last executing test programs: 13m16.669342071s ago: executing program 2 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe000000}, 0x3b) 13m16.364258177s ago: executing program 2 (id=543): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={0x0}) 13m14.555875699s ago: executing program 2 (id=555): socket(0x15, 0x5, 0x0) r0 = socket(0x28, 0x80000, 0xfffffff9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056001e0025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13m14.288442411s ago: executing program 2 (id=557): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 13m13.117346302s ago: executing program 2 (id=567): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x201, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0xfffffffe}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100000, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1, 0x5, 0x4, 0x5, 0x8, 0x5}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9c0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0xfffffffd}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d040e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60", 0xe1}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13m12.639054678s ago: executing program 2 (id=572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f000000e4c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="622c585835ca7e21a45d58e4588007518aa3bd4b7587f89f8bbd36b26ae7d62fe69b1c09fc7d18de06b10db9ad28517be3222256634f2c2d09", 0x39}, {&(0x7f0000000340)="51e6eb68693e626f810acae6b884b924f90e62229265c85c2d15deab1279660de82c0a475da158e424a1e9b44d001e3a9eb2364cd16085ea1861065e88c29ef1cd8b3d4b4b691e2f2afb147dfb883f630bdb336337c4e6f4a81c9e08eda3cbff532fc0ed9563a2c1d0c7998a9e63db78ba704783b5", 0x75}, {&(0x7f00000003c0)="6e4681742e098a3d95bba4ea509774b456685af2d267c6102d55c2b9bc93d1cb55076af4770c74cdc9d83587b0408035ce74088f21ba3e474db6b34d95fb2b4ae895c88c0a468334231c81291229d13048cf2d8a5a49dff290d6b1d6848d260a0de1ac7b24e807", 0x67}, {&(0x7f0000000440)="11c9a8a2e159816dcec4590e9dd9f77836b059e14068f9d55cebfb68d4eb3be604970f5dbdab4975811d51ffa572c6da79d566c1f8dfb0b4e9f30dd2d001ee4e4c99ab7111ad72d8780dde1e9f05577b3948a30ea78af5399f758a55407bea7465aef1d0f94abc93f05938c4504a91e9000c8a21132eb2adbc29fd0225c11871cb8b455747eac6e2cffe35b9d9dfe439f409d08de82cd1728110da28950a776044b36750279f3adc559bbe", 0xab}, {&(0x7f0000001580)="1b55d54c8fad032d4d421476d96102ef899fb4bce632d9d1942000dcdbe2ef8d844e4927df4e7384b497be71fe790f826a480092a9fad19282cb8bc4de9d1e051cce3ba0cf42d8fc1cb8f4baaa69ef49b8fd70af1477defd89733eeca85584c56d802ff1ebc0fff6039fd347381478b53ab8cbdfc186d5cbabbec9939f95c47260c8e275e672483c1a41e5a8e6ad02dfd4f233d20b313f1a830d0dce4c8dda218b920b980e326ab0382f0e2a77c6f5ceebf297424520278691a6475923b3a7bc5f0d96bb", 0xc4}, {&(0x7f0000001680)="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", 0xfc}], 0x6, 0x0, 0x0, 0xc000}}], 0x1, 0x40001) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x3c00000000000000) 13m11.816016513s ago: executing program 32 (id=572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f000000e4c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="622c585835ca7e21a45d58e4588007518aa3bd4b7587f89f8bbd36b26ae7d62fe69b1c09fc7d18de06b10db9ad28517be3222256634f2c2d09", 0x39}, {&(0x7f0000000340)="51e6eb68693e626f810acae6b884b924f90e62229265c85c2d15deab1279660de82c0a475da158e424a1e9b44d001e3a9eb2364cd16085ea1861065e88c29ef1cd8b3d4b4b691e2f2afb147dfb883f630bdb336337c4e6f4a81c9e08eda3cbff532fc0ed9563a2c1d0c7998a9e63db78ba704783b5", 0x75}, {&(0x7f00000003c0)="6e4681742e098a3d95bba4ea509774b456685af2d267c6102d55c2b9bc93d1cb55076af4770c74cdc9d83587b0408035ce74088f21ba3e474db6b34d95fb2b4ae895c88c0a468334231c81291229d13048cf2d8a5a49dff290d6b1d6848d260a0de1ac7b24e807", 0x67}, {&(0x7f0000000440)="11c9a8a2e159816dcec4590e9dd9f77836b059e14068f9d55cebfb68d4eb3be604970f5dbdab4975811d51ffa572c6da79d566c1f8dfb0b4e9f30dd2d001ee4e4c99ab7111ad72d8780dde1e9f05577b3948a30ea78af5399f758a55407bea7465aef1d0f94abc93f05938c4504a91e9000c8a21132eb2adbc29fd0225c11871cb8b455747eac6e2cffe35b9d9dfe439f409d08de82cd1728110da28950a776044b36750279f3adc559bbe", 0xab}, {&(0x7f0000001580)="1b55d54c8fad032d4d421476d96102ef899fb4bce632d9d1942000dcdbe2ef8d844e4927df4e7384b497be71fe790f826a480092a9fad19282cb8bc4de9d1e051cce3ba0cf42d8fc1cb8f4baaa69ef49b8fd70af1477defd89733eeca85584c56d802ff1ebc0fff6039fd347381478b53ab8cbdfc186d5cbabbec9939f95c47260c8e275e672483c1a41e5a8e6ad02dfd4f233d20b313f1a830d0dce4c8dda218b920b980e326ab0382f0e2a77c6f5ceebf297424520278691a6475923b3a7bc5f0d96bb", 0xc4}, {&(0x7f0000001680)="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", 0xfc}], 0x6, 0x0, 0x0, 0xc000}}], 0x1, 0x40001) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x3c00000000000000) 8.654229167s ago: executing program 1 (id=3471): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) 8.471276677s ago: executing program 1 (id=3472): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_clone(0x80808400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 7.659784181s ago: executing program 3 (id=3481): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01], 0x300) 7.655211508s ago: executing program 5 (id=3482): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) 7.449720167s ago: executing program 5 (id=3483): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058437"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0xda7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x18, 0x9, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x8, 0x9, 0x7, 0x40, 0x9}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x814}}, {0xea, &(0x7f0000000180)=@string={0xea, 0x3, "eeb6baa279300d75547ae6dfa72d3937262ad182932b5fffcfd548eefb2a0eec3c1e5991ec1590a0a9a9e50b9691f01dbc7753ac690d66ba4a848a7e1628a839e386b0e312b4a91b65c3b50eaa1e8a9894be2c08019cb12b3b46ea9c2ab956ef51800a0e6148abb45b8ba204b5026ae6c2f63efa7d212a7a147525aed600d1cc96b2c236beb94aa797f03cb0f6fc90ee5f31828f1da8037673bba9548ce81defbfe96354f22e6cdc3f4c0bbc686ea1dcb8bbedd4b8aad693c0389a1df3a7f530766929a60d197873d9b806372817f9ac22b16a2bd04e32ad12da9da46f60328067c36f8e9ff6a869"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x418}}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.328227025s ago: executing program 1 (id=3484): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e1e}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x473b, &(0x7f0000000480)={0x0, 0x9485, 0x10000, 0x0, 0x18b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e1f, 0x22, @empty, 0xa79}}, 0x8, 0x3}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 6.637222737s ago: executing program 3 (id=3487): userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="6fad2e6c5e81c9085fd1649ba02b931d4ce910ac2eafd853d4d3ef32490ef61877af8695c21353d647234582390e0513415ca6ab70a3de9e971d6ee9ef9ce957cb0a27196ec2b1c67c436ab9f0dde973b64ba63b5958e524670c3af5c1415985699bc6cc73683640d295083c9a9806ceb8accab47974c836d1ab382ea6c8fdbc461918f6c1bc5bee7e79197053e7673d6eb92cf92ed1b20521e0", 0x9a}, {&(0x7f0000000400)="ee0e97571cbead16042d7d585a3130ac791237806e0cbca4a3a3cea7be43e43f03cb13e7d212092d775d0f81b1b9b7ed7a6a5f2eeacac0057a9cc0584ec7dc6ad5534b5c4ca52646b90d716a43828b53608b510f3a4477e024970d4c66518f7ce55566e412d825bc00a6f984b7422c086908f179156e3615f611d05b46d7f79d2f88e00440393f3f9c00020536411780d4e6a0695278ac28298b54c972fd3b8995de274157278dfeffeef04ddf80bbcc63d171b5f700e5a14de77aa5d56e46698dd344097ae6bcd040ba863df0aa7e87ab5563c6d16deb856a758d4caaf34d", 0xdf}], 0x2, 0x0, 0x0, 0x20040000}}], 0x1, 0x8060) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000682000/0x1000)=nil, 0x1000, 0x3000008, 0x13, 0xffffffffffffffff, 0x8000000) write$binfmt_script(r2, &(0x7f0000000040), 0x10010) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x8dfd, 0x1c881, 0x8, 0xd1}) r4 = io_uring_setup(0x6321, &(0x7f00000001c0)={0x0, 0xc89f, 0x1, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x40047459, 0xffffffffffffffff) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 6.378017352s ago: executing program 3 (id=3488): socket(0x15, 0x5, 0x0) r0 = socket(0x28, 0x80000, 0xfffffff9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000010000000", 0x39}], 0x1) 6.081123285s ago: executing program 3 (id=3490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00e0ffffffffffffff000008000400", @ANYRES32=r1], 0x38}}, 0x10) 5.891857446s ago: executing program 3 (id=3491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.704203734s ago: executing program 4 (id=3493): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r0) 5.607809958s ago: executing program 4 (id=3494): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_clone(0x80808400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 5.582452465s ago: executing program 5 (id=3495): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x3f, &(0x7f0000000080), 0x4) (async) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x3f, &(0x7f0000000080), 0x4) 5.355869331s ago: executing program 5 (id=3496): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x52e, 0x1fd5, 0x7, 0x2, 0xfff9, 0x80, 0x8000, 0x9, 0x44b, 0x743, 0x6, 0x8, 0x5, 0x1aa, 0x8, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001", @ANYRESHEX, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecba11f"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, 0x0) 5.320199487s ago: executing program 1 (id=3497): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x52e, 0x1fd5, 0x7, 0x2, 0xfff9, 0x80, 0x8000, 0x9, 0x44b, 0x743, 0x6, 0x8, 0x5, 0x1aa, 0x8, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001", @ANYRESHEX, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecba11f"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, 0x0) 4.552943045s ago: executing program 4 (id=3499): unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001480)={0x40000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000001c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)="b0", 0x0, 0x7fffffff, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xdddfa000, 0x8, 0x401, 0x80000002, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x78, '\x00', 0x31}, {0x1, 0xb3, 0x1, '\x00', 0xc3}, {0x5, 0x9, 0x10, '\x00', 0x81}, {0x5, 0x82, 0x4, '\x00', 0x79}, {0xa, 0x80, 0x0, '\x00', 0x6}, {0x5, 0x8, 0x1, '\x00', 0x5}, {0x54, 0x3, 0x3, '\x00', 0xc}, {0x40, 0x0, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x82}, {0x6, 0x8, 0x7, '\x00', 0x1}, {0x1, 0x1, 0x18, '\x00', 0x4}, {0x8, 0xf, 0x5, '\x00', 0xf8}, {0x5, 0x10, 0x4, '\x00', 0x4}, {0x0, 0xc0, 0x0, '\x00', 0x1}, {0x5, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x9, 0x9, '\x00', 0x46}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0x0, '\x00', 0xf7}, {0x6, 0x6, 0x51, '\x00', 0xa}, {0xff, 0x2, 0x3, '\x00', 0x8}, {0x5, 0xe, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x41, 0x0, 0x40, 0x0, 0x0, 0x7, 0xf3, 0x3, 0x2, 0x4, 0x6, 0x1, 0x0, 0x8, 0x5, 0x0, 0x7, 0x2, 0x0, '\x00', 0x3, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x4000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x8000000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044094) close(r8) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680)="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", 0xff57, 0x2) 4.170472792s ago: executing program 0 (id=3501): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000003a08000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.898400371s ago: executing program 0 (id=3502): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x641c, r1, 0x0, 0x0, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0xf4ffffff, 0x1, 0x4, r1, 0x0, 0x0, 0x2}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x600) r3 = epoll_create1(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x9e7a, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x82, 0x10, 0x0, 0x4}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) (async) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x641c, r1, 0x0, 0x0, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0xf4ffffff, 0x1, 0x4, r1, 0x0, 0x0, 0x2}]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) unshare(0x600) (async) epoll_create1(0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x9e7a, 0xc, 0x1, 0x59c}) (async) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x82, 0x10, 0x0, 0x4}, 0x10) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.320638824s ago: executing program 5 (id=3503): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88300, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000200)={0xfff, 0x2000008}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, &(0x7f0000000400)=""/165, 0xf5) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000004"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000520040008004825c8eed85b8682290044fa010008000d0000000080c96d33c3cbff6cd0a59eba11dcfe7e508af5a8e4b1d80f1697b93c8cc5318baf7dab2e60a194d7044a507a853ead089caa7057fb32526b58563012839f1f9e36c676a618"], 0x38}}, 0x4000000) 3.317402667s ago: executing program 4 (id=3504): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r0) 3.112060783s ago: executing program 4 (id=3505): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x42, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.111443044s ago: executing program 0 (id=3506): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x10, 0x9, {0x57, 0x0, 0x4, {0x0, 0x5}, {0xfff7, 0xd7}, @rumble={0x8}}, {0x53, 0xc5dc, 0x99c4, {0xcb, 0xe2b3}, {0xa87, 0x6}, @period={0x59, 0x6, 0xf, 0xd06e, 0x9, {0x3, 0x80, 0x7, 0x7}, 0x0, 0x0}}}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x3, 0x5, 0x0, @empty, @loopback, 0x40, 0x700, 0x2000000, 0xbf6}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000100)={0x0, 0x8, 0x3, 0xfffffff9, @vifc_lcl_ifindex=r7, @multicast2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000050904000000030002"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.081709094s ago: executing program 1 (id=3507): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x52e, 0x1fd5, 0x7, 0x2, 0xfff9, 0x80, 0x8000, 0x9, 0x44b, 0x743, 0x6, 0x8, 0x5, 0x1aa, 0x8, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001", @ANYRESHEX, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecba11f"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) 2.765545674s ago: executing program 4 (id=3508): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x4000804) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x9}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='stack \\\x00'], 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @empty, 0x3ade}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f000047a000/0x3000)=nil, 0x3000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = syz_io_uring_setup(0x1000bdc, &(0x7f0000000640)={0x0, 0xec25, 0x10, 0x2, 0x203}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090400000000800000000a001000eeffff010200000008001e0004020000"], 0x24}}, 0x0) sendmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000480)="d9b51185da70dedfccafbc579a502dda9015f13f30dad7a1fe02a9825c0203583e681c10cfde8908a48338ed7c8b81a3b8cee2151c654d366b1bc94892675d7642c477b8440f4e4f07ad69445d79be61ca5f", 0x52}, {&(0x7f00000002c0)="a0b56e4de8fa0f5e0ddf4c1d3636be37ddd92c02173ed88b14ea4405aa986252a3f3f5ae5401750a19adc1b95259c263fc260e561d5a53dd0ef4473b9a2cc847903eb453c5c954ae7a8968d32caefc46154e0cf33a8a5415f999e83fe2bf0d5a3a2192b5b28b65c8a435fe456b5fb515d744000000000000000000", 0x7b}, {&(0x7f0000000700)="db2419835c9db334621a42eddbff70831de198c9170d5aa679342f1aeb93c8d24ba12466e2b775bad98fcc6fb868fb566fffd8466479cedd77956d7653914e1f6af566cae534ca0012fc3a36e4e206c103153aa85ce75d67bd15f28546e650493dc7068a0de4588244dd9ad6d93bb58501a2f8d672ecef30cbeaa4c1f9f5e1aa13f0d453f04c2136a178949968d0651ea9", 0x91}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000018000000008f18811d1b7885fdc60065", @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES64=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0xa0, 0x8801}, 0x104) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0xcc00, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) 2.031994805s ago: executing program 0 (id=3509): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_clone(0x80808400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.328972499s ago: executing program 3 (id=3510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="070000000000000062a035b00000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@call={0x85, 0x0, 0x0, 0x38}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 522.086628ms ago: executing program 0 (id=3511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 504.759608ms ago: executing program 5 (id=3512): syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004009c}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @multicast1}, &(0x7f00000001c0)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000c0000000000000000000a00000a4c000000060a0b04000000000000000002000000200004801c0001800a000100696e6e65720000000c00028008000340000000070900010073797a30000000002419c1cfb2a2a960e0b7acc8cf3699c5fae71abfa6d7a56f2b0920020073797a3200000000140071bfc7406dea58791600001100010000000000000017000300000a5a80d09fdc8f92ee73247b57cff7934a"], 0x74}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80), 0x0, 0x40000000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 206.2483ms ago: executing program 1 (id=3513): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x52e, 0x1fd5, 0x7, 0x2, 0xfff9, 0x80, 0x8000, 0x9, 0x44b, 0x743, 0x6, 0x8, 0x5, 0x1aa, 0x8, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, 0x0) 0s ago: executing program 0 (id=3514): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) pipe2(&(0x7f0000000080), 0x4800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): Left network mode [ 880.189679][T15654] usb 1-1: USB disconnect, device number 27 [ 880.266596][T16111] IPVS: stopping backup sync thread 6848 ... [ 880.407196][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 880.448729][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.468949][T16611] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 880.523087][ T5919] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 880.703914][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 880.720789][ T5919] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 880.758758][ T5919] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 880.796405][ T5919] usb 5-1: config 8 has no interface number 0 [ 880.811500][ T5919] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 880.842906][ T5919] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 880.864256][ T5919] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 880.886472][ T5919] usb 5-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.917071][ T5919] usb 5-1: config 8 interface 39 has no altsetting 0 [ 880.934623][ T5919] usb 5-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 880.948321][ T5919] usb 5-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 880.965792][ T5919] usb 5-1: Product: syz [ 880.978188][ T5919] usb 5-1: Manufacturer: syz [ 881.013201][ T5919] usb 5-1: SerialNumber: syz [ 881.266305][T16111] hsr_slave_0: left promiscuous mode [ 881.309313][T16111] hsr_slave_1: left promiscuous mode [ 881.344134][T16111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.439564][T16111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.466878][T16111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.476034][T16111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.532343][T16111] veth0_macvtap: left promiscuous mode [ 881.583791][T16111] veth1_vlan: left promiscuous mode [ 881.596809][T16111] veth0_vlan: left promiscuous mode [ 881.628282][T16629] netlink: 'syz.1.3104': attribute type 6 has an invalid length. [ 881.829099][ T5919] ipheth 5-1:8.39: Unable to find endpoints [ 881.874749][ T5919] usb 5-1: USB disconnect, device number 79 [ 881.970146][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3106'. [ 882.947487][T16649] loop6: detected capacity change from 0 to 524288000 [ 883.377475][ T5919] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 883.494436][T16111] team0 (unregistering): Port device team_slave_1 removed [ 883.548300][ T5919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.580680][ T5919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.615335][T16111] team0 (unregistering): Port device team_slave_0 removed [ 883.651543][ T5919] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 883.672404][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 883.693243][ T5919] usb 6-1: SerialNumber: syz [ 884.513319][T16443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 884.701799][T16443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 884.753579][T16443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 884.775473][T16443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 884.783958][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 884.850621][T16657] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 885.211131][T16111] IPVS: stop unused estimator thread 0... [ 885.222767][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.686460][T16675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3113'. [ 885.697801][T16675] unsupported nlmsg_type 40 [ 885.790182][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.945989][ T5919] usb 6-1: 0:2 : does not exist [ 885.951079][ T5919] usb 6-1: unit 5 not found! [ 885.957215][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.964838][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.069805][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.077082][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.088554][ T5919] usb 6-1: USB disconnect, device number 91 [ 886.225066][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.765210][T14483] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 887.073189][T14483] usb 1-1: Using ep0 maxpacket: 8 [ 887.101679][T14483] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 887.133566][T14483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.141947][T14483] usb 1-1: Product: syz [ 887.173153][T14483] usb 1-1: Manufacturer: syz [ 887.183621][T14483] usb 1-1: SerialNumber: syz [ 887.206447][T14483] usb 1-1: config 0 descriptor?? [ 887.472312][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.509339][T14483] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 887.556348][T14483] gspca_sunplus: reg_w_riv err -71 [ 887.606157][T14483] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 887.653659][T14483] usb 1-1: USB disconnect, device number 28 [ 887.692057][T16443] veth0_vlan: entered promiscuous mode [ 887.790152][T16443] veth1_vlan: entered promiscuous mode [ 887.991701][T16443] veth0_macvtap: entered promiscuous mode [ 888.081093][T16443] veth1_macvtap: entered promiscuous mode [ 888.183560][T16707] netlink: 'syz.0.3120': attribute type 6 has an invalid length. [ 888.194588][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.228299][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.262698][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3121'. [ 888.271998][ T7111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.284448][ T6522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.315131][ T6522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.346187][ T6522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.674420][T16718] hub 9-0:1.0: USB hub found [ 888.690774][T16718] hub 9-0:1.0: 1 port detected [ 888.726004][T16110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.754690][T16110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.922221][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 888.959584][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.013023][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.082207][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3125'. [ 889.683594][T16733] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 890.598394][ T5901] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 890.760751][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.798583][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.848754][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 890.866942][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.877117][ T5901] usb 1-1: Product: syz [ 890.881337][ T5901] usb 1-1: Manufacturer: syz [ 890.887264][ T5901] usb 1-1: SerialNumber: syz [ 891.133410][T16757] netlink: 'syz.5.3128': attribute type 4 has an invalid length. [ 891.304208][ T5901] usb 1-1: 0:2 : does not exist [ 891.431615][ T5901] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 891.594377][ T5901] usb 1-1: USB disconnect, device number 29 [ 891.744448][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.383396][T16773] fuse: Bad value for 'user_id' [ 892.418332][T16771] fuse: Bad value for 'user_id' [ 892.478571][T16773] fuse: Bad value for 'user_id' [ 892.491951][T16776] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3131'. [ 892.593119][T16771] fuse: Bad value for 'user_id' [ 892.638493][T16783] netlink: 'syz.4.3133': attribute type 6 has an invalid length. [ 893.644235][T16804] hub 9-0:1.0: USB hub found [ 893.805627][T16804] hub 9-0:1.0: 1 port detected [ 893.863382][T16806] loop2: detected capacity change from 0 to 7 [ 893.963596][T16809] netlink: 'syz.0.3137': attribute type 4 has an invalid length. [ 893.971577][T16809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3137'. [ 893.990625][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3138'. [ 894.090457][T16807] netlink: 'syz.0.3137': attribute type 4 has an invalid length. [ 894.236165][T16806] Dev loop2: unable to read RDB block 7 [ 894.303932][T16807] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3137'. [ 894.313265][T16806] loop2: unable to read partition table [ 894.313819][T16806] loop2: partition table beyond EOD, truncated [ 894.381143][T16806] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 895.442191][T16798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3136'. [ 895.552245][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 895.552265][ T30] audit: type=1326 audit(1769304133.743:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 895.669248][ T30] audit: type=1326 audit(1769304133.743:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 895.722058][ T30] audit: type=1326 audit(1769304133.743:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 895.769025][ T30] audit: type=1326 audit(1769304133.743:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 895.860616][ T30] audit: type=1326 audit(1769304133.743:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 895.943030][ T5901] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 895.953089][ T30] audit: type=1326 audit(1769304133.743:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 896.024162][ T30] audit: type=1326 audit(1769304133.753:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 896.109044][ T30] audit: type=1326 audit(1769304133.753:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 896.166938][ T5901] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 896.182602][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.221812][ T30] audit: type=1326 audit(1769304133.763:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56d5f9c547 code=0x7ffc0000 [ 896.246622][ T5901] usb 2-1: Product: syz [ 896.250883][ T5901] usb 2-1: Manufacturer: syz [ 896.273190][ T5901] usb 2-1: SerialNumber: syz [ 896.294263][ T30] audit: type=1326 audit(1769304133.763:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5f9acb9 code=0x7ffc0000 [ 896.332263][ T5901] usb 2-1: config 0 descriptor?? [ 896.350713][ T5901] ch341 2-1:0.0: ch341-uart converter detected [ 896.685812][T16829] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3144'. [ 896.818801][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3143'. [ 897.017052][T16834] hub 9-0:1.0: USB hub found [ 897.033551][T16834] hub 9-0:1.0: 1 port detected [ 897.063740][T16832] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 897.458191][ T5901] usb 2-1: failed to receive control message: -110 [ 897.466422][ T5901] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 897.563027][ T5919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 897.733037][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 897.765123][ T5919] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 897.823001][ T5919] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 897.832286][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 897.841631][ T5919] usb 1-1: config 1 has no interface number 0 [ 897.848304][ T5919] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 897.860312][ T5919] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 897.917508][ T5919] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 897.993603][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.087726][ T5919] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 898.119915][T16845] hub 9-0:1.0: USB hub found [ 898.133775][T16845] hub 9-0:1.0: 1 port detected [ 898.587452][ T5919] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 898.714590][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 898.724106][T16851] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 898.755642][ T5969] usb 2-1: USB disconnect, device number 90 [ 898.766013][ T5969] ch341 2-1:0.0: device disconnected [ 898.801580][T16853] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 898.894585][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.911601][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.058471][ T5969] usb 1-1: USB disconnect, device number 30 [ 899.088809][ T5969] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 900.403004][T14483] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 900.899539][T15654] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 901.123007][T15654] usb 1-1: Using ep0 maxpacket: 16 [ 901.130712][T14483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.143249][ T797] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 901.163441][T15654] usb 1-1: config 0 has no interfaces? [ 901.172201][T14483] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.185705][T15654] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 901.205352][T14483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.216613][T15654] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 901.254909][T15654] usb 1-1: Manufacturer: syz [ 901.264462][T14483] usb 5-1: config 0 descriptor?? [ 901.285575][T15654] usb 1-1: config 0 descriptor?? [ 901.305375][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 901.329680][ T797] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 901.348217][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.358256][ T797] usb 6-1: Product: syz [ 901.373111][ T797] usb 6-1: Manufacturer: syz [ 901.377774][ T797] usb 6-1: SerialNumber: syz [ 901.409512][ T797] usb 6-1: config 0 descriptor?? [ 901.499049][T14483] usbhid 5-1:0.0: can't add hid device: -71 [ 901.499191][T14483] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 901.514579][T14483] usb 5-1: USB disconnect, device number 80 [ 901.782484][T16879] netlink: 'syz.3.3155': attribute type 4 has an invalid length. [ 902.263154][ T5919] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 902.593348][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.593390][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.593438][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.593463][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.644565][ T5919] usb 5-1: config 0 descriptor?? [ 902.707351][T16882] hub 9-0:1.0: USB hub found [ 902.707646][T16882] hub 9-0:1.0: 1 port detected [ 902.856780][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 903.276214][ T5919] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 903.551079][ T5919] usb 6-1: USB disconnect, device number 92 [ 903.764217][T14483] usb 5-1: USB disconnect, device number 81 [ 904.568039][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 904.629670][T15654] usb 1-1: USB disconnect, device number 31 [ 904.708674][T16899] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 904.854831][T16901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 906.746754][T16926] xt_hashlimit: size too large, truncated to 1048576 [ 907.228050][T16934] hub 9-0:1.0: USB hub found [ 907.254434][T16934] hub 9-0:1.0: 1 port detected [ 907.312197][T16939] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 907.335101][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 907.335119][ T30] audit: type=1326 audit(1769304145.553:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 907.458233][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 907.546873][T16944] netlink: 'syz.5.3173': attribute type 1 has an invalid length. [ 907.610081][ T30] audit: type=1326 audit(1769304145.583:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 907.619420][T16944] bond8: entered promiscuous mode [ 907.643475][ T30] audit: type=1326 audit(1769304145.583:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 907.766806][T16944] 8021q: adding VLAN 0 to HW filter on device bond8 [ 907.914103][ T30] audit: type=1326 audit(1769304145.583:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 907.946269][ T30] audit: type=1326 audit(1769304145.583:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 907.973118][ T30] audit: type=1326 audit(1769304145.583:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 908.093362][ T30] audit: type=1326 audit(1769304145.583:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 908.123079][ T30] audit: type=1326 audit(1769304145.583:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 908.146117][ T30] audit: type=1326 audit(1769304145.593:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.5.