last executing test programs: 2m45.656425359s ago: executing program 3 (id=1484): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0xa942, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x0, 0x7f}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 2m44.390973338s ago: executing program 3 (id=1487): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x1, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x7ffffffffffffffc, 0xf4a, 0x0, 0xbdf], 0x5000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x80000, 0x6, 0x0, 0x3, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="79d60000", @ANYRES16=r5, @ANYRES32=r2], 0x328}, 0x1, 0x0, 0x0, 0x4c090}, 0x400c040) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x40000032, r6, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r8, 0x0, r6, 0x0, 0x7ffff000, 0x1) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {0x0}], 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r9, 0x1, 0x3f, &(0x7f0000000240)=""/121, &(0x7f00000002c0)=0x79) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m41.957902685s ago: executing program 3 (id=1490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x78, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x54, 0x2, 0x0, 0x1, [@nested={0x50, 0x17, 0x0, 0x1, [@generic="4a612fc34db5a21e23a48925b32b9cc9dadb7f070e650e13fe07ea5f6fdd0d6ecf69755bee397557232ae6646542508dfe20ea6cc5daa954482c2ed92e4e3f4ee727ea196f799efc8aa2546d"]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)) recvmsg$kcm(r8, 0x0, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) 2m39.297563588s ago: executing program 3 (id=1495): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x50, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0000101, 0x0, 0x9}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4296}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x40) write$dsp(r6, &(0x7f0000000180)="000d3d4b70619d999b8e940fbb106766d384e6642530a36bc3f04790e104b7a90d03f1cc4b057c9b93d9d09e9145857900186d546a9149b12bd028c1e9b10f23e8716e0490a9af3ddcb2f6f2a19e010838f396564b31a47dca2c9452d9945ef2186de7dbaf5612033ac4c753", 0x6c) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000040)={r9, 0x8001, 0x9}, 0x8) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r12 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x300) ioctl$VIDIOC_LOG_STATUS(r12, 0x5646, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 2m37.081397776s ago: executing program 3 (id=1499): r0 = socket(0x1a, 0xa, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000008c0)={0x8080, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x21}, &(0x7f0000000540)=""/214, 0xd6, &(0x7f0000000e00)=""/186, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0xb49, 0x9, 0x108, 0x0, 0x1000}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f5, 0x300, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}}, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x3b67, &(0x7f0000000a00)={0x0, 0x5112, 0x80, 0x1, 0x50a}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000003c0)=0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r5, &(0x7f0000000180)={0xd2, 0x20, 0x44, 0x20, 0x6}, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = msgget$private(0x0, 0x193) msgsnd(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r7, &(0x7f00000002c0), 0x8, 0x0, 0x800) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000040)=""/37, 0x25}], 0x8}, 0x40012100) 2m34.503884762s ago: executing program 3 (id=1505): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000002001000800000078c6000002000000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000004de4bd160dbcf2cbb4ace246da35d15ba2125fac3cb626140cc3b125560cbb517f4424f30d65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r6 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r6, &(0x7f0000000000)=0x7, r6, 0x0, 0x2, 0x0) 2m19.381012507s ago: executing program 32 (id=1505): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000002001000800000078c6000002000000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000004de4bd160dbcf2cbb4ace246da35d15ba2125fac3cb626140cc3b125560cbb517f4424f30d65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r6 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r6, &(0x7f0000000000)=0x7, r6, 0x0, 0x2, 0x0) 6.204271159s ago: executing program 1 (id=2056): syz_open_dev$usbmon(&(0x7f0000000140), 0x8000000000, 0x40a01) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 5.960682513s ago: executing program 1 (id=2059): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0xa942, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00fbff1a00040026bd70000004000002001004fd04c80600140010017630a4ebd46bdac896d10fce3c6a3e0d0b9c605dec0f39ead3e38b0f1038043d7529f501b2ce7710e5ed4e10ac1f649867a0254439785f0ab306568776b04adc22a41b3dd4c3767315ac54dc6acaf506588f6d4e797a3f8d492368c6249f43367d50c2d747885bce3df677288d75ee4311e3c9492f0c823d9bd2e58cac211a6dfb16838c1b8243afb4459cb51f9d190a"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x0, 0x7f}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 5.077349189s ago: executing program 4 (id=2063): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) 4.981521907s ago: executing program 4 (id=2065): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@echo=0x7) 4.911309652s ago: executing program 1 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x42a00, 0xc9) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0x194, 0x10, 0x1, 0x70bd2a, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private, 0x0, 0xecdf, 0x0, 0x58}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x4, 0x20000000, 0x1, 0x2, 0x0, 0xa2b}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x58, 0x2, {{'cbc(serpent)\x00'}, 0x80, "0a15fcedb93de36f2f75748cd8d8aaf9"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x77c1816f4f559e4e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0xffffffff, 0x6, 0x20008, 0x7, 0x9}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002940), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) openat$rfkill(0xffffff9c, 0x0, 0x10100, 0x0) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r11, @ANYBLOB="00042abd7000fcdbdf259b0d00002c0007800c000400030000000000000008000200020000000c0004000b00000000000000080001000a00000020000680040002000800010005000000040002000400020008040100040000002c0089800800020006000000080002002a661286b8a318fb050000000800010000040000080002000400000014000380080003000800000008000300010000003800018008000300000101002c0004001400010002004e21ac04000000000000000000001400020002004e23000000000000000000000000240004801300010062726f6164636173742d6c696e6b00000c0007800800040000002000ac000180170001006574683a6272696467655f736c6176655f30000008000300ffffff7f38000400200001000a004e2300000006fe8000000000000000000000000030030000001400020002004e200a0101010000000000ad0c1dfb0000000d0001007564703a73797a30000000000800030007000000060004001400010002004e23ffffffff0000000000000000200002000a004e2100001000fe8000000000000000000000000000bb67050000240004800900010073797a30000000001300010062726f6164636173742d6c696e6b000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) 4.579210629s ago: executing program 4 (id=2068): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000380)=0x5, 0x4) 4.446887943s ago: executing program 4 (id=2070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x4e21, @multicast1}}) 4.182447656s ago: executing program 4 (id=2074): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000380)={0x0, 0x10, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r6, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) 4.106897768s ago: executing program 5 (id=2075): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}}}}) 3.983905743s ago: executing program 1 (id=2077): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x15, 0x301, 0x70bd2b, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x30) 3.757385426s ago: executing program 5 (id=2079): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ff0200000000000000000000001c0001ac1414bb0000e0ffffffffffffff0000000000e3"], 0x38}}, 0x0) 3.464698298s ago: executing program 1 (id=2080): r0 = socket(0x1a, 0xa, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000008c0)={0x8080, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x21}, &(0x7f0000000540)=""/214, 0xd6, &(0x7f0000000e00)=""/186, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0xb49, 0x9, 0x108, 0x0, 0x1000}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f5, 0x300, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}}, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x3b67, &(0x7f0000000a00)={0x0, 0x5112, 0x80, 0x1, 0x50a}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000003c0)=0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r5, &(0x7f0000000180)={0xd2, 0x20, 0x44, 0x20, 0x6}, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = msgget$private(0x0, 0x193) msgsnd(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r7, &(0x7f00000002c0), 0x8, 0x0, 0x800) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000040)=""/37, 0x25}], 0x8}, 0x40012100) 3.355055934s ago: executing program 5 (id=2081): r0 = socket(0x840000000002, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 3.326658527s ago: executing program 2 (id=2082): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000540)={0x8, @pix_mp={0x4, 0x5, 0x4f424752, 0x3, 0xf, [{0x4, 0x1000}, {0x5, 0x1}, {0xbd0, 0x3}, {0x200, 0x2}, {0x4, 0x6}, {0xfffffff8, 0x4}, {0x4, 0x8}, {0xfffffffe, 0x6}], 0xf0, 0x8, 0x0, 0x3, 0x1}}) 3.019032929s ago: executing program 5 (id=2083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0xbffffffe, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@local, 0x1, 0x794, 0x4e23, 0x600, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0x400000000ffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x0, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0xa, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'wp256\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x10) 2.7342104s ago: executing program 2 (id=2084): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002780)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x5, 0xffffffff, {{0x6, 0x4, 0x1, 0xc, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) 2.728604343s ago: executing program 5 (id=2085): r0 = socket(0x1a, 0xa, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000008c0)={0x8080, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x21}, &(0x7f0000000540)=""/214, 0xd6, &(0x7f0000000e00)=""/186, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0xa, 0x0, 0x0, 0xb49, 0x9, 0x108, 0x0, 0x1000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x3b67, &(0x7f0000000a00)={0x0, 0x5112, 0x80, 0x1, 0x50a}, &(0x7f0000000240), &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000003c0)=0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r4, &(0x7f0000000180)={0xd2, 0x20, 0x44, 0x20, 0x6}, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = msgget$private(0x0, 0x193) msgsnd(r6, &(0x7f0000000640)=ANY=[], 0x401, 0x0) msgsnd(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r6, &(0x7f00000002c0), 0x8, 0x0, 0x800) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000040)=""/37, 0x25}], 0x8}, 0x40012100) 2.235536526s ago: executing program 0 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 2.234979447s ago: executing program 2 (id=2087): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "11010000001400000100b64c00", 0x30314442}) 2.051188679s ago: executing program 0 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x42a00, 0xc9) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0x194, 0x10, 0x1, 0x70bd2a, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private, 0x0, 0xecdf, 0x0, 0x58}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x4, 0x20000000, 0x1, 0x2, 0x0, 0xa2b}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x58, 0x2, {{'cbc(serpent)\x00'}, 0x80, "0a15fcedb93de36f2f75748cd8d8aaf9"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x77c1816f4f559e4e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0xffffffff, 0x6, 0x20008, 0x7, 0x9}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) openat$rfkill(0xffffff9c, 0x0, 0x10100, 0x0) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) 1.698473634s ago: executing program 2 (id=2089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x6df6, 0x2, 0x7, 0xfffffff9, 0x5, 0xfffffffa, 0x7f, 0x9}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3ac, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e4, 0x2e8, 0x2e8, 0x2e4, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0x80ffffff, 0xff000000, 0xffffff00], [0x6bd9b8b8441b4eb9, 0xffffff00, 0xffffff00], 'batadv_slave_1\x00', 'wlan0\x00', {0xff}, {}, 0x3c, 0x0, 0x2, 0x2}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffe, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@srh={{0x2c}, {0x0, 0x7, 0x5, 0x2, 0xc, 0x1404, 0x810}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x1, 0x4, 'snmp\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffffff, 0xff], 'team_slave_0\x00', 'ipvlan1\x00', {0x7f}, {0xff}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x1ff, 0x5, 0x2, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x408) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000480001002dbd7000fcdbdf250a008000", @ANYRES32=r5, @ANYBLOB="0400000006000116428dfdd9a1ae455da12fc84ee0000000000000000108eb020009000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x20080058) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff28bd7040fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501ff07000000000000128009000100766c616e000000001000028006000100010000000400038008000500", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x8048802) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8d70, 0x200, &(0x7f0000000480)) setuid(0xee01) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, 0x0, 0x24040850) dup(r0) 1.017575942s ago: executing program 5 (id=2090): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt(r1, 0x7, 0x8, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) read$watch_queue(r6, &(0x7f0000000540)=""/4096, 0x1000) fanotify_init(0x200, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cb6"], 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000300)=ANY=[@ANYBLOB="ac7b538953be84aa30b08e26ad620d245efb81d8991573d362cebe9eb390ceb70fe57d9c924e11be451fb4aeaaf70f01666a092df6097cd82a2c219b2ad691814bdb8f5b9366532af44ad0e7aae1619e644f09fcd75952b37b753c5a46e898c3c1c9680fd847e366a05a8453f543e0fc0a093a4cfb00d5aff0daf94408eeeb85cb8f2dc79a17b7691572618f912d7c27d58c2989b5f842d6a9550b0040e3bea7eef999a21e099f8b11caaa", @ANYRESHEX, @ANYBLOB=',rootmode=00276243740501720624347,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',ro,\x00']) pread64(r7, &(0x7f0000000080)=""/237, 0xed, 0x5) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 980.55342ms ago: executing program 1 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x42a00, 0xc9) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newsa={0x194, 0x10, 0x1, 0x70bd2a, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private, 0x0, 