last executing test programs: 15.514269005s ago: executing program 3 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000580)='-\xb0\xf2S\xa4\xaa\x7fi}\x9dP}\x85\xb4A>|\xc2\x86\x80\x9b\xab\xd9\xb9\xdcH\xd9\xde\xbb\xa5&e\xdfa\x83KX\xd0X\x84\x1d\x8d\xb4\xb8\xbb\x81\x1aBH\xd3v\x11\xa9\xc3@\x86Za[\x1d\xce\xbaNCI\xdd\xd9\xa4\xd1\xf5\xa4ZJ\xe5\xd9\x9b\xa4u\xe6g\xa0kwJ\x06\xcc\x0f7\x10&f\xd6Jf\x8f3f\xf9\xbe7\x04\xa8\xd7\xed]7n\xc2fg\xf6\x8d\xc9n\xe6\xd3\'0\xea)\xfa\xc3\xc0>\xd7V\x13ZQ\xbb\xee\x1b]\x96l\xcd)\xf2\xc5\xfe3; \x9f~\xbf\x92\xc3_=\x14\xce\xc9\xc4\x0e\xc9\x00\x00\x00\x00\xde~P\x0e\x89\xf3\x14\xdc\"\xae\xf9I\x191\x9eU\xdb\xcd\x8c\x91\'-m\x99p\xff\xa8\xd9\xa7l\xc9\xabZZ)R\x90\xe5l \x03\x84\xb2# \xfa\"\x92q5Vm\xe5j\xf7L\xe7m\xdeqf\x93k0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = socket$inet(0x2, 0xa, 0x7f) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000440)=@ethtool_cmd={0x30, 0x80000001, 0x80000000, 0x2140, 0x4, 0x4, 0x9, 0x7, 0x8, 0x7, 0x1, 0x2, 0xfff, 0xff, 0x3, 0x9, [0x3, 0x4]}}) 12.051229417s ago: executing program 3 (id=1079): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000, 0x0) (async, rerun: 64) madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x9) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) listen(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async, rerun: 32) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0xfffc, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 10.779942272s ago: executing program 2 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000580)='-\xb0\xf2S\xa4\xaa\x7fi}\x9dP}\x85\xb4A>|\xc2\x86\x80\x9b\xab\xd9\xb9\xdcH\xd9\xde\xbb\xa5&e\xdfa\x83KX\xd0X\x84\x1d\x8d\xb4\xb8\xbb\x81\x1aBH\xd3v\x11\xa9\xc3@\x86Za[\x1d\xce\xbaNCI\xdd\xd9\xa4\xd1\xf5\xa4ZJ\xe5\xd9\x9b\xa4u\xe6g\xa0kwJ\x06\xcc\x0f7\x10&f\xd6Jf\x8f3f\xf9\xbe7\x04\xa8\xd7\xed]7n\xc2fg\xf6\x8d\xc9n\xe6\xd3\'0\xea)\xfa\xc3\xc0>\xd7V\x13ZQ\xbb\xee\x1b]\x96l\xcd)\xf2\xc5\xfe3; \x9f~\xbf\x92\xc3_=\x14\xce\xc9\xc4\x0e\xc9\x00\x00\x00\x00\xde~P\x0e\x89\xf3\x14\xdc\"\xae\xf9I\x191\x9eU\xdb\xcd\x8c\x91\'-m\x99p\xff\xa8\xd9\xa7l\xc9\xabZZ)R\x90\xe5l \x03\x84\xb2# \xfa\"\x92q5Vm\xe5j\xf7L\xe7m\xdeqf\x93k0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0xc4, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x3e, 0x6, "a3b2288fef6ab78e07cbcfb8227f396c541fed698cfdff8e1c816bb7504341e22c34c4d7780dea7c67e543b37a9d67bff7cf7d5c923158a50a8d"}, @NFTA_TABLE_USERDATA={0x6e, 0x6, "93d9c7ef9471326762533cf08919bcc0aedabdfdc28a38eaa46da663d83453c0b8a29c1c6646c9b2098936118eac368af6a585d2b30fad81afe6d91de5f0df65096913b56a8a6a26b23a311ca1505c589795265f1645a73666a17fab2c139242414681bc0e0b79076649"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x138}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = socket$inet(0x2, 0xa, 0x7f) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000440)=@ethtool_cmd={0x30, 0x80000001, 0x80000000, 0x2140, 0x4, 0x4, 0x9, 0x7, 0x8, 0x7, 0x1, 0x2, 0xfff, 0xff, 0x3, 0x9, [0x3, 0x4]}}) 10.395551195s ago: executing program 3 (id=1086): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000000)=""/141) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = getpgid(0x0) kcmp(r7, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 9.59664652s ago: executing program 0 (id=1089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0xa, 0x10000, {{0x2d, 0x4, 0x0, 0x1b, 0xb4, 0x68, 0x0, 0xf6, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@lsrr={0x83, 0xf, 0xb1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x47, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x5, 0x11, "4000339423e63aa1f82946b2655559"}, {0x2, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0x2}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0x2}, {0x0, 0x7, "98ec25ce77"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101, 0x540c}, {@multicast1, 0x3}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x5}, {@broadcast, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r7 = fsmount(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r8, r8, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r9, 0xffffffffffffffff, 0x34, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000480)='^+.\x00', &(0x7f0000000500)='GPL\x00', &(0x7f0000000780)='erspan0\x00'], 0x0, 0xfffffffffffffffd}}, 0x30) accept4$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) close_range(r2, r6, 0x0) 8.278987767s ago: executing program 3 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2, 0x4000}}, 0xfffffe5c) shutdown(r0, 0x1) 7.933045318s ago: executing program 3 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000580)='-\xb0\xf2S\xa4\xaa\x7fi}\x9dP}\x85\xb4A>|\xc2\x86\x80\x9b\xab\xd9\xb9\xdcH\xd9\xde\xbb\xa5&e\xdfa\x83KX\xd0X\x84\x1d\x8d\xb4\xb8\xbb\x81\x1aBH\xd3v\x11\xa9\xc3@\x86Za[\x1d\xce\xbaNCI\xdd\xd9\xa4\xd1\xf5\xa4ZJ\xe5\xd9\x9b\xa4u\xe6g\xa0kwJ\x06\xcc\x0f7\x10&f\xd6Jf\x8f3f\xf9\xbe7\x04\xa8\xd7\xed]7n\xc2fg\xf6\x8d\xc9n\xe6\xd3\'0\xea)\xfa\xc3\xc0>\xd7V\x13ZQ\xbb\xee\x1b]\x96l\xcd)\xf2\xc5\xfe3; \x9f~\xbf\x92\xc3_=\x14\xce\xc9\xc4\x0e\xc9\x00\x00\x00\x00\xde~P\x0e\x89\xf3\x14\xdc\"\xae\xf9I\x191\x9eU\xdb\xcd\x8c\x91\'-m\x99p\xff\xa8\xd9\xa7l\xc9\xabZZ)R\x90\xe5l \x03\x84\xb2# \xfa\"\x92q5Vm\xe5j\xf7L\xe7m\xdeqf\x93k0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = socket$inet(0x2, 0xa, 0x7f) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000440)=@ethtool_cmd={0x30, 0x80000001, 0x80000000, 0x2140, 0x4, 0x4, 0x9, 0x7, 0x8, 0x7, 0x1, 0x2, 0xfff, 0xff, 0x3, 0x9, [0x3, 0x4]}}) 6.550220127s ago: executing program 0 (id=1096): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa14a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) semget$private(0x0, 0x1, 0x5db) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) unshare(0x66000080) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r7 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000", @ANYRES32=r7], 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5.527462946s ago: executing program 1 (id=1098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000009500000000000000b4e08a5006e1d70b72dabd558f72c55693baf2e07a2afb9c1d1c785fde670c4309f1fd03868e3109b5c8f54766d961459f37dd5ea95a7dd19721723b72acb84dcb801388cf36dbf4759fba1b1617e197ea5b3743874e20992101fd021960647c462efcd75fe4dd95e96e4008da1ba171076150cabf12665a9d8fbe34a99881a9ad2deb6327ee1640356d27b55c8f95"], &(0x7f0000000200)='GPL\x00', 0x5, 0x1f, &(0x7f0000000600)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5.422317012s ago: executing program 1 (id=1099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x73) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 5.325200235s ago: executing program 1 (id=1100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r3, @ANYBLOB="010001000000fddbdf250e000000180001801400020076657468315f746f5f68737200000000"], 0x2c}}, 0x8000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000980)={0x8001, 0x3, 0x9, 0x7, 0x6e64}) gettid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.896566554s ago: executing program 2 (id=1101): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c9bacb67c5b9fb3287ac231159cc14419bb", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080) socket$key(0xf, 0x3, 0x2) 4.422312225s ago: executing program 2 (id=1103): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) lseek(0xffffffffffffffff, 0x9, 0x3) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2200, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.922017261s ago: executing program 2 (id=1105): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005080)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f0000004d00)=[{&(0x7f00000000c0)={0x14, 0x13, 0x200, 0x70bd27, 0x25dfdbff, "", [@typed={0x4, 0xd1}]}, 0x14}, {&(0x7f0000000100)={0x10, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x10}, {&(0x7f0000001800)={0x220c, 0x38, 0x0, 0x70bd27, 0x25dfdbff, "", [@typed={0xc, 0x118, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x84}, @typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@loopback}, @nested={0x10e8, 0x135, 0x0, 0x1, [@generic="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", @typed={0x8, 0xdc, 0x0, 0x0, @u32}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r0}, @generic="ac9960970c2e6004fb4c5c3d1a3febee7fe428d57f26d72ad47f415f4918940c1ebe067efe10e85fe33b805dcb090cee06971d10931ec05a803fc9e3c55f61699d4be588049236bec81df0518ca77dc76f39496ca5b16ab025788c7a6bbf0fca41ee33c7bad5a3fbdd5dc3009bc0a1f8a5d17e1019151bc8cbbc468804bd55b2ea8778970055772048a6cdf43a3b70844e08d149c673a032c93a93e4bdf21e8769a02b7559a4f549791ecf458409e2050f9d3db9", @typed={0x8, 0x143, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x10f}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xffff8001}, @typed={0x8, 0x78, 0x0, 0x0, @uid}, @nested={0x4, 0x104}]}, @nested={0xd4, 0xe7, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="9149b595b9bb2fb1cb05ba551496347828c002cfb72f4811defae939845cf05a3d317cd53cc5dc84f7f4351791f8a6fd8fd23bf0674dc43764b30f385a86e8949de2250ef4edffb52d81e7aeadbe7de44689b93c6bf6117bfd0ad8e99aa8b2c8aa89d4511fff086aa0c762d64daccdb310547eff18c16466e466687500cbfb8bd0b4415e41e6fd1eaf22a765cad6e2d8fbc7e624364640589c727cef5cf39a2ba05852a9517571897638e39636b43d54d8a3ebda300136e65f28a54b1eb312e2cea876794c4366fd", @nested={0x4, 0xe8}]}, @nested={0x10, 0x47, 0x0, 0x1, [@typed={0xc, 0x1e, 0x0, 0x0, @u64=0x2}]}, @nested={0x100c, 0x72, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @generic="226bb76ab9c07750b52c44482818c281187cd7289ad4827e3d8d2b9b0fb3101d6dc2b8a1211facfece66f948ea874605573c8ce1a1af369f53174cb1ee04fa9d68437e75efda59661d5a96e36d6f2a7c7d76e9884eab19e07cc6f0c9984489f1b1ea01cdb63767395a9dc678f89e32dec39b9863465d4cf8a8fa05589a57b6740282a3a42ec66e9a7146e1b557beca6dba2977a9140e7f8c692aca7b059195540d40d9f18e05ebd170bdf784f91854af63d4d717c102c70b12b524f6b87df024197570b9f27b8a56b8cd8c1d2af8abf67429d75ca85fd50326755a9cdae125d34514e802c257b278416d0d7ec664166647e778e0cdebc08d085db8c318b63904c9093b987eacd02ad52db66a4d21a1ad7c17e04f9e9258f608167f58a43b0bfe011321a422a11fd5233e9b9289ad12cb3d2c71fb54d02d0c956bb21b8f9a4c25e503d5eeba5ed3576ae288154338ba8f5724722f41f495af7ab48e0e0c2e72fa33adbffb6649955365d9b64b06cac15e2e76c785c5aa6c7fca5343c307cada2346115fcfc8fa6d85522fe299f67d7cc569ef8159d2afad1c4730c3c5fbe07707d9b13bf3a61ee6692712dd93268f66e6740c4843915668c21f1d8bab954d9753c825383dfb286a3c0cddb1afc66cbf4e6600738e691422f0218faf6519f1dfcf2cba6a2ff91adbc4601a0f853d3333cf25ba857179fb3a49aef5aa61576a4ff197481d5f3ff6910cacbc709b91c12cb2500c6f39b6ae0204cc7bec68d3f17d9a83fc0be82403f0d7eddc19d7038c9ac9cc1a2eae4006cb1081475509217bd78960bba43a8d921ba1367f27ae467b35858f18ca1804ab30c07304715b80da18dcfb0e8f2cf0b9444adbbffcb726cfb08a760bd559d0e8c7d3e19174c6ff17e82f20e617e8a571a93be5c49c2e4b4ed0325fd2f2017efe9ac09d9fe0d19ef01be508e76571332b15cb76dd143135255df57ec239899ec0ff633017dc75d8af8117d075d9ff7bf98fc35fe595834ac72c5aef61897f9a4720133612364b067de0c1d00aa4a155d7ae943602440723e45f99f9a3637e3e79a745ef2b961517d287400ffeac147765cdab06a67aa47aac1ab3c56e5fdf610601a3c1d0b3281881e54628c1c662b44105bbd1589916617ee7f1c45a58b347f907174c4878f3b82860e0deb41df005f37e0d7d8ec61b6d38e21e71d99c71254e1f23ffee423f657f80ff8ecbb149c5d4d506ee296ebe7d228795f3db5e2dbe48af4d605a18a1f232cdb29e98aff7faf0beea117c23fe7311e2265c92e16bb8d37e3ea698e02bc89773b53535c1ad60525604a325b4230a588072097b17a766c9db908005ec205fa71f90a23dbe9fd23414653de763e240990eaf8d97fb9eaae8795a16a3a99d4d24ea726c4e30517a07cd734319ac2cc982424ab15263765102f4f6c4fac83fe89beb384a34960a9d25e2ce58ccbebca57db8fb4d58423e6be027ecc891510ff21200e3d8fdab5b07cc430e81727f7994d7d04b469c4f3076d631264a81bdb308404e13ac2f8a51ce23be68325ccdb527ecf8869a632697ec403c2d0228ef1d85bc2a79678e38db68b65acbe06f8ad4009132d10cfe0468f8c7d9a282da9242b0fbbc0b91ffc48231af1f9d297a321b2e8dfc99cccc46effec5003f31668545794a9b42e100cc6ffdd374b4becd4726a7fd1c03ce004dc6589012c909148034fe22347c8099a70760aa13b6507cbc13ef1032969c78968f889a07f5f6b1ad62f928c92f96a480a11054235f1fb3d1f4eb1e564a455e50af4f14c86a1223eb4a1de4674b3116c397a267ce6bd3d92cfe65459169fb83bd35cb9c8913e63442966b269489712657be37faa387d25e159bd71f6def44617d45a327df7920b7be86f77599a055ea3ea507256b68298f88e19767d947b710adc8ca7569ad94c872e488ae2d078546789dfcbaec43d37dcc6acaa06fefe7c66d99e26a591b9b9397a355e6d75b92d360b8a9fe83aafa1bf1f3c097ec8165eab30c7b39c76ce5a26eeb448f6eda4eeabd4ce37dd37ecdf781f37e5c690c1b7d72f1bd1df774a3000caca628fdabce8049129b2e9600f377d2fe5786b82857dfc665500ff87411681eaf45bdc2d02e4c70907f468418711ab02174dc4e25c1781039748f92c9f7ffde998c5fd48b7f070bb002a6196b8fc747f5a29d5671c649bd29607df84e70bffa8ca585d633a6b9229069df01c6fa491782307ad622216dc502a6b055ba2a7bfc63c0c292d93e74b2f74d709b2293cce487083abf4bf3b9618fa7fc1c2f63f2ce707d82a0237c4e1a4aeead43c17a5284176240aa7a5fc885e37d24a7b4d5258dbe7cca8348ed932275652678db8d1b0d2c7b25311ef7e203d78edb25cd2cb8cef9330fab98b0ef3b82303aa2f9c9b35895d73c16093e7481a98d1faad5a7bd1507b0a8d5d09b5459daa817e8d8e32dd50d3dd8fa09a9d2e942da74d018db86b982f9139149281c61f81570ac21ee43834d3d42578e9c753b6f568086b67ff760296b0f1f30268de70d0de94350973e258697a963a38ccccd6440146f22800ffc4518d61ad70a6d511ed4743448ca2dd3ea9cd81c72ac3d48aa2a71d5f878a8ac11abf9a96cc7a10ed656ca10746dfc6fe881160cd7388e24020b16daae467e16016b7086f162b65003f77667ef098ff034b60eec9ba63984e6e777c029f6bce9f03ef7ca1ba1b786bcde21ab7913eac065dee9b9c7a96ad8c59d45a098924ca104a114c6870935870afdfa444f5cb59a66610c5663a95eb806f899e836c13c98e04305449b4fb7117e6379627d537328dfa72097bd9709ed3c450233846b7bd12af315338cdc098b92405e1fca34cc797a1ae695f633db28dd31dcdc92c45c2ec8dcab1ca57959c11fec29fe54ae01eade86d51b3bae987fa52a055ee751a4ebcbae95543123d6df6992d7156399530e53ccd0ff71b6d1d3a12dcce845b1e9dd19a75ea84bbe1ccdc8f1af8a471228c920edfa1e6be4d7da8365e99407734c96fb4855a28cdf443e26a8248269758e73b89fc2e14c3b1fe0b181f0c4d8af031c96ba8c429354c9c9edc5e93dbb730d3e196a1419eb8966ba2d6d34dbd6f40f4d802770c2f73c5c6126353867336477d3aa3f615fba416ac52f061929a7412b2617e90130d2b1c3a9a6b43c5b62894554fa21ee80a463d59a8fa20b2e37a2e032a4a92b688550b97e5362bdddc1a078a74c5025342b6fdfe11a6e652b4b8303c6ac89c67f45e66f5e5817d3d5a6451cf10604f2b45b19fb034f3e97ffa512c3089a865ba5b68f087327bd13dd411526b128a4a89efd040c18badd62eff1ea53d608675d19278e18c9e811d9eed68935361b5bfeed44c1fa8c24487865093e725135300d2a44f8cce5e86da93a2c4699d22ea5abf82e58ada87f3b1846027972d48b8fb99aecba8c3eb525b5388f0682edb86ed7ffefd09d73f45f9ae1b563201fea121481e18d973d11f87da849d264f7cf973447fa85605f6c3c0fe7aeb17a793f1ac553c171926ebca56e0933373260dc26d59cd70c35aa901d7566511e723693f1eb0a215bea9279b14e8441226345108e62f211ef297e1b980255700d417d496017ad3d60f6eade14b2b488011d6928b9e02a28a39f7656f2ff0a97e2ddfc350b488e04122b7967c8a11453193aa3b0ba1e193dbf7d44b829f09848bde651a53ed8357b078f9f5918fc2d24bd63cef0eefc544d03b6f6fbc4ee6cb333b7fd12c678a3669e8219784d47cc130a2951d80a4c48d9dd787110edcb908cd0316581c3f9dd1c0438163a56517ce05587c5a05c8e2b51bd8d2d6b820efbea78e39c94161722bd0c9d6665a3e9e1f4dd2d410de4317f65b9681ba2fa8c851c96696040243ac0273ec4870791bf795d3c25331802fc118ee15143f0ad6a46b93653c91b686968f1a0d6236f795b30d95f5d8ba1a70bd793881617ffae8d2478516fe46d80515a2e6e5150b3540036bae7e0ecbcabc0d1eea82626f1f73e5af6b427355229eab3dbec4c452a924d6293dd37d81d238cecf2d9adba1b72f7d9b7334cdf4cdb23a369f63ed0a77607b139c06532a2ca7204a55be8a90ebe4448b027831058b76d413bbd610f0dce9a94b1cf25be02057bd3bc61a2d2580f4dedded713c4d734b003d7e1519f2f23ca0da5b3825a0a2a62f6e1281df3f39c464266342b8f2cfd76b5b96a86753f4571e5841faffef793045ce3b898c2aedd08f220662f62711a0e7678329e50884c35b8ccb5699705eb1d6919d4e743c320d8c1f2cf10b1c2d29de8cb1a1f0669a5e6f94d3c240c38f26758388f14ca820a5b1194fa7f479eb529ed652bc627107d56d6f7dd493f7ca1c84ce08fcdbe8cc33baee83560200682fe82428017e2cc600171912815035c28c6c1c01196dd639ff89f810513caca082dad48dc6b276b69f638fb1b795d6dafce359393755968aacc77be7a3daf93b978b0649c46c6bdc073cd49ce91acca39e195e4da33b8010dd932778fcb5ac94a9480e5e7db099af924a007197ac37ff54dedc2542609c91fbc12ca8c042799e260defd71c8760bf0c96affca031c7e2851c3b87060823a2db124183b1cc2c56f366bfa66d1100ff6aa1cfd49b7076dbe62e754f0a3ae3d53dcc189fd1bea5bfec83a6d52ea219a149db9177a94b00e51feeea559488b8977a0d07230d8b9224f142564d6f57a6e6cec4feec13b8c2bd0358fa6cd4669229c03736c603d8964b662ef8ba416d54f4b3c98eb0d68792202938d6494c4079036a6baa8e5f2306cc590b86297350656bfd0d2ffde91b472d6e0c1365ff46bd5f98e6f8a6b00e7debf0afca3e4e328ad69e0865e9f67fa5a548b66588ac237befc1b6a817003e4d6b4edbd8231205e4a4f706c0faf68e97e5637865a93a2f67b92d2dcd453f8c79fa299b6e40125cd7fd0d1f5d330bfa7f20be60539e61bd6355039799283da5bd4eb6a8c801a7f6e51d5c263f33df91ec84143f3cd9c382a205de389f3100e8f3b1ec139c9a590d3d2076082740b582515bdf5aa638b45debde05703ed430ac1ae8406b8582ccf87d0fa5c24ef222fcf4c27abf8ddfc98a457765e0db61e24ada63a47aec1441dceb55755cf29d5f74274811f7bc472e7d9f5270d2e67fbbf2b4cbfea5fa8849b2dac7630f4f6ccf12a22d41ec9477661b710b1d065cc7e26306a9bc345ecfc8604e92bcf854cd3aa7c89a60bea8c70a270ece918c8bbbebf6d7c59d7cde76f6d8f97bf6dad9296745f0c9c75adcf180e83fe43eef171227933f2ac048063c6ba0e6072cbcdf74db165766dd72c49595a8d774c47907011df52616abb4ba17facd997a91d8248242fa495b5814f67b4d2817c2a073af3bf98c3695cc229dba8a6d32345fdeba26dd48d85890c848eefae59f28e1a2b0f7933f108769bf21b2b0151cf874b56cdf15f88ea0047bf28b9ae09b5821e75600ce4f53f8392a65faf0da89a02935b566e26926c08229b9e65f35b229118decd44c052403dbb8dcdaf9381ee92e124a9fcaccd7c4aae90b9f00f24a44d46a324ce86147a37fa829f3cf0d024fd01bf27080a52009f2a69123365a8a1ed9e3ce5895d0e32eb96968ea246f1bb288103d62438e27010e63b62ab77fdc53e7a159285c7e1259d55d744041e6543ce15eed002d7eb09d26e3adf58328f07eee25539f7358f24806a7a102d8208f758d2a62fd70b3aa7ecd114d664b76bd5b2139ef34b0805588273038187121dd0ec9617e95ba81719a1e31cbc7e9f2265f521d23f9a35732f1e40f085"]}]}, 0x220c}, {&(0x7f0000000780)={0x1024, 0x2d, 0x0, 0x70bd25, 0x25dfdbfc, "", [@typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="eb402f38c56382148dea2569d61035e71f18138d51624596cf67b3be5a51820206bc8878e01e017235c5549ed23b2630d87f37e04846820ab7de4bb6b08c474debae30021afff6bdc711ddccd29052675a08767c3b19c957e9ff964f84a15a708fbffdd82473f63270e283afe9b543669d4ea6bc2f171334e26cf6324187cd185a37665d1cbbd7732e29e374be36306bf6ebb29d6ef20f218e64ef4588937ebab88444f34f2b425fa63568ab15a2ce30421c8f0b1060bfdd073a628e9ac41d2247e3778cff9430c31920f000abe1064b8a4adf41347a7154f5ff3a218190b83a1d54851099e0be8b49020a4ce2e9f5a4f47cac2aa329e7b1d8d24b1e9409f8ac5207ea6bfd7203692df440f283ebbdb1d1daef892a547eae23061d17724cab28034a1a645cd8ad9c64c0c73ba85b99422bc06a922d623d76d341aa49de56cdcc8f878ce07b4adade612504de22b9aee3ec50a18c24ac18d58a0cd22f0c0f4ce035099cf76bcefaee00e6ab64cbce4feb297fcf217c71ba9a573f68982921b0c506da3f76e02c18d35beb774833e1b1362b8d9d0efe095a1359b886f2a7a9ccc6f99931a459977412f7b29dd1b5987aba1c64fb42b98da558f22bfd49d0b2f8a675463af44edf76aead0a114e986d3258029f150694ee7686fc11557f252c4c815bb7cde8398d4d1783cc0b74c86e62cd10820cf0e54cf45d7f940b10a5655df8257b8fc9fa8fbffe9a347a633835ec1569d1a60cd1f394d5a8c729b421a12bae3685971eb3eed96c09f227431461c880013a4c520565d98b770d0dfbaffde8611cd4e76a71a4474f292d6c568061ce2d102661bae5f9d5604ac623668f50fc9a231c8967efa7c1a5bfb076a83f42f76bf94897ed5ab065ca56b4a406b54ed156a7b2f7af407de3ef60acdd3bd3505188443eba88bd6337d0b1a7a228d57b2f9de55b8fb80ef5c6222536845982f91127cf6f166dbe22ef5d118e0121721009097a193c1fb5b0c0153b76dbe6ff131995f51c036a0c6214591aa33d53d565858d9068fd31c16c62a5afe08513b55597436d0e543bda48aedb7c7211930847281b5255765b1b28ac9a93e73f20b37495a014b586a02aba6cc738fdc31527555833f8e05ea6a001b7adf598c8d59528edb5f816c6cc992542ce6c4313a8d4cd9be6d5864ae633c3f0238e8159f0e5a4a2dcdec8fe8a9359562021744b015f790d2034fa925f2de96203558ab8a6524c01cd7413a5b3bc6d55e4abdcc8e8f5eb6afab613acf4c6074dca8a1def4d614f90fd16124425117df4b6310af6bb92a11de010d11e36d2974198f6b685c5e1845e1cee87e7b46527cb512ef8669169cfda46306c67813cb910ef44bdf2cdf0c2fb3289493bb9916f4b1854a40e0508b0d91f6f3592e39625366f4592ec7135879cb01a2d77fb3b1b7fbb5e36d22dbd821c91dc9eb3add34e5aa68e1944c72c8301447f4d972fe8c0819ec6903110d3ab1b0ae74faad580a1691ad24a4b5b835aae5ad30ee6f2941788b3bf4b18ed02e2aa496cc5ffff59e63dc69a77b8dc16379aac68e1772f33272170b89992ff55439dc7576d92f91a5357f1559cd884374c8e77f2db076352c1be0bcb7f3eda487dfa38520b3159a295da5ed7d320dc49bd6c6c350366b259a093c4d798199f4a4ab0add1fd7cb6c959cd1de49e61761c60ce2d07718c042fa8f88c5e191d1515dd1e823977eed75b26cc8a02a4a0a5d3603ad38fc85ac131a18366a3e8c4a81bc218a2e481f87b37755fabc432e0e15559381e5d2abd5046cef5e716e7bac2ec6524810caae685f1023ea5f1e3905526cfa9ec01f20c71cfc2ac6c34903bb6d7358d7b5ebc6d4ce0a9d6bc15a1773123ec401026eabab63794fa84be0f9e21c009e73ec2d040a85ff6bd3794455ecd429a251757c001d94807c2ba39ac0bc0233f52ec01de3c9357dfc2b458f8ba4574eae3b27cde0dbdb4861b90ee18b200da8f8087575081a765096fb4a49355d4023533f34e19d8cb7ee56346a2ea7bf5a9e4a341f37fe999764ac321463188fe44ec268f75d088100f207aee92309fc1ef2a81022899d1b9ed92ab4e1617c06f6116aa9395de2baa45b10b7867ca8d95913e5bf1e73bbc20c97e6b0d84933625f7acbf2fb529a60af92b2c91b5baed7283723a48ef7b6090e88866eb9d9cac9b464a821308f45e4badbc536c9d5774f9250115da586974482ae0b2f129265d2b79d36816c49a75febc2bc12b6123a67fe1fd0bb045b9cd51db6d033f16aa80d4a85cb9026c39cc7bc4deb21c6e67721c4