.516:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.011648][ T30] audit: type=1326 audit(1760136784.516:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.139774][ T30] audit: type=1326 audit(1760136784.516:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.243236][T27242] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2045.302633][ T30] audit: type=1326 audit(1760136784.516:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.402255][T27242] usb 5-1: USB disconnect, device number 81 [ 2045.474171][ T30] audit: type=1326 audit(1760136784.526:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.529698][T29335] udevd[29335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2045.564973][ T30] audit: type=1326 audit(1760136784.526:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2045.697880][ T30] audit: type=1326 audit(1760136784.526:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.1.4282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 2046.633900][ T2054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4287'. [ 2049.350297][ T2083] fuse: Unknown parameter 'grou00000000000000000000' [ 2049.594484][ T2081] bond3 (unregistering): Released all slaves [ 2051.035068][ T2097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'. [ 2051.044254][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'. [ 2051.361139][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 2051.375420][ T2096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4294'. [ 2052.047675][ T2105] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2052.644922][T32104] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2053.228089][ T2124] tipc: Resetting bearer [ 2053.337532][T32104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.354235][ T2124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2053.461854][T32104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2053.537024][T32104] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2053.556377][T32104] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2053.569274][T32104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.585083][T32104] usb 2-1: config 0 descriptor?? [ 2054.461323][T32104] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2055.303534][ T2141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4297'. [ 2055.313590][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 2055.916281][ T2152] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4304'. [ 2055.949703][ T2153] fuse: Unknown parameter 'grou00000000000000000000' [ 2056.039379][ T2152] netlink: 'syz.4.4304': attribute type 8 has an invalid length. [ 2056.190846][T27242] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 2057.349913][T32112] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2057.645698][ T2163] IPv6: NLM_F_CREATE should be specified when creating new route [ 2057.654195][ T2163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2057.661799][ T2163] IPv6: NLM_F_CREATE should be set when creating new route [ 2057.927740][T32112] usb 1-1: Using ep0 maxpacket: 16 [ 2058.187650][T32112] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2058.197550][T32112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.209118][T32112] usb 1-1: config 0 has no interface number 0 [ 2058.221986][T32112] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2058.234800][T32112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.246307][T32112] usb 1-1: Product: syz [ 2058.366802][T32112] usb 1-1: Manufacturer: syz [ 2058.807616][T32111] usb 2-1: USB disconnect, device number 76 [ 2058.902302][T32112] usb 1-1: SerialNumber: syz [ 2058.912211][T32112] usb 1-1: config 0 descriptor?? [ 2058.917748][T32112] usb 1-1: can't set config #0, error -71 [ 2058.925204][T32112] usb 1-1: USB disconnect, device number 76 [ 2060.255663][T32104] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2060.450364][T32104] usb 2-1: Using ep0 maxpacket: 16 [ 2060.462019][T32104] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2060.488830][T32104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.509453][T32104] usb 2-1: Product: syz [ 2060.517120][T32104] usb 2-1: Manufacturer: syz [ 2060.527970][T32104] usb 2-1: SerialNumber: syz [ 2060.543240][T32104] usb 2-1: config 0 descriptor?? [ 2060.613082][T32104] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 2060.845065][T32104] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 2060.860676][T32104] visor 2-1:0.0: probe with driver visor failed with error -5 [ 2061.621716][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 2061.633562][ T2203] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4313'. [ 2061.642825][ T2203] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4313'. [ 2061.840110][ T2202] pim6reg1: entered promiscuous mode [ 2061.845441][ T2202] pim6reg1: entered allmulticast mode [ 2063.069012][ T2217] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[2217] [ 2063.089969][T32104] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2063.149996][T32112] usb 2-1: USB disconnect, device number 77 [ 2063.521984][T32104] usb 3-1: Using ep0 maxpacket: 8 [ 2063.559439][T32104] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 