last executing test programs: 13.847606611s ago: executing program 3 (id=939): syz_usb_connect(0x0, 0x1b, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x81, 0x6, 0xc, 0x40, 0x1e2d, 0xb0, 0xdc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3}}]}}, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x300, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000a80)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000881}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x3, 0x0, [{0x336, 0x0, 0x8000000000000000}, {0xb24, 0x0, 0x6}, {0x217, 0x0, 0x8000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740), 0x0, 0x80000001, 0x3f7a) 11.335392284s ago: executing program 0 (id=946): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 11.185844599s ago: executing program 1 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11.054101772s ago: executing program 3 (id=948): socket$inet6_sctp(0xa, 0x801, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, r8, 0x0) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.351739206s ago: executing program 0 (id=950): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x6a) unshare(0x2040400) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 8.396284957s ago: executing program 4 (id=954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0xffffffbf, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000004000b0008003500000000000a003400020202020202000004006e8008003700000000000500130002000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000003a40), 0x6, 0x80040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd2b, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xcb, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8000, 0x38, 0xdb}}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0xc, 0x6, 0x4}}) listen(0xffffffffffffffff, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) close(0x3) 8.367609543s ago: executing program 2 (id=955): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.982007786s ago: executing program 4 (id=956): syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230) 7.79061964s ago: executing program 2 (id=957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x20044014) socket(0x1d, 0x2, 0x6) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xa2c65) 7.756417778s ago: executing program 0 (id=958): syz_usb_connect(0x0, 0x1b, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x81, 0x6, 0xc, 0x40, 0x1e2d, 0xb0, 0xdc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3}}]}}, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x300, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000a80)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000881}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x3, 0x0, [{0x336, 0x0, 0x8000000000000000}, {0xb24, 0x0, 0x6}, {0x217, 0x0, 0x8000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740), 0x0, 0x80000001, 0x3f7a) 7.69566989s ago: executing program 3 (id=959): syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230) 7.358502145s ago: executing program 1 (id=960): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 6.252267241s ago: executing program 1 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.210902884s ago: executing program 2 (id=962): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4800) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@nodots}]}, 0x1, 0x11e9, &(0x7f0000002440)="$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") timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) r5 = socket(0x2, 0x80805, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r3}) sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x24, 0x4000000) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) exit(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004010) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000240)={0x0, 0x6, 0x5, '\x00', &(0x7f0000000180)=0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 5.663485091s ago: executing program 0 (id=963): ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002a80)={@fallback, 0x36, 0x1, 0x1, &(0x7f0000002980), 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[0x0]}, 0x40) syz_emit_ethernet(0xc2, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "1b0a38", 0x8c, 0x11, 0xff, @rand_addr=' \x01\x00', @private2, {[@fragment={0x29, 0x0, 0xde, 0x1, 0x0, 0x9, 0x64}, @fragment={0x2c, 0x0, 0x2, 0x0, 0x0, 0x3, 0x67}, @srh={0xc, 0x2, 0x4, 0x1, 0x8, 0x20, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e21, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "71610e9d631b95989e8f369550b1c9f723b7760f5c65a3aaaa7ccd0b7fb0a335", "e524c9d0c8a4f85373311a995ff2bc55", {"4338640a8b193df37559eb78eb4ba04c", "8bc9876f529ae40f5b47fa583a6bfe20"}}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x2, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000480)=[@iv={0xf0, 0x117, 0x2, 0xd5, "df13ad137cbd8e906a65da0d2606390ddeac206d41be78efb4050ba7c65ef8dd36180e9f06d6c787da3cb9318fa8cee236d79ea812d06eec093bf5a09eff1e4f8efcdca503fe4fbcd1c1bbf4a1a8160bd7f439ae5551841025257bbcc8152ace582101ff54e36b2973074dcf854a43d7f87eb0b6855342b232c6415206b1cc8189e99d075c435c637ede8621722798d87bab8da99ca5fbfbf5af397b738a4765b159099420ccca0b4287fcd255bdb8025048b6b4270b6c0bce1ad8a33bb5167e2de0cdf7595090921082ef927bf5a8ca96796fdfa0"}], 0xf0}], 0x1, 0x40800) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x10020) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 5.320040361s ago: executing program 1 (id=964): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003140)=0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000003540)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0xb2, {0x7, 0x2b, 0x3, 0x2000040, 0xfffe, 0x81, 0x6, 0x1, 0x0, 0x0, 0x80, 0x8}}, &(0x7f0000000240)={0x18, 0x0, 0x447c75ab, {0x1}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0xc6df, {0x3}}, &(0x7f0000000300)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000380)={0x28, 0x0, 0xbb0e, {{0x2, 0x3, 0x2}}}, &(0x7f0000000440)={0x60, 0x0, 0xfffffffffffffff8, {{0x400, 0xfffffffffffffff7, 0x8, 0xff, 0x5, 0x81, 0x8, 0x5}}}, &(0x7f00000003c0)={0x18, 0x0, 0xb, {0x8}}, &(0x7f00000004c0)={0x11, 0xfffffffffffffffe, 0xc2, {'\x00'}}, &(0x7f0000000500)={0x20, 0x0, 0xe, {0x0, 0x2}}, &(0x7f0000000680)={0x78, 0xfffffffffffffffe, 0x6, {0x23e, 0x8b, 0x0, {0x4, 0x0, 0x9, 0x5, 0x101, 0xb6a3, 0x1, 0x1, 0xd, 0x2000, 0x2000000, 0x0, 0x0, 0x0, 0xa3a}}}, &(0x7f0000000700)={0x90, 0x0, 0xac89, {0x4, 0x3, 0x544062aa, 0x0, 0xe, 0x9, {0x0, 0x4, 0x3, 0x0, 0x5, 0x9, 0xe14b, 0xef7d, 0xf, 0xa000, 0x485f, 0x0, 0x0, 0x9, 0x1}}}, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], &(0x7f0000002f00)={0x228, 0x0, 0x2, [{{0x0, 0x0, 0x7, 0xd, 0x7f, 0x3, {0x3, 0x3, 0xfff, 0x40, 0x4, 0x7f, 0x7e76, 0x2, 0x6, 0x8000, 0xff, r5, 0x0, 0x8}}, {0x0, 0x4, 0x9, 0x7, 'westwood\x00'}}, {{0x0, 0x1, 0x7, 0xf59, 0x6, 0x0, {0x3, 0x5, 0xfff, 0x5, 0x9, 0x8, 0x1, 0x9, 0x54b9c65f, 0x8000, 0x5, 0x0, 0x0, 0xb6e, 0x4}}, {0x3, 0x5, 0xd5, 0x2, '\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01'}}]}, &(0x7f0000003180)={0xa0, 0x0, 0x4, {{0x0, 0x2, 0xff, 0x1, 0xffff8000, 0x10, {0x0, 0xffff, 0x6, 0x7ff, 0x30000000000, 0xfff, 0x6, 0x4, 0xffff, 0xa000, 0x5c, r4, 0xffffffffffffffff, 0x0, 0x4fb3de7}}, {0x0, 0xa}}}, &(0x7f0000003240)={0x20, 0x0, 0x2, {0x0, 0x4, 0x100, 0x2}}, &(0x7f0000003400)={0x130, 0x0, 0x8, {0xffffffffffffffff, 0xe, 0x0, '\x00', {0x10000, 0x6, 0x2cd, 0x403, r5, 0x0, 0x0, '\x00', 0x8000, 0x7, 0x8001, 0xffff, {0x0, 0x2}, {0xffffffffffff652b, 0xf}, {0x81, 0x8}, {0xfffffffffffffff8, 0x6}, 0x5, 0x0, 0x9, 0x20000000}}}}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) r7 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) fcntl$setlease(r7, 0x400, 0x1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x3, 0x2) 5.135906671s ago: executing program 2 (id=965): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) msgsnd(0xffffffffffffffff, 0x0, 0xe, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x1946, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000003880)={0x8, 0xffffffff, 0x6000}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x8004}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r10, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.131479654s ago: executing program 4 (id=966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x3) 4.131163319s ago: executing program 3 (id=967): syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="08004b00ac1414bb08000280c4139b78e0000680db001f0037400720d8ad5d8899adbae58750a86f03d863ec1040ff870f69a7876b470799c04abf12cf9626dba9864e9b3c34b25a94e2b824c2b35e072c10f1c0bc0874300e28decc4901dc5f03128469cd3776f51d32e34bc2211def6a254a687385c97714e57621f6940469110ebd691fc482"], 0x110}, 0x1, 0x0, 0x0, 0x20008000}, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.011606354s ago: executing program 0 (id=968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.960183828s ago: executing program 3 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100520000000000000034000000340000000600000004"], 0x0, 0x52}, 0x28) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0xffffffffffffffff, r6, 0x0, 0x6, 0xa) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 2.890604905s ago: executing program 2 (id=970): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5, 0x8}, {0x8, 0x3}, {0xb, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r12, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x3c0, 0x300, 0x3c00, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x40002000}, {0x0, 0x2, 0x1}, {0x4000000, 0x7}, {0xfe, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x11) 2.79341307s ago: executing program 1 (id=971): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 2.038878641s ago: executing program 4 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.951704124s ago: executing program 0 (id=973): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 1.951104622s ago: executing program 1 (id=974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x20044014) socket(0x1d, 0x2, 0x6) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xa2c65) 1.359717478s ago: executing program 4 (id=975): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000300)={[], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x30, 0x38, 0x35, 0x36, 0x38, 0x31], 0x2d, [0x61, 0x36, 0x4, 0x61], 0x2d, [0x61, 0x36, 0x31, 0x63], 0x2d, [0x30, 0x30, 0x63, 0x35], 0x2d, [0x66, 0x39, 0x33, 0x30, 0x38, 0x61, 0x65, 0x7f]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\']'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user}, {@dont_measure}]}, 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xe}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() accept(0xffffffffffffffff, 0x0, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, 0x4, 0xffffffffffff0001, 0x0, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) 358.037909ms ago: executing program 4 (id=976): syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230) 267.144065ms ago: executing program 3 (id=977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001800)}], 