last executing test programs: 14m55.125875265s ago: executing program 3 (id=754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0010", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 14m54.546890115s ago: executing program 3 (id=756): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000200), 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x35}, [@call={0x85, 0x0, 0x0, 0xa4}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 14m54.263071452s ago: executing program 3 (id=758): socket(0x10, 0x80003, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m53.784618181s ago: executing program 3 (id=761): clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) timer_delete(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) eventfd(0x7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x3c, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x40000) 14m51.413996099s ago: executing program 3 (id=766): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 14m51.161554609s ago: executing program 3 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getrusage(0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14m35.531273858s ago: executing program 32 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getrusage(0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14m32.51234876s ago: executing program 4 (id=840): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 14m27.37892682s ago: executing program 0 (id=860): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) listen(0xffffffffffffffff, 0x100) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffffff01, 0x0, 0x4) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 14m27.293342842s ago: executing program 4 (id=862): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 14m25.637034234s ago: executing program 0 (id=866): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/95) 14m25.474907569s ago: executing program 0 (id=868): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14m23.980708028s ago: executing program 0 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2243005, 0x0) 14m23.761854761s ago: executing program 0 (id=871): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 14m22.865119405s ago: executing program 0 (id=874): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) 14m22.630260582s ago: executing program 33 (id=874): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) 14m22.321643997s ago: executing program 4 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x40880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 14m22.146152956s ago: executing program 1 (id=878): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 14m21.919020415s ago: executing program 4 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2243005, 0x0) 14m21.768420428s ago: executing program 4 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) 14m21.012533993s ago: executing program 4 (id=883): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock iem'], 0xe) 14m20.340741429s ago: executing program 34 (id=883): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock iem'], 0xe) 14m18.258736119s ago: executing program 1 (id=887): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 14m18.200058659s ago: executing program 1 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x40880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 14m18.023056165s ago: executing program 1 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2243005, 0x0) 14m17.901064642s ago: executing program 1 (id=890): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14m17.262664243s ago: executing program 1 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) 14m16.970235118s ago: executing program 35 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) 7m14.338987421s ago: executing program 7 (id=2144): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf", 0x13) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x6]}}) 7m12.005064793s ago: executing program 7 (id=2148): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x80) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) io_setup(0x6, &(0x7f0000001380)) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x105004, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f00000003c0)=0x4d) 7m5.200176239s ago: executing program 7 (id=2165): syz_usb_connect(0x5, 0x27, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000180)=[{0xee, 0xb010, 0x1, &(0x7f00000000c0)="d5"}, {0x5, 0x800, 0x0, 0x0}], 0x2}) 7m4.389755361s ago: executing program 7 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xb8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7m3.993152564s ago: executing program 7 (id=2170): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000100), 0x0, 0x80800) 7m2.78279558s ago: executing program 7 (id=2172): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x88c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000007a3100000000050004000000000011637a117a6173683a6e65742c6e65740000000005000500020000000400010006000000"], 0x4c}}, 0x4000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x4004, @fd=r0, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6m47.717074523s ago: executing program 36 (id=2172): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x88c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000007a3100000000050004000000000011637a117a6173683a6e65742c6e65740000000005000500020000000400010006000000"], 0x4c}}, 0x4000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x4004, @fd=r0, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 11.598075661s ago: executing program 2 (id=3071): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x40002) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e8", 0x26, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10.624587119s ago: executing program 9 (id=3075): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x493, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) 9.043388529s ago: executing program 9 (id=3082): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.706063079s ago: executing program 2 (id=3085): socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2b, 0x801, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.442874802s ago: executing program 9 (id=3086): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e13000000000000000c000080eeb67c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 8.385997176s ago: executing program 2 (id=3088): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7f, 0xca502) dup3(r1, r0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa000, 0x4, 0x5}, 0x18) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8.212993639s ago: executing program 9 (id=3091): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001400010004000000000000002d"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 5.67108683s ago: executing program 9 (id=3099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4105, 0x0, 0x1009}, 0x0) rt_sigqueueinfo(r0, 0x21, 0x0) 5.43971661s ago: executing program 2 (id=3101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000068000100fae26789de58915a00000000000000000c0002000100000015"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073"], 0xf8}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x10, 0x0, 0x7, 0x83, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x0, 0x1}) 4.158986977s ago: executing program 2 (id=3106): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x40002) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e8", 0x26, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.949167914s ago: executing program 5 (id=3108): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.797765608s ago: executing program 8 (id=3110): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2b, 0x801, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.70390753s ago: executing program 5 (id=3112): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 3.438908176s ago: executing program 8 (id=3113): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.149532981s ago: executing program 5 (id=3115): mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000340)={{0x0, 0x8503}, 0x51}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x406026) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x8001, 0x7}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$can_bcm(r1, &(0x7f0000000100), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) 2.927510504s ago: executing program 8 (id=3117): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x7ffffe}, 0x400, "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"}, 0x418}) 2.53903046s ago: executing program 9 (id=3121): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001400010004000000000000002d"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 2.538833938s ago: executing program 5 (id=3122): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.302411302s ago: executing program 5 (id=3124): move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) 2.08225885s ago: executing program 5 (id=3126): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0xd8, 0x1}, {0x47, 0x2f}, 0x40}) memfd_secret(0x0) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 1.791277441s ago: executing program 8 (id=3128): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.649129034s ago: executing program 2 (id=3130): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') 1.263308489s ago: executing program 6 (id=3131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4105, 0x0, 0x1009}, 0x0) rt_sigqueueinfo(r0, 0x21, 0x0) 1.036765837s ago: executing program 6 (id=3132): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x3, [[0x0, 0x1000, 0x1, 0x9, 0x3, 0x10001, 0x6, 0xfffffffd], [0x5, 0x3, 0x9, 0xfe, 0xffffffff, 0x6613, 0x1, 0x80], [0x400, 0x80000000, 0x1219, 0x5, 0x2, 0x723d, 0xfffffe03]], '\x00', [{0x6, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0x81, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1}, {0xfffffff9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x10001, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x81d4, 0x0, 0x0, 0x1}, {0x5, 0x200, 0x0, 0x1}], '\x00', 0xfffffff8}) 878.507098ms ago: executing program 8 (id=3133): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xa00000, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980928, 0x3, '\x00', @p_u32=&(0x7f0000000200)=0x800006}}) 739.318994ms ago: executing program 6 (id=3134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x5, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xf, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0xff}, {0x56, 0x4, 0x1}, {0x3, 0xcf, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) creat(&(0x7f0000000200)='./file0\x00', 0x14f) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000003c0)) 732.392099ms ago: executing program 8 (id=3135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, &(0x7f0000000740)=ANY=[], 0x240}}], 0x1, 0x5d2dd0c54751f8e3) 531.575155ms ago: executing program 6 (id=3136): move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) 236.515215ms ago: executing program 6 (id=3137): r0 = eventfd(0x5ef) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x0, 0xc}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 0s ago: executing program 6 (id=3138): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x7ffffe}, 0x400, "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"}, 0x418}) kernel console output (not intermixed with test programs): ] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 804.085978][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 807.830042][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2003'. [ 808.605653][T12197] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 808.646419][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.646471][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.757779][T12197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.757808][T12197] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.761185][T12197] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 808.761213][T12197] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 808.761239][T12197] usb 3-1: Product: syz [ 808.761250][T12197] usb 3-1: Manufacturer: syz [ 808.761263][T12197] usb 3-1: SerialNumber: syz [ 808.817519][T12197] usb 3-1: config 0 descriptor?? [ 809.048059][T12813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.126888][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 809.396426][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.400014][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.400034][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.400048][ T10] usb 8-1: Product: syz [ 809.400058][ T10] usb 8-1: Manufacturer: syz [ 809.400068][ T10] usb 8-1: SerialNumber: syz [ 809.498526][ T10] usb 8-1: selecting invalid altsetting 1 [ 810.720087][ T5893] usb 3-1: USB disconnect, device number 56 [ 811.478743][T12828] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2008'. [ 811.672668][ T10] cdc_ncm 8-1:1.0: bind() failure [ 811.761729][ T10] usb 8-1: USB disconnect, device number 27 [ 813.934715][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2019'. [ 814.115782][T12195] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 814.265625][T12195] usb 3-1: Using ep0 maxpacket: 16 [ 814.269769][T12195] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 814.269795][T12195] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.269817][T12195] usb 3-1: config 0 has no interface number 0 [ 814.269868][T12195] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 814.269888][T12195] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.269926][T12195] usb 3-1: config 0 interface 41 has no altsetting 0 [ 814.272521][T12195] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 814.272550][T12195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.272571][T12195] usb 3-1: Product: syz [ 814.272586][T12195] usb 3-1: Manufacturer: syz [ 814.272601][T12195] usb 3-1: SerialNumber: syz [ 814.383302][T12195] usb 3-1: config 0 descriptor?? [ 814.394821][T12852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 814.412431][T12195] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 814.455812][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 814.625671][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 814.633317][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.660231][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 