2063.578804][T32104] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 2063.597949][T32104] usb 3-1: config 0 has no interface number 0 [ 2063.628600][T32104] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2063.691287][T32104] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2063.731633][ T2220] fuse: Unknown parameter 'grou00000000000000000000' [ 2063.750181][T32104] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2063.801150][T32104] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2063.810812][T32104] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2063.840422][T32104] usb 3-1: Product: syz [ 2064.145010][ T2225] netlink: 'syz.1.4318': attribute type 10 has an invalid length. [ 2064.438413][T32104] usb 3-1: config 0 descriptor?? [ 2064.508505][ T2214] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2065.257725][T32104] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input73 [ 2066.773601][T32104] usb 3-1: USB disconnect, device number 91 [ 2066.779715][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2067.777853][T32112] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2068.023054][T32112] usb 1-1: config 0 has no interfaces? [ 2068.077727][T32112] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2068.121716][T32112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.218496][T32112] usb 1-1: Product: syz [ 2068.277699][T32111] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2068.295639][T32112] usb 1-1: Manufacturer: syz [ 2068.300633][ T2264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.300991][T32112] usb 1-1: SerialNumber: syz [ 2068.336577][T32112] usb 1-1: config 0 descriptor?? [ 2068.344835][ T2264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.662378][ T2261] pimreg: entered allmulticast mode [ 2068.686584][ T2261] pimreg: left allmulticast mode [ 2068.868174][ T2264] create_pit_timer: 141 callbacks suppressed [ 2068.868192][ T2264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2068.909941][ T2264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2068.922747][ T2264] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2068.931121][ T2264] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2068.939423][ T2264] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2068.948497][ T2264] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 2068.956722][ T2264] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2068.966934][ T2264] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 2069.008327][ T2264] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 2069.024177][ T2264] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 2070.708524][T32104] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2070.786499][T32100] usb 1-1: USB disconnect, device number 77 [ 2070.877661][T32104] usb 5-1: Using ep0 maxpacket: 16 [ 2070.887583][T32104] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2071.096004][ T2289] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2071.189524][T32104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.198312][T32104] usb 5-1: Product: syz [ 2071.202728][T32104] usb 5-1: Manufacturer: syz [ 2071.209101][T32104] usb 5-1: SerialNumber: syz [ 2071.219957][T32104] usb 5-1: config 0 descriptor?? [ 2071.237240][T32104] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 2071.445730][T32104] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 2071.462638][T32104] visor 5-1:0.0: probe with driver visor failed with error -5 [ 2071.764424][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2071.764445][ T30] audit: type=1400 audit(1760136811.746:2062): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pim6reg1: entered promiscuous mode [ 2072.164098][ T2279] pim6reg1: entered allmulticast mode [ 2073.326848][ T2286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.680879][ T2312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2073.982010][ T2311] IPv6: NLM_F_CREATE should be specified when creating new route [ 2074.641024][T32112] usb 5-1: USB disconnect, device number 82 [ 2075.253555][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4336'. [ 2077.287727][T32100] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2078.307977][T32100] usb 3-1: not running at top speed; connect to a high speed hub [ 2078.371171][T32100] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2078.388200][T32100] usb 3-1: config 1 has no interface number 1 [ 2078.394417][T32100] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2078.423114][T32100] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2078.432649][T32100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.441156][T32100] usb 3-1: Product: syz [ 2078.445400][T32100] usb 3-1: Manufacturer: syz [ 2078.471714][T32100] usb 3-1: SerialNumber: syz [ 2078.965016][T32100] usb 3-1: failed to enable PITCH for EP 0x82 [ 2079.897811][T32100] usb 3-1: USB disconnect, device number 92 [ 2080.118727][ T2155] udevd[2155]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2080.141656][ T2364] netlink: 'syz.1.4344': attribute type 8 has an invalid length. [ 2080.533002][ T2377] random: crng reseeded on system resumption [ 