f5f2c02b60b6ed428a3ad50d37d7438432484d13a980e2554d97e884589088df18ff4ca0226b38d5e1da1eddb3a74355a88e953953e4315bfedbd2fffbc8057b7ac7e9fb84d1831b2bbacfebe5ac6922c44910c236aae1dc197ba7bbbd830dd41e1b47efc08c9a2646711cf8b6ab4d70d7ea273dd2ffd247bac9e77cd55f108ed5c4efd9fc737ce401f0fe24b87a7d653fdaa90f44ded16c15d4343a69d32806fa859912d31df7064c648103017310ad351a041ba7b7f9039e014c405bbb1c17965ccbb8bf7ccba71794756113efd485a60d4a4a2b22aa6eaad4756daedcf79ed91764d97bd15ad741cd6865d4105fcd91a1b68da0309141fd0551a27d06d6c39cddec6ac52bfbe7d0284a4fffebd99ebf94b2df5c27c3e97d50fe2e10e344c6dd0a0e28ea8e5eecf2b959329bcbb2c79329f1bb4bcddeb2159a15ffd795b343e42c7ac24d5e7a20c7d2552745e8ac3f2dcc4d660ba2761387475e5abca1ae9d17e3193eb60fe06fc834c1273751ea5c72494315c09c67d297ff7ffe83d6a8e668d05f9c35fd7622deb60420a222af43e204f9d167792b6b3a366b2ccc77c50bbf73f9d10dee76361857e89742e9c776d9637cf61b542ee90deb5da41d0d820355454c8db8b356c23e52e2bdcc52a12d824f9619ab6a2116b7cf2ae209ed48f87b651bbe05fd3f42556bbcce91013c626adc12b763ec80fd8a0ae8c414bb4886e13620ae33b93f29d85bcf3b6d36cb4b7bbe0e7ba0b9d6c7ad16e22fc74f8e29a01d3a396690ba71f49c639093f3aad1fd6e7657c03a7a21a9056f7b7d03b9d2984e2e5d5820db8592499b70a7d4d0391f84433e5f050ab81bf9994b9e67ada231edf7ae1ce8f5004e6c549631f025e0e55506c2bf98652df7b0b919c7c031034bcef96571096259aca6dd3395c73c51750e19b3807749750eb1a60fe8b7ae1a1bcbf08ea2fa844725fa2250c935aa9954c036308befba8fb1c013a62a50cdd58221433d82b58a655a2ae4045f6a7e59fd7c832f8d8afb019c15cfc81cdce176f26219829d184e2317b5f3d36c774278c31474509ce759451689962691c91836f803fee5d55af2cd521b1dea3725687d90e551c8663cbccd2b14ac1ae6795e51984766bde86c60fe6c1278060f9bd53426ea67656c10ff55466a0a127d8b9283f95237f2292b11bbff017b438bccc15b744edbde8de972c89ae3ec08877ea87d070bff185a5aecead05639993767f66d36e4bd43d5d0c262513c9a658976c702faf38de1411e8557d750e354d58a87d42d4d8a35334fbb87e3b2a6a4c9591b207defc05701fa98114753d8ebf894f6dbe659320c21190e1b9e7454def277d2b27c6e0eec306c5f72b472f74b0804ad402ed53713d9ea882264da1977db0840d73a4d18c91d03bdd9b7904671facc10c37bec3370fbb883885972d2c05b318301ecccf5723f032d719d0f10e900593fe1aa74fa1a4a0433f0b8afcf3ae7b938cdb2ed731a8bbd0eeb101dd2687d97a6d0a12e610228198318bd870471e34884409932986d529b5344c10338ab13b9fdfd500c199beeba28abc6d7d5800ec443b291a4fd1f87cd134b145a2f594f42ba242b1577afc2212299f1c275f0e8b591967a612e23e48042b70ec4dd2e692458b471714b5e2bbb402e6d46dc50589f6d10225b9ad2660ed54dc18f334e89a9823aa4c11e2f6c1ca2a40ae0af7743a63728b9ee074ef526294c87e31a96df2858c8177330be84a59a57337d9cbf1b3917e90f184ab81d3c3424c9320dbf3f0759c5e5440099306678bc8b5da03f2998e62c9f7c7ae67b800fa9827bc39bf5f5cad7d222fd7161e982ef31a0b53b39ce3ec212fdb28ccfc4799e1baca42e956613264a460d009586ce9b00efe5ff355f0ea932bab0fe2a663c9adeb16a60f935c157550d832554bbe079de6729ca642bf0e5f15ee1fee6d1777ab6d4c21ca56741e4a7e36d634c349a4e6fb07515d29da4526b91d3601c232f9ebc69d8858cbde9b870d1d68a34e3e5992108d75aa9fba84216a96374893d773f3fd88a582d29fad16efe2a28cbd8d76031bd97babd3216993693d9788a590782fa3479d6df4a036e0d7721dd2fb7887a891258a41d963b53bba56471dd19fd71b816c26249930d4536995d7e07d8c427e76fd6d7184a27d7a5a5ab0283c877c010644998c41074dc85c188ac0f79ab9e2de75ac603c8b83745d11f3dedb16c476228fbbd4fd70e6da74a018c7747e6de7835148f26e64d4d73530f1a044350862b4751d0bb56128a85763bbcb6adfe961db171c5928c37be145a8fc238822d7d88ef403a23a41d9b6afb693bf32ad2301a861fa9d5ee2504c22afdf9204b2fba5c4228e2ad796e4580cc93fb799f4bdd25b0ebbbde10fe82fb194f29259828b6ac59a3fb04a7e9084e3045422ea1d93e070568892c70ec8c765c0db1f5df23fbca5116d6fd775631bebe339ba9ace2f9557035629c70d07ddf3bab066d627e974f6640b1c8664aacc4f703802d1d485ab884772b01a6b32f90c16bb38cdd1685b71abe5070aa84dc98c3d5072f367c82a0bfdb8d3efb492eba8d007dc228c62381387e29fe6c80dfba769fa3d388189fc4fee806f667c01d75e1f21ec8bb7cb01075f4439680ac229173fc3f708d0febe3db767b799172b207006cb73cb6577111e15d67bb5d6419d111cbe1bbcb615f2e3e2a7a08627620891d8829006cc8eddccea4a50fe9046f4adf2b937feed6309a42315e31ac12a10031bace61b63a2a9e8011e4f19f7853908e4ea3e50611f71dd6241817059dea57302f2c13a61c9012c9220df07e55847fe3bf59f6801d83bc3f66e964a1c9b1c3922e5fcec94baf632df5c2108629515fa5b5dffa430baf9026b0faad70a86156287b8ccd944c883342dca454fc88122dcafa379c543d58434ec56b929733bb70623c5f6026c966c72a96bad7326956a5ec5a20355aa34f45e9dc8bb029b04c752ef86cbdd0f9c0b6976121aa03acf6b6c36ff9e78ce3542ff75d0c9dce5851d84c868007f84d10502d743a9bee6df8738fac6c20d85475586ca761307394b9eaf05fb9a31802c37829fb7a4116c01d7a9a99ff70e74b3122e14ddb9b4d3687c249e93fe6d0650177ec12eca45436a8174bee717c604c47dc0045a461395d9cbe1040772602839ae65e0057cc3490f8e5b06c1256e5d637162272f7fc257327af7decdf95264a79d5d5121462d2f74a8e679da7ef1aa661505ee9c3d31f09147a9edeeb781309b8094411c5929688f6919b7a9a3e96d2539d9bdc091531890e7e3b8ce006b05007b95a25c2e2e8c8f279b40dd60c53201ee6fc8d232ba7b0388240f2b792a3e1e2a586aba4e20ad6753378bf2579f62bb2453db262d86d334dc81276ecd70e129a7ede57cda7129af115ad53a5c6747aedd02bbaa335e51d287583fd7e84e70be5bdd696a5cdb1435f307a942331bbb7d7c25030e1d21124360f7ca95"]}, 0x1024}, {&(0x7f0000003a40)={0x11ec, 0x29, 0x20, 0x70bd26, 0x25dfdbfe, "", [@nested={0x20, 0x74, 0x0, 0x1, [@typed={0x4, 0xb9}, @nested={0x4, 0x13}, @typed={0x4, 0x9c}, @nested={0x4, 0xcf}, @typed={0x8, 0x2f, 0x0, 0x0, @u32=0xb9d}, @nested={0x4, 0x148}]}, @typed={0x8, 0xde, 0x0, 0x0, @u32=0x3}, @nested={0x12e, 0x6a, 0x0, 0x1, [@nested={0x4, 0x104}, @nested={0x4, 0x49}, @typed={0x8, 0xe1, 0x0, 0x0, @pid}, @typed={0xb5, 0xb0, 0x0, 0x0, @binary="a1c9a89bafc4dfd5417150c03cfed68bd9344a3ddaebafecb4b2fee277674039bfffe90e9fd4597781950b44d5ee1bfb3e9298b46511d737873f7c129fa0e223658386dafd1d39d0b631f900f2d0efb34ccba3813ae3d6b49aa220bcfec23fba271601077555eea8567e73f7237f69c0387ab5de4b472ed9f3fc20c9bc42172fc0629a4e7608ff6ba16cb3fea460bf032d3f1fd11b39596d2e4097c39dd851baf7808f4240d34e8c6c6785b7766cb86f72"}, @nested={0x4, 0x134}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @generic="131ae6c0c3e8269368717b786a92b4c965bad3bd54ca8f469a9778b6896982af10b59ea687f333cb3ff40d7bb959ec8ae59b4ae0c6835abf06adf2f55262459292ff4aaab38f019680563869cb2627519f2e", @nested={0x4, 0x140}]}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x9f, 0x0, 0x0, @pid}, @typed={0x8, 0xbe, 0x0, 0x0, @fd=r1}, @generic="4cf03d76dd2fd811226fa037f47adf591370fc87793d6038463cd412cb048bcb6f241939a8554cee275876b0716cb8c591a1b5826e4f43c03ec6562b5176c7a28dcef833dfb38e73152f565e53b6c6b1a09d40e9b5e3c42d53930172c582be4b54fd821f949e90d70d3227820c5700b1a0b8247b9dd4059c3760678e90227197833757e8be4c2bacad63a8f61c7db8fb7858b8935fc4559ea9b3219accb13f027cd0ffb7fb7e90d93d1f41db641113759e69e5ed9f19b88c57aa0905a32087d7d753a17a7d619e07fc917ad23206c45154d487102aaf7c0a47a5a4917d1f136584b511c80ca28d70365ae8ebbad34240054a25cdb03c9ef000efdf61411d0c368d2468e90c24e285382970f414316d641d8c6d50157e11fb76a5f57b3511b4af0f456afd794a2c148412e0554cafdb3f661145d5386a9407163e5a7d26c75a611b0f14aca5eeb904f8b97b357699a4a1968aeec1f022cabe3478caa4d45bb631530d513e8d15a2c75b92b2d28efedc2c79959445bc6def4acf8ec269c3e0a68c1d083edcf20a8c740f2f6ea95ac57c5f388efa8057c1636371c91ca65ec74a7d7582176dbf0591a2143000d69f7b124241d2c5e7fa7009c99cc1331f6cd263278f852aa9d5c6ad21fed322749757eaed92aa10f5450da8389f7447033bb5b5d406f37a0e035e7bbbff54215deb6aaaf901cf95d74c6762941e28503b4dff66d53f4ff5d95db2d21e473959ab88696fac64c1b0ae90c045d2fb61440979e9a84ed0518ccdd96c24edf76d7450b0c555f87118150eb45ea753b232f1c8e8a0ff7366514a1932efab85fd6adfa331e4d2eabec0474b742fe850dd38679bcaa32ff192d300ccf0c834ed2dd5afbe1fb4b4caa24f94ca7cee4ee9042fa57ed71aca4b5192cf3d9a085c17a3463e34d57ca5372ed38aac2b35cacb3b655ac02022670a2d31c2da34e6357992c7286f5c2579ea1bb56bcc508332e43516a3c6595ec6673fc3f15a868a4817fcc3443f776c8303dfb400c77ddb63e4816561b39708ef6d24ea93cf4271b9569c476a6481f4b02d2dbf86d9d358fc246f21efee0f2b6c27ca00879156dd409fb35f04b54d6074043f253c95f2153e2ac9503efdcc104046ff063b2e0f2fc842647533760f3d3afd225861b77d55776b929bfff270c42ad9ad82e122b042cfddae9b1eac9c2be104be8b1ffa55d0e0ac75dccb20c13e1b600e26aa547057b5207a4e2c7bcd37074c7dff24164a01c4ab932350e5d0d364c40f0c4c0d15a802d3fbe585f22db359305d966707a82f107255fdc465fb30dec1474280309ae53ac285b79ad159c4c3fd941cf2b2fdffa469f15c6bfdcb1257ccf76cf4f9e2f34b8d77e8e932c4368a40fdd308aec775d418a5be2c071f1df9a10c1d91f2d20a507214f00fbc78136727fc1f6beb91a6d42a1fb8edc92bcb7226b0442c46df65fb115570f78e69226dadf98fe8810260a6dd61e67f7087b187048a69ce125b9f373cfdecc4d555b6fdd3f10ffc813bb86767b6ac796f2cc51141f09d676515f81176c0b4f8ea5c1bbd2ba9435a2d8913d6ed06fed76cab02002154b4647cad28ef28e5ce88548931ea7f21bed43b15b629b182be57a6657686d89e09cdfe826eefbb18077400aa25cbd5dc251a016bbdfbb506edae6d932d27c082a7b09af754b50ddc34a0f549ce1a9c818f8ef460823517fbec52657588b556d195e8e27b31ecd23ea11b8ab180dcf91c8c3770e831dc50bd1d66c04c8f82dcd2cc10a3b7248d775ee4f20284c455277496cabd289cd68bd86eb12fdedf1e9559bff99fd1c61f67f248284aeea5b68ddc1c117dca114a3027f93651ec3089ac70ebe96e0b4b77a3a0a526f6dd0bb567b98b314ceebe84b8a25f9f5cde442421be84df3ef2f40e04ae2110fa64dcf23f0077773abe111d8097b0a20815c942872c30d4b10bcab28a4c0ab324cd1f073f4690495792eb52b87824cc5464ca77ea865cece46addf88d26b63567e39f73a930ffc14b53f9da825717fae5c4d5ff7858be48cb443a9aa95024994a987432e64ca1a2066ad8002aeaa8556234642f28c22ce4fe4c16a3b0652868209d7cd53356f6ab33e440dc80f58f86eb5e1545ec0569994c19eb04d835420f9474a6c0df733ad4b9d3c797e2742249ee3362859c6af5c764a2625f5b4272400af4a2ddb3b24b71f69f753011c45e45f35c4571aefad115f470169fc218102bfb8877708780799ab1e4e0631d61cdad4514d6adc1854a7e03563e3198a9b11c1770456c2041296f70e5c71f2ebd9ceb3bc6d603a3842dbd56a0b92373f08f3f0c2a83763c1714b1d712b2a81471cc7b3bd5552492a915a3a5f7c9284fa43df9210a619e69fa83de279cd244af3a9f25612cf5e063479765d64364709b36500257008200a8bcb2ecd2de1b27a1a82791454d9895879ab01e4f2e5900e6f972fddf931fe450e79767f9b576c7256fbdcecd962455733d23f42ea1d3fcf5886a8f311129eb2111206a040915a00ac6e4afa2c29b66428623d4cc0d88d47317151893bd4efe072cf8e927e6d8795a4895d8b593aaf9ae499b2eed288c486fb2dfe9f774393e8d3a3142fe254d665cdf7fd1788a0a544354911d51d57157c20154d0310a69fe21574f07a69f2dca09075ae1fbf78edbc5df3ac94137042f1276e5e7d9e17c64e0bf95aa8768eae94a6c27e12c3cb42fe7280083bd22895548b998c358478abcdd1dda6191647b81caaf4399d8652f835ceed9c1d11cabd6f3d14a9a893e1f35e1dabed223e861e5084bd8581820420a2dd89064f79c91a674ac5c4c5e6555d8db18e308b03a8012790ac5c762aa0b096badd47bd1d6ad04eedba424b26d09cd8573fe6e48287b55530d824f540610a243df5aebaf3ea4bff12f602e4816f481b2e4282a3fa40eb3be1c6d774df7ec77c03310f7363d8988df83b1b6753269dd4fa5f4ce122e040c3dfe38cb470db92544f7d37e5be92a269c9eee13461e4ae9c77d284af0186c54cce54a420394900668161eb4aa09ff880d7b4865d59dd4428d10513168b76815f470bcd9441f522a5eb1d58a1b9e07ac025b982269a4ad3baf61c2b2679d86a6b71667ded72ef44b42279bddb8d095142b7ccb5b091ed150c4855e4aa6993cd99390bc86606042c2b90f981473dc0bd4d6988be5829b977e21428a6876aa44a51841279721b389e781f1bb88ff7963d0b7b704e6d2c3487403ee8bfc18a31a5c3e8e010651a84e6d141dd8d4b2ad98178ca30fda4fd607b95ef6cc2ccaca66466718c0a57ce0ab7b1b6302785899a5f4ac311a4c0a6ddc3c5e589b09acac04aff89c517e4c9987dc1a7299236fe62afa94a88e6adc70f8db376461d888708a35ec804e91d5e1858c70ea52f45779ece06be2fddd00519298326100469a83825ad0a354fdf98097838b283e3f59f5ffd7c8d459b34d7d5ee06590f3d3b06804648c822c10ad73f8f18f407e1387d9f548a70be698e8412d16a3922f417de59a9e1c855dc75298f99630ff4f9f81abc84e5078779667dcc522824fb9207d5dc65541fd79b72136ca7fa622c5488a00008d5fb0047fdeac7066045b534cec7bfb2e80fb50dc4c0147a563ddb05c19c37a0e2e88288b4570dd2f48d3f0fbbc1493a16365fc27fb92e13491ef5ac3c95b70dbf2c3651f0bd1b98794ff6cb2b3d9ab1efe72f97cf7157648ea33d46de05ab0f38a9cc104ec56670d5018e1e24beb3c7d0717f8e370ed133bbb915011172d2f7b654daf96a7ca63387099159299652cabfdd95a4bd5edc853cc42583783240b62dd8159ca30625de62880f6516d5e013dd6019fa1c007a3a2d7390f4fbdda8ea0037a95722ff75dbf6fb88b6f2bf42dc22df24eea2d7947952cc246da4a7c6ea71964ea336527db87a68230b856e9c1bdbe0c52bbb5ba0724d457d9d5be840ac8b1d920e25bcf717ae068d42de511a6b7a4c68edbaed2f7b38e9f390b1d818f26aa4c565afa1d510c2ac12757f6559d0e9eea0e88ec8833963ee0e763d7c7e86939ee4a7ec2921103761c57d16e0e01881c195b86d294b93a794f886b2b16aa63d50359cb403f8a7a36752fec11fab6ef818ca312ac3ac37c2b28ed948fe402c82116f148ba77a6713287be1adb7d73979425f22b7753467f9c73116e2b3f59d9dd172664b8b22a27ab674c05e388d303fe2f00a663b73f7859c2a36638985896e5656b7c12b8e2db07391198bf470f7b21510c6b54b584cdaac2ace2e818d499a52bd04f3cbf117af62d08e15dcdd63e4a6e61e3b3fcaa66afe5c189ad55c1899118bf9f39139a6db4c82a893dc3e9974adde9cd5654c101bb5f7c5c06db594ec28b5f771ddbe89b45bee1b6f1b71fabab0813a9f3f4b3810b7a60a902bfa3ed8715807565b1aab5e5f80164c19d1d2a67b2a66cb48d12b7253c64e2d16e9c60392099393242fbbd96cc9c74e627442a5e26e0a5cd87e4ed57e6d248b08b09e577aa18e982896a0c4f1b24a9a82385652d1d3eecda9bac38608d4b87764c59655af945fefd30dbda7e0825c447d75e584cd6931d7a2ffa145a7fd42c5f947c5ea0bf33ecfccbc58f903aa5ef5174165faedd49db6a25f49d6d574a28c5efc274c8d0e8b335b8edf566bf54464814c4d172ff76a53c0513ddbd4f648b05692fb4bfa438924611e2d3e7a6362fe8af92988b30b980a7dcb572a6c417e864cc63ec11e05018c4b31330b946cea850339d864111768cf06471155d8c982c335f5f3910963b78d0ce7b5a043b32b792c47c62fad9d136306dd57f0dbfcebfe9cc66ce038795023b2608f220fa694af378254026c7fc480c2af68a5dd0d8b9f6764def77b481dbc31f930fae7f3ec99d4e99a7cf86330471b61fa9ec377efc71918cbf54779c007feb9e2354b85eb99577d5757fb5801792b66b542a067451dbf23a345ca5a2d45c05a9308a8a6ce5271683fdeb44d2df27c048f0b87ecf35d4543d3776a0250353109627252b7126a63986579abbfc5f077c378a68782d8086a2eda1e998642f57662cbf4509544814d96d2ee3c04a9c4a85893c968b0c6fc8404678fdf6adcb3889b7bdacb75cd72f7347853e1d4ba5cd4981bdf26629b6c025cd42b21160b24c01df6843656df6f90a9eaaa7727aef747b342b40c5c5e00d544e0d7bba790a49cada8a4738480b82d363b1aced54eb56fd27c4529d576f254dc6e8cc853e1924f4c53b483e86c9711622f9f78a5e74cf76a19e8a0f284088413c20bd50fc99b51c6b05a2ee9c3f9a8fbbf371fae4518e91a3c45fb99a2f2831d70e9619efb25a8e740221c67b5a781f1d995a3c4b6f5b41f201175dd21d7130fbfba8032d546892cc970bdd2777585aba6a55b48d009f0049f7b470b2e773ff9ee151dfb9f990e356b6938e3c7557e4fb3a787db5df5e527b873f1935b4dc90380dee16ad46670f151a773b7a5ee3de9ff55646d218f12d272414f7e022c6f2e8105526d1815dbb3ee87d46ac71cb85f73f4128b69db75fdf9cb7a7f1735f29be5e4ee004c000574e1cd176f5ad90a0ecd93e353a20e6ff3d804e5f20acd8e6c07592fd06199f692de00a2045a8a3c2d308fa42112f7e950a22c8e16aba29d04f328f33032e424bd1a5dabdc7bb0504a436fa8e862c068a9b78c470ad860c005ebe7b07fd1f779684c4bfc9038ea74e72fdd69362fbdd5018d1d2f98072d1c60f944ddc170e8eef51a1805526706b0bd8cb81db079f0a883bb9cf8ad99908e4190ee2f1b40cec3d249eaf122a485f48751e96d1f74cb0fc3880bd", @nested={0x5e, 0x8d, 0x0, 0x1, [@nested={0x4, 0xdb}, @nested={0x4, 0x92}, @generic="704eb2201516957c4a262888544c50861e865b4d4983cb5186d9fd9446a660aac73213b926e0d7a6570e03e41e24a50cf0054dcc57a11e987c4e468a93e5a7dee5bdeed618ea", @generic, @nested={0x4, 0x13a}, @typed={0x8, 0x9, 0x0, 0x0, @pid}]}, @typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x11ec}], 0x5, &(0x7f0000004f80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r1, r0, r1, r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r2]}}], 0xe8, 0x20008000}, 0x4004080) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r7, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 3.775123161s ago: executing program 4 (id=1106): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70001f0010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.666302367s ago: executing program 4 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x3, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x0) 3.407174616s ago: executing program 0 (id=1108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="82", 0x1}], 0xe0}, 0x808c5) 3.32555146s ago: executing program 0 (id=1109): socket(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0xc044) close_range(r4, r2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x2, 0x3, 0xe4ac}, {0x5, 0x1, 0xb, 0xdbee}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r8, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fcntl$getown(r9, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) 3.192515084s ago: executing program 4 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x34}}, 0x800) r2 = socket(0x18, 0x800, 0xfffffe00) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002f40)={@ifindex, 0xffffffffffffffff, 0x1}, 0x20) unshare(0x2a020400) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x38}}, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240), &(0x7f0000001200), 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x8000000000000003, {0x0, 0xff, 0x1}, 0xfd}, 0x18) 3.102989698s ago: executing program 1 (id=1111): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x42, &(0x7f0000001540)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "7b064e", 0xc, 0x11, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.931308322s ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) 2.867827595s ago: executing program 2 (id=1113): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x10) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 2.818032249s ago: executing program 4 (id=1114): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109f41) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0xffffffff, 0x3}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x0, 0x2, 0x10000000}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) fsetxattr(r3, 0x0, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x11, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0x1, 0x1}}, 0x3f00, 0x8, 0x0}) 1.11329795s ago: executing program 1 (id=1115): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r2, 0x80047456, 0x4000000000000000) 947.937126ms ago: executing program 0 (id=1116): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f13, 0x12) 420.738432ms ago: executing program 0 (id=1117): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x300}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtclass={0x50, 0x28, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {0xfff2, 0x4}, {0x0, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xe4, 0x5}}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x50}}, 0x4c004) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) 325.9979ms ago: executing program 4 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x10, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140100001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000580012800b00010069703667726500004800058006000e000100000005000b00f300000006000f0001800000060011004e2100ff080005000800000014000600fc0100000000000000000000000000010800010026"], 0x114}}, 0x0) 198.141939ms ago: executing program 2 (id=1119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x80000001, 0x0, 0x9, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x624182) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000001c0)="cf51b978a5b162b00f0f78dbe865536edc75e223c0b92df1d1e51e515cbcbb4775ba", 0x22}, {&(0x7f0000000300)="ce2ee8d040ff086218144ee1e3648f778a755f46230711f3cd7b727316c52d001babd19e28cd8f08ddb797948f1288cff202b93631f4167756474cf02747526868c9d6f79339e0a3f4ccea08be836417af", 0x51}, {&(0x7f0000000380)="774426960f9691cc1e8b", 0x1f}, {&(0x7f0000000440)="c749d1034f3d06ab028387cf1b204573a8ec7bf564b78866e755a5e7918f6276328fcf82c6179256dfd7baf0e51ca0014d3da7e2f83014dee5e080a2bb26f20571be19c51c34cdeb883ebc95dea8088b6f9791d4daa81a7ab474d0dea8251cafc05a143a469b6c3f0f699a50272cafaf091ca78d47b8a1eb8ad76c85a37182f7d2bafc0d001f4a634f2c96d5d85f4b226914d14865a7407ba55c7495c25aa711467027d8203cdc1c515ba2e7986d31504550b8ed9f3a97fc9e8f9d0d8593f143f0affbab7066ed0a40b27632b654271bf4ed0350fc6232a2fd9ea7da54ca6426033a", 0xe2}], 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 292.43µs ago: executing program 1 (id=1120): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x10fea7, 0xa) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x40, 0x4) 0s ago: executing program 4 (id=1121): close(0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x22, 0x8, 0x77}, {@rand_addr=0x64010105, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) syz_io_uring_setup(0x838, &(0x7f0000000280)={0x0, 0x8679d, 0x400, 0x2, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat(r5, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) syz_clone(0x12020800, &(0x7f0000000300), 0x0, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000400)="20285f6cd9375da689de042dcc352940d438bcb4c8038ad0ba708d4cd1993d4ddc7f62bdc1d8f53482c79f28c3bf4ea5") kernel console output (not intermixed with test programs): ridge_slave_1: left promiscuous mode [ 149.930723][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.323374][ T6962] bond0: (slave bond_slave_0): Releasing backup interface [ 150.825186][ T5916] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 150.943219][ T6962] bond0: (slave bond_slave_1): Releasing backup interface [ 150.975146][ T6962] team0: Port device team_slave_0 removed [ 151.015441][ T6962] team0: Port device team_slave_1 removed [ 151.037247][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.060775][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.082839][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.099193][ T5916] usb 1-1: config 0 has no interfaces? [ 151.110183][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.137266][ T5916] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.198513][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.276190][ T5916] usb 1-1: Product: syz [ 151.280366][ T5916] usb 1-1: Manufacturer: syz [ 151.284928][ T5916] usb 1-1: SerialNumber: syz [ 151.341517][ T5916] usb 1-1: config 0 descriptor?? [ 151.843228][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 152.215278][ T5949] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.225376][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 153.239426][ T5949] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 153.252607][ T5949] usb 4-1: config 0 has no interface number 0 [ 153.300271][ T5949] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 153.326344][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.359791][ T5949] usb 4-1: Product: syz [ 153.381952][ T5949] usb 4-1: Manufacturer: syz [ 153.401070][ T5949] usb 4-1: SerialNumber: syz [ 153.442079][ T5949] usb 4-1: config 0 descriptor?? [ 153.467988][ T5949] usb 4-1: bad CDC descriptors [ 153.510237][ T7001] usb usb8: usbfs: process 7001 (syz.4.287) did not claim interface 0 before use [ 153.670998][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.688944][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.704303][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.733254][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.746316][ T5899] usb 4-1: USB disconnect, device number 12 [ 153.749503][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.288'. [ 154.224875][ T5949] usb 1-1: USB disconnect, device number 14 [ 154.446413][ T7019] bridge0: port 3(erspan0) entered blocking state [ 154.453901][ T7019] bridge0: port 3(erspan0) entered disabled state [ 154.461564][ T7019] erspan0: entered allmulticast mode [ 154.470372][ T7019] erspan0: entered promiscuous mode [ 154.477061][ T7019] bridge0: port 3(erspan0) entered blocking state [ 154.484397][ T7019] bridge0: port 3(erspan0) entered forwarding state [ 154.497321][ T7022] erspan0: left allmulticast mode [ 154.518560][ T7022] erspan0: left promiscuous mode [ 154.554628][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 154.596192][ T7022] bridge0: port 3(erspan0) entered disabled state [ 155.887132][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 156.829221][ T7033] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 157.595242][ T917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.633218][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 157.758282][ T917] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.773504][ T917] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.795438][ T917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.808306][ T917] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 157.817706][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.858423][ T917] usb 3-1: config 0 descriptor?? [ 157.968378][ T7070] capability: warning: `syz.0.308' uses deprecated v2 capabilities in a way that may be insecure [ 158.091789][ T7054] netlink: 88 bytes leftover after parsing attributes in process `syz.2.302'. [ 158.102042][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 158.263659][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 158.625484][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.660191][ T917] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 158.704213][ T5949] usb 3-1: USB disconnect, device number 14 [ 158.802279][ T7082] fido_id[7082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 158.819543][ T5916] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 158.828676][ T5916] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 158.905880][ T5916] usb 4-1: config 0 has no interface number 0 [ 158.928521][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 158.939176][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.954505][ T5916] usb 4-1: Product: syz [ 158.978340][ T5916] usb 4-1: Manufacturer: syz [ 159.000279][ T5916] usb 4-1: SerialNumber: syz [ 159.058531][ T5916] usb 4-1: config 0 descriptor?? [ 159.753484][ T7089] usb usb8: usbfs: process 7089 (syz.4.314) did not claim interface 0 before use [ 159.767279][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.779649][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.799876][ T7077] ipvlan2: entered allmulticast mode [ 159.805389][ T7077] geneve0: entered allmulticast mode [ 159.830706][ T5916] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 159.845853][ T5916] usb 4-1: No valid video chain found. [ 159.857542][ T5916] usb 4-1: USB disconnect, device number 13 [ 159.872563][ T7094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.074546][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 160.095152][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 160.285163][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 160.455356][ T9] usb 3-1: device descriptor read/64, error -71 [ 160.715735][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 160.859270][ T9] usb 3-1: device descriptor read/64, error -71 [ 160.986361][ T9] usb usb3-port1: attempt power cycle [ 161.675279][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.685802][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.324'. [ 161.726309][ T9] usb 3-1: device descriptor read/8, error -71 [ 161.978594][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.026109][ T9] usb 3-1: device descriptor read/8, error -71 [ 162.160180][ T9] usb usb3-port1: unable to enumerate USB device [ 162.455720][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.651331][ T9] usb 1-1: config 0 has no interfaces? [ 162.656985][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 162.670080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.710343][ T9] usb 1-1: config 0 descriptor?? [ 162.948633][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.965462][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.077179][ T5899] usb 1-1: USB disconnect, device number 15 [ 163.453015][ T7160] usb usb8: usbfs: process 7160 (syz.4.331) did not claim interface 0 before use [ 163.685340][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 163.848395][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 163.856267][ T5899] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 163.865493][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.930733][ T5899] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 163.941646][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.957321][ T5899] usb 1-1: SerialNumber: syz [ 164.270882][ T5899] usb 1-1: USB disconnect, device number 16 [ 164.974269][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 167.287830][ T7203] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[7203] [ 167.514539][ T7208] netlink: 'syz.0.340': attribute type 21 has an invalid length. [ 167.524668][ T7208] netlink: 128 bytes leftover after parsing attributes in process `syz.0.340'. [ 167.544292][ T7208] netlink: 'syz.0.340': attribute type 4 has an invalid length. [ 167.588656][ T7208] netlink: 3 bytes leftover after parsing attributes in process `syz.0.340'. [ 167.706713][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 169.005233][ T917] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 169.173156][ T7228] usb usb8: usbfs: process 7228 (syz.4.345) did not claim interface 0 before use [ 169.177493][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 169.192246][ T917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 169.221267][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 169.284772][ T917] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 169.298307][ T917] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 169.323043][ T917] usb 4-1: Manufacturer: syz [ 169.500654][ T917] usb 4-1: config 0 descriptor?? [ 169.592771][ T917] smsusb:smsusb_probe: board id=9, interface number 0 [ 169.600472][ T917] smsusb:smsusb_probe: Device initialized with return code -19 [ 169.910179][ T7238] program syz.3.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.346064][ T7241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.343'. [ 171.290173][ T7249] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2689438118 (5378876236 ns) > initial count (2190874760 ns). Using initial count to start timer. [ 171.655355][ T5907] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.755687][ T7262] usb usb8: usbfs: process 7262 (syz.1.351) did not claim interface 0 before use [ 171.875301][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.891795][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.905493][ T5907] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 171.922611][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.942796][ T5907] usb 3-1: config 0 descriptor?? [ 172.717379][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 172.985316][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 173.102282][ T5907] usb 3-1: USB disconnect, device number 19 [ 173.201896][ T10] usb 4-1: USB disconnect, device number 14 [ 173.374940][ T7288] netlink: 156 bytes leftover after parsing attributes in process `syz.3.357'. [ 173.485566][ T7288] fuse: Bad value for 'fd' [ 173.645735][ T7280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.652898][ T7280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.671513][ T7280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.711271][ T7280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.770140][ T7280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.113302][ T7308] fuse: Bad value for 'fd' [ 175.125465][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.334406][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 175.509753][ T9] usb 4-1: device descriptor read/64, error -71 [ 175.770122][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.776699][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 175.784435][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.790634][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.854328][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.975447][ T9] usb 4-1: device descriptor read/64, error -71 [ 176.017035][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 176.096142][ T9] usb usb4-port1: attempt power cycle [ 176.495402][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 176.577693][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.666576][ T7340] usb usb8: usbfs: process 7340 (syz.0.368) did not claim interface 0 before use [ 176.871835][ T7344] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 177.005265][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 177.043980][ T9] usb 4-1: device descriptor read/8, error -71 [ 177.163131][ T9] usb usb4-port1: unable to enumerate USB device [ 178.190221][ T7364] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 178.198113][ T7364] vlan2: entered promiscuous mode [ 178.405135][ T5907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 178.578036][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 178.595382][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.627784][ T5907] usb 3-1: config 0 has no interfaces? [ 178.645558][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.654743][ T5907] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.666666][ T5907] usb 3-1: Manufacturer: syz [ 178.692080][ T5907] usb 3-1: config 0 descriptor?? [ 179.082719][ T7378] fuse: Bad value for 'fd' [ 179.170819][ T7382] FAULT_INJECTION: forcing a failure. [ 179.170819][ T7382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.212306][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 179.231636][ T7384] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 179.261038][ T7382] CPU: 0 UID: 0 PID: 7382 Comm: syz.0.380 Not tainted syzkaller #0 PREEMPT(full) [ 179.261061][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.261071][ T7382] Call Trace: [ 179.261078][ T7382] [ 179.261090][ T7382] dump_stack_lvl+0x189/0x250 [ 179.261116][ T7382] ? __pfx____ratelimit+0x10/0x10 [ 179.261139][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.261157][ T7382] ? __pfx__printk+0x10/0x10 [ 179.261172][ T7382] ? __might_fault+0xb0/0x130 [ 179.261201][ T7382] should_fail_ex+0x414/0x560 [ 179.261230][ T7382] _copy_from_user+0x2d/0xb0 [ 179.261252][ T7382] snd_ctl_ioctl+0x359/0x1bf0 [ 179.261274][ T7382] ? stack_trace_save+0x9c/0xe0 [ 179.261293][ T7382] ? __pfx_stack_trace_save+0x10/0x10 [ 179.261311][ T7382] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 179.261329][ T7382] ? stack_depot_save_flags+0x40/0x860 [ 179.261352][ T7382] ? kasan_save_track+0x4f/0x80 [ 179.261369][ T7382] ? kasan_save_track+0x3e/0x80 [ 179.261386][ T7382] ? kasan_save_free_info+0x46/0x50 [ 179.261403][ T7382] ? __kasan_slab_free+0x5b/0x80 [ 179.261421][ T7382] ? kfree+0x18e/0x440 [ 179.261438][ T7382] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 179.261457][ T7382] ? security_file_ioctl+0xcb/0x2d0 [ 179.261475][ T7382] ? __se_sys_ioctl+0x47/0x170 [ 179.261499][ T7382] ? do_syscall_64+0xfa/0x3b0 [ 179.261515][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.261577][ T7382] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 179.261599][ T7382] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 179.261622][ T7382] ? do_vfs_ioctl+0xbe8/0x1430 [ 179.261643][ T7382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.261673][ T7382] ? __lock_acquire+0xab9/0xd20 [ 179.261705][ T7382] ? __fget_files+0x2a/0x420 [ 179.261724][ T7382] ? __fget_files+0x2a/0x420 [ 179.261738][ T7382] ? __fget_files+0x3a0/0x420 [ 179.261755][ T7382] ? __fget_files+0x2a/0x420 [ 179.261773][ T7382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.261794][ T7382] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 179.261814][ T7382] __se_sys_ioctl+0xf9/0x170 [ 179.261837][ T7382] do_syscall_64+0xfa/0x3b0 [ 179.261854][ T7382] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.261870][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.261887][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 179.261906][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.261922][ T7382] RIP: 0033:0x7feabbf8eec9 [ 179.261937][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.261950][ T7382] RSP: 002b:00007feaba1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.262004][ T7382] RAX: ffffffffffffffda RBX: 00007feabc1e5fa0 RCX: 00007feabbf8eec9 [ 179.262016][ T7382] RDX: 0000200000001340 RSI: 00000000c1105517 RDI: 0000000000000003 [ 179.262027][ T7382] RBP: 00007feaba1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 179.262037][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.262047][ T7382] R13: 00007feabc1e6038 R14: 00007feabc1e5fa0 R15: 00007feabc30fa28 [ 179.262074][ T7382] [ 180.760158][ T5907] usb 3-1: USB disconnect, device number 20 [ 180.914773][ T5949] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 181.088462][ T5949] usb 2-1: config 0 has no interfaces? [ 181.102554][ T5949] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.216780][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.259441][ T5949] usb 2-1: Product: syz [ 181.284994][ T5949] usb 2-1: Manufacturer: syz [ 181.324336][ T5949] usb 2-1: SerialNumber: syz [ 181.482364][ T5949] usb 2-1: config 0 descriptor?? [ 181.732979][ T7413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.386'. [ 182.866194][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.887247][ T7428] fuse: Bad value for 'fd' [ 183.025143][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 183.032537][ T5907] usb 5-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 183.044356][ T5907] usb 5-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 183.058839][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.110799][ T5907] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 183.158957][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.190630][ T5907] usb 5-1: config 0 descriptor?? [ 183.225275][ T5916] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 183.325614][ T7396] syz.1.383 (7396) used greatest stack depth: 18808 bytes left [ 183.408854][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.459427][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.643236][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.703039][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.730858][ T5899] usb 2-1: USB disconnect, device number 21 [ 183.810573][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 183.828020][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.864664][ T5907] usb 5-1: USB disconnect, device number 14 [ 183.971410][ T5916] usb 3-1: GET_CAPABILITIES returned 78 [ 183.978608][ T5916] usbtmc 3-1:16.0: can't read capabilities [ 184.008352][ T7447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.397'. [ 184.193742][ T5899] usb 3-1: USB disconnect, device number 21 [ 184.257179][ T7444] ip6tnl1: entered promiscuous mode [ 184.357851][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 185.013503][ T7461] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 185.130960][ T7465] fuse: Bad value for 'fd' [ 185.157921][ T7468] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 185.480160][ T7473] binder: 7472:7473 ioctl c018620c 200000000000 returned -22 [ 185.805169][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.085261][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 186.415247][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.435470][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 186.463924][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25264, setting to 1024 [ 186.495330][ T5907] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 186.505392][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.776063][ T5907] usb 4-1: config 0 descriptor?? [ 187.016004][ T7487] fuse: Bad value for 'max_read' [ 187.199391][ T5907] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 187.227260][ T5907] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 187.297357][ T5907] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 187.374760][ T5907] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 187.479710][ T5907] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 187.587385][ T5907] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 187.606565][ T5907] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 187.622061][ T7494] capability: warning: `syz.0.410' uses 32-bit capabilities (legacy support in use) [ 187.915577][ T5907] usb 4-1: USB disconnect, device number 19 [ 189.195220][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.377692][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 189.403554][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.416747][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 189.428403][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 189.441222][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 189.452354][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.515673][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 189.528450][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 189.537716][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.546045][ T9] usb 5-1: Product: syz [ 189.609481][ T9] usb 5-1: Manufacturer: syz [ 189.614086][ T9] usb 5-1: SerialNumber: syz [ 189.620768][ T9] usb 5-1: config 0 descriptor?? [ 189.699535][ T7528] usb usb8: usbfs: process 7528 (syz.2.419) did not claim interface 0 before use [ 191.549992][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 191.745693][ T7551] hub 9-0:1.0: USB hub found [ 191.752454][ T7551] hub 9-0:1.0: 1 port detected [ 192.146008][ T9] rc_core: IR keymap rc-imon-rsc not found [ 192.200207][ T9] Registered IR keymap rc-empty [ 192.230803][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 192.256892][ T9] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 192.419174][ T30] audit: type=1326 audit(1759263750.113:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0faad8eec9 code=0x0 [ 192.523032][ T9] usb 5-1: USB disconnect, device number 15 [ 193.125294][ T9] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 193.308804][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.326773][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.340788][ T9] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 193.357873][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.389083][ T9] usb 5-1: config 0 descriptor?? [ 193.515191][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 193.523759][ T5932] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 193.707553][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.722983][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.749077][ T5932] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.765224][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 193.776623][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.784648][ T5932] usb 1-1: Product: syz [ 193.790920][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 193.800353][ T5932] usb 1-1: Manufacturer: syz [ 