0xecdf, 0x0, 0x58}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x4, 0x20000000, 0x1, 0x2, 0x0, 0xa2b}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x58, 0x2, {{'cbc(serpent)\x00'}, 0x80, "0a15fcedb93de36f2f75748cd8d8aaf9"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x77c1816f4f559e4e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0xffffffff, 0x6, 0x20008, 0x7, 0x9}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002940), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) openat$rfkill(0xffffff9c, 0x0, 0x10100, 0x0) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) 915.125801ms ago: executing program 0 (id=2092): socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000700)={@empty, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0xc, 0x6, "53ef28", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0x7ff}}}}}}}}, 0x0) 637.705033ms ago: executing program 0 (id=2093): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) 316.577014ms ago: executing program 2 (id=2094): r0 = openat$uinput(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) 296.932947ms ago: executing program 0 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 185.516092ms ago: executing program 0 (id=2096): r0 = syz_open_dev$video(&(0x7f0000000140), 0x7, 0x100) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x9, 0x30314742, 0x1, @stepwise={0xb8, 0x6, 0xfffffffe, 0x8, 0xffff, 0x1}}) 108.283068ms ago: executing program 2 (id=2097): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x38}}) 0s ago: executing program 4 (id=2098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e169", 0x2e, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x78, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x54, 0x2, 0x0, 0x1, [@nested={0x50, 0x17, 0x0, 0x1, [@generic="4a612fc34db5a21e23a48925b32b9cc9dadb7f070e650e13fe07ea5f6fdd0d6ecf69755bee397557232ae6646542508dfe20ea6cc5daa954482c2ed92e4e3f4ee727ea196f799efc8aa2546d"]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)) recvmsg$kcm(r8, 0x0, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 745.406288][ T29] audit: type=1326 audit(1773006650.500:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 746.301004][ T796] usb 3-1: USB disconnect, device number 44 [ 746.372532][T13592] netlink: 'syz.3.1459': attribute type 29 has an invalid length. [ 746.433941][T13596] netlink: 'syz.3.1459': attribute type 29 has an invalid length. [ 746.528037][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 746.788098][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 746.794725][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.815765][ T5893] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 746.857787][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 746.868603][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 746.908425][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.952499][T13599] __nla_validate_parse: 7 callbacks suppressed [ 746.952519][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 747.028672][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 747.130433][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 747.170507][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.180554][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.209042][ T5893] usb 1-1: SerialNumber: syz [ 747.279115][ T5893] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 747.523643][T13608] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 747.523643][T13608] program syz.1.1470 not setting count and/or reply_len properly [ 747.711478][T13615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1462'. [ 747.727785][T13615] netlink: 'syz.2.1462': attribute type 21 has an invalid length. [ 747.769833][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 747.923195][T13616] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 747.964181][T13618] batadv_slave_1: Caught tx_queue_len zero misconfig [ 748.151926][T13591] blktrace: Concurrent blktraces are not allowed on nullb0 [ 748.802844][T13626] fuse: Bad value for 'fd' [ 749.590725][ T10] usb 1-1: USB disconnect, device number 27 [ 749.939205][T13643] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[13643] [ 750.113120][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 750.611244][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 750.611772][ T29] audit: type=1326 audit(1773006657.570:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 750.993356][ T29] audit: type=1326 audit(1773006657.570:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.162187][ T29] audit: type=1326 audit(1773006657.570:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.190130][T13657] bridge1: port 1(veth3) entered blocking state [ 751.208293][T13657] bridge1: port 1(veth3) entered disabled state [ 751.380931][T13657] veth3: entered allmulticast mode [ 751.440193][T13657] veth3: entered promiscuous mode [ 751.452207][T13656] bridge1: port 2(veth0_to_bond) entered blocking state [ 751.460189][T13656] bridge1: port 2(veth0_to_bond) entered disabled state [ 751.468637][T13656] veth0_to_bond: entered allmulticast mode [ 751.483874][T13656] veth0_to_bond: entered promiscuous mode [ 751.691726][ T29] audit: type=1326 audit(1773006657.570:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.767118][ T29] audit: type=1326 audit(1773006657.570:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 751.909020][T13658] bridge1: port 3(veth5) entered blocking state [ 751.929058][T13658] bridge1: port 3(veth5) entered disabled state [ 751.979974][T13658] veth5: entered allmulticast mode [ 752.005547][ T29] audit: type=1326 audit(1773006657.570:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.132981][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1468'. [ 752.214538][T13658] veth5: entered promiscuous mode [ 752.244772][ T29] audit: type=1326 audit(1773006657.570:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.461013][ T29] audit: type=1326 audit(1773006657.570:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.587549][ T29] audit: type=1326 audit(1773006657.580:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.681671][ T29] audit: type=1326 audit(1773006657.600:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 752.924089][T13672] netlink: 'syz.3.1471': attribute type 29 has an invalid length. [ 753.003356][T13674] netlink: 'syz.3.1471': attribute type 29 has an invalid length. [ 754.529403][T13686] syz.0.1473 (13686): drop_caches: 2 [ 754.663148][T13691] openvswitch: netlink: Message has 76 unknown bytes. [ 754.677255][T13691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.543114][T13696] fuse: Bad value for 'fd' [ 756.479191][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 756.491762][T13703] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 757.793420][ T5872] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 757.943096][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 757.943108][ T29] audit: type=1326 audit(1773006664.990:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.0.1483" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x0 [ 758.019364][ T5872] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 758.029102][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.088611][ T5872] usb 3-1: config 0 descriptor?? [ 758.108601][ T5872] cp210x 3-1:0.0: cp210x converter detected [ 758.207539][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 758.229087][T13716] tipc: Resetting bearer [ 758.417732][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 758.425379][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 758.434707][ T10] usb 5-1: config 179 has no interface number 0 [ 758.442554][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 758.624013][ T5872] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 758.633234][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 758.682662][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 758.712538][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 758.724308][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 758.752682][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 758.764510][ T5872] usb 3-1: cp210x converter now attached to ttyUSB0 [ 758.799278][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.827764][T13717] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 758.888993][ T10] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 759.061081][T13729] xt_CT: No such helper "syz0" [ 759.322693][T13732] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1485'. [ 759.368190][ T29] audit: type=1326 audit(1773006666.390:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.435888][ T29] audit: type=1326 audit(1773006666.390:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.487525][ T29] audit: type=1326 audit(1773006666.390:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.522570][ T29] audit: type=1326 audit(1773006666.390:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.600817][ T29] audit: type=1326 audit(1773006666.390:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.607889][ T5893] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 759.633914][ T29] audit: type=1326 audit(1773006666.390:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.633963][ T29] audit: type=1326 audit(1773006666.400:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.634001][ T29] audit: type=1326 audit(1773006666.400:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.634038][ T29] audit: type=1326 audit(1773006666.400:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 759.957999][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 759.992166][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.021717][ T5893] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 760.032135][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.044877][ T5893] usb 2-1: config 0 descriptor?? [ 760.072544][ T5893] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 760.534820][ T5893] usb 3-1: USB disconnect, device number 45 [ 760.561142][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 760.912140][T13750] xt_bpf: check failed: parse error [ 760.931023][T13750] netlink: 'syz.0.1498': attribute type 304 has an invalid length. [ 761.162450][ T10] usb 5-1: USB disconnect, device number 40 [ 761.202200][ T5893] cp210x 3-1:0.0: device disconnected [ 762.551669][T13760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 762.664428][ T10] usb 2-1: USB disconnect, device number 36 [ 762.814941][T13769] openvswitch: netlink: Message has 76 unknown bytes. [ 762.823135][T13769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.605136][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 765.204732][T13788] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 765.629105][T13796] Lens A: ================= START STATUS ================= [ 765.638170][T13796] Lens A: Focus, Absolute: 0 [ 765.642868][T13796] Lens A: ================== END STATUS ================== [ 766.326592][T13801] netlink: 'syz.0.1496': attribute type 29 has an invalid length. [ 766.419125][T13802] netlink: 'syz.0.1496': attribute type 29 has an invalid length. [ 767.301275][T13819] sock: sock_set_timeout: `syz.2.1501' (pid 13819) tries to set negative timeout [ 767.317906][T13817] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 767.530364][T13817] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 767.698909][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 768.214983][T13831] ======================================================= [ 768.214983][T13831] WARNING: The mand mount option has been deprecated and [ 768.214983][T13831] and is ignored by this kernel. Remove the mand [ 768.214983][T13831] option from the mount to silence this warning. [ 768.214983][T13831] ======================================================= [ 770.121528][T13850] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 5, 0, 0, 0) [ 771.613135][T13860] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 5, 0, 0, 0) [ 771.747986][T13862] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 773.061068][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 774.103972][T13886] netlink: 'syz.4.1513': attribute type 29 has an invalid length. [ 774.298589][T13889] netlink: 'syz.4.1513': attribute type 29 has an invalid length. [ 774.320599][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 776.435517][T13924] netlink: 'syz.4.1518': attribute type 29 has an invalid length. [ 776.444502][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 777.027743][ T796] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 777.282695][T13935] openvswitch: netlink: Message has 76 unknown bytes. [ 777.298302][T13935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.367754][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 777.387949][ T796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.544133][ T796] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 777.717705][ T796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 777.761923][ T796] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 777.841622][ T796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.893111][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 777.921443][ T796] usb 3-1: SerialNumber: syz [ 778.004540][T13940] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 778.035807][ T796] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 778.222864][T13940] bond0: entered promiscuous mode [ 778.229061][T13940] bond0: entered allmulticast mode [ 778.235102][T13940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.255739][T13940] bridge5: entered promiscuous mode [ 778.265473][T13940] bridge5: entered allmulticast mode [ 778.273280][ T60] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 778.293171][T13940] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 778.421997][ T84] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 778.468921][T13931] blktrace: Concurrent blktraces are not allowed on nullb0 [ 778.822411][T13946] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 779.293490][T13957] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 779.659338][T13961] blktrace: Concurrent blktraces are not allowed on sg0 [ 779.691540][T13961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1525'. [ 780.631756][ T5893] usb 3-1: USB disconnect, device number 46 [ 780.970031][T13963] xt_CT: No such helper "snmp" [ 781.163496][T13973] netlink: 'syz.4.1529': attribute type 29 has an invalid length. [ 781.172889][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 781.593968][ T5872] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 781.613095][T13963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 781.629661][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 781.760020][ T5872] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 781.769831][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.798379][ T5872] usb 3-1: config 0 descriptor?? [ 781.824849][ T5872] cp210x 3-1:0.0: cp210x converter detected [ 782.062122][T13976] xt_CT: No such helper "snmp" [ 