2081.440754][T32112] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2081.776080][ T2382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.787174][ T2382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2084.508312][T32112] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2084.516124][T32112] usb 3-1: no configurations [ 2084.520925][T32112] usb 3-1: can't read configurations, error -22 [ 2085.009131][ T2406] netlink: 'syz.0.4360': attribute type 4 has an invalid length. [ 2087.152548][ T2433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'. [ 2088.358964][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 2088.488252][ T2440] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4356'. [ 2092.510475][ T2490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2094.776369][ T2505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 2094.785684][ T2505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4368'. [ 2094.795068][ T2505] netlink: 'syz.2.4368': attribute type 15 has an invalid length. [ 2095.207849][T32100] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2095.497623][T32100] usb 3-1: Using ep0 maxpacket: 32 [ 2095.504787][T32100] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2095.516870][T32100] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2095.540109][T32100] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2095.556554][T32100] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2095.567366][T32100] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2095.576196][T32100] usb 3-1: Product: syz [ 2095.581094][T32100] usb 3-1: Manufacturer: syz [ 2095.585740][T32100] usb 3-1: SerialNumber: syz [ 2095.595898][ T2504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2095.832802][T32100] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input74 [ 2096.234171][T32111] usb 3-1: USB disconnect, device number 95 [ 2096.339146][T32111] appletouch 3-1:1.0: input: appletouch disconnected [ 2096.735652][ T2528] netlink: 'syz.1.4382': attribute type 1 has an invalid length. [ 2097.236280][ T30] audit: type=1326 audit(1760136837.176:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.258304][ C0] vkms_vblank_simulate: vblank timer overrun [ 2097.281389][ T30] audit: type=1326 audit(1760136837.196:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.312792][ T30] audit: type=1326 audit(1760136837.196:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.398450][ T2544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4371'. [ 2097.427347][ T30] audit: type=1326 audit(1760136837.196:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.480557][ T2531] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 2097.588768][ T30] audit: type=1326 audit(1760136837.256:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.726305][ T30] audit: type=1326 audit(1760136837.256:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.749093][ T2540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 2097.763072][ T30] audit: type=1326 audit(1760136837.256:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.791359][ T2528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2097.808007][ T30] audit: type=1326 audit(1760136837.326:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2519 comm="syz.0.4381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 2097.841684][ T2540] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4372'. [ 2098.011701][ T2539] bond6: (slave veth9): Enslaving as an active interface with a down link [ 2098.400666][ T30] audit: type=1326 audit(1760136838.386:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2548 comm="syz.3.4373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2098.478259][ T30] audit: type=1326 audit(1760136838.406:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2548 comm="syz.3.4373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2104.131210][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2104.131225][ T30] audit: type=1326 audit(1760136844.106:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2104.182640][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.189054][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.212117][ T30] audit: type=1326 audit(1760136844.106:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2104.712517][ T30] audit: type=1326 audit(1760136844.106:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2104.930312][ T30] audit: type=1326 audit(1760136844.106:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2104.953451][ T30] audit: type=1326 audit(1760136844.106:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2104.978437][ T30] audit: type=1326 audit(1760136844.106:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2105.005096][ T30] audit: type=1326 audit(1760136844.106:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2105.028454][ T30] audit: type=1326 audit(1760136844.106:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2105.051675][ T30] audit: type=1326 audit(1760136844.106:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2105.158692][ T30] audit: type=1326 audit(1760136844.106:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.4392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2106.030921][ T2624] netlink: 'syz.2.4386': attribute type 4 has an invalid length. [ 2107.250901][ T2634] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 2107.259332][ T2634] dummy0: left promiscuous mode [ 2107.707652][T32111] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2107.965719][T32111] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2107.982770][T32111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2108.018190][T32111] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2108.035165][T32111] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2108.065125][T32111] usb 2-1: Product: syz [ 2108.082264][T32111] usb 2-1: Manufacturer: syz [ 2108.093732][T32111] usb 2-1: SerialNumber: syz [ 2108.169055][T32111] usb 2-1: config 0 descriptor?? [ 2108.178192][T32111] usb 2-1: selecting invalid altsetting 0 [ 2108.601323][T32111] usb 2-1: USB disconnect, device number 79 [ 2108.758081][ T2660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 2108.767174][ T2660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4393'. [ 2110.538595][ T31] INFO: task kworker/0:14:32101 blocked for more than 143 seconds. [ 2110.555464][ T31] Not tainted syzkaller #0 [ 2110.560878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2110.570273][ T31] task:kworker/0:14 state:D stack:21864 pid:32101 tgid:32101 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2110.583069][ T31] Workqueue: usb_hub_wq hub_event [ 2110.589445][ T31] Call Trace: [ 2110.592859][ T31] [ 2110.595929][ T31] __schedule+0x1798/0x4cc0 [ 2110.602927][ T31] ? __pfx___schedule+0x10/0x10 [ 2110.611581][ T31] ? schedule+0x91/0x360 [ 2110.616482][ T31] schedule+0x165/0x360 [ 2110.624814][ T31] schedule_preempt_disabled+0x13/0x30 [ 2110.850943][ T31] __mutex_lock+0x7e6/0x1350 [ 2110.929429][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2110.956080][ T31] ? hub_event+0x21e5/0x4a20 [ 2110.970920][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2111.016143][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2111.127809][ T31] hub_event+0x21e5/0x4a20 [ 2111.134139][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2111.267661][ T31] ? __pfx_hub_event+0x10/0x10 [ 2111.293872][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2111.311087][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2111.341281][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2111.383431][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2111.400801][ T31] process_scheduled_works+0xae1/0x17b0 [ 2111.425706][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2111.447597][ T31] worker_thread+0x8a0/0xda0 [ 2111.460230][ T31] kthread+0x711/0x8a0 [ 2111.474979][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2111.495267][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.513945][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2111.533060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2111.551202][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.572814][ T31] ret_from_fork+0x4bc/0x870 [ 2111.594885][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2111.609493][ T31] ? __switch_to_asm+0x39/0x70 [ 2111.617638][ T31] ? __switch_to_asm+0x33/0x70 [ 2111.624821][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.629717][ T31] ret_from_fork_asm+0x1a/0x30 [ 2111.634644][ T31] [ 2111.639157][ T31] [ 2111.639157][ T31] Showing all locks held in the system: [ 2111.648156][ T31] 1 lock held by khungtaskd/31: [ 2111.653195][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2111.665979][ T31] 2 locks held by getty/5583: [ 2111.674989][ T31] #0: ffff88814d9240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2111.685098][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2111.695469][ T31] 3 locks held by syz-executor/5842: [ 2111.701104][ T31] 2 locks held by kworker/u8:16/8310: [ 2111.706626][ T31] 5 locks held by kworker/1:0/12817: [ 2111.721965][ T31] #0: ffff8881452a4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2111.736963][ T31] #1: ffffc9001b197ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2111.759335][ T31] #2: ffff888145ff3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2111.773487][ T31] #3: ffff888145ff6518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2111.787269][ T31] #4: ffff888145b74e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2111.797811][ T31] 5 locks held by kworker/0:14/32101: [ 2111.806057][ T31] #0: ffff8881452a4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2111.819384][ T31] #1: ffffc9000b727ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2111.834192][ T31] #2: ffff888145fdc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2111.843574][ T31] #3: ffff888145fdf518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2111.854000][ T31] #4: ffff888145b74e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2111.865342][ T31] 1 lock held by syz.0.4395/2666: [ 2111.874308][ T31] #0: ffff888068546d60 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 2111.885338][ T31] 4 locks held by syz.0.4395/2668: [ 2111.890931][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2111.901844][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2111.911311][ T31] #2: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 2111.920651][ T31] #3: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: lru_add+0x198/0xd80 [ 2111.929955][ T31] [ 2111.932379][ T31] ============================================= [ 2111.932379][ T31] [ 2111.942481][ T31] NMI backtrace for cpu 1 [ 2111.942502][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2111.942527][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2111.942541][ T31] Call Trace: [ 2111.942550][ T31] [ 2111.942561][ T31] dump_stack_lvl+0x189/0x250 [ 2111.942591][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2111.942615][ T31] ? __pfx__printk+0x10/0x10 [ 2111.942652][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2111.942740][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2111.942766][ T31] ? __pfx__printk+0x10/0x10 [ 2111.942792][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2111.942831][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2111.942857][ T31] watchdog+0xf60/0xfa0 [ 2111.942886][ T31] ? watchdog+0x1e2/0xfa0 [ 2111.942914][ T31] kthread+0x711/0x8a0 [ 2111.942948][ T31] ? __pfx_watchdog+0x10/0x10 [ 2111.942969][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.943000][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2111.943026][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2111.943053][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.943083][ T31] ret_from_fork+0x4bc/0x870 [ 2111.943109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2111.943141][ T31] ? __switch_to_asm+0x39/0x70 [ 2111.943173][ T31] ? __switch_to_asm+0x33/0x70 [ 2111.943198][ T31] ? __pfx_kthread+0x10/0x10 [ 2111.943229][ T31] ret_from_fork_asm+0x1a/0x30 [ 2111.943274][ T31] [ 2111.943283][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2112.090275][ C0] NMI backtrace for cpu 0 [ 2112.090301][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2112.090322][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2112.090335][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2112.090364][ C0] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2112.090381][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 2112.090400][ C0] RAX: 4f48f518962c0d00 RBX: ffffffff81960c17 RCX: 4f48f518962c0d00 [ 2112.090415][ C0] RDX: 0000000000000001 RSI: ffffffff8d7e8a1b RDI: ffffffff8bc077e0 [ 2112.090429][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 2112.090448][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e1170 [ 2112.090463][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 2112.090476][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 2112.090492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2112.090505][ C0] CR2: 0000000030d13ff8 CR3: 0000000077a2e000 CR4: 00000000003526f0 [ 2112.090521][ C0] Call Trace: [ 2112.090531][ C0] [ 2112.090539][ C0] default_idle+0x13/0x20 [ 2112.090567][ C0] default_idle_call+0x73/0xb0 [ 2112.090596][ C0] do_idle+0x1e7/0x510 [ 2112.090617][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2112.090639][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2112.090664][ C0] ? __pfx_do_idle+0x10/0x10 [ 2112.090689][ C0] ? do_idle+0x5/0x510 [ 2112.090708][ C0] cpu_startup_entry+0x44/0x60 [ 2112.090728][ C0] rest_init+0x2de/0x300 [ 2112.090746][ C0] start_kernel+0x3ae/0x410 [ 2112.090797][ C0] x86_64_start_reservations+0x24/0x30 [ 2112.090883][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2112.090902][ C0] common_startup_64+0x13e/0x147 [ 2112.090937][ C0] [ 2112.095667][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2112.292595][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2112.301720][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2112.311794][ T31] Call Trace: [ 2112.315107][ T31] [ 2112.318070][ T31] dump_stack_lvl+0x99/0x250 [ 2112.322698][ T31] ? __asan_memcpy+0x40/0x70 [ 2112.327403][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2112.332632][ T31] ? __pfx__printk+0x10/0x10 [ 2112.337270][ T31] vpanic+0x237/0x6d0 [ 2112.341288][ T31] ? __pfx_vpanic+0x10/0x10 [ 2112.345816][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2112.351300][ T31] panic+0xb9/0xc0 [ 2112.355087][ T31] ? __pfx_panic+0x10/0x10 [ 2112.359543][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2112.364949][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2112.371127][ T31] watchdog+0xf9f/0xfa0 [ 2112.375318][ T31] ? watchdog+0x1e2/0xfa0 [ 2112.379677][ T31] kthread+0x711/0x8a0 [ 2112.383801][ T31] ? __pfx_watchdog+0x10/0x10 [ 2112.388491][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.393105][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.398326][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2112.403549][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.408168][ T31] ret_from_fork+0x4bc/0x870 [ 2112.412771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2112.417906][ T31] ? __switch_to_asm+0x39/0x70 [ 2112.422681][ T31] ? __switch_to_asm+0x33/0x70 [ 2112.427465][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.432089][ T31] ret_from_fork_asm+0x1a/0x30 [ 2112.436896][ T31] [ 2112.440271][ T31] Kernel Offset: disabled [ 2112.444599][ T31] Rebooting in 86400 seconds..