193.805531][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.821240][ T5932] usb 1-1: SerialNumber: syz [ 193.835764][ T9] glorious 0003:258A:0036.0005: hidraw0: USB HID v7.e3 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 193.850039][ T5932] usb 1-1: config 0 descriptor?? [ 193.850826][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 193.855243][ T10] usb 4-1: config 0 descriptor?? [ 193.876028][ T7572] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.960701][ T30] audit: type=1400 audit(1759263751.693:84): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A48C7C2 pid=7581 comm="syz.2.436" [ 194.020775][ T5900] usb 5-1: USB disconnect, device number 16 [ 194.055811][ T5907] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 194.174783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181387][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.217732][ T5907] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 194.228015][ T5907] usb 2-1: config 7 has no interface number 0 [ 194.234933][ T5907] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 194.248692][ T5907] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 194.259606][ T5907] usb 2-1: config 7 interface 252 has no altsetting 0 [ 194.270043][ T5907] usb 2-1: string descriptor 0 read error: -22 [ 194.277609][ T5907] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 194.293416][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.314552][ T5907] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 194.338061][ T10] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.0006/input/input7 [ 194.398856][ T7574] syzkaller0: entered promiscuous mode [ 194.404441][ T7574] syzkaller0: entered allmulticast mode [ 194.435818][ T10] creative-sb0540 0003:041E:3100.0006: input,hidraw0: USB HID v0.05 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 194.515017][ T10] usb 2-1: USB disconnect, device number 22 [ 194.614686][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.623066][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.649010][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 194.721791][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.740370][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.792392][ T7569] veth0_macvtap: left allmulticast mode [ 194.845390][ T7569] ip6tnl1: left promiscuous mode [ 194.851199][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 194.861695][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 194.876381][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.878885][ T9] usb 4-1: USB disconnect, device number 20 [ 194.898158][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.912487][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.940427][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.971120][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.992409][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.018915][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.043327][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.787086][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 195.808591][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 195.848063][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.878554][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.045750][ T5950] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 196.473590][ T5932] usb 1-1: USB disconnect, device number 17 [ 196.515292][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 196.644959][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.776424][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 196.813703][ T5950] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 196.822855][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.833877][ T5950] usb 4-1: Product: syz [ 196.849109][ T5950] usb 4-1: Manufacturer: syz [ 196.853775][ T5950] usb 4-1: SerialNumber: syz [ 196.865617][ T5950] usb 4-1: config 0 descriptor?? [ 196.881170][ T5950] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 198.672673][ T5932] usb 4-1: USB disconnect, device number 21 [ 199.345827][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 199.516947][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.532652][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.542004][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.561472][ T5916] usb 4-1: Product: syz [ 199.572006][ T5916] usb 4-1: Manufacturer: syz [ 199.583621][ T5916] usb 4-1: SerialNumber: syz [ 199.606352][ T5916] usb 4-1: config 0 descriptor?? [ 200.056135][ T5916] usb 4-1: USB disconnect, device number 22 [ 200.821215][ T7652] netlink: 536 bytes leftover after parsing attributes in process `syz.3.452'. [ 200.830966][ T7652] netlink: 124 bytes leftover after parsing attributes in process `syz.3.452'. [ 201.040379][ T7665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.325562][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 201.452374][ T30] audit: type=1326 audit(1759263759.183:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.2.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0faad8eec9 code=0x0 [ 202.165581][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.326764][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.355656][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.384012][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.465138][ T5916] usb 4-1: Product: syz [ 202.498101][ T5916] usb 4-1: Manufacturer: syz [ 202.521487][ T5916] usb 4-1: SerialNumber: syz [ 202.617318][ T7696] 8021q: VLANs not supported on ip6_vti0 [ 202.649674][ T5932] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 202.828896][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 202.856246][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 202.895309][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 202.946961][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 202.986053][ T5932] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 203.015113][ T5932] usb 3-1: Manufacturer: syz [ 203.027345][ T5932] usb 3-1: config 0 descriptor?? [ 203.052730][ T5932] smsusb:smsusb_probe: board id=9, interface number 0 [ 203.065855][ T5932] smsusb:smsusb_probe: Device initialized with return code -19 [ 203.099428][ T7701] loop6: detected capacity change from 0 to 524287999 [ 203.281035][ T7694] program syz.2.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.558048][ T7718] mmap: syz.1.471 (7718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.599485][ T5916] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 203.694481][ T5916] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 203.869788][ T5916] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 203.936315][ T7723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.466'. [ 204.299669][ T5916] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 204.438538][ T5916] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 204.472576][ T5916] usb 4-1: USB disconnect, device number 23 [ 204.540767][ T5916] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 205.155586][ T7732] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 205.204600][ T7734] fuse: Bad value for 'user_id' [ 205.209561][ T7734] fuse: Bad value for 'user_id' [ 205.259003][ T7737] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 205.357272][ T5932] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 205.629386][ T10] usb 3-1: USB disconnect, device number 23 [ 205.656414][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 205.679637][ T5932] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 205.690737][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.708448][ T5932] usb 1-1: config 0 descriptor?? [ 205.743031][ T5932] gspca_main: sunplus-2.14.0 probing 041e:400b [ 206.749732][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 206.803171][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 206.953862][ T5932] gspca_sunplus: reg_w_riv err -71 [ 206.961204][ T5932] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 207.081466][ T5932] usb 1-1: USB disconnect, device number 18 [ 207.234498][ T7763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.483'. [ 207.720754][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 208.296288][ T5932] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 208.458832][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 208.568808][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 208.655596][ T5916] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 208.723410][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.891558][ T7799] netlink: 'syz.1.493': attribute type 4 has an invalid length. [ 208.950603][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.969269][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 208.978644][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.032862][ T5932] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 209.085663][ T7802] netlink: 'syz.1.493': attribute type 4 has an invalid length. [ 209.138970][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.362609][ T5932] usb 1-1: Product: syz [ 209.385904][ T5932] usb 1-1: Manufacturer: syz [ 209.399634][ T5932] usb 1-1: SerialNumber: syz [ 209.430356][ T5932] usb 1-1: config 0 descriptor?? [ 209.454647][ T5932] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 210.846959][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.859558][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.873671][ T5916] usb 3-1: can't read configurations, error -71 [ 211.285270][ T5949] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.436591][ T10] usb 1-1: USB disconnect, device number 19 [ 211.445995][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 211.452994][ T5949] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.500863][ T5949] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.538324][ T5949] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 211.571277][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.583663][ T7827] loop9: detected capacity change from 0 to 7 [ 211.599537][ T7827] Dev loop9: unable to read RDB block 7 [ 211.608944][ T7827] loop9: AHDI p1 p2 p3 [ 211.614376][ T7827] loop9: partition table partially beyond EOD, truncated [ 211.627673][ T5949] usb 5-1: config 0 descriptor?? [ 211.642743][ T7827] loop9: p1 start 1601398130 is beyond EOD, truncated [ 211.666041][ T7827] loop9: p2 start 1702059890 is beyond EOD, truncated [ 211.666154][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 212.343914][ T7837] fuse: Bad value for 'fd' [ 212.513293][ T7840] netlink: 84 bytes leftover after parsing attributes in process `syz.3.503'. [ 212.609756][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 212.617833][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 212.639619][ T5949] usb 5-1: USB disconnect, device number 17 [ 212.795393][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 212.855759][ T7848] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 212.874015][ T7848] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 213.195354][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 213.202175][ T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 213.213086][ T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 213.401327][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.411350][ T10] usb 3-1: Product: syz [ 213.417453][ T10] usb 3-1: Manufacturer: syz [ 213.426082][ T10] usb 3-1: SerialNumber: syz [ 213.451330][ T10] usb 3-1: config 0 descriptor?? [ 213.520442][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 213.538824][ T10] usb 3-1: setting power ON [ 213.549326][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 213.671172][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.701739][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 213.743129][ T10] usb 3-1: media controller created [ 213.955004][ T7842] dvb-usb: bulk message failed: -22 (3/0) [ 214.023264][ T7842] cxusb: i2c wr: len=79 is too big! [ 214.023264][ T7842] [ 214.099332][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.263413][ T10] usb 3-1: selecting invalid altsetting 6 [ 214.344163][ T10] usb 3-1: digital interface selection failed (-22) [ 214.362983][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 214.392951][ T10] usb 3-1: setting power OFF [ 214.399553][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 214.420277][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 214.442015][ T10] (NULL device *): no alternate interface [ 215.347334][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 215.379425][ T7879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.512'. [ 215.391910][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 216.299589][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.320581][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.346360][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.319937][ T5949] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 217.373222][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.397426][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.426130][ T7908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.445147][ T5932] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.464197][ T7908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.475725][ T5949] usb 2-1: device descriptor read/64, error -71 [ 218.066079][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 218.072748][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.084260][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.096128][ T5949] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 218.230083][ T5949] usb 2-1: device descriptor read/64, error -71 [ 218.253959][ T5932] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.415548][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 218.438532][ T5949] usb usb2-port1: attempt power cycle [ 218.450765][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.533218][ T5932] usb 5-1: config 0 descriptor?? [ 218.785357][ T5949] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 218.816008][ T5949] usb 2-1: device descriptor read/8, error -71 [ 218.839785][ T7921] FAULT_INJECTION: forcing a failure. [ 218.839785][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 218.852578][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 218.852603][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.852612][ T7921] Call Trace: [ 218.852619][ T7921] [ 218.852626][ T7921] dump_stack_lvl+0x189/0x250 [ 218.852650][ T7921] ? __pfx____ratelimit+0x10/0x10 [ 218.852669][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.852688][ T7921] ? __pfx__printk+0x10/0x10 [ 218.852705][ T7921] ? __pfx___might_resched+0x10/0x10 [ 218.852722][ T7921] ? fs_reclaim_acquire+0x7d/0x100 [ 218.852743][ T7921] should_fail_ex+0x414/0x560 [ 218.852774][ T7921] should_failslab+0xa8/0x100 [ 218.852799][ T7921] __kmalloc_noprof+0xcb/0x4f0 [ 218.852820][ T7921] ? sock_kmalloc+0xd6/0x160 [ 218.852845][ T7921] sock_kmalloc+0xd6/0x160 [ 218.852868][ T7921] skcipher_recvmsg+0x571/0x11d0 [ 218.852909][ T7921] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 218.852935][ T7921] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 218.852952][ T7921] ? security_socket_recvmsg+0x7e/0x2e0 [ 218.852972][ T7921] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 218.852994][ T7921] sock_recvmsg+0x22c/0x270 [ 218.853015][ T7921] __sys_recvfrom+0x1f6/0x340 [ 218.853037][ T7921] ? __pfx___sys_recvfrom+0x10/0x10 [ 218.853054][ T7921] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 218.853087][ T7921] ? __fget_files+0x3a0/0x420 [ 218.853111][ T7921] ? ksys_write+0x22a/0x250 [ 218.853134][ T7921] ? __pfx_ksys_write+0x10/0x10 [ 218.853152][ T7921] ? rcu_is_watching+0x15/0xb0 [ 218.853174][ T7921] __x64_sys_recvfrom+0xde/0x100 [ 218.853198][ T7921] do_syscall_64+0xfa/0x3b0 [ 218.853215][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.853233][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.853250][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 218.853271][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.853285][ T7921] RIP: 0033:0x7f423c98eec9 [ 218.853299][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.853313][ T7921] RSP: 002b:00007f423abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 218.853331][ T7921] RAX: ffffffffffffffda RBX: 00007f423cbe5fa0 RCX: 00007f423c98eec9 [ 218.853342][ T7921] RDX: 00000000000000b6 RSI: 00002000000001c0 RDI: 0000000000000004 [ 218.853352][ T7921] RBP: 00007f423abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.853360][ T7921] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 218.853369][ T7921] R13: 00007f423cbe6038 R14: 00007f423cbe5fa0 R15: 00007f423cd0fa28 [ 218.853394][ T7921] [ 219.162666][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 219.170304][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 219.186011][ T5932] usb 5-1: USB disconnect, device number 18 [ 219.285158][ T5949] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 219.305857][ T5949] usb 2-1: device descriptor read/8, error -71 [ 219.417573][ T5949] usb usb2-port1: unable to enumerate USB device [ 220.057768][ T7943] program syz.1.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.643243][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 223.216253][ T7997] ip6tnl1: entered promiscuous mode [ 223.395283][ T5900] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 224.000782][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 224.014185][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.121218][ T5900] usb 1-1: config 0 descriptor?? [ 224.126101][ T5949] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 224.129313][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 224.286202][ T5932] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 224.309885][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 224.362685][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 224.465184][ T5932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.488323][ T5949] usb 5-1: config 0 has no interfaces? [ 224.528785][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.553087][ T5932] usb 2-1: config 0 descriptor?? [ 224.566543][ T5932] cp210x 2-1:0.0: cp210x converter detected [ 224.579368][ T5949] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 224.631009][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.664088][ T5949] usb 5-1: Product: syz [ 224.681112][ T5949] usb 5-1: Manufacturer: syz [ 224.700467][ T5949] usb 5-1: SerialNumber: syz [ 224.777918][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.786941][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.798761][ T5932] usb 2-1: cp210x converter now attached to ttyUSB0 [ 224.819725][ T5949] usb 5-1: config 0 descriptor?? [ 225.380172][ T5900] usb 1-1: USB disconnect, device number 20 [ 225.528615][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.684170][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.421432][ T5916] usb 2-1: USB disconnect, device number 27 [ 226.429983][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.446691][ T5916] cp210x 2-1:0.0: device disconnected [ 226.571486][ T5900] usb 5-1: USB disconnect, device number 19 [ 226.598303][ T8037] sctp: [Deprecated]: syz.4.556 (pid 8037) Use of int in max_burst socket option deprecated. [ 226.598303][ T8037] Use struct sctp_assoc_value instead [ 226.816691][ T8043] fuse: Invalid gid '00000000000000000005' [ 227.474106][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.561'. [ 227.677822][ T8070] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 227.686413][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.565'. [ 227.697593][ T8070] batman_adv: batadv0: Adding interface: virt_wifi0 [ 227.704287][ T8070] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.733370][ T8070] batman_adv: batadv0: Interface activated: virt_wifi0 [ 228.354280][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 228.363870][ T8087] chnl_net:caif_netlink_parms(): no params data found [ 228.815458][ T5950] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 228.887091][ T8092] sch_tbf: burst 19920 is lower than device lo mtu (11337746) ! [ 229.003118][ T5950] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 229.015958][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.026667][ T5950] usb 2-1: config 0 has no interfaces? [ 229.145822][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 229.173671][ T5950] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.183623][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.192916][ T5950] usb 2-1: Product: syz [ 229.197432][ T5950] usb 2-1: Manufacturer: syz [ 229.243139][ T5950] usb 2-1: SerialNumber: syz [ 229.271220][ T5950] usb 2-1: config 0 descriptor?? [ 229.475172][ T5932] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.588111][ T8104] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 229.675201][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 229.706244][ T8087] : entered promiscuous mode [ 