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa9c0f9acb9 code=0x7ffc0000 [ 908.256342][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 908.364550][T16952] FAULT_INJECTION: forcing a failure. [ 908.364550][T16952] name failslab, interval 1, probability 0, space 0, times 0 [ 908.413240][T16949] ptrace attach of "./syz-executor exec"[7736] was attempted by "./syz-executor exec"[16949] [ 908.443966][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.3.3174 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.443991][T16952] Tainted: [L]=SOFTLOCKUP [ 908.443997][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 908.444006][T16952] Call Trace: [ 908.444014][T16952] [ 908.444021][T16952] dump_stack_lvl+0xe8/0x150 [ 908.444045][T16952] should_fail_ex+0x412/0x560 [ 908.444071][T16952] should_failslab+0xa8/0x100 [ 908.444092][T16952] __kmalloc_noprof+0xde/0x7e0 [ 908.444106][T16952] ? nla_strdup+0x9d/0x140 [ 908.444120][T16952] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 908.444137][T16952] nla_strdup+0x9d/0x140 [ 908.444153][T16952] nf_tables_newflowtable+0xa1a/0x23c0 [ 908.444181][T16952] ? nft_trans_commit_list_add_tail+0x162/0x520 [ 908.444208][T16952] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 908.444237][T16952] ? nfnl_pernet+0x23/0x240 [ 908.444269][T16952] ? __nla_parse+0x40/0x60 [ 908.444286][T16952] nfnetlink_rcv+0x1240/0x27b0 [ 908.444334][T16952] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 908.444368][T16952] ? ref_tracker_free+0x693/0x840 [ 908.444410][T16952] ? __netlink_deliver_tap+0x807/0x850 [ 908.444427][T16952] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.444455][T16952] netlink_unicast+0x80f/0x9b0 [ 908.444486][T16952] ? __pfx_netlink_unicast+0x10/0x10 [ 908.444511][T16952] ? __alloc_skb+0x193/0x390 [ 908.444533][T16952] ? netlink_sendmsg+0x650/0xb40 [ 908.444547][T16952] ? skb_put+0x11b/0x210 [ 908.444572][T16952] netlink_sendmsg+0x813/0xb40 [ 908.444595][T16952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.444613][T16952] ? aa_file_perm+0x12d/0x1630 [ 908.444634][T16952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 908.444655][T16952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.444669][T16952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.444686][T16952] __sock_sendmsg+0x21c/0x270 [ 908.444707][T16952] ____sys_sendmsg+0x4d7/0x810 [ 908.444721][T16952] ? __might_fault+0xaf/0x130 [ 908.444748][T16952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.444769][T16952] ? import_iovec+0x73/0xa0 [ 908.444788][T16952] ___sys_sendmsg+0x2a5/0x360 [ 908.444801][T16952] ? __lock_acquire+0x6b5/0x2cf0 [ 908.444820][T16952] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.444860][T16952] ? __fget_files+0x2a/0x420 [ 908.444878][T16952] ? __fget_files+0x3a0/0x420 [ 908.444904][T16952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.444921][T16952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.444943][T16952] ? __pfx_ksys_write+0x10/0x10 [ 908.444965][T16952] do_syscall_64+0xe2/0xf80 [ 908.444987][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.445002][T16952] ? clear_bhb_loop+0x60/0xb0 [ 908.445020][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.445034][T16952] RIP: 0033:0x7f0ced99acb9 [ 908.445048][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.445061][T16952] RSP: 002b:00007f0cee8b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.445077][T16952] RAX: ffffffffffffffda RBX: 00007f0cedc16090 RCX: 00007f0ced99acb9 [ 908.445088][T16952] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 908.445097][T16952] RBP: 00007f0cee8b8090 R08: 0000000000000000 R09: 0000000000000000 [ 908.445107][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.445116][T16952] R13: 00007f0cedc16128 R14: 00007f0cedc16090 R15: 00007f0cedd3fa48 [ 908.445139][T16952] [ 909.007074][T16944] bond8: (slave bridge2): making interface the new active one [ 909.014925][T16944] bridge2: entered promiscuous mode [ 909.021819][T16944] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 909.504121][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 909.550262][T16956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3176'. [ 909.656969][T16956] vlan2: entered allmulticast mode [ 910.250459][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3179'. [ 910.378989][T16970] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 910.436699][T16977] netlink: 'syz.1.3180': attribute type 4 has an invalid length. [ 911.034805][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 911.055714][T16982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3182'. [ 911.098915][T16982] vlan3: entered allmulticast mode [ 911.104319][T16982] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 911.303156][ T5919] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 911.463017][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 911.493061][ T5919] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 911.501411][ T5919] usb 1-1: config 0 has no interface number 0 [ 911.553066][ T5919] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 911.648917][ T5919] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 911.713160][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.731795][ T5919] usb 1-1: Product: syz [ 911.757393][ T5919] usb 1-1: Manufacturer: syz [ 911.762065][ T5919] usb 1-1: SerialNumber: syz [ 911.802128][ T5919] usb 1-1: config 0 descriptor?? [ 911.823704][T16984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 912.088002][T16984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 912.403099][T15654] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 912.504183][T17000] hub 9-0:1.0: USB hub found [ 912.513744][T17000] hub 9-0:1.0: 1 port detected [ 912.557446][T16998] syzkaller0: entered promiscuous mode [ 912.563980][T16998] syzkaller0: entered allmulticast mode [ 912.585981][T15654] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 912.598231][T15654] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 912.621034][T15654] usb 5-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 912.644420][T15654] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 912.666424][T15654] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 912.692260][T17007] netlink: 'syz.5.3190': attribute type 16 has an invalid length. [ 912.700540][T17007] netlink: 'syz.5.3190': attribute type 17 has an invalid length. [ 912.700565][T15654] usb 5-1: New USB device found, idVendor=0009, idProduct=3201, bcdDevice= 0.00 [ 912.741976][T15654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.773079][T15654] usb 5-1: config 0 descriptor?? [ 912.785182][T15654] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 912.814335][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 912.994962][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.112406][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.302883][T16984] Non-string source [ 913.312343][ T5919] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 913.323353][ T5919] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 913.336041][ T5919] asix 1-1:0.188: probe with driver asix failed with error -32 [ 914.816294][ T5919] usb 1-1: USB disconnect, device number 32 [ 915.200032][ T5969] usb 5-1: USB disconnect, device number 82 [ 915.300348][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 915.371171][T17022] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 915.776337][T14483] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 915.935235][T17007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.955904][T16110] bond6: (slave ip6gretap2): link status up again after 0 ms [ 915.983100][T14483] usb 1-1: Using ep0 maxpacket: 8 [ 916.003883][T14483] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.015538][T16109] bond6: (slave ip6gretap2): link status up again after 0 ms [ 916.031219][T14483] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 916.040567][T14483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.056597][T16111] bond6: (slave ip6gretap2): link status up again after 0 ms [ 916.075336][T14483] usb 1-1: config 0 descriptor?? [ 916.080651][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 916.234188][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 916.363345][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 916.530502][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 916.561696][T14483] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 916.683094][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 917.064849][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 917.268164][T17048] tipc: Enabling of bearer rejected, failed to enable media [ 917.532370][ T5919] usb 1-1: USB disconnect, device number 33 [ 918.358129][T17045] Non-string source [ 918.885116][ T30] audit: type=1800 audit(1769304157.083:1061): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3197" name="/" dev="fuse" ino=0 res=0 errno=0 [ 919.574131][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3206'. [ 919.625771][T17066] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 919.770382][T17068] hub 9-0:1.0: USB hub found [ 919.793334][T17068] hub 9-0:1.0: 1 port detected [ 919.942718][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 920.020101][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3209'. [ 920.050468][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.066031][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.091288][T17078] netlink: 'syz.1.3208': attribute type 16 has an invalid length. [ 920.236439][T17078] netlink: 'syz.1.3208': attribute type 17 has an invalid length. [ 920.782775][T14483] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 920.959336][T16112] net_ratelimit: 28 callbacks suppressed [ 920.959358][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 921.001252][T14483] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 921.111372][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 921.132288][T14483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.161157][T14483] usb 1-1: config 0 descriptor?? [ 921.203412][ T797] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 921.263060][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 921.371690][T17083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.380818][T17083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.439903][T14483] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 921.444657][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 921.476667][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.525462][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 921.640594][T14483] [drm:udl_init] *ERROR* Selecting channel failed [ 921.681151][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.691545][T14483] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 921.738845][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 921.767565][ T797] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 921.783111][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 921.803268][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.932549][T14483] [drm] Initialized udl on minor 2 [ 921.941357][T14483] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 921.955146][T14483] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 921.962308][ T5969] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 921.989258][ T797] usb 4-1: config 0 descriptor?? [ 921.996960][T14483] usb 1-1: USB disconnect, device number 34 [ 922.006473][ T5969] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 922.111185][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 922.133126][ T5969] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 922.223082][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 922.353141][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 922.465294][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 922.629357][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 922.803534][T17105] use of bytesused == 0 is deprecated and will be removed in the future, [ 922.823135][T17105] use the actual size instead. [ 922.895720][ T797] shield 0003:0955:7214.001C: item fetching failed at offset 4/5 [ 922.920042][ T797] shield 0003:0955:7214.001C: Parse failed [ 922.943299][ T797] shield 0003:0955:7214.001C: probe with driver shield failed with error -22 [ 924.374230][ T797] usb 4-1: USB disconnect, device number 112 [ 925.000028][T14483] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 925.126523][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3223'. [ 925.219156][T14483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.233012][T14483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.246676][T14483] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 925.265361][T14483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.282097][T14483] usb 2-1: config 0 descriptor?? [ 925.303912][T17132] hub 9-0:1.0: USB hub found [ 925.313167][ T5969] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 925.333640][T17132] hub 9-0:1.0: 1 port detected [ 925.462978][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 925.548214][ T5969] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.558627][ T5969] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.581437][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 925.679719][ T5969] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.692382][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.701933][ T5969] usb 1-1: Product: syz [ 925.874010][ T5969] usb 1-1: Manufacturer: syz [ 925.894372][ T5969] usb 1-1: SerialNumber: syz [ 926.052222][T16110] net_ratelimit: 19 callbacks suppressed [ 926.052245][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.138350][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3221'. [ 926.353100][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.365481][T14483] topre 0003:0853:0148.001D: hidraw0: USB HID v0.00 Device [HID 0853:0148] on usb-dummy_hcd.1-1/input0 [ 926.463272][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.568775][T14483] usb 2-1: USB disconnect, device number 91 [ 926.593153][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.713077][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.874554][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 926.932327][T17151] fido_id[17151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 926.996061][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 927.124211][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 927.253281][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 927.375070][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 927.763445][T17161] binder: BINDER_SET_CONTEXT_MGR already set [ 927.770120][T17161] binder: 17160:17161 ioctl 4018620d 2000000002c0 returned -16 [ 927.826299][T17163] loop6: detected capacity change from 0 to 524288000 [ 928.503114][ T5919] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 928.719036][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.780176][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.819834][ T5919] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 928.859876][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 928.944510][ T5919] usb 4-1: SerialNumber: syz [ 929.757913][T17180] binder: 17179:17180 ioctl c0306201 2000000003c0 returned -14 [ 929.784086][T17181] binder: BINDER_SET_CONTEXT_MGR already set [ 929.829297][T17181] binder: 17179:17181 ioctl 4018620d 200000000000 returned -16 [ 930.855085][T17192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.947775][T17190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 931.105580][T16112] net_ratelimit: 27 callbacks suppressed [ 931.105639][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.220043][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.297470][ T5969] usb 1-1: 0:2 : does not exist [ 931.319441][ T5969] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 931.326436][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.434364][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.546680][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.589673][ T5919] usb 4-1: 0:2 : does not exist [ 931.638166][ T5919] usb 4-1: unit 5 not found! [ 931.695208][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.700654][ T5919] usb 4-1: USB disconnect, device number 113 [ 931.847789][T14326] udevd[14326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 931.866755][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.968205][T17200] hub 9-0:1.0: USB hub found [ 931.980559][T17200] hub 9-0:1.0: 1 port detected [ 932.013460][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 932.132144][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 932.151047][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 932.159054][ T797] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 932.203824][ T5919] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 932.347266][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 932.533212][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 932.566822][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.596406][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 932.610208][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 932.621873][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.723632][ T797] usb 2-1: New USB device found, idVendor=6561, idProduct=4d15, bcdDevice= 0.00 [ 932.743044][ T5969] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 932.743059][ T5919] usb 4-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 932.743087][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.819651][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.916163][ T797] usb 2-1: config 0 descriptor?? [ 933.131623][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.153893][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 933.155233][ T797] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 933.333208][ T5919] usb 4-1: config 0 descriptor?? [ 933.337964][ T5969] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 933.348340][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.416227][ T5969] usb 5-1: config 0 descriptor?? [ 933.588522][ T5919] hid (null): unknown global tag 0xe [ 933.601710][ T5919] hid-generic 0003:04F3:0001.001E: unknown main item tag 0x0 [ 933.626499][ T5919] hid-generic 0003:04F3:0001.001E: unknown global tag 0xe [ 933.645387][ T5919] hid-generic 0003:04F3:0001.001E: item 0 0 1 14 parsing failed [ 933.670506][ T5919] hid-generic 0003:04F3:0001.001E: probe with driver hid-generic failed with error -22 [ 933.815923][ T5919] usb 2-1: USB disconnect, device number 92 [ 934.081119][ T5969] kye 0003:0458:5017.001F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 934.116757][ T5969] kye 0003:0458:5017.001F: unknown main item tag 0x0 [ 934.135398][ T5969] kye 0003:0458:5017.001F: unknown main item tag 0x0 [ 934.152974][ T5969] kye 0003:0458:5017.001F: unknown main item tag 0x0 [ 934.170639][ T5969] kye 0003:0458:5017.001F: unknown main item tag 0x0 [ 934.189543][ T5969] kye 0003:0458:5017.001F: unknown main item tag 0x0 [ 934.298522][ T5969] kye 0003:0458:5017.001F: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.4-1/input0 [ 934.323066][ T5969] kye 0003:0458:5017.001F: tablet-enabling feature report not found [ 934.332464][ T5969] kye 0003:0458:5017.001F: tablet enabling failed [ 934.875797][T17235] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3248'. [ 934.899759][ T5969] usb 4-1: USB disconnect, device number 114 [ 935.485411][ T5919] usb 5-1: USB disconnect, device number 83 [ 936.153076][ T1161] net_ratelimit: 29 callbacks suppressed [ 936.153098][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 936.285250][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 936.315719][T17251] tipc: Started in network mode [ 936.367632][T17251] tipc: Node identity 00000000006925000000000000000001, cluster identity 4711 [ 936.468284][T17251] tipc: Enabling of bearer rejected, failed to enable media [ 936.513844][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 936.653425][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 936.783232][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 936.902118][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.909847][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.916607][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 937.033428][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 937.083603][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'. [ 937.125248][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3256'. [ 937.212524][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 937.696773][T17269] hub 9-0:1.0: USB hub found [ 937.708419][T17269] hub 9-0:1.0: 1 port detected [ 937.714263][T16112] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 937.959111][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 938.029326][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 938.290707][ T5969] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x4 [ 938.351065][ T5969] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x2 [ 938.393982][ T5969] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x3 [ 938.553838][T15264] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 938.583890][ T5969] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 938.727735][T15264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.766996][T15264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.800391][T15264] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.821852][T17282] fido_id[17282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 938.936706][T15264] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.969023][T15264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.008685][T15264] usb 6-1: config 0 descriptor?? [ 939.732513][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.762976][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.791450][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 939.873619][ T5969] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 940.116410][ T5969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 940.133026][ T5969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.411359][ T5969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 940.421155][ T5969] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 940.433091][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 27, changing to 8 [ 940.453482][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 50298, setting to 1024 [ 940.486568][ T5969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 940.496790][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 940.512492][ T5969] usb 5-1: Product: syz [ 940.524127][ T5969] usb 5-1: Manufacturer: syz [ 940.674723][T17288] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 940.688018][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 940.716301][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 940.743695][ T5969] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 940.755369][ T5969] cdc_wdm 5-1:1.0: Unknown control protocol [ 940.823945][T17294] tipc: Started in network mode [ 940.837717][T17294] tipc: Node identity 00000000006925000000000000000001, cluster identity 4711 [ 940.863334][T17294] tipc: Enabling of bearer rejected, failed to enable media [ 940.901169][ T5969] usb 5-1: USB disconnect, device number 84 [ 941.243731][ T6522] net_ratelimit: 24 callbacks suppressed [ 941.243769][ T6522] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 941.375528][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 941.610188][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 941.628061][T15264] usbhid 6-1:0.0: can't add hid device: -71 [ 941.646909][T15264] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 941.691596][T15264] usb 6-1: USB disconnect, device number 93 [ 941.791807][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3272'. [ 941.811004][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 941.956107][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 942.039584][ T5969] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 942.128369][T17326] hub 9-0:1.0: USB hub found [ 942.152215][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 942.171930][T17326] hub 9-0:1.0: 1 port detected [ 942.223014][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 942.234501][ T5969] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.263044][ T5969] usb 5-1: config 0 interface 0 has no altsetting 0 [ 942.285982][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 942.374116][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3273'. [ 942.423009][ T5969] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 942.626222][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.645163][ T5969] usb 5-1: config 0 descriptor?? [ 942.667713][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 942.818906][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 943.076517][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 943.123554][ T5969] microsoft 0003:045E:009D.0021: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 943.146189][ T5969] microsoft 0003:045E:009D.0021: no inputs found [ 943.152756][ T5969] microsoft 0003:045E:009D.0021: could not initialize ff, continuing anyway [ 943.270605][ T797] usb 5-1: USB disconnect, device number 85 [ 943.372855][T17335] fido_id[17335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 943.552181][T17337] tipc: Enabling of bearer rejected, failed to enable media [ 944.156292][T17353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3283'. [ 944.199525][ T30] audit: type=1326 audit(1769304182.413:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17342 comm="syz.0.3280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ad59acb9 code=0x0 [ 944.232448][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3284'. [ 944.242261][T17353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.249583][T17353] IPv6: NLM_F_CREATE should be set when creating new route [ 944.262790][T17357] tipc: Enabling of bearer rejected, failed to enable media [ 944.291236][T17357] tipc: Enabling of bearer rejected, failed to enable media [ 944.318981][ T797] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 944.374212][ T30] audit: type=1326 audit(1769304182.443:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc719acb9 code=0x7ffc0000 [ 944.519550][ T30] audit: type=1326 audit(1769304182.443:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc719acb9 code=0x7ffc0000 [ 944.575675][ T797] usb 4-1: device descriptor read/64, error -71 [ 944.587876][ T30] audit: type=1326 audit(1769304182.443:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc719acb9 code=0x7ffc0000 [ 944.616511][ T30] audit: type=1326 audit(1769304182.443:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc719c547 code=0x7ffc0000 [ 944.641027][ T30] audit: type=1326 audit(1769304182.443:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7cc715b58e code=0x7ffc0000 [ 944.669456][ T30] audit: type=1326 audit(1769304182.443:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7cc715b58e code=0x7ffc0000 [ 944.747341][ T30] audit: type=1326 audit(1769304182.443:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7cc715b58e code=0x7ffc0000 [ 945.303109][ T797] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 945.438352][ T30] audit: type=1326 audit(1769304182.443:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cc715b58e code=0x7ffc0000 [ 945.583118][ T797] usb 4-1: device descriptor read/64, error -71 [ 945.596774][ T30] audit: type=1326 audit(1769304182.473:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.4.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc719acb9 code=0x7ffc0000 [ 945.815238][ T797] usb usb4-port1: attempt power cycle [ 946.087431][T17378] tap0: tun_chr_ioctl cmd 1074025677 [ 946.103223][T17378] tap0: linktype set to 0 [ 946.116876][T17378] tap0: tun_chr_ioctl cmd 1074025677 [ 946.122383][T17378] tap0: linktype set to 0 [ 946.215814][ T797] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 946.244283][ T797] usb 4-1: device descriptor read/8, error -71 [ 946.267344][T17382] fuse: Bad value for 'fd' [ 946.313927][T16111] net_ratelimit: 21 callbacks suppressed [ 946.313945][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 946.444519][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 946.483183][ T797] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 946.513748][ T797] usb 4-1: device descriptor read/8, error -71 [ 946.563060][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 946.663363][ T797] usb usb4-port1: unable to enumerate USB device [ 946.674433][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 946.803567][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 946.933092][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 947.053300][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 947.468198][T16111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 947.501863][T17401] hub 9-0:1.0: USB hub found [ 947.508100][T17401] hub 9-0:1.0: 1 port detected [ 947.672192][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 947.696929][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 947.824302][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 948.382438][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.438487][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.755303][T17424] syzkaller0: entered promiscuous mode [ 948.761469][T17424] syzkaller0: entered allmulticast mode [ 950.403171][ T5969] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 950.583197][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 950.596289][ T5969] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 950.814951][ T5969] usb 6-1: config 0 has no interface number 0 [ 950.861611][ T5969] usb 6-1: config 0 interface 23 has no altsetting 0 [ 950.966943][ T5969] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 951.009198][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.043133][ T5969] usb 6-1: Product: syz [ 951.050425][ T5969] usb 6-1: Manufacturer: syz [ 951.063636][ T5969] usb 6-1: SerialNumber: syz [ 951.086253][ T5969] usb 6-1: config 0 descriptor?? [ 951.599236][T16110] net_ratelimit: 24 callbacks suppressed [ 951.599260][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 951.765160][T16110] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 951.873372][ T1335] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 951.924987][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3303'. [ 952.034051][ T50] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 952.072343][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 952.072386][ T30] audit: type=1326 audit(1769304190.283:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.3304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cc719acb9 code=0x0 [ 952.193541][T16353] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 952.491071][T17482] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 952.796195][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 952.963799][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 953.114869][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 953.265723][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 