782.252868][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1532'. [ 782.339156][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1531'. [ 782.352359][T13976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1531'. [ 782.653701][ T5872] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 782.669166][ T5872] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 782.700203][ T5872] usb 3-1: cp210x converter now attached to ttyUSB0 [ 782.738846][ T5872] usb 3-1: USB disconnect, device number 47 [ 782.749430][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 782.770904][ T5872] cp210x 3-1:0.0: device disconnected [ 783.594557][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 783.700322][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 784.824130][T14009] fuse: Unknown parameter 'no' [ 784.860507][T11281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.872220][T11281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.900248][T11281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.910376][T11281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.919152][T11281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.133654][T14015] netlink: 'syz.1.1539': attribute type 29 has an invalid length. [ 785.170376][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 785.228536][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.235982][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.252299][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.264443][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.272160][T14018] netlink: 'syz.1.1539': attribute type 29 has an invalid length. [ 785.282981][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 786.135860][T14025] xt_nat: multiple ranges no longer supported [ 786.379925][T14020] chnl_net:caif_netlink_parms(): no params data found [ 786.843559][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 787.029650][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.032142][T14020] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.039949][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.140492][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 787.177825][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.207572][T14041] fuse: Bad value for 'fd' [ 787.241771][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.252897][T14020] bridge_slave_0: entered allmulticast mode [ 787.253378][ T10] usb 2-1: Product: syz [ 787.267780][ T10] usb 2-1: Manufacturer: syz [ 787.275079][T14020] bridge_slave_0: entered promiscuous mode [ 787.289021][T14020] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.297973][T14020] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.305769][ T10] usb 2-1: SerialNumber: syz [ 787.305977][T14020] bridge_slave_1: entered allmulticast mode [ 787.463231][T11281] Bluetooth: hci5: command tx timeout [ 787.490864][T14020] bridge_slave_1: entered promiscuous mode [ 787.602053][T14020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.631331][T14020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.700075][ T10] usb 2-1: config 0 descriptor?? [ 787.789008][T14020] team0: Port device team_slave_0 added [ 787.804377][T14020] team0: Port device team_slave_1 added [ 787.849196][T14020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.877663][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.103205][T14020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.128663][T14020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.144239][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.225491][T14020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.342080][T14047] macvtap0: entered allmulticast mode [ 788.384583][T14020] hsr_slave_0: entered promiscuous mode [ 788.392381][T14020] hsr_slave_1: entered promiscuous mode [ 788.402158][T14020] debugfs: 'hsr0' already exists in 'hsr' [ 788.408811][T14020] Cannot create hsr debugfs directory [ 788.650085][T14020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 788.662352][T14020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 788.673991][T14020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 788.686050][T14020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 788.810449][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.842966][T14020] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.861116][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.868242][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.934357][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.941520][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.001367][T14020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.048768][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.104451][T14020] veth0_vlan: entered promiscuous mode [ 789.240488][T14020] veth1_vlan: entered promiscuous mode [ 789.260368][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 789.260385][ T29] audit: type=1326 audit(1773006696.300:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 789.323617][T14020] veth0_macvtap: entered promiscuous mode [ 789.400613][T14020] veth1_macvtap: entered promiscuous mode [ 789.417756][ T29] audit: type=1326 audit(1773006696.340:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 789.441036][ T29] audit: type=1326 audit(1773006696.340:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 789.470371][T14020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.499478][T11281] Bluetooth: hci5: command tx timeout [ 789.599204][ T5872] usb 2-1: USB disconnect, device number 37 [ 789.698986][T14020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.743047][ T29] audit: type=1326 audit(1773006696.340:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 789.771751][T13255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.034242][T13255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.083952][ T29] audit: type=1326 audit(1773006696.340:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 790.125047][ T29] audit: type=1326 audit(1773006696.340:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 790.193336][T13255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.207179][T13255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.579331][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.587850][ T8642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.587910][ T8642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.615110][ T29] audit: type=1326 audit(1773006696.340:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 790.663675][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.687997][ T29] audit: type=1326 audit(1773006696.340:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 790.804215][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 790.869811][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 791.585379][ T29] audit: type=1326 audit(1773006696.350:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 791.640113][T11281] Bluetooth: hci5: command tx timeout [ 791.674490][ T29] audit: type=1326 audit(1773006696.350:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 792.427843][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 792.462420][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 792.637352][T13722] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 792.797517][T13722] usb 6-1: Using ep0 maxpacket: 32 [ 792.825857][T13722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.850180][T13722] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 793.054526][T14098] netlink: 'syz.2.1553': attribute type 13 has an invalid length. [ 793.330109][T14098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.338661][T13722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.380212][T14098] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.615164][T13722] usb 6-1: config 0 descriptor?? [ 793.640713][T13722] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 793.669091][T14098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.747882][T11281] Bluetooth: hci5: command tx timeout [ 794.724315][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 794.724331][ T29] audit: type=1326 audit(1773006701.770:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 794.896266][T14106] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 795.465312][T10036] usb 6-1: USB disconnect, device number 2 [ 796.578137][ T796] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 796.758464][ T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.295315][ T796] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 797.341262][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.384613][ T796] usb 2-1: config 0 descriptor?? [ 797.411610][ T796] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 797.479791][T14137] openvswitch: netlink: Message has 76 unknown bytes. [ 797.511728][T14138] xt_HMARK: proto mask must be zero with L3 mode [ 797.610336][T14137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.917437][T10036] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 798.245956][T10036] usb 5-1: Using ep0 maxpacket: 16 [ 798.262382][T10036] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 798.288005][T10036] usb 5-1: config 0 has no interface number 0 [ 798.379182][T10036] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 798.390015][T10036] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 798.414115][T10036] usb 5-1: Product: syz [ 798.442538][T10036] usb 5-1: Manufacturer: syz [ 798.557636][T10036] usb 5-1: SerialNumber: syz [ 798.570141][T10036] usb 5-1: config 0 descriptor?? [ 799.095924][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 799.251534][ T29] audit: type=1326 audit(1773006706.300:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 799.401258][ T29] audit: type=1326 audit(1773006706.300:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 799.444574][ T29] audit: type=1326 audit(1773006706.300:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7155cab code=0x7ffc0000 [ 799.554655][ T29] audit: type=1326 audit(1773006706.300:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 799.753749][T13722] usb 2-1: USB disconnect, device number 38 [ 799.907425][ T29] audit: type=1326 audit(1773006706.300:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.002952][ T29] audit: type=1326 audit(1773006706.300:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.169983][ T29] audit: type=1326 audit(1773006706.330:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.251643][T14177] xt_CT: No such helper "snmp" [ 800.258195][ T29] audit: type=1326 audit(1773006706.330:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.312259][ T29] audit: type=1326 audit(1773006706.330:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.397909][T10036] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 800.455949][ T29] audit: type=1326 audit(1773006706.330:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.514944][T13722] usb 5-1: USB disconnect, device number 41 [ 800.595024][ T29] audit: type=1326 audit(1773006706.330:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.618715][T10036] usb 2-1: Using ep0 maxpacket: 32 [ 800.639971][T10036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.675201][T10036] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 800.722122][T10036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.732098][ T29] audit: type=1326 audit(1773006706.330:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.759754][T10036] usb 2-1: config 0 descriptor?? [ 800.853885][T10036] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 800.882922][ T29] audit: type=1326 audit(1773006706.330:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 800.950451][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1568'. [ 800.967962][ T29] audit: type=1326 audit(1773006706.330:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 801.021967][T14177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 801.440992][T14196] netlink: 'syz.2.1570': attribute type 29 has an invalid length. [ 801.650139][T14198] netlink: 'syz.2.1570': attribute type 29 has an invalid length. [ 802.417611][T10036] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 802.619508][T10036] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 802.632070][T10036] usb 1-1: config 0 has no interface number 0 [ 802.698691][T10036] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 802.716355][T10036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.724959][T10036] usb 1-1: Product: syz [ 802.730378][T10036] usb 1-1: Manufacturer: syz [ 802.735389][T10036] usb 1-1: SerialNumber: syz [ 802.743403][T10036] usb 1-1: config 0 descriptor?? [ 802.834001][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 803.036946][T10036] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 803.049401][T10036] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 803.090666][T10036] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 803.158453][ T10] usb 2-1: USB disconnect, device number 39 [ 803.308168][T10036] usb 1-1: media controller created [ 803.425840][T10036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.634545][T14220] binder: 14202:14220 ioctl c018620c 80000380 returned -22 [ 804.652718][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1579'. [ 805.053642][T10036] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 805.133884][T10036] usb 1-1: USB disconnect, device number 28 [ 805.483122][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1579'. [ 806.277666][ T5902] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 806.559824][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 806.570278][ T5902] usb 3-1: not running at top speed; connect to a high speed hub [ 806.601579][ T5902] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 806.618144][ T5902] usb 3-1: config 1 has no interface number 0 [ 806.624364][ T5902] usb 3-1: config 1 interface 138 has no altsetting 0 [ 806.643057][ T5902] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 806.658038][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.682027][ T5902] usb 3-1: Product: syz [ 806.712417][ T5902] usb 3-1: Manufacturer: syz [ 806.732710][ T5902] usb 3-1: SerialNumber: syz [ 806.869193][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'. [ 806.964981][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 806.964998][ T29] audit: type=1326 audit(1773006713.950:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.040265][T14260] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 807.052398][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.149998][ T29] audit: type=1326 audit(1773006713.950:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.245912][ T29] audit: type=1326 audit(1773006713.950:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.304059][ T29] audit: type=1326 audit(1773006713.960:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.328330][T10036] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 807.335934][T13722] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 807.377650][ T29] audit: type=1326 audit(1773006713.960:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.499225][T14272] netlink: 