229.724031][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.745978][ T5932] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 229.805845][ T5932] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 229.951349][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.168907][ T5932] usb 5-1: Product: syz [ 230.173297][ T5932] usb 5-1: Manufacturer: syz [ 230.180282][ T5932] usb 5-1: SerialNumber: syz [ 230.194577][ T5932] usb 5-1: config 0 descriptor?? [ 230.257805][ T5932] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 231.885487][ T5950] usb 2-1: USB disconnect, device number 28 [ 232.355311][ T5950] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 232.538691][ T5950] usb 2-1: config 0 has no interfaces? [ 232.552383][ T5950] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 232.593650][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.632219][ T5950] usb 2-1: Product: syz [ 232.678763][ T8131] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 232.806897][ T5949] usb 5-1: USB disconnect, device number 20 [ 232.816920][ T5950] usb 2-1: Manufacturer: syz [ 232.821530][ T5950] usb 2-1: SerialNumber: syz [ 232.881712][ T5950] usb 2-1: config 0 descriptor?? [ 233.142111][ T8122] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.208993][ T5949] usb 2-1: USB disconnect, device number 29 [ 235.010730][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.895216][ T5949] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 236.085439][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 236.098921][ T5949] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 236.108214][ T5949] usb 2-1: config 0 has no interface number 0 [ 236.152610][ T5949] usb 2-1: New USB device found, idVendor=12d1, idProduct=d6dc, bcdDevice=13.c3 [ 236.178464][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.197304][ T5949] usb 2-1: Product: syz [ 236.201490][ T5949] usb 2-1: Manufacturer: syz [ 236.207555][ T5949] usb 2-1: SerialNumber: syz [ 236.219608][ T5949] usb 2-1: config 0 descriptor?? [ 236.233417][ T5949] option 2-1:0.211: GSM modem (1-port) converter detected [ 236.487735][ T8174] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 236.560216][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.584131][ T8197] batadv_slave_0: entered promiscuous mode [ 237.591335][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.600'. [ 238.786978][ T5950] usb 2-1: USB disconnect, device number 30 [ 238.798740][ T5950] option 2-1:0.211: device disconnected [ 238.870381][ T8244] batadv_slave_0: entered promiscuous mode [ 238.878732][ T8244] batadv_slave_0: entered allmulticast mode [ 238.887128][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 238.900446][ T8244] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 238.965757][ T30] audit: type=1326 audit(1759263796.693:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe358eec9 code=0x7ffc0000 [ 239.033535][ T30] audit: type=1326 audit(1759263796.693:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe358eec9 code=0x7ffc0000 [ 239.115452][ T30] audit: type=1326 audit(1759263796.693:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.290007][ T30] audit: type=1326 audit(1759263796.693:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe358eec9 code=0x7ffc0000 [ 239.312223][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.390044][ T30] audit: type=1326 audit(1759263796.723:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.412024][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.420356][ T30] audit: type=1326 audit(1759263796.723:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.442354][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.485890][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 239.501222][ T8250] fuse: Bad value for 'fd' [ 239.580604][ T30] audit: type=1326 audit(1759263796.723:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.675490][ T8253] loop6: detected capacity change from 0 to 524287999 [ 239.689027][ T30] audit: type=1326 audit(1759263796.723:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.711017][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.862251][ T30] audit: type=1326 audit(1759263796.723:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 239.978960][ T30] audit: type=1326 audit(1759263796.723:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabe352af79 code=0x7ffc0000 [ 240.052893][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 240.075532][ T8258] veth0: entered promiscuous mode [ 240.084905][ T8258] veth0: left promiscuous mode [ 240.171745][ T8262] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 240.233084][ T8265] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 241.095798][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.137684][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.165160][ T5900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 241.317877][ T5900] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 241.339037][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.362659][ T5900] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 241.385124][ T5900] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 241.385124][ T5950] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 241.393359][ T5900] usb 2-1: Manufacturer: syz [ 241.406649][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.432761][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.466308][ T5900] usb 2-1: config 0 descriptor?? [ 241.587979][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 241.600954][ T5950] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 241.618098][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.631683][ T5950] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.635319][ T5900] rc_core: IR keymap rc-hauppauge not found [ 241.640861][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.657475][ T5900] Registered IR keymap rc-empty [ 241.658689][ T5950] usb 4-1: Product: syz [ 241.664922][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 241.679858][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 241.705404][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 241.849845][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 241.941130][ T5950] usb 4-1: Manufacturer: syz [ 241.946463][ T5950] usb 4-1: SerialNumber: syz [ 242.066923][ T8299] fuse: Bad value for 'fd' [ 242.270099][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.316358][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.338465][ T5950] usb 4-1: 0:2 : does not exist [ 242.547953][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 242.557294][ T8307] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 242.564984][ T8307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.624222][ T5950] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 242.651144][ T8310] loop6: detected capacity change from 0 to 524287999 [ 242.737326][ T5950] usb 4-1: USB disconnect, device number 24 [ 243.659129][ T8322] netlink: 'syz.0.627': attribute type 4 has an invalid length. [ 243.772212][ T8325] netlink: 'syz.0.627': attribute type 4 has an invalid length. [ 243.955853][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 244.579662][ T5950] usb 2-1: USB disconnect, device number 31 [ 244.813263][ T8337] syzkaller1: entered promiscuous mode [ 244.829110][ T8337] syzkaller1: entered allmulticast mode [ 245.071267][ T8340] ip6tnl3: entered promiscuous mode [ 245.770002][ T8346] fuse: Bad value for 'fd' [ 246.189167][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.206368][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.509979][ T8361] loop6: detected capacity change from 0 to 524287999 [ 247.435235][ T5950] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 247.617977][ T5950] usb 4-1: config 0 has no interfaces? [ 247.654804][ T5950] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 247.845168][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 247.874901][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.155201][ T5950] usb 4-1: Product: syz [ 248.159484][ T5950] usb 4-1: Manufacturer: syz [ 248.173108][ T5950] usb 4-1: SerialNumber: syz [ 248.240664][ T5950] usb 4-1: config 0 descriptor?? [ 249.521758][ T8400] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[8400] [ 249.544792][ T8400] netlink: 88 bytes leftover after parsing attributes in process `syz.1.646'. [ 249.563405][ T8400] netlink: 'syz.1.646': attribute type 21 has an invalid length. [ 249.575744][ T8400] netlink: 128 bytes leftover after parsing attributes in process `syz.1.646'. [ 249.604080][ T8400] netlink: 'syz.1.646': attribute type 4 has an invalid length. [ 249.612448][ T8400] netlink: 3 bytes leftover after parsing attributes in process `syz.1.646'. [ 249.664864][ T8400] batadv1: entered promiscuous mode [ 249.676340][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.579349][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 250.591648][ T9] usb 4-1: USB disconnect, device number 25 [ 251.085203][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 251.263607][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 251.354300][ T8429] usb usb8: usbfs: process 8429 (syz.0.656) did not claim interface 0 before use [ 251.564414][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.580645][ T9] usb 4-1: config 179 has no interface number 0 [ 251.588566][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 251.745598][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 251.784085][ T8437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.808782][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.876215][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 251.958120][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.014847][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.085295][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.124289][ T8421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.391452][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 252.424959][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 252.624771][ T8448] vxlan0: entered promiscuous mode [ 252.744040][ T6774] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.745299][ T5900] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 252.792735][ T6774] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.807024][ T6774] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.860821][ T9] usb 4-1: USB disconnect, device number 26 [ 252.860876][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.860927][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.936696][ T5900] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 252.954809][ T5900] usb 2-1: config 1 has no interface number 0 [ 252.972513][ T5900] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 253.002033][ T5900] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 253.032310][ T5900] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.062083][ T5900] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 253.079030][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.110416][ T5900] usb 2-1: Product: syz [ 253.135809][ T5900] usb 2-1: Manufacturer: syz [ 253.161007][ T5900] usb 2-1: SerialNumber: syz [ 253.179465][ T8450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 253.585734][ T8448] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 253.753031][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.789413][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.842058][ T5900] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 255.053093][ T8496] fuse: Bad value for 'fd' [ 255.419278][ T5900] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.426273][ T5900] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 255.470550][ T5900] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.524915][ T5900] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 255.577201][ T8501] netlink: 84 bytes leftover after parsing attributes in process `syz.0.674'. [ 255.643346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650098][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.716205][ T5900] usb 2-1: USB disconnect, device number 32 [ 255.759783][ T5900] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 255.779277][ T5950] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 255.812393][ T5950] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 255.848703][ T5950] hid-generic 0000:0003:0001.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 256.295710][ T5900] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 256.405550][ T8513] fido_id[8513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.678449][ T8523] netlink: 'syz.2.681': attribute type 5 has an invalid length. [ 256.797398][ T5900] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 256.965195][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 256.979427][ T5900] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 257.016110][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.135572][ T5900] usb 2-1: Product: syz [ 257.139758][ T5900] usb 2-1: Manufacturer: syz [ 257.144352][ T5900] usb 2-1: SerialNumber: syz [ 257.197371][ T5900] usb 2-1: config 0 descriptor?? [ 257.206743][ T5900] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 257.411016][ T8517] fuse: Unknown parameter 'k˜y0x000000000000000a' [ 257.541758][ T5900] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 257.570010][ T5900] visor 2-1:0.0: probe with driver visor failed with error -71 [ 258.093834][ T5900] usb 2-1: USB disconnect, device number 33 [ 258.465016][ T8554] misc userio: No port type given on /dev/userio [ 259.008243][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.040005][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.093336][ T8573] binder: 8572:8573 ioctl 4018620d 0 returned -22 [ 259.614945][ T8575] binder: 8572:8575 ioctl c018620c 0 returned -14 [ 259.624783][ T8575] binder: 8572:8575 ioctl c0306201 0 returned -14 [ 259.853306][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 259.918347][ T5900] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 260.088194][ T5900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.096613][ T5900] usb 5-1: config 0 has no interface number 0 [ 260.108272][ T5900] usb 5-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.127529][ T44] IPVS: starting estimator thread 0... [ 260.133977][ T5900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 260.144873][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.156119][ T5900] usb 5-1: config 0 descriptor?? [ 260.164773][ T8597] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.702'. [ 260.180954][ T5900] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 260.215320][ T8596] IPVS: using max 30 ests per chain, 72000 per kthread [ 261.027040][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 261.103316][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.620987][ T44] usb 5-1: USB disconnect, device number 21 [ 262.906093][ T8661] netlink: 'syz.4.716': attribute type 30 has an invalid length. [ 263.458315][ T8676] trusted_key: encrypted_key: insufficient parameters specified [ 263.925463][ T44] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 264.237638][ T44] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 264.246868][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.255309][ T44] usb 2-1: Product: syz [ 264.259650][ T44] usb 2-1: Manufacturer: syz [ 264.264463][ T44] usb 2-1: SerialNumber: syz [ 264.374822][ T44] usb 2-1: config 0 descriptor?? [ 264.398004][ T44] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 265.326693][ T44] gspca_sunplus: reg_r err -71 [ 265.343511][ T44] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 265.397859][ T44] usb 2-1: USB disconnect, device number 34 [ 266.196825][ T8704] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.729'. [ 266.207966][ T8704] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 266.788477][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 266.825034][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 267.085191][ T978] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 267.835129][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 267.847816][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.882989][ T978] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 267.978238][ T978] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 268.011167][ T8720] input: syz1 as /devices/virtual/input/input10 [ 268.020303][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.047916][ T8720] input: failed to attach handler leds to device input10, error: -6 [ 268.155828][ T978] usb 1-1: Product: syz [ 268.280055][ T978] usb 1-1: Manufacturer: syz [ 268.355285][ T978] usb 1-1: SerialNumber: syz [ 268.527652][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 268.538048][ T978] usb 1-1: config 0 descriptor?? [ 268.723517][ T978] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 268.825287][ T44] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 269.005211][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 269.029938][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.041467][ T44] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 269.099906][ T44] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 269.109224][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.136966][ T44] usb 4-1: Product: syz [ 269.160022][ T44] usb 4-1: Manufacturer: syz [ 269.178111][ T44] usb 4-1: SerialNumber: syz [ 269.192706][ T44] usb 4-1: config 0 descriptor?? [ 269.217445][ T44] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 271.001281][ T978] usb 1-1: USB disconnect, device number 21 [ 271.628710][ T5900] usb 4-1: USB disconnect, device number 27 [ 273.440696][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 274.153640][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 274.176851][ T8772] tipc: Enabling of bearer rejected, failed to enable media [ 274.310526][ T8782] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 274.676942][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.747'. [ 274.897278][ T8777] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 274.999417][ T8777] macsec1: entered allmulticast mode [ 275.054130][ T8777] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 275.108708][ T8782] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 275.689630][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 275.763146][ T8801] kAFS: unable to lookup cell '' [ 275.943901][ T8808] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 276.203151][ T8809] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 276.465571][ T8819] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 276.525402][ T8822] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 277.644566][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 277.845215][ T5900] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 277.997944][ T5900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.013601][ T5900] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.049331][ T5900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.071294][ T8852] usb usb8: usbfs: process 8852 (syz.2.768) did not claim interface 0 before use [ 278.080659][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.095281][ T978] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 278.295246][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 278.319441][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.353612][ T5900] usb 1-1: GET_CAPABILITIES returned 0 [ 278.561798][ T5900] usbtmc 1-1:16.0: can't read capabilities [ 278.916878][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 278.962002][ T978] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 278.971148][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.979311][ T978] usb 2-1: Product: syz [ 278.985478][ T978] usb 2-1: Manufacturer: syz [ 278.995730][ T978] usb 2-1: SerialNumber: syz [ 279.039726][ T978] usb 2-1: config 0 descriptor?? [ 279.078294][ T978] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 279.132357][ T8868] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 280.363715][ T8884] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 280.510629][ T44] usb 1-1: USB disconnect, device number 22 [ 280.695181][ T978] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 280.723401][ T8894] tipc: Can't bind to reserved service type 0 [ 280.850561][ T978] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 280.859456][ T978] usb 5-1: config 0 has no interface number 0 [ 280.868423][ T978] usb 5-1: config 0 interface 29 has no altsetting 0 [ 280.880573][ T978] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 280.894291][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.903015][ T44] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 280.903270][ T978] usb 5-1: Product: syz [ 280.919103][ T978] usb 5-1: Manufacturer: syz [ 280.923816][ T978] usb 5-1: SerialNumber: syz [ 280.934030][ T978] usb 5-1: config 0 descriptor?? [ 