814.660272][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.660299][ T10] usb 9-1: Product: syz [ 814.660310][ T10] usb 9-1: Manufacturer: syz [ 814.660320][ T10] usb 9-1: SerialNumber: syz [ 814.675235][ T10] usb 9-1: config 0 descriptor?? [ 814.795822][T12852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.007425][ T10] usb 3-1: USB disconnect, device number 57 [ 816.593887][T12876] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2024'. [ 818.315341][ T5893] usb 9-1: USB disconnect, device number 20 [ 818.485672][T12197] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 818.657633][T12197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.657661][T12197] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 818.660081][T12197] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 818.660109][T12197] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 818.660130][T12197] usb 3-1: Product: syz [ 818.660145][T12197] usb 3-1: Manufacturer: syz [ 818.660160][T12197] usb 3-1: SerialNumber: syz [ 818.679298][T12197] usb 3-1: config 0 descriptor?? [ 819.025644][T12197] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 819.176504][T12910] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2035'. [ 819.377484][T12197] usb 9-1: Using ep0 maxpacket: 16 [ 819.381673][T12197] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 819.381700][T12197] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.381720][T12197] usb 9-1: config 0 has no interface number 0 [ 819.381774][T12197] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 819.381800][T12197] usb 9-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 819.381828][T12197] usb 9-1: config 0 interface 41 has no altsetting 0 [ 819.384964][T12197] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 819.384991][T12197] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.385011][T12197] usb 9-1: Product: syz [ 819.385026][T12197] usb 9-1: Manufacturer: syz [ 819.385041][T12197] usb 9-1: SerialNumber: syz [ 819.534828][T12197] usb 9-1: config 0 descriptor?? [ 819.541740][T12902] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 819.658983][T12197] sr9700 9-1:0.41: probe with driver sr9700 failed with error -22 [ 819.785642][ T5893] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 819.829387][T12902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 819.917746][T12197] usb 9-1: USB disconnect, device number 21 [ 819.968629][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 819.968768][ T5893] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 819.969033][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.026022][ T5893] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 820.026049][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.026067][ T5893] usb 8-1: Product: syz [ 820.026081][ T5893] usb 8-1: Manufacturer: syz [ 820.026094][ T5893] usb 8-1: SerialNumber: syz [ 820.068566][ T5893] usb 8-1: config 0 descriptor?? [ 820.069393][T12913] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 820.073603][ T5893] usb 8-1: ucan: probing device on interface #0 [ 820.073632][ T5893] usb 8-1: ucan: invalid EP count (1) [ 820.073649][ T5893] usb 8-1: ucan: probe failed; try to update the device firmware [ 820.290977][T12197] usb 8-1: USB disconnect, device number 28 [ 823.181466][T12940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.361102][T12197] usb 3-1: USB disconnect, device number 58 [ 823.567058][T12950] loop2: detected capacity change from 0 to 7 [ 823.572006][T12950] Dev loop2: unable to read RDB block 7 [ 823.572029][T12950] loop2: AHDI p1 p2 p3 [ 823.572049][T12950] loop2: partition table partially beyond EOD, truncated [ 823.572209][T12950] loop2: p1 start 1818582900 is beyond EOD, truncated [ 823.572223][T12950] loop2: p3 start 335544320 is beyond EOD, truncated [ 824.351783][T12197] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 824.564150][T12197] usb 3-1: Using ep0 maxpacket: 16 [ 824.567536][T12197] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 824.567561][T12197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.567580][T12197] usb 3-1: config 0 has no interface number 0 [ 824.567621][T12197] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 824.567639][T12197] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.567657][T12197] usb 3-1: config 0 interface 41 has no altsetting 0 [ 824.573316][T12197] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 824.573344][T12197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.573363][T12197] usb 3-1: Product: syz [ 824.573459][T12197] usb 3-1: Manufacturer: syz [ 824.573471][T12197] usb 3-1: SerialNumber: syz [ 824.664597][T12197] usb 3-1: config 0 descriptor?? [ 824.666102][T12958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 824.714169][T12197] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 825.012849][T12958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 825.157746][T12197] usb 3-1: USB disconnect, device number 59 [ 825.345680][ T5808] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 825.497291][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 825.497316][ T5808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 825.497334][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 825.497351][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 825.499531][ T5808] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 825.499552][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.499566][ T5808] usb 6-1: Product: syz [ 825.499576][ T5808] usb 6-1: Manufacturer: syz [ 825.499586][ T5808] usb 6-1: SerialNumber: syz [ 825.535371][ T5808] usb 6-1: config 0 descriptor?? [ 825.591809][T12965] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 825.594062][ T5808] usb 6-1: ucan: probing device on interface #0 [ 825.594087][ T5808] usb 6-1: ucan: invalid endpoint configuration [ 825.594097][ T5808] usb 6-1: ucan: probe failed; try to update the device firmware [ 825.820582][ T5893] usb 6-1: USB disconnect, device number 38 [ 828.017492][T12195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.695698][ T5808] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 828.854926][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 828.861653][T12197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.883039][ T5808] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 828.883069][ T5808] usb 3-1: config 0 has no interface number 0 [ 828.883115][ T5808] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 828.883140][ T5808] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.883159][ T5808] usb 3-1: config 0 interface 41 has no altsetting 0 [ 828.898204][ T5808] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 828.898277][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.898345][ T5808] usb 3-1: Product: syz [ 828.898378][ T5808] usb 3-1: Manufacturer: syz [ 828.898417][ T5808] usb 3-1: SerialNumber: syz [ 828.975633][ T5893] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 829.002023][ T5808] usb 3-1: config 0 descriptor?? [ 829.003058][T13002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.033821][ T5808] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 829.137536][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.137564][ T5893] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.140144][ T5893] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 829.140168][ T5893] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 829.140188][ T5893] usb 8-1: Product: syz [ 829.140204][ T5893] usb 8-1: Manufacturer: syz [ 829.140213][ T5893] usb 8-1: SerialNumber: syz [ 829.144592][ T5893] usb 8-1: config 0 descriptor?? [ 830.067137][T12197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.145173][ T6638] usb 3-1: USB disconnect, device number 60 [ 831.061740][ T5808] usb 8-1: USB disconnect, device number 29 [ 833.665700][ T6638] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 833.815619][ T6638] usb 9-1: Using ep0 maxpacket: 16 [ 833.818167][ T6638] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.955772][ T6638] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 833.955805][ T6638] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.955836][ T6638] usb 9-1: Product: syz [ 833.955851][ T6638] usb 9-1: Manufacturer: syz [ 833.955866][ T6638] usb 9-1: SerialNumber: syz [ 834.000975][ T6638] usb 9-1: config 0 descriptor?? [ 834.429697][ T6638] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 834.595685][ T6638] usb 3-1: Using ep0 maxpacket: 16 [ 834.598121][ T6638] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 834.598149][ T6638] usb 3-1: config 0 has no interface number 0 [ 834.598196][ T6638] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 834.598223][ T6638] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.598252][ T6638] usb 3-1: config 0 interface 41 has no altsetting 0 [ 834.601505][ T6638] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 834.601534][ T6638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.601556][ T6638] usb 3-1: Product: syz [ 834.601572][ T6638] usb 3-1: Manufacturer: syz [ 834.601588][ T6638] usb 3-1: SerialNumber: syz [ 834.708369][ T6638] usb 3-1: config 0 descriptor?? [ 834.710964][T13059] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 834.730114][ T6638] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 834.743641][ T5893] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 834.908757][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.908787][ T5893] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.911887][ T5893] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 834.911908][ T5893] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 834.911923][ T5893] usb 8-1: Product: syz [ 834.911933][ T5893] usb 8-1: Manufacturer: syz [ 834.911944][ T5893] usb 8-1: SerialNumber: syz [ 834.968241][ T5893] usb 8-1: config 0 descriptor?? [ 835.341615][T13070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 835.376429][T13069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 836.404791][T12197] usb 3-1: USB disconnect, device number 61 [ 837.640211][T12197] usb 9-1: USB disconnect, device number 22 [ 838.680659][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2089'. [ 838.767193][T13087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.894387][ T5893] usb 8-1: USB disconnect, device number 30 [ 843.025639][T12197] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 843.093204][T13129] trusted_key: encrypted_key: keyword 'upd' not recognized [ 843.175707][T12197] usb 8-1: Using ep0 maxpacket: 16 [ 843.178095][T12197] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 843.178121][T12197] usb 8-1: config 0 has no interface number 0 [ 843.178167][T12197] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 843.178192][T12197] usb 8-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.178220][T12197] usb 8-1: config 0 interface 41 has no altsetting 0 [ 843.181259][T12197] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 843.181288][T12197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.181310][T12197] usb 8-1: Product: syz [ 843.181325][T12197] usb 8-1: Manufacturer: syz [ 843.181341][T12197] usb 8-1: SerialNumber: syz [ 843.274621][T12197] usb 8-1: config 0 descriptor?? [ 843.280679][T13124] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 843.283089][T12197] sr9700 8-1:0.41: probe with driver sr9700 failed with error -22 [ 843.408061][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2100'. [ 843.590374][T13124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 843.819385][ T5808] usb 8-1: USB disconnect, device number 31 [ 845.995760][ T1237] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 846.296873][T13163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.348438][ T1237] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.348465][ T1237] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.350797][ T1237] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 846.350822][ T1237] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 846.350842][ T1237] usb 8-1: Product: syz [ 846.350855][ T1237] usb 8-1: Manufacturer: syz [ 846.350869][ T1237] usb 8-1: SerialNumber: syz [ 846.376599][ T1237] usb 8-1: config 0 descriptor?? [ 848.654031][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 849.967321][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 850.707980][ T1237] usb 8-1: USB disconnect, device number 32 [ 850.915629][ T5893] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 851.235633][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 851.256029][ T5893] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 851.256060][ T5893] usb 3-1: config 0 has no interface number 0 [ 851.256104][ T5893] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 851.256131][ T5893] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.256151][ T5893] usb 3-1: config 0 interface 41 has no altsetting 0 [ 851.261870][ T5893] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 851.261897][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.261917][ T5893] usb 3-1: Product: syz [ 851.261937][ T5893] usb 3-1: Manufacturer: syz [ 851.261947][ T5893] usb 3-1: SerialNumber: syz [ 851.271241][ T5893] usb 3-1: config 0 descriptor?? [ 851.320638][T13191] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 851.368964][ T5893] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 851.573015][ T5893] usb 3-1: USB disconnect, device number 62 [ 852.109933][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2122'. [ 852.114093][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2122'. [ 852.114121][T13211] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2122'. [ 854.815648][ T5893] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 855.015639][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 855.017784][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 855.017810][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.084204][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 855.084223][ T5893] pvrusb2: ********** [ 855.084230][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 855.084243][ T5893] pvrusb2: Important functionality might not be entirely working. [ 855.084253][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 855.084267][ T5893] pvrusb2: ********** [ 855.279203][ T2374] pvrusb2: Invalid write control endpoint [ 855.403632][ T2374] pvrusb2: Invalid write