953.352191][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.362422][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.462451][T17495] netlink: 'syz.0.3307': attribute type 16 has an invalid length. [ 953.543238][T17495] netlink: 'syz.0.3307': attribute type 17 has an invalid length. [ 953.887712][ T5969] usb 6-1: USB disconnect, device number 94 [ 953.948481][T17505] netlink: 'syz.3.3309': attribute type 16 has an invalid length. [ 953.995851][T17500] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.038833][T17505] netlink: 'syz.3.3309': attribute type 17 has an invalid length. [ 954.072063][T17500] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.348198][T17507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.474817][T17517] hub 9-0:1.0: USB hub found [ 954.481180][T17517] hub 9-0:1.0: 1 port detected [ 954.792227][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 954.899794][ T30] audit: type=1326 audit(1769304193.113:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17518 comm="syz.0.3315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc5ad594ad7 code=0x0 [ 956.108453][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3323'. [ 956.473449][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 956.485547][T17560] bridge_slave_1: left allmulticast mode [ 956.491331][T17560] bridge_slave_1: left promiscuous mode [ 956.516445][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.622770][T14483] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 956.702801][T17560] bridge_slave_0: left allmulticast mode [ 956.753132][T17560] bridge_slave_0: left promiscuous mode [ 956.797965][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.807430][T14483] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.822289][T14483] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 956.844193][T14483] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.203493][T14483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.227230][T14483] usb 5-1: Product: syz [ 957.231507][T14483] usb 5-1: Manufacturer: syz [ 957.452752][T14483] usb 5-1: SerialNumber: syz [ 957.507048][T14483] cdc_mbim 5-1:1.0: skipping garbage [ 957.728349][T17554] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 957.950371][T17555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 957.958801][T14483] cdc_mbim 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 957.970008][T14483] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 958.159361][T14483] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 958.177924][T14483] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 958.198585][ T50] net_ratelimit: 19 callbacks suppressed [ 958.198605][ T50] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.277575][T14483] wwan wwan0: port wwan0mbim0 attached [ 958.307341][T14483] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, a6:3e:e1:65:cb:54 [ 958.323182][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.444988][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.583086][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.713030][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.823433][ T1161] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 958.921642][ T30] audit: type=1326 audit(1769304197.133:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.3.3331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0ced994ad7 code=0x0 [ 958.945076][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.074002][T17474] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.205233][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.324093][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.333561][T14483] usb 5-1: USB disconnect, device number 86 [ 959.340765][T14483] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 959.487158][T14483] wwan wwan0: port wwan0mbim0 disconnected [ 959.954338][T14483] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 960.024352][T17610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.081812][T17610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.136068][T17612] tipc: Enabling of bearer rejected, failed to enable media [ 960.155051][T14483] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.193054][T14483] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 960.244704][T14483] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 960.286052][T14483] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 960.319475][ T30] audit: type=1326 audit(1769304198.523:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 960.353043][T14483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.511062][ T30] audit: type=1326 audit(1769304198.523:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 960.612174][T14483] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.613692][ T30] audit: type=1326 audit(1769304198.523:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 960.644350][ T30] audit: type=1326 audit(1769304198.523:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ced95b58e code=0x7ffc0000 [ 960.690045][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.702120][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.716933][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.726556][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.880494][ T30] audit: type=1326 audit(1769304198.523:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 960.958633][T17627] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 961.060173][ T30] audit: type=1326 audit(1769304198.523:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 961.290306][ T30] audit: type=1326 audit(1769304198.523:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 961.355110][T17627] bond1: entered promiscuous mode [ 961.363848][T17627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.419015][T17631] bond1: (slave bridge0): making interface the new active one [ 961.429670][T17631] bridge0: entered promiscuous mode [ 961.460433][T14483] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 961.470678][T17631] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 961.518171][ T30] audit: type=1326 audit(1769304198.523:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 961.552221][T14483] usb 5-1: USB disconnect, device number 87 [ 961.617440][ T30] audit: type=1326 audit(1769304198.523:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ced99acb9 code=0x7ffc0000 [ 961.927842][T17627] ptrace attach of "./syz-executor exec"[16087] was attempted by "./syz-executor exec"[17627] [ 963.243467][ T7111] net_ratelimit: 26 callbacks suppressed [ 963.243487][ T7111] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 963.493227][T17486] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 963.683057][T17471] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 963.805975][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 963.966247][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.143117][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.283119][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.552088][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.744615][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.865398][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 966.027823][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 966.027845][ T30] audit: type=1326 audit(1769304204.243:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.5.3347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fa9c0f94ad7 code=0x0 [ 967.083489][ T5969] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 967.121776][T17724] hub 9-0:1.0: USB hub found [ 967.134039][T17724] hub 9-0:1.0: 1 port detected [ 967.173261][T17730] hub 9-0:1.0: USB hub found [ 967.179822][T17730] hub 9-0:1.0: 1 port detected [ 967.223786][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 967.276467][ T5969] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 967.285521][ T5969] usb 4-1: config 0 has no interface number 0 [ 967.291917][ T5969] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 967.323724][ T5969] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 967.341474][ T5969] usb 4-1: config 0 interface 255 has no altsetting 0 [ 967.350001][ T5969] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 967.362068][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.377914][ T5969] usb 4-1: config 0 descriptor?? [ 967.403545][ T5901] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 967.651892][ T5969] usb 4-1: string descriptor 0 read error: -71 [ 967.669778][ T5969] usblcd 4-1:0.255: USBLCD model not supported. [ 967.713797][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 967.727979][ T5901] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 967.754448][ T5901] usb 6-1: config 0 has no interface number 0 [ 967.771803][ T5969] usb 4-1: USB disconnect, device number 119 [ 967.796835][ T5901] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 967.822183][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.846132][ T5901] usb 6-1: Product: syz [ 967.856114][ T5901] usb 6-1: Manufacturer: syz [ 967.866271][ T5901] usb 6-1: SerialNumber: syz [ 967.883749][ T5901] usb 6-1: config 0 descriptor?? [ 967.903809][ T5901] smsc95xx v2.0.0 [ 968.324365][ T5901] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 968.346002][T16109] net_ratelimit: 26 callbacks suppressed [ 968.346022][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 968.416795][ T5901] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 968.462106][ T5901] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 968.518905][ T5901] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 968.533138][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 968.587499][ T5901] usb 6-1: USB disconnect, device number 95 [ 968.654000][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 968.793073][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 968.933176][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.166569][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.293290][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.433103][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.553192][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.687209][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 969.707181][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 970.902183][ T5901] IPVS: starting estimator thread 0... [ 971.003097][T17783] IPVS: using max 26 ests per chain, 62400 per kthread [ 971.486149][T17791] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 972.864325][T17795] kAFS: unable to lookup cell 'Þ({^ú@' [ 973.434975][T17464] net_ratelimit: 28 callbacks suppressed [ 973.434997][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 973.583111][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 973.934483][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 973.958014][T17806] hub 9-0:1.0: USB hub found [ 974.042212][T17806] hub 9-0:1.0: 1 port detected [ 974.143319][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 974.390056][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 974.534824][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 974.660152][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 974.805315][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 974.934923][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 975.095889][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 975.523004][ T5969] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 975.769011][ T5969] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 975.809411][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.854957][ T5969] usb 5-1: config 0 descriptor?? [ 976.610010][ T5901] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 976.715650][ T5901] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 977.463215][ T5894] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 977.645391][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 977.693633][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 977.712640][ T5969] pegasus 5-1:0.0: can't reset MAC [ 977.719311][ T5969] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 977.752973][ T5894] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 977.789135][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.833578][ T5894] usb 6-1: config 0 descriptor?? [ 977.845463][T17830] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 978.068155][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.077608][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.087639][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 978.100316][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 978.140443][ T5894] usb 6-1: USB disconnect, device number 96 [ 978.443458][T17469] net_ratelimit: 22 callbacks suppressed [ 978.443480][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 978.517594][T17847] netlink: 'syz.1.3382': attribute type 4 has an invalid length. [ 978.705109][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 978.743144][ T5894] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 978.833241][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 978.872979][ T5894] usb 6-1: device descriptor read/64, error -71 [ 978.963348][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 978.973450][ T5901] usb 5-1: USB disconnect, device number 88 [ 979.083348][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 979.113192][ T5894] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 979.273076][ T5894] usb 6-1: device descriptor read/64, error -71 [ 979.331619][T17855] kAFS: unable to lookup cell 'Þ({^ú@' [ 979.427889][ T5894] usb usb6-port1: attempt power cycle [ 979.483557][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 979.633166][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 979.748901][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 979.864692][ T5894] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 979.905014][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 979.920251][ T5894] usb 6-1: device descriptor read/8, error -71 [ 980.053142][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 980.082451][T17867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.104893][T17867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.488744][T17871] hub 9-0:1.0: USB hub found [ 980.523027][ T5919] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 980.544024][T17871] hub 9-0:1.0: 1 port detected [ 980.653243][ T5919] usb 4-1: device descriptor read/64, error -71 [ 980.826899][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'. [ 980.903527][ T5919] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 981.095617][ T5919] usb 4-1: device descriptor read/64, error -71 [ 981.223509][ T5919] usb usb4-port1: attempt power cycle [ 981.593053][ T5919] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 981.633924][ T5919] usb 4-1: device descriptor read/8, error -71 [ 981.651301][ T5969] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 981.690299][ T5969] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 981.888429][ T5919] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 981.924094][ T5919] usb 4-1: device descriptor read/8, error -71 [ 982.053283][ T5919] usb usb4-port1: unable to enumerate USB device [ 982.076473][T17888] netlink: 'syz.4.3395': attribute type 6 has an invalid length. [ 982.106206][T17888] netlink: 'syz.4.3395': attribute type 7 has an invalid length. [ 982.133236][T17888] netlink: 'syz.4.3395': attribute type 8 has an invalid length. [ 982.570722][T17894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3397'. [ 983.318435][T17907] netlink: 'syz.0.3400': attribute type 16 has an invalid length. [ 983.536357][T17907] netlink: 'syz.0.3400': attribute type 17 has an invalid length. [ 983.643311][T17466] net_ratelimit: 23 callbacks suppressed [ 983.643331][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 983.730047][T17916] netlink: 'syz.3.3401': attribute type 4 has an invalid length. [ 983.764742][T17917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3402'. [ 983.775721][T17907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 983.846702][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 983.963270][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 984.167703][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 