281.086980][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.097469][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.113998][ T44] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.123425][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.133973][ T44] usb 1-1: SerialNumber: syz [ 281.218973][ T978] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 281.367512][ T44] usb 1-1: 0:2 : does not exist [ 281.388192][ T44] usb 1-1: unit 5: unexpected type 0x0b [ 281.458226][ T8899] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 281.558077][ T44] usb 1-1: USB disconnect, device number 23 [ 281.614681][ T5950] usb 2-1: USB disconnect, device number 35 [ 281.830832][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.018015][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 282.028068][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 282.037163][ T8907] netlink: 88 bytes leftover after parsing attributes in process `syz.1.781'. [ 282.186767][ T8911] usb usb8: usbfs: process 8911 (syz.2.782) did not claim interface 0 before use [ 283.658934][ T978] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 283.694391][ T978] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 283.760915][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 283.775322][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 283.822682][ T8924] bridge0: port 3(vlan2) entered blocking state [ 283.847243][ T978] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 283.884084][ T978] usb 5-1: USB disconnect, device number 22 [ 283.930394][ T8924] bridge0: port 3(vlan2) entered disabled state [ 283.942678][ T8924] vlan2: entered allmulticast mode [ 283.950320][ T8924] bridge0: entered allmulticast mode [ 284.016416][ T8924] vlan2: left allmulticast mode [ 284.021416][ T8924] bridge0: left allmulticast mode [ 284.161290][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 284.392114][ T8924] netlink: 27 bytes leftover after parsing attributes in process `syz.4.786'. [ 284.485179][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 284.536712][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 284.625180][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 284.772297][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 284.799588][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 284.850705][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 284.921756][ T44] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 284.940669][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.992018][ T44] usb 1-1: Product: syz [ 285.012967][ T44] usb 1-1: Manufacturer: syz [ 285.068424][ T44] usb 1-1: SerialNumber: syz [ 285.093111][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 285.126133][ T44] usb 1-1: config 0 descriptor?? [ 285.396092][ T5900] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 285.658318][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.695648][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.701652][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 286.604040][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.619447][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 286.657185][ T5900] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 286.718422][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.730395][ T5900] usb 5-1: Product: syz [ 286.734746][ T5900] usb 5-1: Manufacturer: syz [ 286.740284][ T5900] usb 5-1: SerialNumber: syz [ 286.747011][ T5900] usb 5-1: config 0 descriptor?? [ 286.758200][ T5900] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 287.373977][ T8966] usb usb8: usbfs: process 8966 (syz.3.800) did not claim interface 0 before use [ 287.557752][ T44] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 287.568982][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.582762][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.594730][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.603054][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.743700][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.756974][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.763538][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.779914][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.826383][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.832788][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.847331][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.859092][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 287.931044][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 287.950911][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 287.982064][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 288.002612][ T44] input input11: Timeout waiting for response from device. [ 288.036704][ T44] usb 1-1: USB disconnect, device number 24 [ 288.085806][ T8982] netlink: 'syz.2.802': attribute type 27 has an invalid length. [ 288.215290][ T5916] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 288.342261][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.349656][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.395232][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 288.405644][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.430553][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 288.481573][ T5916] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 288.548022][ T5916] usb 2-1: config 0 interface 0 has no altsetting 1 [ 288.581681][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 288.591183][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.623834][ T5916] usb 2-1: Product: syz [ 288.640092][ T5916] usb 2-1: Manufacturer: syz [ 288.676585][ T5916] usb 2-1: SerialNumber: syz [ 288.751047][ T5916] usb 2-1: config 0 descriptor?? [ 288.856799][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.130132][ T8990] usb 5-1: USB disconnect, device number 23 [ 289.205833][ T8999] netlink: 84 bytes leftover after parsing attributes in process `syz.3.804'. [ 289.271507][ T8982] batadv_slave_0: left promiscuous mode [ 289.315704][ T5916] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 289.364480][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.430624][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.480290][ T5916] usb 2-1: USB disconnect, device number 36 [ 289.983942][ T8982] ip6tnl1: left promiscuous mode [ 290.002775][ T8982] sit1: left allmulticast mode [ 290.045464][ T8989] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.091112][ T6774] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.114683][ T6774] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.203526][ T6774] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.212688][ T8989] usb 5-1: Using ep0 maxpacket: 16 [ 290.220270][ T8989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.242974][ T8989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.272528][ T6774] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.292830][ T8989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.308891][ T8989] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.324209][ T8989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.335507][ T8989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.343597][ T8989] usb 5-1: SerialNumber: syz [ 290.359477][ T8989] hub 5-1:1.0: bad descriptor, ignoring hub [ 290.365600][ T8989] hub 5-1:1.0: probe with driver hub failed with error -5 [ 290.377594][ T8989] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 290.761548][ T9005] raw-gadget.1 gadget.4: fail, usb_ep_set_wedge returned -11 [ 290.917659][ T9022] usb usb8: usbfs: process 9022 (syz.2.814) did not claim interface 0 before use [ 290.975379][ T9] usb 5-1: USB disconnect, device number 24 [ 290.997367][ T8989] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 291.295848][ T8989] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 291.304432][ T8989] usb 2-1: config 128 has no interface number 0 [ 291.312591][ T8989] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 291.325038][ T8989] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 291.345406][ T8989] usb 2-1: config 128 interface 148 has no altsetting 0 [ 291.421110][ T8989] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 291.430581][ T8989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.439220][ T8989] usb 2-1: Product: syz [ 291.446815][ T8989] usb 2-1: Manufacturer: syz [ 291.451502][ T8989] usb 2-1: SerialNumber: syz [ 291.724581][ T8989] usb 2-1: USB disconnect, device number 37 [ 292.172819][ T9041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.219015][ T8989] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 292.440120][ T8989] usb 2-1: Using ep0 maxpacket: 8 [ 292.474200][ T8989] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 292.499714][ T8989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.508547][ T9045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.569795][ T8989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.618963][ T8989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 292.644173][ T8989] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.666882][ T8989] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.679855][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.963255][ T8989] usb 2-1: usb_control_msg returned -32 [ 292.973832][ T8989] usbtmc 2-1:16.0: can't read capabilities [ 294.241420][ T9072] netlink: 84 bytes leftover after parsing attributes in process `syz.2.826'. [ 294.849109][ T5932] usb 2-1: USB disconnect, device number 38 [ 295.567110][ T9091] usb usb8: usbfs: process 9091 (syz.1.833) did not claim interface 0 before use [ 298.375404][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 298.702532][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 298.916998][ T5916] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 299.042475][ T5916] usb 4-1: config 162 descriptor has 1 excess byte, ignoring [ 299.051853][ T5916] usb 4-1: config 162 has no interface number 0 [ 299.058288][ T5916] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 299.079576][ T5916] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid maxpacket 16387, setting to 1024 [ 299.107019][ T5916] usb 4-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.134717][ T5916] usb 4-1: config 162 interface 166 has no altsetting 0 [ 299.150814][ T5916] usb 4-1: New USB device found, idVendor=ffac, idProduct=92ff, bcdDevice=d3.ea [ 299.404446][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.464266][ T5916] usb 4-1: Product: syz [ 299.509962][ T5916] usb 4-1: Manufacturer: syz [ 299.514596][ T5916] usb 4-1: SerialNumber: syz [ 299.704949][ T9146] fuse: Bad value for 'fd' [ 300.666968][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 300.666982][ T30] audit: type=1326 audit(1759263858.403:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.768138][ T30] audit: type=1326 audit(1759263858.433:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.847956][ T30] audit: type=1326 audit(1759263858.433:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.876141][ T30] audit: type=1326 audit(1759263858.433:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.909568][ T30] audit: type=1326 audit(1759263858.433:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.933836][ T30] audit: type=1326 audit(1759263858.433:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.957521][ T30] audit: type=1326 audit(1759263858.433:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 300.980333][ T30] audit: type=1326 audit(1759263858.433:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 301.745212][ T8989] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 301.927009][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.970287][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.010187][ T8989] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.053877][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.100003][ T8989] usb 1-1: config 0 descriptor?? [ 302.173472][ T5916] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 302.212507][ T5916] usb 4-1: USB disconnect, device number 28 [ 303.248050][ T8989] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 303.292480][ T8989] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 303.325099][ T8989] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 303.364313][ T8989] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 303.371975][ T8989] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 303.454399][ T8989] usb 1-1: USB disconnect, device number 25 [ 303.731183][ T9207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.863'. [ 303.888321][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.123687][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 304.225761][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 306.760996][ T5930] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.799348][ T5930] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.714248][ T9300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.897'. [ 309.293951][ T5846] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 311.025405][ T8989] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 311.273683][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 311.296765][ T8989] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 311.317609][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 311.344356][ T8989] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 311.384846][ T8989] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 311.539104][ T8989] usb 2-1: Manufacturer: syz [ 311.553024][ T8989] usb 2-1: config 0 descriptor?? [ 311.578175][ T8989] smsusb:smsusb_probe: board id=9, interface number 0 [ 311.601185][ T8989] smsusb:smsusb_probe: Device initialized with return code -19 [ 311.808951][ T9345] program syz.1.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.995254][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.915'. [ 312.467776][ T9365] fuse: Bad value for 'fd' [ 314.035445][ T5916] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 314.241130][ T5916] usb 4-1: config 0 has no interfaces? [ 314.251151][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 314.261920][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.283630][ T5916] usb 4-1: Product: syz [ 314.321557][ T5916] usb 4-1: Manufacturer: syz [ 314.333897][ T5916] usb 4-1: SerialNumber: syz [ 314.532858][ T5916] usb 4-1: config 0 descriptor?? [ 314.773981][ T5930] usb 2-1: USB disconnect, device number 39 [ 315.440362][ T9399] netlink: 84 bytes leftover after parsing attributes in process `syz.1.927'. [ 316.230888][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.606839][ T9410] fuse: Bad value for 'fd' [ 316.772236][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 317.050301][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.056677][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.099735][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 317.285253][ T5932] usb 4-1: USB disconnect, device number 29 [ 317.935376][ T5932] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 318.152895][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 318.187407][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 318.335258][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 318.376325][ T5932] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 318.391012][ T5932] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 318.399328][ T5932] usb 4-1: Manufacturer: syz [ 318.422113][ T5932] usb 4-1: config 0 descriptor?? [ 318.450744][ T5932] smsusb:smsusb_probe: board id=9, interface number 0 [ 318.461152][ T5932] smsusb:smsusb_probe: Device initialized with return code -19 [ 318.668892][ T9434] program syz.3.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.868718][ T9441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.937'. [ 318.944601][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 319.181611][ T9444] bridge0: entered promiscuous mode [ 319.235592][ T9444] bridge0: port 4(macvlan2) entered blocking state [ 319.269025][ T9444] bridge0: port 4(macvlan2) entered disabled state [ 319.324038][ T9444] macvlan2: entered allmulticast mode [ 319.448902][ T9444] bridge0: entered allmulticast mode [ 319.461086][ T9444] macvlan2: left allmulticast mode [ 319.483442][ T9444] bridge0: left allmulticast mode [ 319.491390][ T9444] bridge0: left promiscuous mode [ 319.715461][ T5929] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 319.870717][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 319.879668][ T5929] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 319.889551][ T5929] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.907541][ T5929] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.929521][ T5929] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.941847][ T5929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.951216][ T5929] usb 5-1: config 0 has no interface number 0 [ 319.960569][ T5929] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 319.972085][ T5929] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.996427][ T5929] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.022298][ T5929] usb 5-1: config 0 interface 125 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 320.038013][ T5929] usb 5-1: config 0 interface 125 has no altsetting 0 [ 320.044841][ T5929] usb 5-1: config 0 interface 125 has no altsetting 1 [ 320.054498][ T5929] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 320.080806][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.090268][ T5929] usb 5-1: Product: syz [ 320.098572][ T5929] usb 5-1: Manufacturer: syz [ 320.103358][ T5929] usb 5-1: SerialNumber: syz [ 320.112217][ T5929] usb 5-1: config 0 descriptor?? [ 320.203301][ T9458] FAULT_INJECTION: forcing a failure. [ 320.203301][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 320.232326][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.2.943 Not tainted syzkaller #0 PREEMPT(full) [ 320.232347][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.232361][ T9458] Call Trace: [ 320.232366][ T9458] [ 320.232371][ T9458] dump_stack_lvl+0x189/0x250 [ 320.232388][ T9458] ? __pfx____ratelimit+0x10/0x10 [ 320.232405][ T9458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.232424][ T9458] ? __pfx__printk+0x10/0x10 [ 320.232450][ T9458] ? __pfx___might_resched+0x10/0x10 [ 320.232466][ T9458] ? fs_reclaim_acquire+0x7d/0x100 [ 320.232488][ T9458] should_fail_ex+0x414/0x560 [ 320.232508][ T9458] should_failslab+0xa8/0x100 [ 320.232525][ T9458] __kmalloc_noprof+0xcb/0x4f0 [ 320.232538][ T9458] ? kfree+0x4d/0x440 [ 320.232548][ T9458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.232562][ T9458] tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.232573][ T9458] ? tomoyo_domain+0xd9/0x130 [ 320.232586][ T9458] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 320.232599][ T9458] tomoyo_path_number_perm+0x1e8/0x5a0 [ 320.232614][ T9458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.232636][ T9458] ? __lock_acquire+0xab9/0xd20 [ 320.232656][ T9458] ? __fget_files+0x2a/0x420 [ 320.232667][ T9458] ? __fget_files+0x2a/0x420 [ 320.232675][ T9458] ? __fget_files+0x3a0/0x420 [ 320.232683][ T9458] ? __fget_files+0x2a/0x420 [ 320.232694][ T9458] security_file_ioctl+0xcb/0x2d0 [ 320.232708][ T9458] __se_sys_ioctl+0x47/0x170 [ 320.232722][ T9458] do_syscall_64+0xfa/0x3b0 [ 320.232733][ T9458] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.232743][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.232752][ T9458] ? clear_bhb_loop+0x60/0xb0 [ 320.232764][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.232778][ T9458] RIP: 0033:0x7f0faad8eec9 [ 320.232789][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.232798][ T9458] RSP: 002b:00007f0fabc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.232810][ T9458] RAX: ffffffffffffffda RBX: 00007f0faafe5fa0 RCX: 00007f0faad8eec9 [ 320.232817][ T9458] RDX: 0000200000003200 RSI: 00000000000089f3 RDI: 0000000000000003 [ 320.232823][ T9458] RBP: 00007f0fabc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.232829][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.232835][ T9458] R13: 00007f0faafe6038 R14: 00007f0faafe5fa0 R15: 00007f0fab10fa28 [ 320.232850][ T9458] [ 320.232877][ T9458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.555262][ T9460] fuse: Bad value for 'fd' [ 320.648911][ T5916] usb 5-1: USB disconnect, device number 25 [ 322.083649][ T5930] usb 4-1: USB disconnect, device number 30 [ 322.242964][ T9480] netlink: 1 bytes leftover after parsing attributes in process `syz.0.949'. [ 322.390681][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 322.583767][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 322.678367][ T9485] netlink: 84 bytes leftover after parsing attributes in process `syz.4.948'. [ 323.405247][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 323.578068][ T5929] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 323.588710][ T5929] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.725186][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 323.738244][ T5930] usb 4-1: config 0 has no interfaces? [ 323.787154][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 323.925170][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.972387][ T5930] usb 4-1: config 0 descriptor?? [ 324.181478][ T9504] ip6tnl3: entered promiscuous mode [ 325.614511][ T5929] usb 4-1: USB disconnect, device number 31 [ 326.210019][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 326.257349][ T9513] macvlan0: entered promiscuous mode [ 326.306874][ T9513] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 326.324817][ T9513] netlink: 'syz.3.955': attribute type 2 has an invalid length. [ 326.333849][ T9518] fuse: Bad value for 'fd' [ 326.815258][ T5929] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 327.029456][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 327.274257][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 327.308463][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 327.325886][ T5929] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 327.335779][ T5929] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 327.345566][ T5929] usb 4-1: Manufacturer: syz [ 327.353547][ T9550] netlink: 84 bytes leftover after parsing attributes in process `syz.1.965'. [ 327.356298][ T5929] usb 4-1: config 0 descriptor?? [ 327.372914][ T5929] smsusb:smsusb_probe: board id=9, interface number 0 [ 327.385844][ T5929] smsusb:smsusb_probe: Device initialized with return code -19 [ 327.593009][ T9525] program syz.3.