control endpoint [ 855.403649][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 855.403660][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 855.403669][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 855.403679][ T2374] pvrusb2: Device being rendered inoperable [ 855.403757][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 855.403805][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 855.432856][ T2374] pvrusb2: Attached sub-driver cx25840 [ 855.432896][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 855.432926][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 855.500603][ T5893] usb 3-1: USB disconnect, device number 63 [ 857.185609][ T5893] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 857.365639][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 857.401826][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.421457][ T5893] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 857.421487][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.421509][ T5893] usb 9-1: Product: syz [ 857.421524][ T5893] usb 9-1: Manufacturer: syz [ 857.421539][ T5893] usb 9-1: SerialNumber: syz [ 857.463518][ T5893] usb 9-1: config 0 descriptor?? [ 859.766932][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 860.466204][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2136'. [ 860.466625][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2136'. [ 860.599042][ T5893] usb 9-1: USB disconnect, device number 23 [ 862.485640][ T1237] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 862.675637][ T1237] usb 6-1: Using ep0 maxpacket: 8 [ 862.726053][ T1237] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 862.726075][ T1237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.785772][ T1237] pvrusb2: Hardware description: Terratec Grabster AV400 [ 862.785789][ T1237] pvrusb2: ********** [ 862.785796][ T1237] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 862.785807][ T1237] pvrusb2: Important functionality might not be entirely working. [ 862.785817][ T1237] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 862.785828][ T1237] pvrusb2: ********** [ 862.998120][ T2374] pvrusb2: Invalid write control endpoint [ 863.037234][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 863.037254][ T36] audit: type=1326 audit(1774277092.164:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.038182][ T36] audit: type=1326 audit(1774277092.164:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.038236][ T36] audit: type=1326 audit(1774277092.164:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.038267][ T36] audit: type=1326 audit(1774277092.164:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.038653][ T36] audit: type=1326 audit(1774277092.164:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.065180][ T36] audit: type=1326 audit(1774277092.184:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.126204][ T36] audit: type=1326 audit(1774277092.214:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.126361][ T36] audit: type=1326 audit(1774277092.244:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.126480][ T36] audit: type=1326 audit(1774277092.244:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.126601][ T36] audit: type=1326 audit(1774277092.244:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13287 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 863.304144][T12195] usb 6-1: USB disconnect, device number 39 [ 863.499906][ T2374] pvrusb2: Invalid write control endpoint [ 863.499918][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 863.499925][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 863.499931][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 863.499938][ T2374] pvrusb2: Device being rendered inoperable [ 863.499988][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 863.500039][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 863.506631][ T2374] pvrusb2: Attached sub-driver cx25840 [ 863.506661][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 863.506689][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 864.876466][T13303] loop2: detected capacity change from 0 to 7 [ 864.879054][T13303] Dev loop2: unable to read RDB block 7 [ 864.879084][T13303] loop2: AHDI p1 p2 p3 [ 864.879111][T13303] loop2: partition table partially beyond EOD, truncated [ 864.916009][T13303] loop2: p1 start 1818582900 is beyond EOD, truncated [ 864.916088][T13303] loop2: p3 start 335544320 is beyond EOD, truncated [ 868.865833][T12195] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 869.018141][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2155'. [ 869.019687][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2155'. [ 869.043430][T12195] usb 9-1: Using ep0 maxpacket: 8 [ 869.066196][T12195] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 869.066225][T12195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.130083][T12195] pvrusb2: Hardware description: Terratec Grabster AV400 [ 869.130101][T12195] pvrusb2: ********** [ 869.130109][T12195] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 869.130121][T12195] pvrusb2: Important functionality might not be entirely working. [ 869.130130][T12195] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 869.130142][T12195] pvrusb2: ********** [ 869.320675][ T2374] pvrusb2: Invalid write control endpoint [ 869.522004][ T5893] usb 9-1: USB disconnect, device number 24 [ 869.620828][ T2374] pvrusb2: Invalid write control endpoint [ 869.620839][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 869.620846][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 869.620852][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 869.620859][ T2374] pvrusb2: Device being rendered inoperable [ 869.620913][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 869.620948][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 869.624936][ T2374] pvrusb2: Attached sub-driver cx25840 [ 869.624950][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 869.624962][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 870.005732][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.011524][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.011574][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.126278][T13347] loop2: detected capacity change from 0 to 7 [ 870.155810][T13347] Dev loop2: unable to read RDB block 7 [ 870.155843][T13347] loop2: AHDI p1 p2 p3 [ 870.155869][T13347] loop2: partition table partially beyond EOD, truncated [ 870.156081][T13347] loop2: p1 start 1818582900 is beyond EOD, truncated [ 870.156100][T13347] loop2: p3 start 335544320 is beyond EOD, truncated [ 874.855683][T12195] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 875.855635][T12195] usb 6-1: Using ep0 maxpacket: 8 [ 875.858072][T12195] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 875.858102][T12195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.915449][T12195] pvrusb2: Hardware description: Terratec Grabster AV400 [ 875.915466][T12195] pvrusb2: ********** [ 875.915473][T12195] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 875.915484][T12195] pvrusb2: Important functionality might not be entirely working. [ 875.951994][T12195] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 875.952012][T12195] pvrusb2: ********** [ 876.094803][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2172'. [ 876.131821][ T2374] pvrusb2: Invalid write control endpoint [ 876.406062][T12195] usb 6-1: USB disconnect, device number 40 [ 876.616955][ T2374] pvrusb2: Invalid write control endpoint [ 876.616971][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 876.616981][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 876.616988][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 876.616999][ T2374] pvrusb2: Device being rendered inoperable [ 876.619463][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 876.619514][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 876.620727][ T2374] pvrusb2: Attached sub-driver cx25840 [ 876.620738][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 876.620748][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 877.261054][T13389] netlink: 'syz.7.2172': attribute type 11 has an invalid length. [ 877.261078][T13389] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.2172'. [ 877.262105][T13389] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2172'. [ 877.308197][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 877.308216][ T36] audit: type=1326 audit(1774277106.434:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13387 comm="syz.7.2172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87ee47c799 code=0x0 [ 878.417640][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2176'. [ 878.439136][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2176'. [ 879.585796][ T1237] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 879.715713][ T1237] usb 6-1: device descriptor read/64, error -71 [ 879.965706][ T1237] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 880.105787][ T1237] usb 6-1: device descriptor read/64, error -71 [ 880.217679][ T1237] usb usb6-port1: attempt power cycle [ 880.565889][ T1237] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 880.604576][ T1237] usb 6-1: device descriptor read/8, error -71 [ 880.855646][ T1237] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 880.892583][ T1237] usb 6-1: device descriptor read/8, error -71 [ 880.996079][ T1237] usb usb6-port1: unable to enumerate USB device [ 891.478598][T13463] kvm: apic: phys broadcast and lowest prio [ 893.331619][ T9990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 893.348002][ T9990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 893.350747][ T9990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 893.351964][ T9990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 893.352781][ T9990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 895.660234][ T9990] Bluetooth: hci5: command tx timeout [ 896.682838][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2199'. [ 897.687729][ T5816] Bluetooth: hci5: command tx timeout [ 899.024439][ T3562] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.768725][ T5816] Bluetooth: hci5: command tx timeout [ 899.787321][ T3562] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.292177][ T3562] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.848213][ T5816] Bluetooth: hci5: command tx timeout [ 902.262323][ T3562] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.526483][T13469] chnl_net:caif_netlink_parms(): no params data found [ 904.071754][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.071886][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.072082][T13469] bridge_slave_0: entered allmulticast mode [ 904.118162][T13469] bridge_slave_0: entered promiscuous mode [ 904.311706][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.311815][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.312036][T13469] bridge_slave_1: entered allmulticast mode [ 904.366033][T13469] bridge_slave_1: entered promiscuous mode [ 904.699364][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.741280][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.998952][T13469] team0: Port device team_slave_0 added [ 905.001280][T13469] team0: Port device team_slave_1 added [ 905.137699][ T3562] bridge_slave_1: left allmulticast mode [ 905.137726][ T3562] bridge_slave_1: left promiscuous mode [ 905.137921][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.363660][ T3562] bridge_slave_0: left allmulticast mode [ 905.363700][ T3562] bridge_slave_0: left promiscuous mode [ 905.363896][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.436249][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.497607][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.518642][ T3562] bond0 (unregistering): Released all slaves [ 907.525895][ T3562] bond1 (unregistering): Released all slaves [ 907.537549][ T3562] bond2 (unregistering): Released all slaves [ 909.486640][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.486658][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.486688][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.762868][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.762882][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.762902][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.450812][ T36] audit: type=1326 audit(1774277139.554:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.479014][ T36] audit: type=1326 audit(1774277139.604:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.481769][ T36] audit: type=1326 audit(1774277139.604:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511255][ T36] audit: type=1326 audit(1774277139.634:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511434][ T36] audit: type=1326 audit(1774277139.634:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511557][ T36] audit: type=1326 audit(1774277139.634:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511669][ T36] audit: type=1326 audit(1774277139.634:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511796][ T36] audit: type=1326 audit(1774277139.634:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.511864][ T36] audit: type=1326 audit(1774277139.634:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.512003][ T36] audit: type=1326 audit(1774277139.634:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13621 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f71b934c799 code=0x7ffc0000 [ 910.738649][T13627] loop5: detected capacity change from 0 to 7 [ 910.864823][T13469] hsr_slave_0: entered promiscuous mode [ 910.872700][T13469] hsr_slave_1: entered promiscuous mode [ 913.684123][T13627] Dev loop5: unable to read RDB block 7 [ 913.684189][T13627] loop5: unable to read partition table [ 913.684386][T13627] loop5: partition table beyond EOD, truncated [ 913.684419][T13627] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 913.707453][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 913.707621][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 914.588467][ T3562] hsr_slave_0: left promiscuous mode [ 914.625747][ T3562] hsr_slave_1: left promiscuous mode [ 914.626544][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.626562][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.780156][ T3562] veth1_macvtap: left promiscuous mode [ 914.780269][ T3562] veth0_macvtap: left promiscuous mode [ 914.780563][ T3562] veth1_vlan: left promiscuous mode [ 914.780735][ T3562] veth0_vlan: left promiscuous mode [ 914.824946][T13662] fuse: Unknown parameter 'group_id00000000000000000000' [ 915.835840][T12197] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 915.992538][T12197] usb 6-1: config 0 has no interfaces? [ 915.995094][T12197] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 915.995119][T12197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.995137][T12197] usb 6-1: Product: syz [ 915.995156][T12197] usb 6-1: Manufacturer: syz [ 915.995166][T12197] usb 6-1: SerialNumber: syz [ 916.062642][T12197] usb 6-1: config 0 descriptor?? [ 916.259363][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 916.307016][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 916.550071][T13671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 917.075362][T13687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.554000][ T6638] usb 6-1: USB disconnect, device number 45 [ 917.838016][T13469] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 918.622863][T13469] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 918.936850][T13469] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 920.488736][T13469] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 920.603684][T13721] fuse: Bad value for 'user_id' [ 920.603705][T13721] fuse: Bad value for 'user_id' [ 921.213476][T13734] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2249'. [ 921.330568][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.665015][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.751420][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.754226][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.394094][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.396673][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.521296][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2259'. [ 924.521368][T13784] openvswitch: netlink: Flow actions attr not present in new flow. [ 925.911489][T13786] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2260'. [ 926.019678][T13794] fuse: Bad value for 'user_id' [ 926.019692][T13794] fuse: Bad value for 'user_id' [ 927.181466][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.629364][T13469] veth0_vlan: entered promiscuous mode [ 929.757081][T13469] veth1_vlan: entered promiscuous mode [ 929.971987][T13469] veth0_macvtap: entered promiscuous mode [ 930.009703][T13469] veth1_macvtap: entered promiscuous mode [ 930.113984][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.157550][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.222580][ T1475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.236862][ T1475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.436985][ T1475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.468749][ T3562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.674975][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2271'. [ 930.675065][T13853] openvswitch: netlink: Flow actions attr not present in new flow. [ 931.636279][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.636352][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.020136][T13859] fuse: Bad value for 'user_id' [ 932.020151][T13859] fuse: Bad value for 'user_id' [ 932.328277][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.328297][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.411350][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.411374][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.880175][T13872] loop2: detected capacity change from 0 to 7 [ 932.895777][T13872] Dev loop2: unable to read RDB block 7 [ 932.895815][T13872] loop2: AHDI p1 p2 p3 [ 932.895843][T13872] loop2: partition table partially beyond EOD, truncated [ 932.920266][T13872] loop2: p1 start 1818582900 is beyond EOD, truncated [ 932.920361][T13872] loop2: p3 start 335544320 is beyond EOD, truncated [ 933.323089][T13879] netlink: 'syz.5.2279': attribute type 9 has an invalid length. [ 933.323121][T13879] netlink: 'syz.5.2279': attribute type 11 has an invalid length. [ 933.323136][T13879] netlink: 'syz.5.2279': attribute type 12 has an invalid length. [ 933.323155][T13879] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2279'. [ 933.323291][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 934.495736][T13892] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 934.871890][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2282'. [ 934.871969][T13901] openvswitch: netlink: Flow actions attr not present in new flow. [ 935.580228][T13898] fuse: Bad value for 'fd' [ 936.810356][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 936.810374][ T36] audit: type=1326 audit(1774277165.934:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 936.816984][ T36] audit: type=1326 audit(1774277165.944:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 936.817032][ T36] audit: type=1326 audit(1774277165.944:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 936.817081][ T36] audit: type=1326 audit(1774277165.944:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 937.062274][ T36] audit: type=1326 audit(1774277166.094:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 937.119691][ T36] audit: type=1326 audit(1774277166.184:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 937.271388][ T36] audit: type=1326 audit(1774277166.244:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.2.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 939.094611][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2296'. [ 939.094639][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2296'. [ 939.211582][ T58] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.211903][ T58] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.211934][ T58] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.211962][ T58] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.219547][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2296'. [ 939.219647][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2296'. [ 940.013807][T13949] fuse: Bad value for 'fd' [ 945.410467][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2306'. [ 945.651460][T13987] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2310'. [ 945.974842][ T6638] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 946.309523][ T6638] usb 6-1: Using ep0 maxpacket: 16 [ 947.184884][ T6638] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.184920][ T6638] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.200414][ T6638] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.200442][ T6638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.200462][ T6638] usb 6-1: Product: syz [ 947.200477][ T6638] usb 6-1: Manufacturer: syz [ 947.200492][ T6638] usb 6-1: SerialNumber: syz [ 948.567170][ T6638] usb 6-1: 0:2 : does not exist [ 948.595599][ T6638] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 950.172667][ T6638] usb 6-1: USB disconnect, device number 46 [ 950.863713][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2320'. [ 951.001513][T13846] udevd[13846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.051420][T14027] dummy0: entered promiscuous mode [ 951.051614][T14027] macvtap1: entered promiscuous mode [ 951.051773][T14027] macvtap1: entered allmulticast mode [ 951.051784][T14027] dummy0: entered allmulticast mode [ 951.543178][T14039] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2322'. [ 953.835627][ T5889] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 954.046179][T14068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.105568][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 954.124088][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.124119][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 954.156406][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 954.156440][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.156464][ T5889] usb 6-1: Product: syz [ 954.156520][ T5889] usb 6-1: Manufacturer: syz [ 954.156538][ T5889] usb 6-1: SerialNumber: syz [ 954.626801][ T5889] usb 6-1: 0:2 : does not exist [ 955.551207][ T5889] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 955.745082][ T5889] usb 6-1: USB disconnect, device number 47 [ 956.171175][T13846] udevd[13846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.469229][T14087] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2333'. [ 957.024136][T14101] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.2336' sets config #2 [ 960.340529][ T5808] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 963.042354][ T5808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 963.045714][ T5808] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 963.045746][ T5808] usb 3-1: can't read configurations, error -71 [ 964.925653][ T36] audit: type=1800 audit(1774277194.034:399): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2354" name="bus" dev="tmpfs" ino=100 res=0 errno=0 [ 967.285733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 967.285733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 969.219373][T14214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.216708][ T36] audit: type=1800 audit(1774277201.334:400): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2368" name="bus" dev="tmpfs" ino=1424 res=0 errno=0 [ 976.164842][T14276] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2373'. [ 983.214792][ T36] audit: type=1800 audit(1774277212.334:401): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2383" name="bus" dev="tmpfs" ino=2615 res=0 errno=0 [ 984.705301][T14316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.898838][T14329] team0: entered promiscuous mode [ 984.898855][T14329] team_slave_0: entered promiscuous mode [ 984.899011][T14329] team_slave_1: entered promiscuous mode [ 984.900108][T14329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 984.902254][T14329] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 985.537281][T14329] bridge0: port 3(vlan2) entered blocking state [ 985.537501][T14329] bridge0: port 3(vlan2) entered disabled state [ 985.537661][T14329] vlan2: entered allmulticast mode [ 985.537673][T14329] bond0: entered allmulticast mode [ 985.537683][T14329] bond_slave_0: entered allmulticast mode [ 985.537696][T14329] macvlan2: entered allmulticast mode [ 985.537706][T14329] team0: entered allmulticast mode [ 985.537715][T14329] team_slave_0: entered allmulticast mode [ 985.537727][T14329] team_slave_1: entered allmulticast mode [ 985.543604][T14329] vlan2: entered promiscuous mode [ 985.543623][T14329] bond0: entered promiscuous mode [ 985.543728][T14329] bond_slave_0: entered promiscuous mode [ 985.543965][T14329] macvlan2: entered promiscuous mode [ 992.140860][ T36] audit: type=1800 audit(1774277221.264:402): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2400" name="bus" dev="tmpfs" ino=1732 res=0 errno=0 [ 992.893409][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.893484][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.776109][ T5808] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 995.952041][ T5808] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 995.952075][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.952095][ T5808] usb 6-1: Product: syz [ 995.952110][ T5808] usb 6-1: Manufacturer: syz [ 995.952129][ T5808] usb 6-1: SerialNumber: syz [ 995.958744][ T5808] usb 6-1: config 0 descriptor?? [ 995.992413][ T5808] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 996.149324][ T5808] usb 6-1: Detected FT-X [ 996.186116][ T5808] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 996.186489][ T5808] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 996.195278][ T5808] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 996.213281][ T5808] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 996.269138][ T5808] usb 6-1: USB disconnect, device number 48 [ 996.306133][ T5808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 996.307961][ T5808] ftdi_sio 6-1:0.0: device disconnected [ 997.858072][T14413] fuse: Bad value for 'fd' [ 998.005792][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 998.507618][ T36] audit: type=1800 audit(1774277227.634:403): pid=14430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2417" name="bus" dev="tmpfs" ino=1748 res=0 errno=0 [ 999.085520][ T5808] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 999.235543][ T5808] usb 9-1: device descriptor read/64, error -71 [ 999.478123][ T5808] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 999.606926][ T5808] usb 9-1: device descriptor read/64, error -71 [ 999.718539][ T5808] usb usb9-port1: attempt power cycle [ 1000.055613][ T5808] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1000.076783][ T5808] usb 9-1: device descriptor read/8, error -71 [ 1000.449933][ T5808] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1000.475611][ T5808] usb 9-1: device descriptor read/8, error -71 [ 1001.415870][ T5808] usb usb9-port1: unable to enumerate USB device [ 1004.589758][T14457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.305610][ T6638] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1005.465734][ T6638] usb 10-1: Using ep0 maxpacket: 16 [ 1005.469209][ T6638] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.472125][ T6638] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1005.472154][ T6638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.472178][ T6638] usb 10-1: Product: syz [ 1005.472193][ T6638] usb 10-1: Manufacturer: syz [ 1005.472220][ T6638] usb 10-1: SerialNumber: syz [ 1005.527062][ T6638] usb 10-1: config 0 descriptor?? [ 1009.076402][T12192] usb 10-1: USB disconnect, device number 2 [ 1009.625686][T12192] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1009.775862][T12192] usb 10-1: Using ep0 maxpacket: 16 [ 1009.777888][T12192] usb 10-1: config 0 has no interfaces? [ 1009.780648][T12192] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1009.780682][T12192] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.780699][T12192] usb 10-1: Product: syz [ 1009.780710][T12192] usb 10-1: Manufacturer: syz [ 1009.780721][T12192] usb 10-1: SerialNumber: syz [ 1009.829765][T12192] usb 10-1: config 0 descriptor?? [ 1010.050370][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2439'. [ 1010.070885][T14504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1010.116488][T12192] usb 10-1: USB disconnect, device number 3 [ 1019.705720][ T5808] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1019.855546][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 