984.360044][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 984.478449][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 984.887829][T17927] veth1_to_bond: entered allmulticast mode [ 986.043175][ T5969] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 986.277645][ T5969] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 986.320040][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.418879][ T5969] usb 6-1: Product: syz [ 986.441895][ T5969] usb 6-1: Manufacturer: syz [ 986.449356][ T5969] usb 6-1: SerialNumber: syz [ 986.500860][ T5969] usb 6-1: config 0 descriptor?? [ 986.527775][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 986.546505][ T5969] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 986.555789][ T5969] usb 6-1: setting power ON [ 986.563497][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 986.582210][ T5969] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 986.599306][ T5969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 986.616449][ T5969] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 986.644498][ T1152] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 986.751411][ T5969] usb 6-1: USB disconnect, device number 101 [ 986.819451][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 986.928408][T17956] binder: 17955:17956 ioctl c0306201 200000000dc0 returned -14 [ 987.003122][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 987.323244][ T5969] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 987.630017][ T5969] usb 5-1: Using ep0 maxpacket: 32 [ 987.649174][T17922] veth1_to_bond: left allmulticast mode [ 987.685115][ T5969] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 987.693779][ T5969] usb 5-1: config 0 has no interface number 0 [ 987.703987][ T5969] usb 5-1: config 0 interface 12 has no altsetting 0 [ 987.720461][ T5969] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 987.733083][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.744053][ T5969] usb 5-1: Product: syz [ 987.753309][ T5969] usb 5-1: Manufacturer: syz [ 987.772646][ T5969] usb 5-1: SerialNumber: syz [ 987.788059][ T5969] usb 5-1: config 0 descriptor?? [ 988.549002][ T5969] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 988.617111][ T5969] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 988.686024][ T5969] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 988.715051][ T5969] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 988.766431][ T5969] usb 5-1: USB disconnect, device number 89 [ 988.786416][T17466] net_ratelimit: 11 callbacks suppressed [ 988.786436][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 989.056987][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 989.614330][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 990.788293][T18004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3427'. [ 990.913160][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 991.133479][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 991.413019][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 991.730773][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 991.894951][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3425'. [ 991.916089][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3428'. [ 992.055232][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 992.313023][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 992.445620][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 993.819015][T17469] net_ratelimit: 11 callbacks suppressed [ 993.819037][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 993.863039][ T5919] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 993.934095][ T797] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 993.963062][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.066773][ T5919] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 994.075354][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.086127][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 994.098586][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12390, setting to 1024 [ 994.111572][ T797] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 994.123534][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.134416][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 994.164214][ T797] usb 5-1: config 0 descriptor?? [ 994.186552][ T5919] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 994.200732][ T5919] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 994.211457][ T5919] usb 4-1: Manufacturer: syz [ 994.234260][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.297870][ T5919] usb 4-1: config 0 descriptor?? [ 994.333682][T18034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 994.357802][ T5919] igorplugusb 4-1:0.0: endpoint incorrect [ 994.366504][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.462988][T15654] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 994.494079][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.673941][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.723081][T15654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.740912][T14483] usb 4-1: USB disconnect, device number 124 [ 994.752987][T15654] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.806447][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.935843][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 994.963291][T15654] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 994.983297][T15654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.004651][T15654] usb 2-1: config 0 descriptor?? [ 995.079435][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 995.414459][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 996.018070][ T797] pegasus 5-1:0.0: probe with driver pegasus failed with error -110 [ 996.039441][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 996.077131][T15654] kye 0003:0458:5017.0024: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 996.088355][T15654] kye 0003:0458:5017.0024: unknown main item tag 0x0 [ 996.437987][T15654] kye 0003:0458:5017.0024: unknown main item tag 0x0 [ 996.450879][T15654] kye 0003:0458:5017.0024: unknown main item tag 0x0 [ 996.462318][T15654] kye 0003:0458:5017.0024: unknown main item tag 0x0 [ 996.472981][T15654] kye 0003:0458:5017.0024: unknown main item tag 0x0 [ 996.513233][T15654] kye 0003:0458:5017.0024: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 996.547897][T15654] kye 0003:0458:5017.0024: tablet-enabling feature report not found [ 996.573151][T15654] kye 0003:0458:5017.0024: tablet enabling failed [ 997.085169][ T797] usb 5-1: USB disconnect, device number 90 [ 997.130489][T18073] Cannot find map_set index 135 as target [ 997.151677][ T5901] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 997.184938][ T5901] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.677956][T18086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.687173][T18086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.982252][T15654] usb 2-1: USB disconnect, device number 93 [ 997.998402][T18075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.369434][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.383084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.732792][ T30] audit: type=1326 audit(1769304236.943:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.3.3455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ced99acb9 code=0x0 [ 998.763433][ T5901] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 998.784533][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'. [ 998.957166][T17469] net_ratelimit: 30 callbacks suppressed [ 998.957188][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 998.990518][T18110] netlink: 'syz.0.3456': attribute type 1 has an invalid length. [ 999.034662][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 999.041652][ T5901] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 999.052564][ T5901] usb 5-1: config 0 has no interface number 0 [ 999.082347][ T5901] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 999.093036][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.111252][ T5901] usb 5-1: Product: syz [ 999.123050][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.130581][ T5901] usb 5-1: Manufacturer: syz [ 999.148026][ T5901] usb 5-1: SerialNumber: syz [ 999.161115][ T5901] usb 5-1: config 0 descriptor?? [ 999.185942][ T5901] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 999.253242][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.377635][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.416969][ T5901] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 999.477753][ T5901] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 999.503415][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.653625][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.793038][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.801478][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 999.810556][T15654] usb 5-1: USB disconnect, device number 91 [ 999.840489][T15654] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 999.887489][T15654] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 999.901181][T15654] quatech2 5-1:0.51: device disconnected [ 999.969363][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 999.992331][T18127] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 1000.143243][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1000.253671][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1000.423277][T15654] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1000.583212][T15654] usb 2-1: Using ep0 maxpacket: 32 [ 1000.592598][T15654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.605668][T15654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.644684][T15654] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1000.665891][T15654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.742461][T18139] netlink: 'syz.0.3466': attribute type 4 has an invalid length. [ 1000.771520][T15654] usb 2-1: config 0 descriptor?? [ 1001.178961][T18147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1001.220303][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1001.272939][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1001.330008][T18147] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1001.373494][T15654] redragon 0003:0C45:760B.0026: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 1001.414338][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1002.466290][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1002.768958][T14483] usb 2-1: USB disconnect, device number 94 [ 1003.228592][T18172] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3473'. [ 1003.366332][ T30] audit: type=1326 audit(1769304241.583:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18169 comm="syz.1.3472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56d5f9acb9 code=0x0 [ 1003.645230][T18184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3477'. [ 1003.728147][T18187] loop6: detected capacity change from 0 to 7 [ 1003.738356][T18187] loop6: [ 1003.741492][T18187] loop6: partition table partially beyond EOD, truncated [ 1004.003955][T17469] net_ratelimit: 18 callbacks suppressed [ 1004.003978][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.163026][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.313300][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.467667][T15654] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1004.640117][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.773060][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.792982][T15654] usb 6-1: Using ep0 maxpacket: 8 [ 1004.808856][T15654] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1004.820040][T15654] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1004.822024][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1004.841509][T15654] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1004.851909][T15654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1004.917920][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1004.925965][T15654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1004.939450][T15654] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1004.967431][T15654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.976574][T15654] usb 6-1: Product: syz [ 1004.981879][T15654] usb 6-1: Manufacturer: syz [ 1004.987318][T15654] usb 6-1: SerialNumber: syz [ 1005.013436][T15654] usb 6-1: config 0 descriptor?? [ 1005.025870][T15654] hub 6-1:0.0: bad descriptor, ignoring hub [ 1005.033607][T15654] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1005.046029][T15654] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 1005.057297][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1005.183036][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1005.237292][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.268998][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.303051][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1005.322304][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.352570][T18217] netlink: 'syz.3.3488': attribute type 4 has an invalid length. [ 1005.363927][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.373686][ C1] sd 0:0:1:0: [sda] tag#7326 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1005.384176][ C1] sd 0:0:1:0: [sda] tag#7326 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 1005.403678][ T797] usb 6-1: USB disconnect, device number 102 [ 1005.419242][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1005.470428][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1006.014249][ T5919] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1006.122942][ T30] audit: type=1326 audit(1769304244.333:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.4.3494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cc719acb9 code=0x0 [ 1006.192991][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 1006.209014][ T5919] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1006.230668][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.255417][ T5919] usb 4-1: Product: syz [ 1006.259753][ T5919] usb 4-1: Manufacturer: syz [ 1006.273103][ T5919] usb 4-1: SerialNumber: syz [ 1006.294442][ T5919] usb 4-1: config 0 descriptor?? [ 1006.354401][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1006.588872][T18248] syzkaller0: entered promiscuous mode [ 1006.596155][T18248] syzkaller0: entered allmulticast mode [ 1006.718617][T18248] tipc: Enabled bearer , priority 0 [ 1006.747127][T18248] netlink: 'syz.0.3498': attribute type 29 has an invalid length. [ 1006.756100][T18248] __nla_validate_parse: 1 callbacks suppressed [ 1006.756119][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1006.776857][T18247] tipc: Resetting bearer [ 1006.820319][T18247] tipc: Disabling bearer [ 1007.152191][T18252] netlink: 'syz.0.3500': attribute type 4 has an invalid length. [ 1008.510366][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1008.731180][T18273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.743386][T18273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.942545][ T5919] gspca_sonixj: reg_w1 err -71 [ 1008.983107][ T5919] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1009.002816][ T30] audit: type=1400 audit(1769304247.213:1182): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=18278 comm="syz.4.3508" [ 1009.050388][T17469] net_ratelimit: 27 callbacks suppressed [ 1009.050404][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1009.089785][ T5919] usb 4-1: USB disconnect, device number 125 [ 1009.317616][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1009.562709][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1009.847753][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1009.983061][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1010.093084][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1010.165459][ T30] audit: type=1326 audit(1769304248.373:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.0.3509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ad59acb9 code=0x0 [ 1010.263133][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1010.393081][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1010.468873][T18292] netlink: 'syz.3.3510': attribute