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.403571][ T9565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.960'. [ 328.974356][ T30] audit: type=1326 audit(1759263886.683:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 329.349855][ T30] audit: type=1326 audit(1759263886.683:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 329.686941][ T5929] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 329.905237][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 329.912763][ T5929] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 329.924514][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.953565][ T5929] pvrusb2: Hardware description: Terratec Grabster AV400 [ 329.966193][ T5929] pvrusb2: ********** [ 329.970713][ T5929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 329.983564][ T5929] pvrusb2: Important functionality might not be entirely working. [ 329.994659][ T5929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 330.012838][ T5929] pvrusb2: ********** [ 330.090099][ T9] usb 4-1: USB disconnect, device number 32 [ 330.196781][ T2338] pvrusb2: Invalid write control endpoint [ 330.381916][ T9601] usb usb8: usbfs: process 9601 (syz.4.980) did not claim interface 0 before use [ 330.498349][ T2338] pvrusb2: Invalid write control endpoint [ 330.526860][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 330.532078][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.558505][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 330.577945][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.587201][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 330.806060][ T2338] pvrusb2: Device being rendered inoperable [ 330.825340][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 330.835805][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 330.867365][ T2338] pvrusb2: Attached sub-driver cx25840 [ 330.873244][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 330.903225][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 331.322508][ T9617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 331.714189][ T9625] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 331.755238][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 331.942146][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 331.954642][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 332.002246][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 332.116306][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 332.283598][ T9] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 332.306634][ T9] usb 2-1: Manufacturer: syz [ 332.308887][ T9634] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 332.330752][ T9] usb 2-1: config 0 descriptor?? [ 332.358454][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 332.374333][ T5932] usb 1-1: USB disconnect, device number 26 [ 332.381199][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.990'. [ 332.422521][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 332.569191][ T9622] program syz.1.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.840386][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.987'. [ 332.969611][ T9647] use of bytesused == 0 is deprecated and will be removed in the future, [ 333.015741][ T9647] use the actual size instead. [ 333.762979][ T9658] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 333.894696][ T9658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.004071][ T9651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.010876][ T9651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 334.168874][ T9651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.185424][ T9651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.202616][ T9651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.209134][ T9651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.328668][ T9668] loop6: detected capacity change from 0 to 524288000 [ 334.940649][ T9681] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 335.177372][ T9684] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 335.273811][ T5932] usb 2-1: USB disconnect, device number 40 [ 335.795130][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.277068][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.287502][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.293515][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.299596][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.847535][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 338.607523][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 338.876951][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.883784][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00 [ 338.932201][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.101309][ T9730] FAULT_INJECTION: forcing a failure. [ 339.101309][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.132044][ T9] usb 5-1: config 0 descriptor?? [ 339.188990][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.1.1012 Not tainted syzkaller #0 PREEMPT(full) [ 339.189013][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.189023][ T9730] Call Trace: [ 339.189031][ T9730] [ 339.189039][ T9730] dump_stack_lvl+0x189/0x250 [ 339.189066][ T9730] ? __pfx____ratelimit+0x10/0x10 [ 339.189084][ T9730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.189096][ T9730] ? __pfx__printk+0x10/0x10 [ 339.189105][ T9730] ? __might_fault+0xb0/0x130 [ 339.189124][ T9730] should_fail_ex+0x414/0x560 [ 339.189143][ T9730] _copy_from_iter+0x1de/0x1790 [ 339.189161][ T9730] ? __lock_acquire+0xab9/0xd20 [ 339.189178][ T9730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 339.189205][ T9730] ? policy_nodemask+0x27c/0x720 [ 339.189227][ T9730] ? __pfx__copy_from_iter+0x10/0x10 [ 339.189253][ T9730] ? set_page_refcounted+0xa0/0x1e0 [ 339.189276][ T9730] ? page_copy_sane+0x4e/0x280 [ 339.189291][ T9730] copy_page_from_iter+0xdd/0x170 [ 339.189306][ T9730] tun_get_user+0x1d7b/0x3ea0 [ 339.189335][ T9730] ? tun_get_user+0x6f6/0x3ea0 [ 339.189363][ T9730] ? aa_file_perm+0x44d/0x1550 [ 339.189381][ T9730] ? __pfx_tun_get_user+0x10/0x10 [ 339.189397][ T9730] ? _parse_integer_limit+0x1ae/0x1f0 [ 339.189411][ T9730] ? __lock_acquire+0xab9/0xd20 [ 339.189423][ T9730] ? ref_tracker_alloc+0x318/0x460 [ 339.189432][ T9730] ? __lock_acquire+0xab9/0xd20 [ 339.189441][ T9730] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 339.189454][ T9730] ? tun_get+0x1c/0x2f0 [ 339.189479][ T9730] ? tun_get+0x1c/0x2f0 [ 339.189498][ T9730] ? tun_get+0x1c/0x2f0 [ 339.189523][ T9730] tun_chr_write_iter+0x113/0x200 [ 339.189543][ T9730] vfs_write+0x5c9/0xb30 [ 339.189560][ T9730] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 339.189574][ T9730] ? __pfx_vfs_write+0x10/0x10 [ 339.189591][ T9730] ? __fget_files+0x2a/0x420 [ 339.189608][ T9730] ksys_write+0x145/0x250 [ 339.189633][ T9730] ? __pfx_ksys_write+0x10/0x10 [ 339.189660][ T9730] ? do_syscall_64+0xbe/0x3b0 [ 339.189684][ T9730] do_syscall_64+0xfa/0x3b0 [ 339.189696][ T9730] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.189706][ T9730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.189716][ T9730] ? clear_bhb_loop+0x60/0xb0 [ 339.189727][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.189736][ T9730] RIP: 0033:0x7fabe358d97f [ 339.189746][ T9730] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 339.189760][ T9730] RSP: 002b:00007fabe4440000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 339.189779][ T9730] RAX: ffffffffffffffda RBX: 00007fabe37e5fa0 RCX: 00007fabe358d97f [ 339.189792][ T9730] RDX: 0000000000000046 RSI: 0000200000000200 RDI: 00000000000000c8 [ 339.189803][ T9730] RBP: 00007fabe4440090 R08: 0000000000000000 R09: 0000000000000000 [ 339.189819][ T9730] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 339.189829][ T9730] R13: 00007fabe37e6038 R14: 00007fabe37e5fa0 R15: 00007fabe390fa28 [ 339.189847][ T9730] [ 339.586312][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 339.754380][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 339.789103][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 339.827891][ T9] usb 5-1: USB disconnect, device number 26 [ 340.735205][ T5916] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 340.904214][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 340.989792][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 341.015935][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 341.165939][ T5916] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 341.175253][ T5916] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 341.198542][ T5916] usb 2-1: Manufacturer: syz [ 341.211559][ T5916] usb 2-1: config 0 descriptor?? [ 341.267783][ T5916] smsusb:smsusb_probe: board id=9, interface number 0 [ 341.373233][ T5916] smsusb:smsusb_probe: Device initialized with return code -19 [ 341.450294][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.497329][ T9737] program syz.1.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.525581][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.696540][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1013'. [ 342.939166][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 343.095406][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 343.525149][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 343.695435][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 343.754024][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 343.934045][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 344.094726][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.126192][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.256562][ T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.267598][ T44] usb 5-1: config 0 has no interface number 0 [ 344.273681][ T44] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.308635][ T44] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.308682][ T44] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 344.308703][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.427142][ T5930] usb 2-1: USB disconnect, device number 41 [ 344.439518][ T44] usb 5-1: config 0 descriptor?? [ 344.501694][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.811248][ T44] usbhid 5-1:0.1: can't add hid device: -71 [ 344.833115][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.871203][ T44] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 344.881474][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.908494][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.147293][ T44] usb 5-1: USB disconnect, device number 27 [ 345.191590][ T9] usb 1-1: usb_control_msg returned -32 [ 345.205144][ T9] usbtmc 1-1:16.0: can't read capabilities [ 345.947577][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.955345][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.140971][ T9] usb 1-1: USB disconnect, device number 27 [ 347.257162][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 347.513754][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.565594][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.601978][ T9818] program syz.2.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.893306][ T9826] netlink: 'syz.1.1038': attribute type 3 has an invalid length. [ 347.926624][ T9828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1035'. [ 349.551685][ T9841] kernel profiling enabled (shift: 17) [ 349.562576][ T9841] netlink: 'syz.0.1037': attribute type 10 has an invalid length. [ 349.570673][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1037'. [ 349.642117][ T9841] bridge0: port 4(dummy0) entered blocking state [ 349.649316][ T9841] bridge0: port 4(dummy0) entered disabled state [ 349.657245][ T9841] dummy0: entered allmulticast mode [ 349.672378][ T9841] dummy0: entered promiscuous mode [ 349.680537][ T9841] bridge0: port 4(dummy0) entered blocking state [ 349.687011][ T9841] bridge0: port 4(dummy0) entered forwarding state [ 349.800406][ T9846] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1039'. [ 349.965672][ T30] audit: type=1326 audit(1759263907.653:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 350.036385][ T30] audit: type=1326 audit(1759263907.653:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x7ffc0000 [ 351.015422][ T9855] ip6tnl3: entered promiscuous mode [ 352.004836][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 353.879479][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 353.915350][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 354.137721][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 354.151259][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 354.162723][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.206076][ T9] usb 5-1: Product: syz [ 354.210274][ T9] usb 5-1: Manufacturer: syz [ 354.216217][ T9] usb 5-1: SerialNumber: syz [ 354.230611][ T9] usb 5-1: config 0 descriptor?? [ 354.268099][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 355.550968][ T9] gspca_sonixj: reg_r err -110 [ 355.560883][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 357.391058][ T5930] usb 5-1: USB disconnect, device number 28 [ 357.739223][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 357.775395][ T9918] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1061'. [ 359.155318][ T5930] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 359.316023][ T5930] usb 2-1: too many configurations: 93, using maximum allowed: 8 [ 359.328232][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.345128][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.358272][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.389962][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.535647][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.560311][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.601505][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.619110][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.652700][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.668761][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.710425][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.732197][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.760841][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.780482][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'. [ 359.789762][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.860525][ T5930] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 359.871742][ T5930] usb 2-1: config 0 has no interface number 0 [ 359.903713][ T5930] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 359.918293][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248 [ 359.948700][ T5930] usb 2-1: SerialNumber: syz [ 359.975753][ T5930] usb 2-1: config 0 descriptor?? [ 360.350717][ T5930] usb 2-1: USB disconnect, device number 42 [ 360.740148][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 361.716318][ T30] audit: type=1326 audit(1759263919.443:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.0.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feabbf8eec9 code=0x0 [ 361.875383][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 362.195984][ T9] usb 5-1: config 0 has no interfaces? [ 362.304753][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 362.342381][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.409427][ T9] usb 5-1: Product: syz [ 362.432001][ T9] usb 5-1: Manufacturer: syz [ 362.457937][ T9] usb 5-1: SerialNumber: syz [ 362.486220][ T9] usb 5-1: config 0 descriptor?? [ 362.906949][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 364.523883][T10017] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1086'. [ 364.559079][T10017] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' already exists in 'ieee80211' [ 365.171423][ T9] usb 5-1: USB disconnect, device number 29 [ 365.207317][T10029] random: crng reseeded on system resumption [ 365.773932][T10041] bond0: option all_slaves_active: invalid value (141) [ 366.096949][T10049] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 366.155753][T10051] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 366.879034][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1090'. [ 367.422309][T10061] ip6tnl2: entered promiscuous mode [ 367.526324][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1094'. [ 368.507098][ T5930] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.669942][ T5930] usb 1-1: config 0 has no interfaces? [ 368.681189][ T5930] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 368.690920][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.701870][ T5930] usb 1-1: Product: syz [ 368.722977][ T5930] usb 1-1: Manufacturer: syz [ 368.747650][ T5930] usb 1-1: SerialNumber: syz [ 368.934618][ T5930] usb 1-1: config 0 descriptor?? [ 369.219638][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 369.232743][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 369.801728][T10090] fuse: Unknown parameter '0xffffffffffffffff' [ 370.335232][T10095] netlink: 'syz.2.1105': attribute type 4 has an invalid length. [ 370.405566][T10098] netlink: 'syz.2.1105': attribute type 4 has an invalid length. [ 370.554829][ T5932] usb 1-1: USB disconnect, device number 28 [ 371.413228][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.440716][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.493327][T10121] usb usb8: usbfs: process 10121 (syz.4.1114) did not claim interface 0 before use [ 373.184751][T10128] fuse: Unknown parameter '0xffffffffffffffff' [ 373.684673][T10137] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1118'. [ 373.694699][T10137] netlink: 'syz.4.1118': attribute type 5 has an invalid length. [ 373.702864][T10137] netlink: 'syz.4.1118': attribute type 6 has an invalid length. [ 373.743749][T10137] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 373.772471][T10138] bridge0: port 3(team0) entered disabled state [ 373.797632][T10138] dummy0: left allmulticast mode [ 373.802748][T10138] dummy0: left promiscuous mode [ 373.808569][T10138] bridge0: port 4(dummy0) entered disabled state [ 373.855276][T10138] bridge_slave_0: left allmulticast mode [ 373.862232][T10138] bridge_slave_0: left promiscuous mode [ 373.879720][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.918686][T10138] bridge_slave_1: left allmulticast mode [ 373.924528][T10138] bridge_slave_1: left promiscuous mode [ 373.934250][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.005248][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 374.175304][ T31] Not tainted syzkaller #0 [ 374.184005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.198903][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.216473][ T31] task:kworker/0:1 state:D stack:20552 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 374.233366][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.241460][ T31] Workqueue: usb_hub_wq hub_event [ 374.250409][ T31] Call Trace: [ 374.254040][ T31] [ 374.257286][ T31] __schedule+0x1798/0x4cc0 [ 374.262868][ T31] ? __pfx___schedule+0x10/0x10 [ 374.324041][ T31] ? schedule+0x91/0x360 [ 374.334765][ T31] schedule+0x165/0x360 [ 374.349133][ T31] schedule_timeout+0x9a/0x270 [ 374.365150][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 374.378625][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.395997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.586233][ T31] ? wait_for_completion+0x267/0x5d0 [ 374.618920][ T31] wait_for_completion+0x2bf/0x5d0 [ 374.627033][ T30] audit: type=1326 audit(1759263932.353:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 374.679225][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 374.686383][ T30] audit: type=1326 audit(1759263932.353:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 374.696946][ T31] i2c_del_adapter+0x581/0x6e0 [ 374.732298][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 374.748746][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.757127][ T30] audit: type=1326 audit(1759263932.353:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 374.779468][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.791101][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 374.809349][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 374.820579][ T31] dvb_usb_device_exit+0x1be/0x350 [ 374.833608][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 374.846056][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 374.864869][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.882196][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 374.911560][ T30] audit: type=1326 audit(1759263932.353:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 374.947098][ T31] cxusb_probe+0x603/0x700 [ 374.960313][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 374.985490][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 375.008657][ T31] usb_probe_interface+0x665/0xc30 [ 375.027552][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 375.036746][ T30] audit: type=1326 audit(1759263932.353:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 375.059351][ T31] really_probe+0x26a/0x9e0 [ 375.081573][ T31] __driver_probe_device+0x18c/0x2f0 [ 375.098920][ T31] driver_probe_device+0x4f/0x430 [ 375.123322][ T31] __device_attach_driver+0x2ce/0x530 [ 375.143595][ T31] bus_for_each_drv+0x251/0x2e0 [ 375.153137][ T30] audit: type=1326 audit(1759263932.353:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aaed8d710 code=0x7ffc0000 [ 375.156817][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 375.277797][ T30] audit: type=1326 audit(1759263932.353:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 375.288961][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 375.362958][ T31] __device_attach+0x2b8/0x400 [ 375.362992][ T30] audit: type=1326 audit(1759263932.353:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 375.394037][ T30] audit: type=1326 audit(1759263932.353:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 375.419796][ T30] audit: type=1326 audit(1759263932.353:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaed8eec9 code=0x7ffc0000 [ 375.455514][ T31] ? __pfx___device_attach+0x10/0x10 [ 375.462136][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 375.467874][ T31] bus_probe_device+0x185/0x260 [ 375.472853][ T31] device_add+0x7b6/0xb50 [ 375.481929][ T31] usb_set_configuration+0x1a87/0x20e0 [ 375.490458][ T31] usb_generic_driver_probe+0x8d/0x150 [ 375.509904][ T31] usb_probe_device+0x1c1/0x390 [ 375.531350][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 375.537733][ T31] really_probe+0x26a/0x9e0 [ 375.543152][ T31] __driver_probe_device+0x18c/0x2f0 [ 375.551362][ T31] driver_probe_device+0x4f/0x430 [ 375.556802][ T31] __device_attach_driver+0x2ce/0x530 [ 375.562409][ T31] bus_for_each_drv+0x251/0x2e0 [ 375.570166][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 375.576910][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 375.582614][ T31] __device_attach+0x2b8/0x400 [ 375.591388][ T31] ? __pfx___device_attach+0x10/0x10 [ 375.597972][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 375.603422][ T31] bus_probe_device+0x185/0x260 [ 375.614336][ T31] device_add+0x7b6/0xb50 [ 375.619197][ T31] usb_new_device+0xa39/0x16f0 [ 375.624697][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 375.632957][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.639222][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.647708][ T31] hub_event+0x2958/0x4a20 [ 375.652650][ T31] ? __pfx_hub_event+0x10/0x10 [ 375.658024][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 375.664053][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.672412][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 375.678754][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 375.684729][ T31] process_scheduled_works+0xade/0x17b0 [ 375.693314][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.719250][ T31] worker_thread+0x8a0/0xda0 [ 375.725710][ T31] kthread+0x70e/0x8a0 [ 375.730150][ T31] ? __pfx_worker_thread+0x10/0x10 [ 375.738134][ T31] ? __pfx_kthread+0x10/0x10 [ 375.743096][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.749331][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.754702][ T31] ? __pfx_kthread+0x10/0x10 [ 375.762400][ T31] ret_from_fork+0x439/0x7d0 [ 375.768535][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 375.773977][ T31] ? __switch_to_asm+0x39/0x70 [ 375.781899][ T31] ? __switch_to_asm+0x33/0x70 [ 375.787248][ T31] ? __pfx_kthread+0x10/0x10 [ 375.792066][ T31] ret_from_fork_asm+0x1a/0x30 [ 375.800902][ T31] [ 375.804697][ T31] [ 375.804697][ T31] Showing all locks held in the system: [ 375.816078][ T31] 5 locks held by kworker/0:1/10: [ 375.824518][ T31] #0: ffff888021a84948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.953044][ T31] #1: ffffc900000f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.967481][ T31] #2: ffff8881453c7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 375.976691][ T31] #3: ffff888075836198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 375.986339][ T31] #4: ffff88807d791160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 375.995862][ T31] 1 lock held by khungtaskd/31: [ 376.000812][ T31] #0: ffffffff8dd3aca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.011760][ T31] 4 locks held by kworker/u8:3/37: [ 376.017204][ T31] 2 locks held by kworker/u8:5/1014: [ 376.022572][ T31] #0: ffff88801e359948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.033940][ T31] #1: ffffc9000397fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.046219][ T31] 3 locks held by kworker/u8:6/3486: [ 376.051495][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.067193][ T31] #1: ffffc9000c187bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.084978][ T31] #2: ffffffff8f0cc8c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 376.094867][ T31] 2 locks held by getty/5601: [ 376.101381][ T31] #0: ffff888032ea90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.112750][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 376.123249][ T31] 3 locks held by kworker/0:4/5932: [ 376.128866][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.140952][ T31] #1: ffffc9000451fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.152238][ T31] #2: ffffffff8f0cc8c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 376.163264][ T31] 2 locks held by kworker/u8:10/6779: [ 376.168801][ T31] #0: ffff88801e359948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.182372][ T31] #1: ffffc9001cb97bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.194761][ T31] 2 locks held by kworker/u8:12/6782: [ 376.200479][ T31] 2 locks held by syz.0.1117/10138: [ 376.205867][ T31] #0: ffffffff8f0cc8c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 376.215553][ T31] #1: ffffffff8dd40738 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 376.226571][ T31] 1 lock held by syz.2.1119/10145: [ 376.231692][ T31] #0: ffffffff8f0cc8c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 376.241171][ T31] 2 locks held by syz.2.1119/10146: [ 376.246488][ T31] #0: ffff88807cbb70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.256535][ T31] #1: ffff88807cbb7130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa20 [ 376.267731][T10138] bond0: (slave bond_slave_0): Releasing backup interface [ 376.274864][ T31] [ 376.287163][ T31] ============================================= [ 376.287163][ T31] [ 376.298159][ T31] NMI backtrace for cpu 0 [ 376.298179][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.298197][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.298208][ T31] Call Trace: [ 376.298215][ T31] [ 376.298223][ T31] dump_stack_lvl+0x189/0x250 [ 376.298251][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.298272][ T31] ? __pfx__printk+0x10/0x10 [ 376.298300][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.298327][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.298353][ T31] ? __pfx__printk+0x10/0x10 [ 376.298374][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.298394][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.298421][ T31] watchdog+0xf93/0xfe0 [ 376.298448][ T31] ? watchdog+0x1de/0xfe0 [ 376.298476][ T31] kthread+0x70e/0x8a0 [ 376.298500][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.298522][ T31] ? __pfx_kthread+0x10/0x10 [ 376.298545][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.298562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.298579][ T31] ? __pfx_kthread+0x10/0x10 [ 376.298600][ T31] ret_from_fork+0x439/0x7d0 [ 376.298628][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.298652][ T31] ? __switch_to_asm+0x39/0x70 [ 376.298672][ T31] ? __switch_to_asm+0x33/0x70 [ 376.298692][ T31] ? __pfx_kthread+0x10/0x10 [ 376.298714][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.298750][ T31] [ 376.298756][ T31] Sending NMI from CPU 0 to CPUs 1: [ 376.304395][T10138] bond0: (slave bond_slave_1): Releasing backup interface [ 376.312544][ C1] NMI backtrace for cpu 1 [ 376.312558][ C1] CPU: 1 UID: 0 PID: 10138 Comm: syz.0.1117 Not tainted syzkaller #0 PREEMPT(full) [ 376.312576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.312585][ C1] RIP: 0010:__rcu_read_lock+0x39/0x60 [ 376.312610][ C1] Code: 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 <5b> c3 cc cc cc cc cc 90 0f 0b 90 eb f3 89 d9 80 e1 07 80 c1 03 38 [ 376.312623][ C1] RSP: 0018:ffffc90000a08368 EFLAGS: 00000283 [ 376.312644][ C1] RAX: 0000000000000002 RBX: ffff88802b83a244 RCX: dffffc0000000000 [ 376.312656][ C1] RDX: dffffc0000000000 RSI: ffffffff8916b762 RDI: ffffc90000a08448 [ 376.312667][ C1] RBP: dffffc0000000000 R08: ffffc90000a08510 R09: 0000000000000004 [ 376.312678][ C1] R10: ffffc90000a08498 R11: ffffffff81aaa470 R12: 1ffff92000141089 [ 376.312690][ C1] R13: ffffc90000a08480 R14: ffffc90000a08448 R15: ffffc90000a088a0 [ 376.312702][ C1] FS: 00007feaba1ac6c0(0000) GS:ffff88812647e000(0000) knlGS:0000000000000000 [ 376.312715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.312726][ C1] CR2: 0000200000361030 CR3: 000000002f2c4000 CR4: 00000000003526f0 [ 376.312740][ C1] Call Trace: [ 376.312745][ C1] [ 376.312751][ C1] ? __alloc_skb+0x142/0x2d0 [ 376.312768][ C1] unwind_next_frame+0x9e/0x2390 [ 376.312788][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.312805][ C1] ? kmalloc_reserve+0xbd/0x290 [ 376.312823][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.312842][ C1] arch_stack_walk+0x11c/0x150 [ 376.312868][ C1] ? __alloc_skb+0x142/0x2d0 [ 376.312886][ C1] stack_trace_save+0x9c/0xe0 [ 376.312903][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 376.312922][ C1] ? stack_trace_save+0x9c/0xe0 [ 376.312940][ C1] kasan_save_track+0x3e/0x80 [ 376.312959][ C1] ? kasan_save_track+0x3e/0x80 [ 376.312976][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 376.312993][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 376.313013][ C1] ? kmalloc_reserve+0xbd/0x290 [ 376.313029][ C1] ? __alloc_skb+0x142/0x2d0 [ 376.313066][ C1] __kasan_slab_alloc+0x6c/0x80 [ 376.313086][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 376.313106][ C1] ? kmalloc_reserve+0xbd/0x290 [ 376.313124][ C1] kmalloc_reserve+0xbd/0x290 [ 376.313142][ C1] __alloc_skb+0x142/0x2d0 [ 376.313159][ C1] skb_copy+0x188/0x800 [ 376.313184][ C1] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 376.313207][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 376.313227][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 376.313251][ C1] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 376.313270][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 376.313291][ C1] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 376.313310][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 376.313332][ C1] __iterate_interfaces+0x2a8/0x590 [ 376.313351][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 376.313369][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 376.313389][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 376.313407][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 376.313429][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 376.313444][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 376.313460][ C1] __hrtimer_run_queues+0x529/0xc60 [ 376.313483][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 376.313497][ C1] ? read_tsc+0x9/0x20 [ 376.313515][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 376.313532][ C1] handle_softirqs+0x286/0x870 [ 376.313549][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 376.313566][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 376.313583][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 376.313603][ C1] __irq_exit_rcu+0xca/0x1f0 [ 376.313617][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 376.313636][ C1] irq_exit_rcu+0x9/0x30 [ 376.313649][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 376.313665][ C1] [ 376.313670][ C1] [ 376.313676][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.313692][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 376.313709][ C1] Code: 85 32 01 00 00 e8 81 84 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 70 84 1f 00 eb 06 e8 69 84 1f 00 fb 48 c7 c7 40 ef d2 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 376.313721][ C1] RSP: 0018:ffffc90003366660 EFLAGS: 00000246 [ 376.313733][ C1] RAX: ffffffff819e9127 RBX: ffffffff819e8fe4 RCX: 0000000000080000 [ 376.313744][ C1] RDX: ffffc9000e592000 RSI: 000000000007ffff RDI: ffffffff8dd2ef40 [ 376.313755][ C1] RBP: ffffc90003366770 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 376.313766][ C1] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: dffffc0000000000 [ 376.313778][ C1] R13: 1ffff9200066ccd0 R14: 0000000000000200 R15: 0000000000000037 [ 376.313790][ C1] ? vprintk_emit+0x444/0x7a0 [ 376.313806][ C1] ? vprintk_emit+0x587/0x7a0 [ 376.313824][ C1] ? vprintk_emit+0x444/0x7a0 [ 376.313841][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 376.313856][ C1] ? hsr_netdev_notify+0x29e/0xcf0 [ 376.313888][ C1] _printk+0xcf/0x120 [ 376.313904][ C1] ? __pfx__printk+0x10/0x10 [ 376.313916][ C1] ? __netdev_upper_dev_unlink+0x652/0x7c0 [ 376.313936][ C1] ? __netdev_printk+0x365/0x4d0 [ 376.313952][ C1] netdev_info+0x10a/0x160 [ 376.313969][ C1] ? __pfx_netdev_info+0x10/0x10 [ 376.313983][ C1] ? netdev_upper_dev_unlink+0x91/0xd0 [ 376.314005][ C1] __bond_release_one+0x50b/0x10e0 [ 376.314026][ C1] ? __pfx___bond_release_one+0x10/0x10 [ 376.314048][ C1] ? netif_state_change+0x29e/0x3a0 [ 376.314064][ C1] ? mutex_is_locked+0x17/0x50 [ 376.314081][ C1] do_set_master+0x312/0x6d0 [ 376.314103][ C1] do_setlink+0xcf0/0x41c0 [ 376.314121][ C1] ? finish_task_switch+0x266/0x950 [ 376.314144][ C1] ? __pfx_do_setlink+0x10/0x10 [ 376.314160][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 376.314178][ C1] ? __schedule+0x17ae/0x4cc0 [ 376.314204][ C1] ? __pfx___schedule+0x10/0x10 [ 376.314221][ C1] ? rcu_is_watching+0x15/0xb0 [ 376.314240][ C1] ? rcu_is_watching+0x15/0xb0 [ 376.314255][ C1] ? trace_irq_disable+0x37/0x110 [ 376.314273][ C1] ? preempt_schedule_irq+0xde/0x150 [ 376.314288][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 376.314306][ C1] ? irqentry_exit+0x74/0x90 [ 376.314321][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.314344][ C1] rtnl_newlink+0x149f/0x1c70 [ 376.314366][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.314382][ C1] ? __pfx___schedule+0x10/0x10 [ 376.314404][ C1] ? preempt_schedule+0xae/0xc0 [ 376.314418][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 376.314438][ C1] ? preempt_schedule_common+0x83/0xd0 [ 376.314453][ C1] ? preempt_schedule+0xae/0xc0 [ 376.314467][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 376.314483][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 376.314500][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 376.314517][ C1] ? __local_bh_enable_ip+0x13e/0x1c0 [ 376.314532][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 376.314549][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 376.314569][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 376.314586][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 376.314606][ C1] ? __dev_queue_xmit+0x1d79/0x3b50 [ 376.314628][ C1] ? __lock_acquire+0xab9/0xd20 [ 376.314653][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 376.314668][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 376.314686][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 376.314702][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.314721][ C1] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 376.314745][ C1] netlink_rcv_skb+0x205/0x470 [ 376.314760][ C1] ? rcu_is_watching+0x15/0xb0 [ 376.314776][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.314792][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.314814][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.314833][ C1] netlink_unicast+0x82c/0x9e0 [ 376.314852][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 376.314871][ C1] ? netlink_sendmsg+0x642/0xb30 [ 376.314885][ C1] ? skb_put+0x11b/0x210 [ 376.314904][ C1] netlink_sendmsg+0x805/0xb30 [ 376.314924][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.314942][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.314958][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.314975][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.314991][ C1] __sock_sendmsg+0x21c/0x270 [ 376.315007][ C1] ____sys_sendmsg+0x505/0x830 [ 376.315028][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.315053][ C1] ? import_iovec+0x74/0xa0 [ 376.315074][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 376.315093][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.315125][ C1] ? __fget_files+0x2a/0x420 [ 376.315138][ C1] ? __fget_files+0x3a0/0x420 [ 376.315157][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 376.315176][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.315199][ C1] ? rcu_is_watching+0x15/0xb0 [ 376.315217][ C1] ? do_syscall_64+0xbe/0x3b0 [ 376.315233][ C1] do_syscall_64+0xfa/0x3b0 [ 376.315248][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.315263][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.315278][ C1] ? clear_bhb_loop+0x60/0xb0 [ 376.315296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.315311][ C1] RIP: 0033:0x7feabbf8eec9 [ 376.315324][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.315338][ C1] RSP: 002b:00007feaba1ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.315353][ C1] RAX: ffffffffffffffda RBX: 00007feabc1e6180 RCX: 00007feabbf8eec9 [ 376.315364][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 376.315374][ C1] RBP: 00007feabc011f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.315384][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.315393][ C1] R13: 00007feabc1e6218 R14: 00007feabc1e6180 R15: 00007feabc30fa28 [ 376.315412][ C1] [ 376.315821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 376.315839][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.315858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.315869][ T31] Call Trace: [ 376.315876][ T31] [ 376.315885][ T31] dump_stack_lvl+0x99/0x250 [ 376.315908][ T31] ? __asan_memcpy+0x40/0x70 [ 376.315927][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.315947][ T31] ? __pfx__printk+0x10/0x10 [ 376.315974][ T31] vpanic+0x281/0x750 [ 376.315998][ T31] ? __pfx_vpanic+0x10/0x10 [ 376.316018][ T31] ? preempt_schedule+0xae/0xc0 [ 376.316037][ T31] ? preempt_schedule_common+0x83/0xd0 [ 376.316060][ T31] panic+0xb9/0xc0 [ 376.316080][ T31] ? __pfx_panic+0x10/0x10 [ 376.316102][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 376.316125][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 376.316150][ T31] watchdog+0xfd2/0xfe0 [ 376.316177][ T31] ? watchdog+0x1de/0xfe0 [ 376.316205][ T31] kthread+0x70e/0x8a0 [ 376.316229][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.316250][ T31] ? __pfx_kthread+0x10/0x10 [ 376.316273][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.316290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.316307][ T31] ? __pfx_kthread+0x10/0x10 [ 376.316329][ T31] ret_from_fork+0x439/0x7d0 [ 376.316349][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.316373][ T31] ? __switch_to_asm+0x39/0x70 [ 376.316393][ T31] ? __switch_to_asm+0x33/0x70 [ 376.316413][ T31] ? __pfx_kthread+0x10/0x10 [ 376.316434][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.316469][ T31] [ 376.326090][ T31] Kernel Offset: disabled