1019.857114][ T5808] usb 6-1: config 0 has no interfaces? [ 1019.861457][ T5808] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1019.861477][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.861492][ T5808] usb 6-1: Product: syz [ 1019.861502][ T5808] usb 6-1: Manufacturer: syz [ 1019.861513][ T5808] usb 6-1: SerialNumber: syz [ 1019.927692][ T5808] usb 6-1: config 0 descriptor?? [ 1020.146069][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 1020.240441][T14589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1020.275612][ T6638] usb 6-1: USB disconnect, device number 49 [ 1020.575488][ T9990] Bluetooth: hci5: command 0x0406 tx timeout [ 1026.222569][T14640] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.2478' sets config #2 [ 1030.773350][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2486'. [ 1030.821211][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2486'. [ 1031.058023][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2490'. [ 1034.778430][T14707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 1037.094572][T14723] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2499' sets config #2 [ 1038.194027][T14739] binder: 14736:14739 unknown command 0 [ 1038.194075][T14739] binder: 14736:14739 ioctl c0306201 200000000000 returned -22 [ 1038.200716][T14739] binder: 14736:14739 ioctl c0306201 0 returned -14 [ 1038.555087][T14735] netlink: set zone limit has 4 unknown bytes [ 1040.952580][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1040.986417][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1042.075494][ T5889] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1042.225515][ T5889] usb 10-1: Using ep0 maxpacket: 8 [ 1042.228260][ T5889] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1042.228288][ T5889] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.228309][ T5889] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1042.268876][ T5889] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1042.268906][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.268927][ T5889] usb 10-1: Product: syz [ 1042.268941][ T5889] usb 10-1: Manufacturer: syz [ 1042.268957][ T5889] usb 10-1: SerialNumber: syz [ 1042.330396][ T5889] usb 10-1: config 0 descriptor?? [ 1042.560406][ T5889] usb 10-1: USB disconnect, device number 4 [ 1043.128353][ T36] audit: type=1800 audit(1774277272.254:404): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2511" name="bus" dev="tmpfs" ino=1567 res=0 errno=0 [ 1044.556481][T14785] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.2516' sets config #2 [ 1049.818138][T14818] kvm: user requested TSC rate below hardware speed [ 1049.835940][T14818] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1049.835964][T14818] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1050.215710][ T36] audit: type=1800 audit(1774277279.284:405): pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2528" name="bus" dev="tmpfs" ino=1593 res=0 errno=0 [ 1051.590108][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2529'. [ 1051.801275][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2529'. [ 1052.496695][T12193] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1053.345568][T12193] usb 6-1: device descriptor read/64, error -71 [ 1053.605827][T12193] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1053.735719][T12193] usb 6-1: device descriptor read/64, error -71 [ 1053.849433][T12193] usb usb6-port1: attempt power cycle [ 1054.195548][T12193] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1054.216590][T12193] usb 6-1: device descriptor read/8, error -71 [ 1054.335293][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.335352][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.492028][T12193] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1054.508569][T12193] usb 6-1: device descriptor read/8, error -71 [ 1054.616090][T12193] usb usb6-port1: unable to enumerate USB device [ 1054.637662][T14860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1055.028294][ T36] audit: type=1800 audit(1774277284.134:406): pid=14868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2541" name="bus" dev="tmpfs" ino=1719 res=0 errno=0 [ 1058.259811][T14885] IPv6: NLM_F_CREATE should be specified when creating new route [ 1059.579886][T14896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.832995][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2551'. [ 1060.897920][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2551'. [ 1060.980650][ T5808] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1061.115684][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1061.355557][ T5808] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1061.535565][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1061.645943][ T5808] usb usb6-port1: attempt power cycle [ 1061.985582][ T5808] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1062.008855][ T5808] usb 6-1: device descriptor read/8, error -71 [ 1062.252210][ T5808] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1062.266262][ T5808] usb 6-1: device descriptor read/8, error -71 [ 1062.467486][ T5808] usb usb6-port1: unable to enumerate USB device [ 1066.213929][ T36] audit: type=1800 audit(1774277295.264:407): pid=14950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2560" name="bus" dev="tmpfs" ino=278 res=0 errno=0 [ 1067.261664][T14968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.292981][T14982] netlink: 'syz.9.2568': attribute type 11 has an invalid length. [ 1069.296117][T14983] process 'syz.9.2568' launched './file0' with NULL argv: empty string added [ 1069.678611][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2569'. [ 1069.737595][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2569'. [ 1070.027726][ T36] audit: type=1800 audit(1774277299.144:408): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2568" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1072.723983][ T36] audit: type=1800 audit(1774277301.844:409): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2576" name="bus" dev="tmpfs" ino=1746 res=0 errno=0 [ 1076.415650][ T5808] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1076.545616][ T5808] usb 3-1: device descriptor read/64, error -71 [ 1076.648254][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2586'. [ 1076.715884][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2586'. [ 1076.795539][ T5808] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1076.935578][ T5808] usb 3-1: device descriptor read/64, error -71 [ 1077.047967][ T5808] usb usb3-port1: attempt power cycle [ 1077.465660][ T5808] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1077.486392][ T5808] usb 3-1: device descriptor read/8, error -71 [ 1077.662604][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1077.662974][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1077.755603][ T5808] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1077.779619][ T5808] usb 3-1: device descriptor read/8, error -71 [ 1077.888414][ T5808] usb usb3-port1: unable to enumerate USB device [ 1080.875711][T12192] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1081.025596][T12192] usb 6-1: Using ep0 maxpacket: 8 [ 1081.028184][T12192] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1081.031264][T12192] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1081.031293][T12192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.031315][T12192] usb 6-1: Product: syz [ 1081.031331][T12192] usb 6-1: Manufacturer: syz [ 1081.031347][T12192] usb 6-1: SerialNumber: syz [ 1081.083004][T12192] usb 6-1: config 0 descriptor?? [ 1081.100309][ T36] audit: type=1800 audit(1774277310.224:410): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2596" name="bus" dev="tmpfs" ino=2837 res=0 errno=0 [ 1081.109588][T12192] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1082.294918][T12192] input: sonixj as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 1082.609618][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2600'. [ 1082.609736][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2600'. [ 1083.007250][ T5808] usb 6-1: USB disconnect, device number 58 [ 1083.148553][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1083.212979][T12192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1084.607039][ T9755] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.247265][ T9755] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1086.396655][ T5893] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1086.566595][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 1086.570568][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.570589][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.570604][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.570630][ T5893] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1086.570644][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.574367][ T5893] usb 6-1: config 0 descriptor?? [ 1086.675517][ T5808] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1086.720970][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 1086.828057][ T5808] usb 9-1: Using ep0 maxpacket: 8 [ 1086.834506][ T5808] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.859048][ T5808] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 1086.859079][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.859101][ T5808] usb 9-1: Product: syz [ 1086.859116][ T5808] usb 9-1: Manufacturer: syz [ 1086.859131][ T5808] usb 9-1: SerialNumber: syz [ 1086.918807][ T5808] usb 9-1: config 0 descriptor?? [ 1086.934818][ T5808] kalmia 9-1:0.0: probe with driver kalmia failed with error -22 [ 1087.158260][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.162504][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.185604][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.186196][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.262960][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 1087.263188][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1087.297016][ T5893] usb 6-1: USB disconnect, device number 59 [ 1087.390012][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.390372][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.479707][T12192] usb 9-1: USB disconnect, device number 29 [ 1087.738045][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2612'. [ 1087.738281][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2612'. [ 1089.721709][ T5808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.104845][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2624'. [ 1090.105036][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2624'. [ 1090.396080][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.425736][ T9755] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1090.597260][ T9755] usb 9-1: Using ep0 maxpacket: 16 [ 1090.599182][ T9755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.599203][ T9755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.599218][ T9755] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1090.599246][ T9755] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1090.599261][ T9755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.603149][ T9755] usb 9-1: config 0 descriptor?? [ 1091.210277][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.225612][ T9755] usbhid 9-1:0.0: can't add hid device: -71 [ 1091.225697][ T9755] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1091.228290][ T9755] usb 9-1: USB disconnect, device number 30 [ 1091.453291][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2626'. [ 1091.483806][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2626'. [ 1092.615659][T12192] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1092.765510][T12192] usb 3-1: Using ep0 maxpacket: 8 [ 1092.767288][T12192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1092.769728][T12192] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1092.769752][T12192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.769775][T12192] usb 3-1: Product: syz [ 1092.769786][T12192] usb 3-1: Manufacturer: syz [ 1092.769795][T12192] usb 3-1: SerialNumber: syz [ 1092.837164][T12192] usb 3-1: config 0 descriptor?? [ 1092.842612][T12192] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1093.736355][T12192] gspca_sonixj: reg_r err -110 [ 1093.737384][T12192] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1095.614657][ T5893] usb 3-1: USB disconnect, device number 70 [ 1096.678400][T15243] fuse: Bad value for 'fd' [ 1098.323865][T15249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.875519][T12192] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1100.025579][T12193] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1100.045805][T12192] usb 6-1: Using ep0 maxpacket: 8 [ 1100.052088][T12192] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1100.055167][T12192] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1100.055196][T12192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.055218][T12192] usb 6-1: Product: syz [ 1100.055233][T12192] usb 6-1: Manufacturer: syz [ 1100.055249][T12192] usb 6-1: SerialNumber: syz [ 1100.072459][T12192] usb 6-1: config 0 descriptor?? [ 1100.545556][T12193] usb 9-1: Using ep0 maxpacket: 16 [ 1100.550231][T12193] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.605587][T12192] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1100.635336][T12193] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1100.635446][T12193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.635467][T12193] usb 9-1: Product: syz [ 1100.635482][T12193] usb 9-1: Manufacturer: syz [ 1100.635497][T12193] usb 9-1: SerialNumber: syz [ 1100.644163][T12193] usb 9-1: config 0 descriptor?? [ 1100.885527][T12192] gspca_sonixj: reg_r err -32 [ 1100.885623][T12192] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1103.318957][T12193] usb 6-1: USB disconnect, device number 60 [ 1103.568108][T12192] usb 9-1: USB disconnect, device number 31 [ 1103.616721][ T36] audit: type=1326 audit(1774277332.604:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.619209][ T36] audit: type=1326 audit(1774277332.744:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.650665][ T36] audit: type=1326 audit(1774277332.744:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.660893][ T36] audit: type=1326 audit(1774277332.774:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.755703][ T36] audit: type=1326 audit(1774277332.874:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.759409][ T36] audit: type=1326 audit(1774277332.884:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.759463][ T36] audit: type=1326 audit(1774277332.884:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.759539][ T36] audit: type=1326 audit(1774277332.884:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.759604][ T36] audit: type=1326 audit(1774277332.884:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1103.759635][ T36] audit: type=1326 audit(1774277332.884:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15299 comm="syz.6.