type 4 has an invalid length. [ 1010.563154][T18293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1010.572391][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1010.581602][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1010.590951][T18293] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1010.600206][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1010.685446][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1010.835628][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1011.483168][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1011.963076][T18306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3514'. [ 1012.494234][T18312] netlink: 'syz.3.3517': attribute type 5 has an invalid length. [ 1012.751768][T18318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1013.216795][ T30] audit: type=1326 audit(1769304251.423:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.4.3522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cc719acb9 code=0x0 [ 1013.453602][T18327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.484389][T18327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.094378][T12829] net_ratelimit: 27 callbacks suppressed [ 1014.094401][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.213175][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.323171][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.433100][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.544089][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.653747][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.764230][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.874260][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1014.984561][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1015.095017][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.143271][T17466] net_ratelimit: 35 callbacks suppressed [ 1019.143297][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.263214][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.374390][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.483300][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.593082][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.713443][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.823290][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1019.933267][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1020.043246][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1020.153253][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.183696][T17466] net_ratelimit: 35 callbacks suppressed [ 1024.183713][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.303290][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.413221][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.523173][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.633154][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.743497][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.863277][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1024.974713][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1025.093104][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1025.203097][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.263972][T12829] net_ratelimit: 35 callbacks suppressed [ 1029.263990][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.393163][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.513167][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.633086][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.743101][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.863064][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1029.983057][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1030.103137][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1030.213125][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1030.323190][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.373231][T17479] net_ratelimit: 35 callbacks suppressed [ 1034.373256][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.493127][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.614570][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.724183][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.843199][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1034.954200][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1035.063150][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1035.174086][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1035.283215][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1035.403130][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1039.423214][T17479] net_ratelimit: 35 callbacks suppressed [ 1039.423241][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1039.543095][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1039.653336][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1039.763615][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1039.883196][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1040.003242][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1040.123411][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1040.234183][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1040.343160][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1040.454185][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1044.463206][T16109] net_ratelimit: 35 callbacks suppressed [ 1044.463230][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1044.583162][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1044.693183][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1044.803095][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1044.913385][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1045.023303][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1045.133359][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1045.243091][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1045.363074][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1045.473120][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1049.483109][T17479] net_ratelimit: 35 callbacks suppressed [ 1049.483132][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1049.603040][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1049.713120][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1049.823097][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1049.934278][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1050.043109][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1050.153084][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1050.263113][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1050.383107][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1050.503186][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1054.553262][T16109] net_ratelimit: 35 callbacks suppressed [ 1054.553286][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1054.683397][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1054.793108][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1054.903055][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.013132][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.123080][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.233100][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.343116][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.453243][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1055.573053][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1059.613390][T17466] net_ratelimit: 35 callbacks suppressed [ 1059.613413][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1059.733049][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1059.787904][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.795384][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.843090][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1059.953055][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.073272][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.183543][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.293055][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.413616][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.533200][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1060.643119][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1064.703088][T17464] net_ratelimit: 35 callbacks suppressed [ 1064.703112][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1064.823107][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1064.943304][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.053855][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.163743][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.273830][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.383112][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.493102][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.603123][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1065.723108][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1069.793041][T17464] net_ratelimit: 35 callbacks suppressed [ 1069.793067][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1069.923261][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.053140][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.162998][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.273071][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.393110][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.513140][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.623095][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.743067][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1070.853959][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1074.883177][T17479] net_ratelimit: 35 callbacks suppressed [ 1074.883201][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.013521][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.134886][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.243245][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.353033][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.473225][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.583162][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.695097][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.803503][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1075.913068][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1079.923052][T12829] net_ratelimit: 34 callbacks suppressed [ 1079.923076][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.053112][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.174669][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.293029][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.413238][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.523108][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.643147][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.753059][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.863037][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1080.973059][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.033133][T17479] net_ratelimit: 35 callbacks suppressed [ 1085.033155][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.153093][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.263152][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.374136][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.493396][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.603127][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.723261][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.833139][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1085.943212][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1086.053052][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.053162][T17466] net_ratelimit: 35 callbacks suppressed [ 1090.053186][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.183350][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.294007][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.404083][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.513079][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.623087][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.733160][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.843043][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1090.953167][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1091.063101][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.123053][T12829] net_ratelimit: 35 callbacks suppressed [ 1095.123078][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.243052][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.353039][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.463095][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.573186][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.693024][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.813035][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1095.923076][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1096.043145][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1096.153062][T17466] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.173134][T12829] net_ratelimit: 35 callbacks suppressed [ 1100.173158][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.303228][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.423328][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.533065][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.653149][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.763209][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.883069][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.993041][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1101.103090][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1101.213143][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.273181][T12829] net_ratelimit: 35 callbacks suppressed [ 1105.273202][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.403009][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.523098][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.633777][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.743137][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.853421][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.963072][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1106.073122][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1106.183169][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1106.293156][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.343153][T16109] net_ratelimit: 35 callbacks suppressed [ 1110.343174][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.463143][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.583436][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.703063][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.823258][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.933067][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1111.053238][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1111.173053][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1111.283053][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1111.393128][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.393435][T17469] net_ratelimit: 34 callbacks suppressed [ 1115.393470][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.513093][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.623395][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.744408][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.853216][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.963273][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.073638][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.183138][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.294176][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.404601][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.463141][T16109] net_ratelimit: 35 callbacks suppressed [ 