'syz.4.1590': attribute type 29 has an invalid length. [ 807.651208][T13722] usb 6-1: Using ep0 maxpacket: 8 [ 807.677903][T13722] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 807.690162][T13722] usb 6-1: config 179 has no interface number 0 [ 807.701916][T13722] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 807.742056][ T29] audit: type=1326 audit(1773006713.960:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.770667][T13722] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 807.785277][T13722] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 807.798212][T10036] usb 2-1: Using ep0 maxpacket: 32 [ 807.820214][ T5902] usb 3-1: USB disconnect, device number 48 [ 807.831872][T14273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.857487][ T29] audit: type=1326 audit(1773006713.970:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 807.881837][T14274] netlink: 'syz.4.1590': attribute type 29 has an invalid length. [ 807.907722][T10036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.932880][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.950639][T13722] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 807.966301][T10036] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 807.984293][T13722] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 808.005095][T10036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.109365][ T29] audit: type=1326 audit(1773006713.970:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 808.109421][ T29] audit: type=1326 audit(1773006713.980:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 808.109458][ T29] audit: type=1326 audit(1773006713.980:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 808.161051][T13722] usb 6-1: config 179 interface 65 has no altsetting 0 [ 808.161094][T13722] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 808.161116][T13722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.162711][T10036] usb 2-1: config 0 descriptor?? [ 808.184999][T10036] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 808.355354][T13722] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input40 [ 808.397989][ T5180] input input40: unable to receive magic message: -110 [ 808.400102][ T5180] input input40: unable to receive magic message: -32 [ 808.413337][ T5180] input input40: unable to receive magic message: -32 [ 808.415874][ T5180] input input40: unable to receive magic message: -32 [ 808.501035][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 808.501074][T10036] usb 6-1: USB disconnect, device number 3 [ 808.621706][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.621744][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.761194][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 808.970722][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 808.972118][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.972179][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 808.974807][ T10] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 808.974829][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.974840][ T10] usb 3-1: Product: syz [ 808.974848][ T10] usb 3-1: Manufacturer: syz [ 808.974856][ T10] usb 3-1: SerialNumber: syz [ 809.098443][T14290] QAT: Invalid ioctl 21531 [ 809.266078][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 809.292415][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 809.627965][T10036] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 809.907835][T10036] usb 5-1: Using ep0 maxpacket: 16 [ 809.931307][T10036] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 809.998874][T10036] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 810.058224][T10036] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 810.091486][T10036] usb 5-1: config 166 has no interface number 0 [ 810.105438][T10036] usb 5-1: config 166 has no interface number 1 [ 810.157480][T10036] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 810.176105][T10036] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 810.228252][T13722] usb 2-1: USB disconnect, device number 40 [ 810.291862][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 810.554595][ T10] usb 3-1: USB disconnect, device number 49 [ 810.637529][T10036] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 810.761577][T10036] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 810.821619][T10036] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 810.833236][T10036] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 810.853432][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.902420][T10036] usb 5-1: config 166 interface 177 has no altsetting 0 [ 810.941838][T10036] usb 5-1: config 166 interface 34 has no altsetting 0 [ 810.992469][T10036] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 811.019779][T10036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.038563][T10036] usb 5-1: Product: syz [ 811.049550][T10036] usb 5-1: Manufacturer: syz [ 811.064298][T10036] usb 5-1: SerialNumber: syz [ 811.779394][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 812.432418][T10036] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 812.637360][ T796] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 812.842636][ T796] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 7 [ 812.864227][ T796] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 9236, setting to 1024 [ 812.900527][T10036] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 813.056044][T14340] xt_CT: No such helper "snmp" [ 813.098443][ T796] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.157294][ T5902] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 813.181181][T10036] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 813.209704][T10036] uvcvideo 5-1:166.34: No valid video chain found. [ 813.235044][ T796] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.288950][T10036] usb 5-1: USB disconnect, device number 42 [ 813.297851][ T796] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 813.308897][ T796] usb 1-1: Product: syz [ 813.313196][ T796] usb 1-1: Manufacturer: syz [ 813.319402][ T796] usb 1-1: SerialNumber: syz [ 813.327848][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 813.354858][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 813.408458][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7 [ 813.423452][ T796] usb 1-1: config 0 descriptor?? [ 813.462265][ T796] usb 1-1: selecting invalid altsetting 0 [ 813.474260][ T5902] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 813.494330][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.579859][ T5902] usb 3-1: Product: syz [ 813.588387][ T5902] usb 3-1: Manufacturer: syz [ 813.598093][ T5902] usb 3-1: SerialNumber: syz [ 813.797394][T14276] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 813.853705][ T5902] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 813.884125][ T5902] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 813.949424][T14340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'. [ 813.974379][T14276] usb 6-1: unable to get BOS descriptor or descriptor too short [ 814.029828][T14276] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 814.054739][T14276] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.087767][ T5902] usb 3-1: USB disconnect, device number 50 [ 814.149027][T14276] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 814.167403][T14276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.208328][T14276] usb 6-1: Product: syz [ 814.221398][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 814.257547][T14276] usb 6-1: Manufacturer: syz [ 814.277795][T14276] usb 6-1: SerialNumber: syz [ 814.639607][T14276] usb 6-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 814.658141][T14276] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 814.733557][T14276] usb 6-1: failed to enable PITCH for EP 0x1 [ 814.773726][T14276] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.832868][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 814.906153][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 815.147185][T14276] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 815.208822][T14276] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 815.277828][ T10] usb 1-1: USB disconnect, device number 29 [ 815.284273][T14276] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.335329][T14276] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 815.407783][T14276] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 815.424773][T14276] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.713813][T14276] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 815.902710][T14276] usb 6-1: USB disconnect, device number 4 [ 816.020017][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 816.104725][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.326275][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 816.537598][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 816.561162][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 816.586256][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 816.814507][T14397] xt_CT: No such helper "snmp" [ 816.835513][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 816.897539][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 816.930365][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 816.977481][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.020860][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 817.057877][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.310159][ T10] usb 3-1: usb_control_msg returned -32 [ 817.315791][ T10] usbtmc 3-1:16.0: can't read capabilities [ 817.470243][T14397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1630'. [ 817.828745][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 817.828765][ T29] audit: type=1326 audit(1773006724.820:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 817.997929][T13722] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 818.037885][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 818.047957][T14419] usbtmc 3-1:16.0: Unable to send data, error -71 [ 818.055736][T14419] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 818.090019][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 818.217393][T13722] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 7 [ 818.303909][ T29] audit: type=1326 audit(1773006724.820:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 818.342914][T13722] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 9236, setting to 1024 [ 818.448199][T13722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 818.505510][T13722] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 818.515927][ T29] audit: type=1326 audit(1773006724.820:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 818.567866][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 818.575998][T13722] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 818.582986][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.609606][T13722] usb 2-1: Product: syz [ 818.694180][T13722] usb 2-1: Manufacturer: syz [ 818.721928][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 818.754303][T13722] usb 2-1: SerialNumber: syz [ 818.800413][ T29] audit: type=1326 audit(1773006724.820:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 818.836128][T13722] usb 2-1: config 0 descriptor?? [ 818.845580][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.965455][ T10] usb 1-1: config 0 descriptor?? [ 818.972479][T13722] usb 2-1: selecting invalid altsetting 0 [ 819.003451][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 819.022000][ T29] audit: type=1326 audit(1773006724.820:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.237885][ T29] audit: type=1326 audit(1773006724.820:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.338559][T13722] usb 2-1: USB disconnect, device number 41 [ 819.386277][ T29] audit: type=1326 audit(1773006724.820:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.447877][ T29] audit: type=1326 audit(1773006724.820:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.524542][ T29] audit: type=1326 audit(1773006724.820:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.619723][ T29] audit: type=1326 audit(1773006724.820:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 819.682543][T10781] usb 3-1: USB disconnect, device number 51 [ 819.856030][T14432] netlink: 'syz.4.1639': attribute type 29 has an invalid length. [ 820.185111][T14437] netlink: 'syz.4.1639': attribute type 29 has an invalid length. [ 820.297423][T10781] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 820.412409][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'. [ 820.631244][T10781] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.642563][T10781] usb 3-1: config 0 has no interface number 0 [ 820.694906][T10781] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 820.717358][T10781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.729518][T10781] usb 3-1: Product: syz [ 820.733799][T10781] usb 3-1: Manufacturer: syz [ 820.739625][T10781] usb 3-1: SerialNumber: syz [ 820.780905][T10781] usb 3-1: config 0 descriptor?? [ 821.080072][T10781] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 821.105080][T10781] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 821.164486][T10781] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 821.207624][T10781] usb 3-1: media controller created [ 821.220543][T13722] usb 1-1: USB disconnect, device number 30 [ 821.239492][T10781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.512151][T14458] input: syz0 as /devices/virtual/input/input41 [ 821.602570][T14447] binder: 14431:14447 ioctl c018620c 80000380 returned -22 [ 821.612758][T14447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 822.181270][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 822.192395][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 822.208391][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 822.467474][T10781] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 823.134058][T10781] usb 3-1: USB disconnect, device number 52 [ 823.561746][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 823.561764][ T29] audit: type=1326 audit(1773006730.580:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 823.599442][T14497] openvswitch: netlink: Message has 76 unknown bytes. [ 823.623168][T14499] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 823.745991][T14497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.794738][ T29] audit: type=1326 audit(1773006730.580:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 823.818703][T13722] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 823.827667][T14503] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 823.949187][T14507] netlink: 'syz.2.1659': attribute type 29 has an invalid length. [ 824.067355][ T29] audit: type=1326 audit(1773006730.580:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.091099][T13722] usb 6-1: Using ep0 maxpacket: 32 [ 824.114807][T14504] netlink: 'syz.2.1659': attribute type 29 has an invalid length. [ 824.363138][ T29] audit: type=1326 audit(1773006730.580:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.391384][T13722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.414253][T13722] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 824.434802][ T29] audit: type=1326 audit(1773006730.580:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.495776][T13722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.551886][T13722] usb 6-1: config 0 descriptor?? [ 824.580177][T13722] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 824.627423][ T29] audit: type=1326 audit(1773006730.590:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.826227][ T29] audit: type=1326 audit(1773006730.590:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.897110][ T29] audit: type=1326 audit(1773006730.590:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 824.987838][ T29] audit: type=1326 audit(1773006730.590:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 825.077699][ T29] audit: type=1326 audit(1773006730.590:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 825.248735][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 825.910672][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 825.942960][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'. [ 826.069970][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 826.588102][T13722] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 826.767926][T13722] usb 2-1: Using ep0 maxpacket: 32 [ 826.812904][T13722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 826.827312][ T10] usb 6-1: USB disconnect, device number 5 [ 826.862012][T13722] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 826.877832][T13722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.905853][T13722] usb 2-1: Product: syz [ 826.926253][T13722] usb 2-1: Manufacturer: syz [ 826.938230][T13722] usb 2-1: SerialNumber: syz [ 827.310337][T13722] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 827.384633][T13722] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 827.953672][T13722] usb 2-1: USB disconnect, device number 42 [ 828.122812][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.170274][T14276] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 828.407451][T14276] usb 3-1: Using ep0 maxpacket: 8 [ 828.478810][T14276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 828.510307][T14276] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 828.542791][T14276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.576244][T14276] usb 3-1: Product: syz [ 828.580468][T14276] usb 3-1: Manufacturer: syz [ 828.597916][T14276] usb 3-1: SerialNumber: syz [ 829.209572][T14276] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 829.228718][T14276] usb 3-1: 1:1 : unsupported sample bitwidth 13 in 255 bytes [ 829.250077][T14276] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.261656][T14276] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 829.274837][T14276] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 829.285069][T14276] usb 3-1: 1:1 : unsupported sample bitwidth 13 in 255 bytes [ 829.308745][T14276] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.330717][T14276] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 829.444024][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 829.444030][T14276] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 829.444043][ T29] audit: type=1326 audit(1773006736.390:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 829.444081][ T29] audit: type=1326 audit(1773006736.400:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 829.452617][T14276] usb 3-1: 1:1 : unsupported sample bitwidth 13 in 255 bytes [ 829.524609][ T29] audit: type=1326 audit(1773006736.400:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 829.569574][T14276] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.651268][T13722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 829.682557][ T29] audit: type=1326 audit(1773006736.400:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 829.688252][T14276] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 829.807609][T13722] usb 6-1: Using ep0 maxpacket: 32 [ 829.830200][T13722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.855967][T14276] usb 3-1: USB disconnect, device number 53 [ 829.889033][T13722] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 829.918341][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.938909][T13722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.980318][T13722] usb 6-1: config 0 descriptor?? [ 830.031816][T13722] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 830.238374][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 830.590208][ T29] audit: type=1326 audit(1773006736.400:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.648191][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 830.657852][ T29] audit: type=1326 audit(1773006736.400:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.657898][ T29] audit: type=1326 audit(1773006736.400:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.657931][ T29] audit: type=1326 audit(1773006736.400:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.735771][ T29] audit: type=1326 audit(1773006736.400:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.771303][ T29] audit: type=1326 audit(1773006736.400:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 830.815940][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 831.185544][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 831.755516][ T796] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 831.951514][ T796] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 831.962255][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.008088][ T796] usb 5-1: Product: syz [ 832.040737][ T796] usb 5-1: Manufacturer: syz [ 832.061098][ T796] usb 5-1: SerialNumber: syz [ 832.070216][T14617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 832.303729][ T796] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 832.323215][ T796] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 832.358017][ T796] usb 5-1: found format II with max.bitrate = 0, frame size=9 [ 832.420081][ T796] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 832.453614][ T796] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 832.494199][ T796] usb 5-1: found format II with max.bitrate = 0, frame size=9 [ 832.510203][ T796] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 832.529242][ T5902] usb 6-1: USB disconnect, device number 6 [ 832.575183][ T796] usb 5-1: unit 5 not found! [ 832.584426][ T796] usb 5-1: unit 2 not found! [ 832.721515][T14631] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 832.781544][ T796] usb 5-1: USB disconnect, device number 43 [ 832.890101][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.972909][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1711'. [ 833.273448][T14642] xt_CT: No such helper "snmp" [ 833.538226][T14653] fuse: Bad value for 'fd' [ 833.600207][T14659] binder: 14654:14659 ioctl c00c620f 0 returned -14 [ 833.750485][T14650] bridge2: port 1(veth5) entered blocking state [ 833.870592][T14650] bridge2: port 1(veth5) entered disabled state [ 833.898284][T14650] veth5: entered allmulticast mode [ 833.948526][T14642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 834.104389][T14650] veth5: entered promiscuous mode [ 834.411712][T14276] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 834.508902][T14656] bridge2: port 2(veth7) entered blocking state [ 834.668194][T14656] bridge2: port 2(veth7) entered disabled state [ 834.674809][T14656] veth7: entered allmulticast mode [ 834.690027][T14656] veth7: entered promiscuous mode [ 834.695827][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 834.695843][ T29] audit: type=1326 audit(1773006741.740:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 834.805431][ T29] audit: type=1326 audit(1773006741.780:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 834.869903][ T29] audit: type=1326 audit(1773006741.780:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 834.904522][ T29] audit: type=1326 audit(1773006741.890:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 834.927825][T14276] usb 6-1: Using ep0 maxpacket: 32 [ 834.938815][ T29] audit: type=1326 audit(1773006741.980:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 834.963458][T14276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.974194][T14276] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 834.984799][ T29] audit: type=1326 audit(1773006741.980:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 835.017841][T14276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.072394][T14276] usb 6-1: config 0 descriptor?? [ 835.117980][ T29] audit: type=1326 audit(1773006741.980:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 835.192664][T14276] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 835.431654][ T29] audit: type=1326 audit(1773006742.010:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 835.502494][ T29] audit: type=1326 audit(1773006742.010:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 835.571213][T14680] openvswitch: netlink: Message has 76 unknown bytes. [ 835.579815][T14680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.795083][ T29] audit: type=1326 audit(1773006742.030:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 837.318946][T14699] trusted_key: encrypted_key: insufficient parameters specified [ 837.467856][ T796] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 837.578890][T10781] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 837.629487][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 837.639307][ T796] usb 3-1: config 250 has an invalid interface number: 59 but max is 0 [ 837.650002][ T796] usb 3-1: config 250 has no interface number 0 [ 837.667875][ T796] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 837.687861][ T796] usb 3-1: config 250 interface 59 altsetting 255 has an invalid endpoint descriptor of length 5, skipping [ 837.709519][ T796] usb 3-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.737698][T10781] usb 2-1: Using ep0 maxpacket: 16 [ 837.745892][T10781] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.757905][ T796] usb 3-1: config 250 interface 59 has no altsetting 0 [ 837.773709][T10781] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 837.794721][ T796] usb 3-1: string descriptor 0 read error: -22 [ 837.801666][ T796] usb 3-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 837.817741][T10781] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 837.833391][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.847511][T10781] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.857787][T10781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 837.868185][T14701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 837.875410][T10781] usb 2-1: SerialNumber: syz [ 837.900933][T10781] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 837.909946][T10781] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 837.918366][T10781] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 838.188176][ T10] usb 3-1: USB disconnect, device number 54 [ 838.472320][T14718] xt_CT: No such helper "snmp" [ 838.519858][T14719] binder: BINDER_SET_CONTEXT_MGR already set [ 838.526070][T14719] binder: 14712:14719 ioctl 4018620d 80000040 returned -16 [ 838.720882][T14276] usb 6-1: USB disconnect, device number 7 [ 838.821102][T14719] syz.4.1732 (14719): drop_caches: 2 [ 839.162734][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1734'. [ 839.527458][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 839.773638][T14276] usb 2-1: USB disconnect, device number 43 [ 839.821723][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 839.852877][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 839.893628][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 839.913782][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.944822][ T10] usb 6-1: Product: syz [ 839.954968][ T10] usb 6-1: Manufacturer: syz [ 839.992510][ T10] usb 6-1: SerialNumber: syz [ 840.114080][T14743] sock: sock_set_timeout: `syz.0.1741' (pid 14743) tries to set negative timeout [ 840.333588][T14745] fuse: Unknown parameter 'no' [ 840.395137][ T10] usb 6-1: unit 4 not found! [ 840.863364][ T10] usb 6-1: USB disconnect, device number 8 [ 841.052940][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.388964][T14276] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 842.477858][T14774] xt_bpf: check failed: parse error [ 842.514672][T14774] netlink: 'syz.2.1749': attribute type 304 has an invalid length. [ 842.753447][T14276] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 842.772873][T14276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.467563][T14276] usb 2-1: config 0 descriptor?? [ 843.474336][T14276] cp210x 2-1:0.0: cp210x converter detected [ 844.126292][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 844.126313][ T29] audit: type=1326 audit(1773006751.160:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.212090][ T29] audit: type=1326 audit(1773006751.160:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.247674][ T29] audit: type=1326 audit(1773006751.160:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.468809][ T29] audit: type=1326 audit(1773006751.160:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.527908][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 844.538029][T14276] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 844.545699][T14276] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 844.753431][T14276] usb 2-1: cp210x converter now attached to ttyUSB0 [ 844.768231][ T29] audit: type=1326 audit(1773006751.160:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.805033][T14276] usb 2-1: USB disconnect, device number 44 [ 844.816860][T14276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 844.827483][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 844.859840][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.889428][T14276] cp210x 2-1:0.0: device disconnected [ 844.900686][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 844.922253][ T29] audit: type=1326 audit(1773006751.160:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 844.961416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.979088][ T10] usb 6-1: config 0 descriptor?? [ 845.192541][ T29] audit: type=1326 audit(1773006751.210:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 845.222754][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 845.287557][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 845.617494][ T29] audit: type=1326 audit(1773006751.210:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 845.757723][ T29] audit: type=1326 audit(1773006751.210:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 845.790169][ T29] audit: type=1326 audit(1773006751.210:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f22f6c code=0x7ffc0000 [ 847.584725][ T796] usb 6-1: USB disconnect, device number 9 [ 847.750322][T14827] netlink: 'syz.1.1760': attribute type 29 has