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1104.684272][T15318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.673660][ T5893] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1109.825519][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 1109.827743][ T5893] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1109.830302][ T5893] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1109.830329][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.830344][ T5893] usb 9-1: Product: syz [ 1109.830355][ T5893] usb 9-1: Manufacturer: syz [ 1109.830366][ T5893] usb 9-1: SerialNumber: syz [ 1109.834598][ T5893] usb 9-1: config 0 descriptor?? [ 1109.840503][ T5893] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1111.110237][ T5893] input: sonixj as /devices/platform/dummy_hcd.8/usb9/9-1/input/input18 [ 1111.818321][ T5893] usb 9-1: USB disconnect, device number 32 [ 1115.203737][T15387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.697126][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1115.697148][ T36] audit: type=1326 audit(1774277344.764:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697211][ T36] audit: type=1326 audit(1774277344.764:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697260][ T36] audit: type=1326 audit(1774277344.764:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697308][ T36] audit: type=1326 audit(1774277344.764:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697354][ T36] audit: type=1326 audit(1774277344.764:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697402][ T36] audit: type=1326 audit(1774277344.764:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697451][ T36] audit: type=1326 audit(1774277344.764:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697498][ T36] audit: type=1326 audit(1774277344.764:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697546][ T36] audit: type=1326 audit(1774277344.764:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.697593][ T36] audit: type=1326 audit(1774277344.764:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.2.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1115.781481][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.781533][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.365723][ T6638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1118.675705][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1118.995738][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.424201][T15445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.965521][T12192] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1122.123311][T12192] usb 3-1: Using ep0 maxpacket: 16 [ 1122.125270][T12192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.125297][T12192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1122.200842][T12192] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.200873][T12192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.200894][T12192] usb 3-1: Product: syz [ 1122.200915][T12192] usb 3-1: Manufacturer: syz [ 1122.200926][T12192] usb 3-1: SerialNumber: syz [ 1122.461242][T12192] usb 3-1: 0:2 : does not exist [ 1122.473413][T12192] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1122.686122][T12192] usb 3-1: USB disconnect, device number 71 [ 1122.850890][T14898] udevd[14898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.877057][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1125.065682][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1125.468755][T15472] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2708'. [ 1125.669094][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'. [ 1125.926188][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1130.873446][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.863390][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.035797][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.625497][T12193] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1132.796209][T12193] usb 10-1: Using ep0 maxpacket: 8 [ 1132.798573][T12193] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1132.801592][T12193] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1132.801633][T12193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.801655][T12193] usb 10-1: Product: syz [ 1132.801671][T12193] usb 10-1: Manufacturer: syz [ 1132.801786][T12193] usb 10-1: SerialNumber: syz [ 1132.871910][T12193] usb 10-1: config 0 descriptor?? [ 1132.908130][T12193] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1132.908192][T12193] usb 10-1: setting power ON [ 1132.908209][T12193] dvb-usb: bulk message failed: -22 (2/0) [ 1132.982201][T12193] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1133.002109][T12193] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1133.002180][T12193] usb 10-1: media controller created [ 1133.079101][T15525] dvb-usb: bulk message failed: -22 (3/0) [ 1133.079121][T15525] dvb-usb: bulk message failed: -22 (4/0) [ 1133.114820][T12193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.575717][T12193] usb 10-1: selecting invalid altsetting 6 [ 1134.575743][T12193] usb 10-1: digital interface selection failed (-22) [ 1134.575759][T12193] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1134.596112][T12193] usb 10-1: setting power OFF [ 1134.596180][T12193] dvb-usb: bulk message failed: -22 (2/0) [ 1134.596232][T12193] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1134.596271][T12193] (NULL device *): no alternate interface [ 1135.012040][T12193] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1135.053992][T12193] usb 10-1: USB disconnect, device number 5 [ 1135.534548][T15549] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2729'. [ 1137.365906][ T6638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1137.998196][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1138.155654][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1138.967361][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1141.931353][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 1141.931380][ T36] audit: type=1800 audit(1774277371.054:466): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2741" name="bus" dev="tmpfs" ino=2083 res=0 errno=0 [ 1142.206698][ T5889] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1142.512269][ T5889] usb 10-1: Using ep0 maxpacket: 16 [ 1142.642176][ T5889] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1142.642212][ T5889] usb 10-1: config 0 has no interface number 0 [ 1142.642270][ T5889] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.642305][ T5889] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.642332][ T5889] usb 10-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1142.642349][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.737307][ T5889] usb 10-1: config 0 descriptor?? [ 1144.225674][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.295821][T12193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.811595][ T5889] holtek_mouse 0003:04D9:A081.0007: item fetching failed at offset 5/8 [ 1144.812273][ T5889] holtek_mouse 0003:04D9:A081.0007: hid parse failed: -22 [ 1144.812330][ T5889] holtek_mouse 0003:04D9:A081.0007: probe with driver holtek_mouse failed with error -22 [ 1144.955913][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1145.933760][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.396734][T15597] syz.9.2742 (15597) used greatest stack depth: 17168 bytes left [ 1146.752392][T15631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2750'. [ 1149.874115][ T5808] usb 10-1: USB disconnect, device number 6 [ 1152.995638][ T36] audit: type=1800 audit(1774277382.114:467): pid=15674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2758" name="bus" dev="tmpfs" ino=2997 res=0 errno=0 [ 1153.364807][ T36] audit: type=1326 audit(1774277382.424:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.364871][ T36] audit: type=1326 audit(1774277382.424:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.364917][ T36] audit: type=1326 audit(1774277382.424:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.364964][ T36] audit: type=1326 audit(1774277382.424:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.365011][ T36] audit: type=1326 audit(1774277382.424:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.365059][ T36] audit: type=1326 audit(1774277382.424:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.365119][ T36] audit: type=1326 audit(1774277382.424:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.365165][ T36] audit: type=1326 audit(1774277382.424:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1153.365214][ T36] audit: type=1326 audit(1774277382.424:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.6.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7bd535c799 code=0x7ffc0000 [ 1155.466695][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2764'. [ 1159.158991][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'. [ 1159.211238][T15711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2768'. [ 1159.569805][T15716] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1165.805207][T15755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.928111][T15760] kvm: user requested TSC rate below hardware speed [ 1172.336822][T15799] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2790'. [ 1172.910796][T15808] kvm: user requested TSC rate below hardware speed [ 1172.913992][T15808] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1174.338046][T15813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.262839][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1177.476162][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.476213][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.895430][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1177.895450][ T36] audit: type=1326 audit(1774277407.014:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.904946][ T36] audit: type=1326 audit(1774277407.024:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905003][ T36] audit: type=1326 audit(1774277407.024:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905036][ T36] audit: type=1326 audit(1774277407.024:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905066][ T36] audit: type=1326 audit(1774277407.024:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905097][ T36] audit: type=1326 audit(1774277407.024:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905126][ T36] audit: type=1326 audit(1774277407.024:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905155][ T36] audit: type=1326 audit(1774277407.024:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905183][ T36] audit: type=1326 audit(1774277407.024:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1177.905214][ T36] audit: type=1326 audit(1774277407.024:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a69c799 code=0x7ffc0000 [ 1183.365653][T12193] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1183.515572][T12193] usb 3-1: Using ep0 maxpacket: 16 [ 1183.545025][T12193] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1183.545047][T12193] usb 3-1: config 0 has no interface number 0 [ 1183.545078][T12193] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.545098][T12193] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.545126][T12193] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1183.545143][T12193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.654547][T12193] usb 3-1: config 0 descriptor?? [ 1183.802068][T15891] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2814'. [ 1184.161518][T12193] holtek_mouse 0003:04D9:A081.0008: item fetching failed at offset 5/8 [ 1184.162096][T12193] holtek_mouse 0003:04D9:A081.0008: hid parse failed: -22 [ 1184.162149][T12193] holtek_mouse 0003:04D9:A081.0008: probe with driver holtek_mouse failed with error -22 [ 1186.901861][T12193] usb 3-1: USB disconnect, device number 72 [ 1189.323276][T15937] tipc: Failed to remove unknown binding: 66,0,0/0:4208416318/4208416320 [ 1189.323303][T15937] tipc: Failed to remove unknown binding: 66,0,0/0:4208416318/4208416319 [ 1189.323651][T15937] tipc: Failed to remove unknown binding: 66,0,0/0:4208416318/4208416320 [ 1189.323673][T15937] tipc: Failed to remove unknown binding: 66,0,0/0:4208416318/4208416319 [ 1192.315592][T12192] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1192.477412][T12192] usb 6-1: Using ep0 maxpacket: 16 [ 1192.496162][T12192] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.496251][T12192] usb 6-1: config 0 has no interface number 0 [ 1192.496591][T12192] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.496689][T12192] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.496731][T12192] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1192.496755][T12192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.550358][T12192] usb 6-1: config 0 descriptor?? [ 1192.566491][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1193.403793][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 1193.403814][ T36] audit: type=1326 audit(1774277422.294:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.403866][ T36] audit: type=1326 audit(1774277422.294:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.403928][ T36] audit: type=1326 audit(1774277422.294:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.403975][ T36] audit: type=1326 audit(1774277422.294:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404031][ T36] audit: type=1326 audit(1774277422.294:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404077][ T36] audit: type=1326 audit(1774277422.294:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404123][ T36] audit: type=1326 audit(1774277422.294:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404189][ T36] audit: type=1326 audit(1774277422.294:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404233][ T36] audit: type=1326 audit(1774277422.304:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.404296][ T36] audit: type=1326 audit(1774277422.304:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15956 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1193.550847][T12192] holtek_mouse 0003:04D9:A081.0009: item fetching failed at offset 5/8 [ 1193.551715][T12192] holtek_mouse 0003:04D9:A081.0009: hid parse failed: -22 [ 1193.551798][T12192] holtek_mouse 0003:04D9:A081.0009: probe with driver holtek_mouse failed with error -22 [ 1193.685786][T15967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2835'. [ 1196.735937][ T5889] usb 6-1: USB disconnect, device number 61 [ 1200.495523][ T6638] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1200.670229][ T6638] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.670265][ T6638] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.670289][ T6638] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1200.670333][ T6638] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1200.670357][ T6638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.936648][ T6638] usb 9-1: config 0 descriptor?? [ 1202.549704][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2855'. [ 1202.599300][ T6638] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1202.686258][T12192] usb 9-1: USB disconnect, device number 33 [ 1203.066235][T16028] fido_id[16028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1212.606997][T16101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2879'. [ 1218.854869][ T9990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1218.870699][ T9990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1218.873888][ T9990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1218.878329][ T9990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1218.883146][ T9990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1221.055510][ T5816] Bluetooth: hci4: command tx timeout [ 1222.178602][T16174] fuse: Bad value for 'fd' [ 1222.533217][T16174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.135568][ T5816] Bluetooth: hci4: command tx timeout [ 1223.172075][T16152] chnl_net:caif_netlink_parms(): no params data found [ 1225.205681][ T5816] Bluetooth: hci4: command tx timeout [ 1226.260232][ T1009] vlan2: left allmulticast mode [ 1226.260250][ T1009] bond0: left allmulticast mode [ 1226.260311][ T1009] bond_slave_0: left allmulticast mode [ 1226.260326][ T1009] macvlan2: left allmulticast mode [ 1226.260336][ T1009] team0: left allmulticast mode [ 1226.260344][ T1009] team_slave_0: left allmulticast mode [ 1226.260356][ T1009] team_slave_1: left allmulticast mode [ 1226.260767][ T1009] vlan2: left promiscuous mode [ 1226.260775][ T1009] bond0: left promiscuous mode [ 1226.260783][ T1009] bond_slave_0: left promiscuous mode [ 1226.263154][ T1009] macvlan2: left promiscuous mode [ 1226.264910][ T1009] bridge0: port 3(vlan2) entered disabled state [ 1226.397040][ T1009] bridge_slave_1: left allmulticast mode [ 1226.397069][ T1009] bridge_slave_1: left promiscuous mode [ 1226.397320][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.489825][ T1009] bridge_slave_0: left allmulticast mode [ 1226.489846][ T1009] bridge_slave_0: left promiscuous mode [ 1226.490029][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.285490][ T5816] Bluetooth: hci4: command tx timeout [ 1229.679074][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.770606][ T1009] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1229.825722][ T1009] team0: left promiscuous mode [ 1229.825739][ T1009] team_slave_0: left promiscuous mode [ 1229.825938][ T1009] team_slave_1: left promiscuous mode [ 1229.859581][ T1009] bond0 (unregistering): Released all slaves [ 1229.877502][ T1009] bond1 (unregistering): Released all slaves [ 1229.948875][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.948974][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.949176][T16152] bridge_slave_0: entered allmulticast mode [ 1229.953729][T16152] bridge_slave_0: entered promiscuous mode [ 1230.038007][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.038185][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.038357][T16152] bridge_slave_1: entered allmulticast mode [ 1230.044502][T16152] bridge_slave_1: entered promiscuous mode [ 1231.794291][T16152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.945669][T16152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.153438][T16242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.301359][T16152] team0: Port device team_slave_0 added [ 1232.316289][T16152] team0: Port device team_slave_1 added [ 1232.825502][ T1009] hsr_slave_0: left promiscuous mode [ 1232.875501][ T1009] hsr_slave_1: left promiscuous mode [ 1232.876563][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.928207][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.856131][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 1235.926831][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 1236.539465][T16152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.539479][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.539501][T16152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.597694][T16152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.597710][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.597739][T16152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.879195][T16152] hsr_slave_0: entered promiscuous mode [ 1236.905136][T16152] hsr_slave_1: entered promiscuous mode [ 1236.917726][T16152] debugfs: 'hsr0' already exists in 'hsr' [ 1236.917745][T16152] Cannot create hsr debugfs directory [ 1237.322273][T16300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.603883][ T1009] IPVS: stop unused estimator thread 0... [ 1238.651065][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.651255][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.402941][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 1241.402956][ T36] audit: type=1326 audit(1774277470.524:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.458411][ T36] audit: type=1326 audit(1774277470.524:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.458469][ T36] audit: type=1326 audit(1774277470.584:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.458517][ T36] audit: type=1326 audit(1774277470.584:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.571816][ T36] audit: type=1326 audit(1774277470.684:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.571876][ T36] audit: type=1326 audit(1774277470.684:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.571925][ T36] audit: type=1326 audit(1774277470.684:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.571975][ T36] audit: type=1326 audit(1774277470.684:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.572023][ T36] audit: type=1326 audit(1774277470.684:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1241.572070][ T36] audit: type=1326 audit(1774277470.694:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16339 comm="syz.5.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1242.793809][T16352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.073114][T16152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1245.155624][T16152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1245.353092][T16152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1245.495516][T16152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1247.644149][T16152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.866769][T16152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.927982][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.935878][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.959268][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.959366][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.885591][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1249.402441][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 1249.402461][ T36] audit: type=1326 audit(1774277478.434:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.402517][ T36] audit: type=1326 audit(1774277478.434:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.402566][ T36] audit: type=1326 audit(1774277478.454:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.402614][ T36] audit: type=1326 audit(1774277478.474:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.402731][ T36] audit: type=1326 audit(1774277478.474:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.402781][ T36] audit: type=1326 audit(1774277478.514:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.634679][ T36] audit: type=1326 audit(1774277478.524:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.634876][ T36] audit: type=1326 audit(1774277478.754:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.634995][ T36] audit: type=1326 audit(1774277478.754:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1249.635104][ T36] audit: type=1326 audit(1774277478.754:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16427 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdcd2c799 code=0x7ffc0000 [ 1250.364320][T16152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.800246][T16152] veth0_vlan: entered promiscuous mode [ 1251.024509][T16152] veth1_vlan: entered promiscuous mode [ 1251.128830][T16451] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2956'. [ 1252.297579][T16152] veth0_macvtap: entered promiscuous mode [ 1252.415956][T16152] veth1_macvtap: entered promiscuous mode [ 1252.541721][T16152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.597782][T16152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.662986][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.663233][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.663272][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.663307][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.445823][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.445846][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.614413][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.614435][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.670600][T16494] openvswitch: netlink: Message has 12 unknown bytes. [ 1255.670675][T16494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.338683][T16501] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2966'. [ 1257.845677][ T1237] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1257.931868][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1257.952428][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1257.995415][ T1237] usb 10-1: Using ep0 maxpacket: 16 [ 1258.011833][ T1237] usb 10-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 1258.011861][ T1237] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1258.042058][ T1237] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1258.042089][ T1237] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.042110][ T1237] usb 10-1: Product: syz [ 1258.042125][ T1237] usb 10-1: Manufacturer: syz [ 1258.042140][ T1237] usb 10-1: SerialNumber: syz [ 1258.321870][ T1237] usb 10-1: 0:2 : does not exist [ 1258.321958][ T1237] usb 10-1: unit 18 not found! [ 1258.407761][ T1237] usb 10-1: USB disconnect, device number 7 [ 1258.593402][T15893] udevd[15893]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.931782][ T36] audit: type=1326 audit(1774277488.054:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1258.932160][ T36] audit: type=1326 audit(1774277488.054:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.015920][ T36] audit: type=1326 audit(1774277488.144:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.016490][ T36] audit: type=1326 audit(1774277488.144:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.016769][ T36] audit: type=1326 audit(1774277488.144:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.088953][ T36] audit: type=1326 audit(1774277488.214:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.089143][ T36] audit: type=1326 audit(1774277488.214:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.092460][ T36] audit: type=1326 audit(1774277488.214:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.092663][ T36] audit: type=1326 audit(1774277488.214:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1259.092770][ T36] audit: type=1326 audit(1774277488.214:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16513 comm="syz.5.