0x1, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x2f, 0x0, "c6552c7408b8f921b470669bcae52c2dbf752824ff11500254e5992d06d38da6707cb35906b97b54d1b363eff910b929e3abe4756aeb061c3b8af4b4800986e41bb6a5804fe8c739a22c018450e5adf3"}, 0xd8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f00011f00fd8db125bb284401"], 0x114}], 0x1}, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) read$FUSE(r4, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r4, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) 0s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:sy'], 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:'], 0x31, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(r3, 0x409, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x91c, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x77d}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004010) kernel console output (not intermixed with test programs): e [ 341.380321][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.387773][ T5905] bridge_slave_1: entered allmulticast mode [ 341.394745][ T5905] bridge_slave_1: entered promiscuous mode [ 341.431761][ T5917] team0: Port device team_slave_0 added [ 341.439374][ T5904] team0: Port device team_slave_0 added [ 341.447419][ T5917] team0: Port device team_slave_1 added [ 341.467825][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.489572][ T5904] team0: Port device team_slave_1 added [ 341.498153][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.532736][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.555090][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.592036][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.636176][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.646917][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.653873][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.680434][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.708185][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.715156][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.741337][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.754723][ T5903] team0: Port device team_slave_0 added [ 341.772486][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.779528][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.805529][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.818609][ T5902] team0: Port device team_slave_0 added [ 341.830433][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.837711][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.864331][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.864373][ T5925] Bluetooth: hci2: command tx timeout [ 341.883811][ T5903] team0: Port device team_slave_1 added [ 341.903787][ T5902] team0: Port device team_slave_1 added [ 341.926558][ T5184] Bluetooth: hci4: command tx timeout [ 341.932442][ T52] Bluetooth: hci1: command tx timeout [ 341.938410][ T52] Bluetooth: hci3: command tx timeout [ 341.940338][ T5925] Bluetooth: hci0: command tx timeout [ 341.969763][ T5905] team0: Port device team_slave_0 added [ 341.978266][ T5905] team0: Port device team_slave_1 added [ 342.020189][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.027233][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.054002][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.077252][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.084229][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.110679][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.140770][ T5917] hsr_slave_0: entered promiscuous mode [ 342.147278][ T5917] hsr_slave_1: entered promiscuous mode [ 342.154440][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.161594][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.187952][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.210859][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.217900][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.243978][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.285293][ T5904] hsr_slave_0: entered promiscuous mode [ 342.291651][ T5904] hsr_slave_1: entered promiscuous mode [ 342.297990][ T5904] debugfs: 'hsr0' already exists in 'hsr' [ 342.304168][ T5904] Cannot create hsr debugfs directory [ 342.310733][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.317910][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.344134][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.388752][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.395945][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.422352][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.474568][ T5902] hsr_slave_0: entered promiscuous mode [ 342.480962][ T5902] hsr_slave_1: entered promiscuous mode [ 342.487637][ T5902] debugfs: 'hsr0' already exists in 'hsr' [ 342.493374][ T5902] Cannot create hsr debugfs directory [ 342.594865][ T5903] hsr_slave_0: entered promiscuous mode [ 342.601246][ T5903] hsr_slave_1: entered promiscuous mode [ 342.607667][ T5903] debugfs: 'hsr0' already exists in 'hsr' [ 342.613394][ T5903] Cannot create hsr debugfs directory [ 342.707271][ T5905] hsr_slave_0: entered promiscuous mode [ 342.713597][ T5905] hsr_slave_1: entered promiscuous mode [ 342.720964][ T5905] debugfs: 'hsr0' already exists in 'hsr' [ 342.728458][ T5905] Cannot create hsr debugfs directory [ 343.122553][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.135434][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.161540][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.183900][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.238942][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.262382][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.272647][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.283316][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.341400][ T5903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.352315][ T5903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.371764][ T5903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.383806][ T5903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.480650][ T5905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.490546][ T5905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.506243][ T5905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.516837][ T5905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.629220][ T5902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.640540][ T5902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.651605][ T5902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.678174][ T5902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.696758][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.759639][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.803405][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.810732][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.839691][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.846877][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.875281][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.893622][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.926808][ T5925] Bluetooth: hci2: command tx timeout [ 343.940951][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.954287][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.981836][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.989026][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.006127][ T5925] Bluetooth: hci3: command tx timeout [ 344.006451][ T52] Bluetooth: hci4: command tx timeout [ 344.011552][ T5925] Bluetooth: hci0: command tx timeout [ 344.017112][ T52] Bluetooth: hci1: command tx timeout [ 344.031167][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.069227][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.076400][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.120112][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.127310][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.140621][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.147813][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.173411][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.248925][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.269605][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.276817][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.321412][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.328601][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.406905][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.424416][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.495433][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.502666][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.558313][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.565479][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.598831][ T5905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.722759][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.779219][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.816809][ T5917] veth0_vlan: entered promiscuous mode [ 344.898772][ T5917] veth1_vlan: entered promiscuous mode [ 344.953473][ T5903] veth0_vlan: entered promiscuous mode [ 345.002818][ T5903] veth1_vlan: entered promiscuous mode [ 345.029684][ T5904] veth0_vlan: entered promiscuous mode [ 345.090426][ T5903] veth0_macvtap: entered promiscuous mode [ 345.098573][ T5917] veth0_macvtap: entered promiscuous mode [ 345.108740][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.117556][ T5904] veth1_vlan: entered promiscuous mode [ 345.130683][ T5917] veth1_macvtap: entered promiscuous mode [ 345.143104][ T5903] veth1_macvtap: entered promiscuous mode [ 345.178824][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.200679][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.219977][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.253859][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.271359][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.282493][ T5904] veth0_macvtap: entered promiscuous mode [ 345.305617][ T5998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.323219][ T5904] veth1_macvtap: entered promiscuous mode [ 345.336646][ T5998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.382644][ T5998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.406895][ T5998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.424429][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.470235][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.477672][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.486587][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.515521][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.533662][ T5905] veth0_vlan: entered promiscuous mode [ 345.579139][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.608860][ T5905] veth1_vlan: entered promiscuous mode [ 