an invalid length. [ 847.843624][T14831] netlink: 'syz.1.1760': attribute type 29 has an invalid length. [ 848.685226][T14843] openvswitch: netlink: Message has 76 unknown bytes. [ 848.693320][T14843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.702258][ T5893] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 848.775130][T14844] openvswitch: netlink: Message has 76 unknown bytes. [ 848.782821][T14844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.911187][ T5893] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 7 [ 848.937293][ T5893] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 9236, setting to 1024 [ 848.950291][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 848.971435][ T5893] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 849.007560][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 849.015789][ T5893] usb 5-1: Product: syz [ 849.021024][ T5893] usb 5-1: Manufacturer: syz [ 849.025803][ T5893] usb 5-1: SerialNumber: syz [ 849.088759][ T5893] usb 5-1: config 0 descriptor?? [ 849.099809][ T5893] usb 5-1: selecting invalid altsetting 0 [ 849.322484][T14852] netlink: 'syz.0.1766': attribute type 29 has an invalid length. [ 849.342706][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 849.622940][T14855] x_tables: duplicate underflow at hook 3 [ 849.782965][T10781] usb 5-1: USB disconnect, device number 44 [ 849.894337][T14859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1768'. [ 850.588755][T14867] openvswitch: netlink: Message has 76 unknown bytes. [ 850.595957][T14867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.923197][T14872] input: syz0 as /devices/virtual/input/input42 [ 851.970457][T14886] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 852.281883][T14888] bond1: entered promiscuous mode [ 852.291014][T14888] bond1: entered allmulticast mode [ 852.298731][T14888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.009553][T14890] bridge2: entered promiscuous mode [ 853.014964][T14890] bridge2: entered allmulticast mode [ 853.078717][T14890] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 853.259774][ T60] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 853.407441][ T257] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 853.793460][T10781] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 853.918915][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1778'. [ 854.000874][T10781] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 854.017801][T10781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.029445][T10781] usb 1-1: config 0 descriptor?? [ 854.038411][T10781] cp210x 1-1:0.0: cp210x converter detected [ 854.503044][T10781] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 855.162165][T14915] openvswitch: netlink: Message has 76 unknown bytes. [ 855.206416][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.490240][T14939] openvswitch: netlink: Message has 76 unknown bytes. [ 856.499209][T14939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.538176][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 856.547957][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 856.579582][T14930] trusted_key: encrypted_key: insufficient parameters specified [ 856.970188][T10781] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 856.988004][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 856.991838][T10781] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 857.010917][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 857.035213][ T10] usb 2-1: config 179 has no interface number 0 [ 857.070732][T10781] usb 1-1: cp210x converter now attached to ttyUSB0 [ 857.145188][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 857.185460][T10781] usb 1-1: USB disconnect, device number 31 [ 857.235759][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 857.317867][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 857.330239][T10781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 857.330744][T10781] cp210x 1-1:0.0: device disconnected [ 857.457417][T14707] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 857.641051][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 857.751135][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 857.800394][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 857.868373][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.037957][T14707] usb 3-1: Using ep0 maxpacket: 16 [ 858.048576][T14924] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 858.061303][T14707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.093768][T14707] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 858.121718][ T10] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 858.335971][T14707] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 858.568674][T14707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.884753][T14707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 858.913131][T14707] usb 3-1: SerialNumber: syz [ 858.947506][T14707] usb 3-1: can't set config #1, error -71 [ 858.959271][T14707] usb 3-1: USB disconnect, device number 55 [ 859.261591][T14960] openvswitch: netlink: Message has 76 unknown bytes. [ 859.269469][T14960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.484477][T14961] xt_bpf: check failed: parse error [ 859.497167][T14961] netlink: 'syz.4.1787': attribute type 304 has an invalid length. [ 859.701017][T14966] input: syz0 as /devices/virtual/input/input43 [ 860.278183][ T5902] usb 2-1: USB disconnect, device number 45 [ 860.749204][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 861.152450][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'. [ 861.422351][T14979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 864.079646][T15000] netlink: 'syz.5.1794': attribute type 1 has an invalid length. [ 864.151288][T15002] bond1: entered promiscuous mode [ 864.158236][T15002] bond1: entered allmulticast mode [ 864.163883][T15002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.275270][T15000] bridge1: entered promiscuous mode [ 864.283580][T15000] bridge1: entered allmulticast mode [ 864.291630][ T1156] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 864.395174][T15000] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 864.518771][T13255] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 865.197362][T15018] trusted_key: encrypted_key: insufficient parameters specified [ 866.024662][T10036] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 866.238000][T10036] usb 5-1: Using ep0 maxpacket: 16 [ 866.246771][T10036] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.493154][T10036] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 866.774033][T10036] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 866.959384][T10036] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.970221][T10036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 867.100137][T10036] usb 5-1: SerialNumber: syz [ 867.285386][T10036] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 867.339383][T10036] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 867.571451][T10036] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 868.635247][T15045] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 868.645697][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 868.781049][T15047] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 869.475575][T10036] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 869.757619][T10036] usb 2-1: unable to get BOS descriptor or descriptor too short [ 869.791509][T10036] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 869.818872][ T5872] usb 5-1: USB disconnect, device number 45 [ 869.854595][T10036] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 869.879954][T10036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.913970][T10036] usb 2-1: Product: syz [ 869.934859][T10036] usb 2-1: Manufacturer: syz [ 869.942710][T10036] usb 2-1: SerialNumber: syz [ 870.052355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.060420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.224094][T10036] usb 2-1: unit 4 not found! [ 870.338095][T15058] xt_CT: No such helper "snmp" [ 870.403700][T10036] usb 2-1: USB disconnect, device number 46 [ 871.089897][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 871.089914][ T29] audit: type=1326 audit(1773006778.110:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 871.310738][ T29] audit: type=1326 audit(1773006778.110:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 871.399094][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.549428][ T29] audit: type=1326 audit(1773006778.110:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 871.612941][ T29] audit: type=1326 audit(1773006778.110:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 871.672004][ T29] audit: type=1326 audit(1773006778.110:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 871.894223][T15062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1811'. [ 871.998036][ T29] audit: type=1326 audit(1773006778.110:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 872.009406][T15074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'. [ 872.086272][ T29] audit: type=1326 audit(1773006778.110:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 872.547917][ T29] audit: type=1326 audit(1773006778.120:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 872.698632][ T29] audit: type=1326 audit(1773006778.120:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 872.793223][ T29] audit: type=1326 audit(1773006778.130:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.1815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 872.984741][T15077] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[15077] [ 873.108237][T15092] netlink: 'syz.0.1828': attribute type 29 has an invalid length. [ 873.189190][T15096] netlink: 'syz.0.1828': attribute type 29 has an invalid length. [ 873.472545][T15097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.663354][T15108] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 5, 0, 0, 0) [ 875.199239][T15122] netlink: 'syz.5.1824': attribute type 29 has an invalid length. [ 875.250877][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'. [ 876.549523][T15138] openvswitch: netlink: Message has 76 unknown bytes. [ 876.591487][T15138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.693884][T15132] xt_CT: No such helper "snmp" [ 876.866017][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 876.866034][ T29] audit: type=1326 audit(1773006783.910:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 877.022514][ T29] audit: type=1326 audit(1773006783.980:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 877.133033][ T29] audit: type=1326 audit(1773006784.050:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 877.654119][T15132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1830'. [ 877.763509][T15132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1830'. [ 877.816056][ T29] audit: type=1326 audit(1773006784.050:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 877.988464][T15154] netlink: 'syz.1.1834': attribute type 29 has an invalid length. [ 878.081534][ T29] audit: type=1326 audit(1773006784.050:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 878.115148][T15155] netlink: 'syz.1.1834': attribute type 29 has an invalid length. [ 878.154892][ T29] audit: type=1326 audit(1773006784.050:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 878.261360][ T29] audit: type=1326 audit(1773006784.050:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 878.314489][ T29] audit: type=1326 audit(1773006784.050:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 878.365773][ T29] audit: type=1326 audit(1773006784.050:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 878.762014][ T29] audit: type=1326 audit(1773006785.750:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15164 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 878.997933][T10036] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 879.167874][T10036] usb 3-1: Using ep0 maxpacket: 32 [ 879.180394][T10036] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.192702][T10036] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 879.213447][T10036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.348200][T10036] usb 3-1: config 0 descriptor?? [ 879.454276][T10036] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 879.579173][T15180] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 879.690241][T15182] bond1: entered promiscuous mode [ 879.814329][T15182] bond1: entered allmulticast mode [ 879.853531][T15182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.999500][T15180] bridge3: entered promiscuous mode [ 880.008197][ T84] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 880.022499][T15180] bridge3: entered allmulticast mode [ 880.033467][T15180] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 880.143101][T15184] IPv6: NLM_F_CREATE should be specified when creating new route [ 880.176370][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1843'. [ 880.247951][ T1156] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 881.014494][T15195] fuse: Bad value for 'fd' [ 881.772369][T15213] trusted_key: encrypted_key: insufficient parameters specified [ 881.898088][T15215] syz.1.1851 (15215): drop_caches: 2 [ 881.976113][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 881.976137][ T29] audit: type=1326 audit(1773006789.020:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 882.068516][T10036] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 882.281183][ T29] audit: type=1326 audit(1773006789.060:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.4.1848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 882.304538][T10036] usb 6-1: Using ep0 maxpacket: 16 [ 882.318366][T10036] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.340186][T10036] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 882.659214][T10781] usb 3-1: USB disconnect, device number 56 [ 882.734627][T10036] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 882.895698][T10036] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.937888][T10036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 882.945929][T10036] usb 6-1: SerialNumber: syz [ 883.183342][T10036] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 883.194083][T10036] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 883.203752][T10036] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 884.161385][T15239] fuse: Bad value for 'fd' [ 884.293501][T15241] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 884.530721][T15242] bond2: entered promiscuous mode [ 884.540274][T15242] bond2: entered allmulticast mode [ 884.545896][T15242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.685103][T15244] bridge2: entered promiscuous mode [ 884.691801][T15244] bridge2: entered allmulticast mode [ 884.701373][T15244] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 884.712166][ T84] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 884.848190][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 