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0801dc799 code=0x7ffc0000 [ 1260.349058][T16533] netlink: 'syz.8.2975': attribute type 10 has an invalid length. [ 1260.349282][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.350740][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.409859][T16533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.410040][T16533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.440357][T16533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.440526][T16533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.466137][T16533] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1260.699417][T16535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.830293][T16535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.539962][T16544] netlink: 388 bytes leftover after parsing attributes in process `syz.8.2977'. [ 1262.783030][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2979'. [ 1263.162672][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 1263.198292][T16550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2980'. [ 1264.771784][T16578] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2989'. [ 1266.815476][ T5893] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1266.985432][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 1266.987994][ T5893] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.988069][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.988099][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1266.988147][ T5893] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1266.988178][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.086408][ T5893] usb 9-1: config 0 descriptor?? [ 1267.205530][ T9755] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1267.365536][ T9755] usb 3-1: Using ep0 maxpacket: 8 [ 1267.367584][ T9755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.367609][ T9755] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1267.371843][ T9755] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 1267.371916][ T9755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.371932][ T9755] usb 3-1: Product: syz [ 1267.371943][ T9755] usb 3-1: Manufacturer: syz [ 1267.371954][ T9755] usb 3-1: SerialNumber: syz [ 1267.470591][ T9755] usb 3-1: config 0 descriptor?? [ 1267.625288][ T5893] nintendo 0003:057E:2019.000B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0 [ 1267.715110][ T5893] nintendo 0003:057E:2019.000B: Failed to get joycon info; ret=-38 [ 1267.715143][ T5893] nintendo 0003:057E:2019.000B: Failed to retrieve controller info; ret=-38 [ 1267.715168][ T5893] nintendo 0003:057E:2019.000B: Failed to initialize controller; ret=-38 [ 1267.812144][ T5893] nintendo 0003:057E:2019.000B: probe - fail = -38 [ 1267.812429][ T5893] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -38 [ 1267.878328][ T5808] usb 3-1: USB disconnect, device number 73 [ 1269.047756][T16623] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3003'. [ 1270.340570][ T5893] usb 9-1: USB disconnect, device number 34 [ 1270.985524][ T5893] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1271.200922][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 1271.272746][ T5893] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1271.272767][ T5893] usb 9-1: config 0 has no interface number 0 [ 1271.272804][ T5893] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.272823][ T5893] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.272850][ T5893] usb 9-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1271.272866][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.364713][ T5893] usb 9-1: config 0 descriptor?? [ 1272.225586][ T5808] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1272.375478][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 1272.383536][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.383559][ T5808] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.441313][ T5808] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 1272.441344][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.441367][ T5808] usb 3-1: Product: syz [ 1272.441382][ T5808] usb 3-1: Manufacturer: syz [ 1272.441399][ T5808] usb 3-1: SerialNumber: syz [ 1272.492970][ T5808] usb 3-1: config 0 descriptor?? [ 1272.903005][ T5808] usb 3-1: USB disconnect, device number 74 [ 1275.578917][T16657] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1276.656678][ T5893] usbhid 9-1:0.1: can't add hid device: -32 [ 1276.656809][ T5893] usbhid 9-1:0.1: probe with driver usbhid failed with error -32 [ 1277.018799][T16668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.282104][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3019'. [ 1278.333415][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3019'. [ 1278.736572][ T5808] usb 9-1: USB disconnect, device number 35 [ 1278.925563][T12192] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1279.265127][T12192] usb 6-1: Using ep0 maxpacket: 16 [ 1279.267768][T12192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1279.274147][T12192] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1279.274175][T12192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.274195][T12192] usb 6-1: Product: syz [ 1279.274209][T12192] usb 6-1: Manufacturer: syz [ 1279.274224][T12192] usb 6-1: SerialNumber: syz [ 1279.335819][T12192] usb 6-1: config 0 descriptor?? [ 1279.373940][T12192] hub 6-1:0.0: bad descriptor, ignoring hub [ 1279.388625][T12192] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1279.435768][T12192] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.852389][T12192] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1280.627544][T15893] udevd[15893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.155926][ T5893] usb 6-1: USB disconnect, device number 62 [ 1282.965566][T12192] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1283.125466][T12192] usb 6-1: Using ep0 maxpacket: 16 [ 1283.127807][T12192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.127856][T12192] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.135546][T12192] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1283.135573][T12192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.135594][T12192] usb 6-1: Product: syz [ 1283.135609][T12192] usb 6-1: Manufacturer: syz [ 1283.135624][T12192] usb 6-1: SerialNumber: syz [ 1283.236353][T12192] usb 6-1: config 0 descriptor?? [ 1285.970975][ T5893] usb 6-1: USB disconnect, device number 63 [ 1286.256845][T16800] fuse: Bad value for 'fd' [ 1286.657919][T16810] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1286.885501][ T5889] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1287.038029][ T5889] usb 10-1: Using ep0 maxpacket: 16 [ 1287.040328][ T5889] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.040345][ T5889] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1287.043446][ T5889] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1287.043463][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.043476][ T5889] usb 10-1: Product: syz [ 1287.043485][ T5889] usb 10-1: Manufacturer: syz [ 1287.043494][ T5889] usb 10-1: SerialNumber: syz [ 1287.257352][ T5889] usb 10-1: 0:2 : does not exist [ 1287.257431][ T5889] usb 10-1: unit 6 not found! [ 1287.335992][ T5889] usb 10-1: USB disconnect, device number 8 [ 1287.527595][T15893] udevd[15893]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.832578][T16869] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.3091' sets config #2 [ 1293.195437][ T5893] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1293.345457][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 1293.348007][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1293.348043][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1293.348073][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1293.348100][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1293.348130][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1293.351553][ T5893] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1293.351584][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.351608][ T5893] usb 9-1: Product: syz [ 1293.351625][ T5893] usb 9-1: Manufacturer: syz [ 1293.351643][ T5893] usb 9-1: SerialNumber: syz [ 1293.476951][ T5893] usb 9-1: config 0 descriptor?? [ 1293.746459][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1293.766108][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1294.181879][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.182351][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.200108][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.200669][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.201138][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.201618][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.202078][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.202538][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.202994][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.203452][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.203915][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.204371][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.204830][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.285726][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.286688][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.287182][ T5893] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1294.287244][ T5893] input input19: Timeout waiting for response from device. [ 1294.329805][ T5893] usb 9-1: USB disconnect, device number 36 [ 1295.488822][T16927] netlink: 'syz.8.3113': attribute type 25 has an invalid length. [ 1295.488844][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1295.615162][T16927] netlink: 'syz.8.3113': attribute type 25 has an invalid length. [ 1295.615179][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1295.677589][T16931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1297.511803][T16949] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.3121' sets config #2 [ 1298.648658][ T1009] ------------[ cut here ]------------ [ 1298.648673][ T1009] conntrack cleanup blocked for 60s [ 1298.648688][ T1009] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:7/1009 [ 1298.648906][ T1009] Modules linked in: [ 1298.648959][ T1009] CPU: 1 UID: 0 PID: 1009 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1298.649029][ T1009] Tainted: [L]=SOFTLOCKUP [ 1298.649037][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.649051][ T1009] Workqueue: netns cleanup_net [ 1298.649160][ T1009] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.649223][ T1009] Code: 08 48 89 df e8 8d c6 e7 f8 4c 8b 3b 49 39 df 74 69 e8 b0 a8 81 f8 45 31 e4 e9 8e fe ff ff e8 a3 a8 81 f8 48 8d 3d 9c 9c 35 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1298.649243][ T1009] RSP: 0018:ffffc900055778b0 EFLAGS: 00010293 [ 1298.649268][ T1009] RAX: ffffffff8942cfad RBX: ffffc90005577a50 RCX: ffff88802730bd00 [ 1298.649287][ T1009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f786c50 [ 1298.649297][ T1009] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1298.649306][ T1009] R10: dffffc0000000000 R11: ffffed1007298901 R12: 0000000000000001 [ 1298.649316][ T1009] R13: dffffc0000000000 R14: 000000010001856f R15: 0000000100018570 [ 1298.649328][ T1009] FS: 0000000000000000(0000) GS:ffff888126439000(0000) knlGS:0000000000000000 [ 1298.649340][ T1009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.649351][ T1009] CR2: 00007fa6bb56eff4 CR3: 00000000530e2000 CR4: 00000000003526f0 [ 1298.649368][ T1009] Call Trace: [ 1298.649374][ T1009] [ 1298.649388][ T1009] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1298.649432][ T1009] ops_undo_list+0x52b/0x940 [ 1298.649458][ T1009] ? rt_spin_unlock+0x1f0/0x200 [ 1298.649540][ T1009] ? __pfx_ops_undo_list+0x10/0x10 [ 1298.649561][ T1009] ? rt_spin_unlock+0x14f/0x200 [ 1298.649582][ T1009] ? idr_destroy+0x21b/0x2a0 [ 1298.649645][ T1009] ? rt_spin_unlock+0x160/0x200 [ 1298.649666][ T1009] cleanup_net+0x56e/0x800 [ 1298.649691][ T1009] ? __pfx_cleanup_net+0x10/0x10 [ 1298.649720][ T1009] ? process_scheduled_works+0xa8d/0x18c0 [ 1298.649782][ T1009] ? process_scheduled_works+0xa8d/0x18c0 [ 1298.649805][ T1009] process_scheduled_works+0xb6e/0x18c0 [ 1298.649850][ T1009] ? __pfx_process_scheduled_works+0x10/0x10 [ 1298.649877][ T1009] ? assign_work+0x3d5/0x5e0 [ 1298.649902][ T1009] worker_thread+0xa53/0xfc0 [ 1298.649944][ T1009] kthread+0x388/0x470 [ 1298.649962][ T1009] ? __pfx_worker_thread+0x10/0x10 [ 1298.649983][ T1009] ? __pfx_kthread+0x10/0x10 [ 1298.650000][ T1009] ret_from_fork+0x51e/0xb90 [ 1298.650032][ T1009] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.650054][ T1009] ? __switch_to+0xc7d/0x1450 [ 1298.650093][ T1009] ? __pfx_kthread+0x10/0x10 [ 1298.650110][ T1009] ret_from_fork_asm+0x1a/0x30 [ 1298.650146][ T1009] [ 1298.650159][ T1009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1298.650173][ T1009] CPU: 1 UID: 0 PID: 1009 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1298.650194][ T1009] Tainted: [L]=SOFTLOCKUP [ 1298.650199][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.650209][ T1009] Workqueue: netns cleanup_net [ 1298.650231][ T1009] Call Trace: [ 1298.650236][ T1009] [ 1298.650242][ T1009] vpanic+0x56c/0xa60 [ 1298.650303][ T1009] ? __pfx__printk+0x10/0x10 [ 1298.650328][ T1009] ? __pfx_vpanic+0x10/0x10 [ 1298.650358][ T1009] ? is_bpf_text_address+0x292/0x2b0 [ 1298.650415][ T1009] ? is_bpf_text_address+0x26/0x2b0 [ 1298.650444][ T1009] panic+0xc5/0xd0 [ 1298.650467][ T1009] ? __pfx_panic+0x10/0x10 [ 1298.650497][ T1009] ? ret_from_fork_asm+0x1a/0x30 [ 1298.650515][ T1009] __warn+0x315/0x4f0 [ 1298.650538][ T1009] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.650558][ T1009] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.650577][ T1009] __report_bug+0x29a/0x540 [ 1298.650650][ T1009] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.650669][ T1009] ? __pfx___report_bug+0x10/0x10 [ 1298.650707][ T1009] report_bug_entry+0x19a/0x290 [ 1298.650731][ T1009] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.650748][ T1009] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 1298.650772][ T1009] handle_bug+0xce/0x200 [ 1298.650824][ T1009] exc_invalid_op+0x1a/0x50 [ 1298.650841][ T1009] asm_exc_invalid_op+0x1a/0x20 [ 1298.650870][ T1009] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1298.650889][ T1009] Code: 08 48 89 df e8 8d c6 e7 f8 4c 8b 3b 49 39 df 74 69 e8 b0 a8 81 f8 45 31 e4 e9 8e fe ff ff e8 a3 a8 81 f8 48 8d 3d 9c 9c 35 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1298.650903][ T1009] RSP: 0018:ffffc900055778b0 EFLAGS: 00010293 [ 1298.650916][ T1009] RAX: ffffffff8942cfad RBX: ffffc90005577a50 RCX: ffff88802730bd00 [ 1298.650928][ T1009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f786c50 [ 1298.650938][ T1009] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1298.650947][ T1009] R10: dffffc0000000000 R11: ffffed1007298901 R12: 0000000000000001 [ 1298.650958][ T1009] R13: dffffc0000000000 R14: 000000010001856f R15: 0000000100018570 [ 1298.650975][ T1009] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 1298.651005][ T1009] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1298.651025][ T1009] ops_undo_list+0x52b/0x940 [ 1298.651050][ T1009] ? rt_spin_unlock+0x1f0/0x200 [ 1298.651070][ T1009] ? __pfx_ops_undo_list+0x10/0x10 [ 1298.651092][ T1009] ? rt_spin_unlock+0x14f/0x200 [ 1298.651113][ T1009] ? idr_destroy+0x21b/0x2a0 [ 1298.651138][ T1009] ? rt_spin_unlock+0x160/0x200 [ 1298.651160][ T1009] cleanup_net+0x56e/0x800 [ 1298.651204][ T1009] ? __pfx_cleanup_net+0x10/0x10 [ 1298.651233][ T1009] ? process_scheduled_works+0xa8d/0x18c0 [ 1298.651257][ T1009] ? process_scheduled_works+0xa8d/0x18c0 [ 1298.651282][ T1009] process_scheduled_works+0xb6e/0x18c0 [ 1298.651328][ T1009] ? __pfx_process_scheduled_works+0x10/0x10 [ 1298.651356][ T1009] ? assign_work+0x3d5/0x5e0 [ 1298.651382][ T1009] worker_thread+0xa53/0xfc0 [ 1298.651446][ T1009] kthread+0x388/0x470 [ 1298.651471][ T1009] ? __pfx_worker_thread+0x10/0x10 [ 1298.651503][ T1009] ? __pfx_kthread+0x10/0x10 [ 1298.651530][ T1009] ret_from_fork+0x51e/0xb90 [ 1298.651569][ T1009] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.651592][ T1009] ? __switch_to+0xc7d/0x1450 [ 1298.651614][ T1009] ? __pfx_kthread+0x10/0x10 [ 1298.651632][ T1009] ret_from_fork_asm+0x1a/0x30 [ 1298.651660][ T1009] [ 1298.652271][ T1009] Kernel Offset: disabled