345.646245][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.684859][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.687852][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.695307][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.715076][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.730008][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.740664][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.746244][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.809276][ T5905] veth0_macvtap: entered promiscuous mode [ 345.830098][ T5905] veth1_macvtap: entered promiscuous mode [ 345.866833][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.874694][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.881650][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.906390][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.913850][ T5902] veth0_vlan: entered promiscuous mode [ 345.953315][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.962707][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.978770][ T5902] veth1_vlan: entered promiscuous mode [ 345.985289][ T5917] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 346.007515][ T52] Bluetooth: hci2: command tx timeout [ 346.019449][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.029888][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.086270][ T52] Bluetooth: hci1: command tx timeout [ 346.091723][ T52] Bluetooth: hci0: command tx timeout [ 346.097263][ T5184] Bluetooth: hci4: command tx timeout [ 346.102683][ T5184] Bluetooth: hci3: command tx timeout [ 346.111315][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.119409][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.138866][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.149772][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.248611][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.271002][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.309045][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.320366][ T5902] veth0_macvtap: entered promiscuous mode [ 346.333110][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.346245][ T1558] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 346.357202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 346.382034][ T5902] veth1_macvtap: entered promiscuous mode [ 346.440072][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.460183][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.503420][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.520734][ T6031] ptrace attach of "./syz-executor exec"[5903] was attempted by "./syz-executor exec"[6031] [ 346.531833][ T1558] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 346.563719][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.573927][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.596217][ T5933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.609952][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.625401][ T5933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.639217][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 346.727733][ T1558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 346.769769][ T5933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.783819][ T1558] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 346.814817][ T5933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.816301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 346.834480][ T1558] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 346.903299][ T1558] usb 2-1: Manufacturer: syz [ 346.966677][ T1558] usb 2-1: config 0 descriptor?? [ 347.006309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 347.096253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 347.485443][ T1558] usbhid 2-1:0.0: can't add hid device: -71 [ 347.492553][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.499928][ T1558] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 347.502664][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.532309][ T1558] usb 2-1: USB disconnect, device number 2 [ 347.566071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 347.574525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 347.697326][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.705337][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.085837][ T5925] Bluetooth: hci2: command tx timeout [ 348.113793][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 348.166153][ T5925] Bluetooth: hci3: command tx timeout [ 348.166576][ T52] Bluetooth: hci0: command tx timeout [ 348.171582][ T5925] Bluetooth: hci4: command tx timeout [ 348.177547][ T52] Bluetooth: hci1: command tx timeout [ 348.369720][ T6049] vlan2: entered allmulticast mode [ 348.374889][ T6049] bridge0: entered allmulticast mode [ 348.410939][ T6053] process 'syz.1.7' launched './file1' with NULL argv: empty string added [ 348.534419][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 348.910477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.920600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.945043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 348.954117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 349.386168][ T6015] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 349.648852][ T6015] usb 1-1: Using ep0 maxpacket: 8 [ 349.678960][ T6015] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 349.708500][ T6015] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.744171][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.776261][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.810640][ T6015] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.869182][ T6015] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.893549][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.200312][ T6015] usb 1-1: usb_control_msg returned -32 [ 350.255248][ T6015] usbtmc 1-1:16.0: can't read capabilities [ 350.418305][ T6078] program syz.1.