885.027424][T10036] usb 6-1: USB disconnect, device number 10 [ 885.569316][T10036] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 885.737351][T10036] usb 6-1: Using ep0 maxpacket: 16 [ 885.747222][T10036] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 885.795751][T10036] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 885.812914][T10036] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 885.849172][T10036] usb 6-1: Product: syz [ 885.857921][T10036] usb 6-1: Manufacturer: syz [ 885.873042][T10036] r8152-cfgselector 6-1: Unknown version 0x0000 [ 885.880441][T10036] r8152-cfgselector 6-1: config 0 descriptor?? [ 886.111154][T10036] r8152-cfgselector 6-1: bad CDC descriptors [ 886.147252][T10036] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 886.346328][T15274] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1874'. [ 886.357875][T15274] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 886.399074][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 886.921344][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 887.603407][T15287] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 5, 0, 0, 0) [ 887.817343][T10781] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 888.107869][T10781] usb 3-1: Using ep0 maxpacket: 8 [ 888.148291][T10781] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 888.158130][T10781] usb 3-1: config 179 has no interface number 0 [ 888.164453][T10781] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 888.179387][T10781] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 888.252366][T10781] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.387862][T10781] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 888.455997][T10781] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 888.507403][T10781] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 888.563874][T10781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.702169][T15293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 888.769870][T10781] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 888.861979][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 888.932862][T15321] fuse: Bad value for 'fd' [ 889.321541][ T84] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.345461][ T84] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.452535][ T84] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.467987][ T84] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.334916][T15334] netlink: 'syz.5.1888': attribute type 29 has an invalid length. [ 890.466140][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 890.524314][T15338] netlink: 'syz.5.1888': attribute type 29 has an invalid length. [ 890.748304][T10781] usb 3-1: USB disconnect, device number 57 [ 891.624052][ T29] audit: type=1326 audit(1773006798.660:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 891.695754][ T29] audit: type=1326 audit(1773006798.660:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.016275][ T29] audit: type=1326 audit(1773006798.660:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.206264][ T29] audit: type=1326 audit(1773006798.660:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.288608][ T29] audit: type=1326 audit(1773006798.660:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.508216][ T29] audit: type=1326 audit(1773006798.660:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.531497][ T29] audit: type=1326 audit(1773006798.660:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.555554][ T29] audit: type=1326 audit(1773006798.660:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.582222][ T29] audit: type=1326 audit(1773006798.670:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.611236][ T29] audit: type=1326 audit(1773006798.670:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f68f6c code=0x7ffc0000 [ 892.918493][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 893.228015][T15375] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1902'. [ 893.794075][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 894.035655][T15381] xt_CT: No such helper "snmp" [ 894.137635][T15381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'. [ 894.202870][T15381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1905'. [ 894.792632][T15412] openvswitch: netlink: Message has 76 unknown bytes. [ 894.801802][T15412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.148692][T15425] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.1920'. [ 896.930039][T15439] fuse: Bad value for 'fd' [ 897.264941][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 897.848320][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 898.353987][T15453] xt_CT: No such helper "snmp" [ 898.708198][T15464] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 899.029807][T15453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 899.043316][T15453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1928'. [ 899.179202][T15479] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 899.532968][T15486] binder: BINDER_SET_CONTEXT_MGR already set [ 899.540672][T15486] binder: 15478:15486 ioctl 4018620d 80000040 returned -16 [ 899.969139][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 900.387305][T15486] syz.5.1937 (15486): drop_caches: 2 [ 901.013240][T15506] binder: BC_ATTEMPT_ACQUIRE not supported [ 901.020094][T15506] binder: 15505:15506 ioctl c0306201 80000540 returned -22 [ 901.528913][T15518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.846140][T15520] xt_CT: No such helper "snmp" [ 902.565168][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1948'. [ 902.948371][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1952'. [ 902.967603][T15520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1952'. [ 903.553584][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 904.013978][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 905.061520][ T5893] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 905.307808][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 905.395314][T15589] xt_CT: No such helper "snmp" [ 905.433252][ T5893] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 905.693068][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.700781][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.701336][ T5893] usb 6-1: config 179 has no interface number 0 [ 905.829829][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 905.885660][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 905.923071][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1973'. [ 905.943674][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 906.018299][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 906.049082][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 906.082363][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 906.137441][ T5893] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 906.188327][ T5893] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 906.209878][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.272479][T15582] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 906.290476][ T5893] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 906.679298][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.706024][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.406273][ T8642] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.426318][ T8642] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.454107][ T8642] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.478159][ T8642] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.636454][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 907.968610][T11281] Bluetooth: hci5: command 0x0406 tx timeout [ 908.205389][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 908.872688][ T5893] usb 6-1: USB disconnect, device number 12 [ 908.933302][T15642] netlink: 'syz.2.1991': attribute type 29 has an invalid length. [ 908.944970][T15642] netlink: 'syz.2.1991': attribute type 29 has an invalid length. [ 909.464166][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1995'. [ 909.697984][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 909.698003][ T29] audit: type=1326 audit(1773006816.740:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 909.850435][ T29] audit: type=1326 audit(1773006816.750:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 909.905647][T15661] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1998'. [ 909.928799][ T29] audit: type=1326 audit(1773006816.750:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 909.958021][T13722] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 910.013281][ T29] audit: type=1326 audit(1773006816.750:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.138116][T13722] usb 1-1: Using ep0 maxpacket: 32 [ 910.149807][T13722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.200407][T13722] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 910.273219][ T29] audit: type=1326 audit(1773006816.750:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.283715][T13722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.411142][ T29] audit: type=1326 audit(1773006816.750:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.453864][T13722] usb 1-1: config 0 descriptor?? [ 910.530502][T13722] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 910.545725][ T29] audit: type=1326 audit(1773006816.750:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.603346][ T29] audit: type=1326 audit(1773006816.750:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.785440][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2004'. [ 910.927977][ T29] audit: type=1326 audit(1773006816.750:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 910.953754][ T29] audit: type=1326 audit(1773006816.750:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f56f6c code=0x7ffc0000 [ 911.763711][T15704] netlink: 'syz.2.2013': attribute type 29 has an invalid length. [ 912.008534][T15705] netlink: 'syz.2.2013': attribute type 29 has an invalid length. [ 912.458625][T15712] netlink: 'syz.1.2016': attribute type 29 has an invalid length. [ 912.709177][T15718] netlink: 'syz.1.2016': attribute type 29 has an invalid length. [ 912.778040][T15720] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 913.141272][T14941] usb 1-1: USB disconnect, device number 32 [ 913.562214][T15722] xt_CT: No such helper "snmp" [ 914.463502][T15746] openvswitch: netlink: Message has 76 unknown bytes. [ 914.472070][T15746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.553988][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2019'. [ 914.582579][T15722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2019'. [ 915.331087][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 915.331100][ T29] audit: type=1326 audit(1773006822.380:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 915.542496][T15771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2037'. [ 915.648099][T14276] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 915.671757][ T29] audit: type=1326 audit(1773006822.420:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 915.734948][ T29] audit: type=1326 audit(1773006822.420:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 915.779008][ T29] audit: type=1326 audit(1773006822.420:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 915.838068][T14276] usb 5-1: Using ep0 maxpacket: 32 [ 916.009863][T14276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.023849][T14276] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 916.096059][T14276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.106264][ T29] audit: type=1326 audit(1773006822.420:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 916.445158][T14276] usb 5-1: config 0 descriptor?? [ 916.476503][T14276] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 916.508345][ T29] audit: type=1326 audit(1773006822.420:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 916.554386][ T29] audit: type=1326 audit(1773006822.420:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 916.658975][ T29] audit: type=1326 audit(1773006822.420:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 916.699857][ T29] audit: type=1326 audit(1773006822.420:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 916.758411][ T29] audit: type=1326 audit(1773006822.420:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 917.274051][T15802] macsec0: mtu greater than device maximum [ 917.518469][T15808] openvswitch: netlink: Message has 4 unknown bytes. [ 917.782577][T15816] netlink: 'syz.0.2055': attribute type 29 has an invalid length. [ 917.950682][T15824] netlink: 'syz.0.2055': attribute type 29 has an invalid length. [ 918.620315][T13722] usb 5-1: USB disconnect, device number 46 [ 919.068502][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 919.623238][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 919.648447][T15858] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 919.762567][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 919.992636][T15870] openvswitch: netlink: Message has 76 unknown bytes. [ 920.000254][T15870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.197307][T14941] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 920.396059][T14941] usb 5-1: Using ep0 maxpacket: 32 [ 920.559714][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 920.560241][ T29] audit: type=1326 audit(1773006827.610:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 920.562920][T14941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.566475][ T29] audit: type=1326 audit(1773006827.610:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 920.566522][ T29] audit: type=1326 audit(1773006827.610:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 920.566560][ T29] audit: type=1326 audit(1773006827.610:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 920.566597][ T29] audit: type=1326 audit(1773006827.610:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 920.704651][ T29] audit: type=1326 audit(1773006827.750:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 921.020978][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 921.076361][T15887] netlink: 'syz.1.2080': attribute type 29 has an invalid length. [ 921.168196][T14941] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 921.210417][T14941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.268347][T14941] usb 5-1: config 0 descriptor?? [ 921.351244][T15893] netlink: 'syz.1.2080': attribute type 29 has an invalid length. [ 921.408855][ T29] audit: type=1326 audit(1773006828.330:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 921.459269][T15894] netlink: 'syz.5.2085': attribute type 29 has an invalid length. [ 921.471606][T15894] netlink: 'syz.5.2085': attribute type 29 has an invalid length. [ 921.584981][ T29] audit: type=1326 audit(1773006828.550:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 921.620536][T14941] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 921.722386][ T29] audit: type=1326 audit(1773006828.610:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 921.964392][ T29] audit: type=1326 audit(1773006828.610:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7135cab code=0x7ffc0000 [ 922.330868][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 922.645441][T15905] xt_CT: No such helper "snmp" [ 923.155330][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 923.185354][T15922] fuse: Bad value for 'fd' [ 923.275116][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 923.288779][T15905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2089'. [ 923.815198][ T30] INFO: task syz.3.1505:13847 blocked for more than 143 seconds. [ 923.862554][ T30] Tainted: G L syzkaller #0 [ 923.892231][T14276] usb 5-1: USB disconnect, device number 47 [ 923.923711][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 923.988495][ T30] task:syz.3.1505 state:D stack:25120 pid:13847 tgid:13847 ppid:5835 task_flags:0x400040 flags:0x08080002 [ 924.032979][T15937] openvswitch: netlink: Message has 76 unknown bytes. [ 924.041632][T15937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.131026][ T30] Call Trace: [ 924.142974][ T30] [ 924.155017][ T30] __schedule+0x15dd/0x52d0 [ 924.179668][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 924.184684][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 924.245529][ T30] ? __perf_event_task_sched_in+0x1606/0x1800 [ 924.253205][ T30] ? __pfx___schedule+0x10/0x10 [ 924.259268][ T30] ? schedule+0x90/0x360 [ 924.263615][ T30] schedule+0x164/0x360 [ 924.269976][ T30] schedule_timeout+0xc3/0x2c0 [ 924.275996][ T30] ? finish_task_switch+0x240/0x920 [ 924.284551][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 924.292140][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 924.300499][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 924.310686][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.320032][ T30] ? wait_for_completion+0x274/0x5e0 [ 924.329332][ T30] wait_for_completion+0x2cc/0x5e0 [ 924.337890][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 924.344588][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 924.352409][ T30] restrict_one_thread_callback+0x320/0x570 [ 924.362910][ T30] task_work_run+0x1d9/0x270 [ 924.370383][ T30] ? __pfx_task_work_run+0x10/0x10 [ 924.375759][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 924.384603][ T30] get_signal+0x11eb/0x1330 [ 924.405805][ T30] ? __free_object+0x442/0x5e0 [ 924.417642][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 924.461451][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 924.468944][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 924.478667][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 924.484997][ T30] ? futex_wait_restart+0x1f5/0x470 [ 924.492449][ T30] exit_to_user_mode_loop+0x86/0x480 [ 924.499834][ T30] ? rcu_is_watching+0x15/0xb0 [ 924.504827][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.512007][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.519591][ T30] do_int80_emulation+0x2ef/0x4d0 [ 924.524725][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.533265][ T30] ? clear_bhb_loop+0x40/0x90 [ 924.539958][ T30] ? clear_bhb_loop+0x40/0x90 [ 924.544692][ T30] asm_int80_emulation+0x1a/0x20 [ 924.552325][ T30] RIP: 0023:0xf7f17f6c [ 924.559560][ T30] RSP: 002b:00000000f74ffb0c EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 924.570940][ T30] RAX: fffffffffffffdfc RBX: 00000000f73d50bc RCX: 0000000000000080 [ 924.581085][ T30] RDX: 0000000000000000 RSI: 00000000f74ffca8 RDI: 0000000000000000 [ 924.591968][ T30] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 924.602945][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 924.613884][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.624818][ T30] [ 924.629985][ T30] INFO: task syz.3.1505:13848 blocked for more than 144 seconds. [ 924.645554][ T30] Tainted: G L syzkaller #0 [ 924.654123][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 924.664689][ T30] task:syz.3.1505 state:D stack:24544 pid:13848 tgid:13847 ppid:5835 task_flags:0x400040 flags:0x08080002 [ 924.678791][ T30] Call Trace: [ 924.682132][ T30] [ 924.685177][ T30] __schedule+0x15dd/0x52d0 [ 924.695215][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 924.702620][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 924.709012][ T30] ? __pfx___schedule+0x10/0x10 [ 924.714386][ T30] ? schedule+0x90/0x360 [ 924.720635][ T30] schedule+0x164/0x360 [ 924.724864][ T30] schedule_timeout+0xc3/0x2c0 [ 924.730802][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 924.738823][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 924.744397][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.751030][ T30] ? wait_for_completion+0x274/0x5e0 [ 924.758254][ T30] wait_for_completion+0x2cc/0x5e0 [ 924.763395][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 924.770257][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 924.777543][ T30] restrict_one_thread_callback+0x320/0x570 [ 924.783561][ T30] task_work_run+0x1d9/0x270 [ 924.789454][ T30] ? __pfx_task_work_run+0x10/0x10 [ 924.794587][ T30] ? vfs_readv+0x6ed/0x840 [ 924.800321][ T30] get_signal+0x11eb/0x1330 [ 924.804860][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 924.811281][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 924.818826][ T30] ? __fget_files+0x3a0/0x420 [ 924.823568][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 924.831557][ T30] ? do_readv+0x2b1/0x2e0 [ 924.838256][ T30] exit_to_user_mode_loop+0x86/0x480 [ 924.843659][ T30] ? rcu_is_watching+0x15/0xb0 [ 924.849536][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.855775][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.863169][ T30] do_int80_emulation+0x2ef/0x4d0 [ 924.869256][ T30] ? asm_int80_emulation+0x1a/0x20 [ 924.874627][ T30] ? clear_bhb_loop+0x40/0x90 [ 924.881553][ T30] ? clear_bhb_loop+0x40/0x90 [ 924.888066][ T30] asm_int80_emulation+0x1a/0x20 [ 924.893135][ T30] RIP: 0023:0xf7f17f6c [ 924.898632][ T30] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 924.908971][ T30] RAX: fffffffffffffe00 RBX: 000000000000000a RCX: 00000000800001c0 [ 924.918167][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 924.929132][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.938676][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 924.948403][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.957800][ T30] [ 924.960863][ T30] INFO: task syz.3.1505:13852 blocked for more than 144 seconds. [ 924.998235][ T30] Tainted: G L syzkaller #0 [ 925.004789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 925.014753][ T30] task:syz.3.1505 state:D stack:28296 pid:13852 tgid:13847 ppid:5835 task_flags:0x400140 flags:0x08080006 [ 925.027924][ T30] Call Trace: [ 925.031218][ T30] [ 925.034136][ T30] __schedule+0x15dd/0x52d0 [ 925.039877][ T30] ? register_lock_class+0x31/0x2e0 [ 925.045108][ T30] ? __pfx___schedule+0x10/0x10 [ 925.051162][ T30] ? schedule+0x90/0x360 [ 925.055464][ T30] schedule+0x164/0x360 [ 925.060399][ T30] schedule_timeout+0xc3/0x2c0 [ 925.065170][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 925.070972][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 925.077983][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 925.083138][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 925.089613][ T30] ? wait_for_completion+0x274/0x5e0 [ 925.094907][ T30] wait_for_completion+0x2cc/0x5e0 [ 925.100786][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 925.107667][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 925.114221][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 925.121799][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 925.129731][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 925.134941][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 925.142146][ T30] do_int80_emulation+0x173/0x4d0 [ 925.148741][ T30] ? asm_int80_emulation+0x1a/0x20 [ 925.153885][ T30] ? clear_bhb_loop+0x40/0x90 [ 925.159579][ T30] ? clear_bhb_loop+0x40/0x90 [ 925.164262][ T30] asm_int80_emulation+0x1a/0x20 [ 925.170491][ T30] RIP: 0023:0xf7f17f6c [ 925.174563][ T30] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 925.183973][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000000e [ 925.192965][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.207854][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.215847][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 925.224885][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.233871][ T30] [ 925.238544][ T30] INFO: task syz.3.1505:13853 blocked for more than 144 seconds. [ 925.261825][ T30] Tainted: G L syzkaller #0 [ 925.269701][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 925.279352][ T30] task:syz.3.1505 state:D stack:28832 pid:13853 tgid:13847 ppid:5835 task_flags:0x400140 flags:0x08080006 [ 925.292396][ T30] Call Trace: [ 925.295684][ T30] [ 925.299380][ T30] __schedule+0x15dd/0x52d0 [ 925.303945][ T30] ? __pfx___schedule+0x10/0x10 [ 925.309558][ T30] ? schedule+0x90/0x360 [ 925.313809][ T30] schedule+0x164/0x360 [ 925.319611][ T30] schedule_timeout+0xc3/0x2c0 [ 925.324401][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 925.330670][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 925.336090][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 925.342164][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 925.349029][ T30] ? wait_for_completion+0x274/0x5e0 [ 925.354466][ T30] wait_for_completion+0x2cc/0x5e0 [ 925.360525][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 925.367319][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 925.374056][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 925.381243][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 925.388827][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 925.395723][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 925.402892][ T30] __do_fast_syscall_32+0x20d/0x640 [ 925.409048][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 925.414254][ T30] ? do_fast_syscall_32+0x33/0x70 [ 925.420002][ T30] ? irqentry_exit+0x10e/0x620 [ 925.424769][ T30] ? trace_irq_disable+0x3b/0x150 [ 925.430926][ T30] do_fast_syscall_32+0x33/0x70 [ 925.435850][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.443346][ T30] RIP: 0023:0xf7f17f6c [ 925.449089][ T30] RSP: 002b:00000000f539450c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 925.458461][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000009 [ 925.468224][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.477165][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.485160][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 925.494172][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.503149][ T30] [ 925.507816][ T30] [ 925.507816][ T30] Showing all locks held in the system: [ 925.515537][ T30] 1 lock held by khungtaskd/30: [ 925.521994][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 925.533057][ T30] 2 locks held by getty/5581: [ 925.539421][ T30] #0: ffff8880355c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 925.550495][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 925.561688][ T30] [ 925.564028][ T30] ============================================= [ 925.564028][ T30] [ 925.574427][ T30] NMI backtrace for cpu 1 [ 925.574445][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.574467][ T30] Tainted: [L]=SOFTLOCKUP [ 925.574473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.574482][ T30] Call Trace: [ 925.574488][ T30] [ 925.574494][ T30] dump_stack_lvl+0xe8/0x150 [ 925.574524][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 925.574662][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 925.574689][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 925.574714][ T30] sys_info+0x135/0x170 [ 925.574732][ T30] watchdog+0xfd9/0x1030 [ 925.574759][ T30] ? watchdog+0x21a/0x1030 [ 925.574790][ T30] kthread+0x388/0x470 [ 925.574808][ T30] ? __pfx_watchdog+0x10/0x10 [ 925.574829][ T30] ? __pfx_kthread+0x10/0x10 [ 925.574846][ T30] ret_from_fork+0x51e/0xb90 [ 925.574872][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 925.574892][ T30] ? __switch_to+0xc7d/0x1450 [ 925.574915][ T30] ? __pfx_kthread+0x10/0x10 [ 925.574933][ T30] ret_from_fork_asm+0x1a/0x30 [ 925.574970][ T30] [ 925.574978][ T30] Sending NMI from CPU 1 to CPUs 0: [ 925.701594][ C0] NMI backtrace for cpu 0 [ 925.701616][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.701636][ C0] Tainted: [L]=SOFTLOCKUP [ 925.701642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.701651][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 925.701679][ C0] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 925.701693][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 925.701706][ C0] RAX: 00000000012e9dd7 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 925.701717][ C0] RDX: 0000000000000001 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380 [ 925.701727][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 925.701737][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90118bb0 [ 925.701748][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 925.701758][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 925.701770][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.701781][ C0] CR2: 00000000f73c22f0 CR3: 000000007893a000 CR4: 00000000003526f0 [ 925.701795][ C0] Call Trace: [ 925.701802][ C0] [ 925.701808][ C0] default_idle+0x9/0x20 [ 925.701823][ C0] default_idle_call+0x72/0xb0 [ 925.701839][ C0] do_idle+0x1bd/0x500 [ 925.701860][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 925.701878][ C0] ? __pfx_do_idle+0x10/0x10 [ 925.701900][ C0] cpu_startup_entry+0x43/0x60 [ 925.701919][ C0] rest_init+0x2de/0x300 [ 925.701936][ C0] start_kernel+0x385/0x3d0 [ 925.702085][ C0] x86_64_start_reservations+0x24/0x30 [ 925.702132][ C0] x86_64_start_kernel+0x143/0x1c0 [ 925.702154][ C0] common_startup_64+0x13e/0x147 [ 925.702176][ C0] [ 925.912088][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 925.918961][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.929670][ T30] Tainted: [L]=SOFTLOCKUP [ 925.933987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.944032][ T30] Call Trace: [ 925.947341][ T30] [ 925.950271][ T30] vpanic+0x56c/0xa60 [ 925.954244][ T30] ? __pfx___schedule+0x10/0x10 [ 925.959086][ T30] ? __pfx_vpanic+0x10/0x10 [ 925.963577][ T30] ? __pfx_console_unlock+0x10/0x10 [ 925.968775][ T30] panic+0xc5/0xd0 [ 925.972489][ T30] ? __pfx_panic+0x10/0x10 [ 925.976899][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 925.982299][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 925.988461][ T30] watchdog+0x1023/0x1030 [ 925.992823][ T30] ? watchdog+0x21a/0x1030 [ 925.997247][ T30] kthread+0x388/0x470 [ 926.001316][ T30] ? __pfx_watchdog+0x10/0x10 [ 926.005986][ T30] ? __pfx_kthread+0x10/0x10 [ 926.010567][ T30] ret_from_fork+0x51e/0xb90 [ 926.015167][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 926.020270][ T30] ? __switch_to+0xc7d/0x1450 [ 926.024951][ T30] ? __pfx_kthread+0x10/0x10 [ 926.029532][ T30] ret_from_fork_asm+0x1a/0x30 [ 926.034300][ T30] [ 926.037576][ T30] Kernel Offset: disabled [ 926.041887][ T30] Rebooting in 86400 seconds..