1120.463165][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.583098][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.703208][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.813097][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.933067][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1121.053681][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1121.163090][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1121.226719][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.233575][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.283121][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1121.393034][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1121.503044][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1125.573043][T12829] net_ratelimit: 35 callbacks suppressed [ 1125.573065][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1125.693800][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1125.813000][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1125.933113][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.043110][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.163029][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.283050][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.404022][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.513052][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1126.623684][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1130.674522][T17479] net_ratelimit: 35 callbacks suppressed [ 1130.674545][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1130.803081][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1130.913063][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.023079][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.133019][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.243028][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.353034][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.473956][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.584055][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1131.693180][T17469] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1135.713113][T17479] net_ratelimit: 35 callbacks suppressed [ 1135.713135][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1135.843080][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1135.963046][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.073054][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.184085][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.293092][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.413720][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.533044][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.653083][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1136.763062][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1140.813387][T12829] net_ratelimit: 35 callbacks suppressed [ 1140.813409][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1140.943051][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.053583][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.173076][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.293057][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.413064][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.533178][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.653313][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.773358][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1141.883057][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1145.894174][T17464] net_ratelimit: 35 callbacks suppressed [ 1145.894198][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.013202][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.123162][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.243131][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.363859][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.473398][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.593126][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.703039][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.824438][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1146.943120][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1150.953164][T17464] net_ratelimit: 34 callbacks suppressed [ 1150.953187][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.073662][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.193050][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.304717][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.423050][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.543094][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.653062][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.763016][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.873041][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1151.983875][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.043041][T16109] net_ratelimit: 35 callbacks suppressed [ 1156.043064][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.174391][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.283176][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.393258][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.503542][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.613090][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.723018][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.833003][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.943118][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1157.055531][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.143034][T17464] net_ratelimit: 35 callbacks suppressed [ 1161.143057][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.274197][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.393091][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.503996][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.623206][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.734322][T12829] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.853183][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1161.973069][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1162.093099][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1162.203166][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.182991][T17479] net_ratelimit: 34 callbacks suppressed [ 1166.183020][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.313038][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.423069][T17479] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.533012][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.653669][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.772992][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.883032][T16109] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1166.993072][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1167.103041][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1167.213584][T17464] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1168.573163][ T31] INFO: task kworker/0:3:5823 blocked for more than 143 seconds. [ 1168.581098][ T31] Tainted: G L syzkaller #0 [ 1168.589005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.597924][ T31] task:kworker/0:3 state:D stack:21696 pid:5823 tgid:5823 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1168.610211][ T31] Workqueue: usb_hub_wq hub_event [ 1168.615715][ T31] Call Trace: [ 1168.619184][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1168.622173][ T31] __schedule+0x14ef/0x4fb0 [ 1168.628107][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.642877][ T31] ? schedule+0x90/0x360 [ 1168.647241][ T31] schedule+0x164/0x360 [ 1168.651448][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1168.703032][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1168.708214][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1168.772917][ T31] usb_start_wait_urb+0x1a3/0x510 [ 1168.814622][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1168.820362][ T31] usb_control_msg+0x232/0x3e0 [ 1168.853508][ T31] hub_port_init+0x1257/0x28d0 [ 1168.858530][ T31] hub_event+0x2593/0x4f30 [ 1168.874354][ T31] ? __perf_event_task_sched_in+0xf2/0x1800 [ 1168.880447][ T31] ? __pfx_hub_event+0x10/0x10 [ 1168.892843][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1168.898708][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1168.922898][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1168.928863][ T31] process_scheduled_works+0xaec/0x17a0 [ 1168.942875][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.949012][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1168.982848][ T31] ? assign_work+0x3d3/0x440 [ 1168.987591][ T31] worker_thread+0x89f/0xd90 [ 1168.992571][ T31] ? __kthread_parkme+0x7a/0x1f0 [ 1169.021298][ T31] kthread+0x726/0x8b0 [ 1169.032846][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1169.038075][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.042715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.071055][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.076102][ T31] ret_from_fork+0x51b/0xa40 [ 1169.080814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.102858][ T31] ? __switch_to+0xc82/0x1410 [ 1169.107687][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.112393][ T31] ret_from_fork_asm+0x1a/0x30 [ 1169.138065][ T31] [ 1169.141383][ T31] [ 1169.141383][ T31] Showing all locks held in the system: [ 1169.163840][T11325] vhci_hcd: connection reset by peer [ 1169.172892][ T31] 1 lock held by khungtaskd/31: [ 1169.177838][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1169.203519][ T31] 2 locks held by getty/5583: [ 1169.208316][ T31] #0: ffff88814cf190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1169.225864][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1169.237067][T16109] vhci_hcd vhci_hcd.5: stop threads [ 1169.252928][ T31] 5 locks held by kworker/0:3/5823: [ 1169.272931][T16109] vhci_hcd vhci_hcd.5: release socket [ 1169.281264][ T5823] usb 44-1: device descriptor read/8, error -110 [ 1169.289500][T16109] vhci_hcd vhci_hcd.5: disconnect device [ 1169.320380][ T31] #0: ffff88801f6fb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1169.362937][ T31] #1: ffffc900040ffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1169.428023][ T31] #2: ffff88802a471198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1169.491787][ T31] #3: ffff88802a474518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1169.532903][ T31] #4: ffff88802a0d7868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1169.563800][ T31] 2 locks held by kworker/0:8/5969: [ 1169.569116][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1169.590535][ T31] #1: ffffc90004f5fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1169.601451][ T31] 1 lock held by syz.5.742/8468: [ 1169.606824][ T31] #0: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 1169.616312][ T31] 1 lock held by syz.4.1926/12472: [ 1169.621566][ T31] 1 lock held by syz.5.2092/13003: [ 1169.627080][ T31] #0: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1169.645890][ T31] 1 lock held by syz.4.2842/15502: [ 1169.651087][ T31] 5 locks held by syz-executor/16420: [ 1169.672964][ T31] #0: ffff88802eb28ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1169.692981][ T31] #1: ffff88802eb280c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1169.704393][ T5823] usb usb44-port1: attempt power cycle [ 1169.723603][ T31] #2: ffffffff8f934bc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1169.742842][ T31] #3: ffff888032530338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 1169.752367][ T31] #4: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1169.773350][ T31] 1 lock held by syz-executor/16443: [ 1169.792974][ T31] #0: ffffffff8f7a8808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1169.802146][ T31] 2 locks held by kworker/u8:13/17464: [ 1169.825979][ T31] #0: ffff88801c7c7948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1169.842968][ T31] #1: ffffc90004f4fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1169.892995][ T31] 2 locks held by kworker/u8:19/17479: [ 1169.898534][ T31] #0: ffff88801c7c7948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1169.942897][ T31] #1: ffffc90004e0fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1169.963103][ T31] [ 1169.980200][ T31] ============================================= [ 1169.980200][ T31] [ 1169.990518][ T31] NMI backtrace for cpu 0 [ 1169.990540][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.990567][ T31] Tainted: [L]=SOFTLOCKUP [ 1169.990574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1169.990587][ T31] Call Trace: [ 1169.990596][ T31] [ 1169.990604][ T31] dump_stack_lvl+0xe8/0x150 [ 1169.990635][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1169.990659][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1169.990683][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1169.990710][ T31] sys_info+0x135/0x170 [ 1169.990733][ T31] watchdog+0xf90/0xfe0 [ 1169.990765][ T31] ? watchdog+0x209/0xfe0 [ 1169.990799][ T31] kthread+0x726/0x8b0 [ 1169.990829][ T31] ? __pfx_watchdog+0x10/0x10 [ 1169.990862][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.990891][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.990916][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.990943][ T31] ret_from_fork+0x51b/0xa40 [ 1169.990966][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.990986][ T31] ? __switch_to+0xc82/0x1410 [ 1169.991018][ T31] ? __pfx_kthread+0x10/0x10 [ 1169.991044][ T31] ret_from_fork_asm+0x1a/0x30 [ 1169.991087][ T31] [ 1169.991114][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1170.118682][ C1] NMI backtrace for cpu 1 [ 1170.118704][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.118727][ C1] Tainted: [L]=SOFTLOCKUP [ 1170.118734][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1170.118747][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1170.118781][ C1] Code: 28 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1170.118798][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1170.118815][ C1] RAX: 0000000000ffb049 RBX: ffffffff8198427d RCX: 0000000080000001 [ 1170.118828][ C1] RDX: 0000000000000001 RSI: ffffffff8dacfb53 RDI: ffffffff8be73880 [ 1170.118841][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1170.118855][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fced970 [ 1170.118868][ C1] R13: 1ffff11003a57b70 R14: 0000000000000001 R15: 0000000000000001 [ 1170.118880][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 1170.118894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1170.118907][ C1] CR2: 0000558c4eb1ef40 CR3: 000000007f482000 CR4: 00000000003526f0 [ 1170.118923][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1170.118934][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1170.118946][ C1] Call Trace: [ 1170.118954][ C1] [ 1170.118961][ C1] default_idle+0x9/0x20 [ 1170.118978][ C1] default_idle_call+0x72/0xb0 [ 1170.119006][ C1] do_idle+0x1bd/0x500 [ 1170.119026][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.119052][ C1] ? __pfx_do_idle+0x10/0x10 [ 1170.119083][ C1] cpu_startup_entry+0x43/0x60 [ 1170.119104][ C1] start_secondary+0x101/0x110 [ 1170.119121][ C1] common_startup_64+0x13e/0x147 [ 1170.119154][ C1] [ 1170.326726][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1170.333776][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.344514][ T31] Tainted: [L]=SOFTLOCKUP [ 1170.348880][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1170.358977][ T31] Call Trace: [ 1170.362294][ T31] [ 1170.365266][ T31] vpanic+0x1e0/0x670 [ 1170.369654][ T31] panic+0xc5/0xd0 [ 1170.373535][ T31] ? __pfx_panic+0x10/0x10 [ 1170.377994][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1170.383857][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1170.390060][ T31] watchdog+0xfda/0xfe0 [ 1170.394284][ T31] ? watchdog+0x209/0xfe0 [ 1170.398638][ T31] kthread+0x726/0x8b0 [ 1170.402745][ T31] ? __pfx_watchdog+0x10/0x10 [ 1170.407492][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.412100][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1170.417320][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.421958][ T31] ret_from_fork+0x51b/0xa40 [ 1170.426599][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1170.431726][ T31] ? __switch_to+0xc82/0x1410 [ 1170.436451][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.441063][ T31] ret_from_fork_asm+0x1a/0x30 [ 1170.445853][ T31] [ 1170.449488][ T31] Kernel Offset: disabled [ 1170.453844][ T31] Rebooting in 86400 seconds..