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.603003][ T6083] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 351.028434][ T6061] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 352.362793][ T6102] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 352.693444][ T6025] usb 1-1: USB disconnect, device number 2 [ 352.886224][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 353.190269][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 353.207388][ T10] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 353.273305][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 353.334366][ T6111] trusted_key: encrypted_key: keylen parameter is missing [ 353.398847][ T6116] random: crng reseeded on system resumption [ 354.165883][ T6115] vlan2: entered allmulticast mode [ 354.172254][ T6115] bridge0: entered allmulticast mode [ 354.305382][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 354.545861][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 354.561954][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.592561][ T10] usb 5-1: Product: syz [ 354.675889][ T10] usb 5-1: Manufacturer: syz [ 354.706000][ T10] usb 5-1: SerialNumber: syz [ 355.321772][ T10] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 355.362750][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 355.384120][ T6131] sp0: Synchronizing with TNC [ 355.394015][ T10] usb 5-1: USB disconnect, device number 2 [ 355.558617][ T6008] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 355.727364][ T6008] usb 4-1: config index 0 descriptor too short (expected 126, got 72) [ 355.758656][ T6008] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.771976][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.790811][ T6008] usb 4-1: Product: syz [ 355.795254][ T6008] usb 4-1: Manufacturer: syz [ 355.843441][ T6008] usb 4-1: SerialNumber: syz [ 355.894833][ T6008] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.977457][ T6009] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.415888][ T10] usb 4-1: USB disconnect, device number 2 [ 356.964296][ T6008] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 357.047714][ T6009] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 357.110943][ T6009] ath9k_htc: Failed to initialize the device [ 357.157436][ T6008] usb 2-1: config 3 has no interfaces? [ 357.166501][ T6008] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 357.179481][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 357.181650][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.195210][ T6008] usb 2-1: Product: syz [ 357.202185][ T6008] usb 2-1: Manufacturer: syz [ 357.207810][ T6008] usb 2-1: SerialNumber: syz [ 357.208351][ T6164] ======================================================= [ 357.208351][ T6164] WARNING: The mand mount option has been deprecated and [ 357.208351][ T6164] and is ignored by this kernel. Remove the mand [ 357.208351][ T6164] option from the mount to silence this warning. [ 357.208351][ T6164] ======================================================= [ 357.297108][ T6164] ext4: Unknown parameter 'euid>00000000000000000000' [ 358.121065][ T6159] Zero length message leads to an empty skb [ 358.656604][ T6009] usb 2-1: USB disconnect, device number 3 [ 358.926841][ T6180] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 358.966448][ T6180] EXT4-fs (loop0): unable to read superblock [ 359.178692][ T6185] netlink: 148 bytes leftover after parsing attributes in process `syz.0.47'. [ 359.193371][ T6185] netlink: 56 bytes leftover after parsing attributes in process `syz.0.47'. [ 359.202556][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'. [ 359.836634][ T6192] 9pnet_fd: Insufficient options for proto=fd [ 360.022673][ T6199] vlan2: entered allmulticast mode [ 360.235818][ T5977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 360.267202][ T6201] vlan2: entered allmulticast mode [ 360.282514][ T6201] bridge0: entered allmulticast mode [ 360.291333][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 360.824084][ T5977] usb 5-1: config index 0 descriptor too short (expected 126, got 72) [ 360.939686][ T6209] ext4: Unknown parameter 'euid>00000000000000000000' [ 360.976627][ T5977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 360.986272][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.704429][ T5977] usb 5-1: Product: syz [ 361.716253][ T5977] usb 5-1: Manufacturer: syz [ 361.720874][ T5977] usb 5-1: SerialNumber: syz [ 361.857113][ T5977] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.981893][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.696122][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 363.703207][ T10] ath9k_htc: Failed to initialize the device [ 364.210228][ T5977] usb 5-1: USB disconnect, device number 3 [ 364.234713][ T5977] usb 5-1: ath9k_htc: USB layer deinitialized [ 364.340755][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 364.557739][ T6228] evm: overlay not supported [ 364.604477][ T6233] overlay: filesystem on ./file0 not supported as upperdir [ 364.657427][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.61'. [ 364.668659][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 365.025852][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 365.054894][ T6242] 9pnet_fd: Insufficient options for proto=fd [ 365.125819][ T5977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 365.198107][ T10] usb 4-1: config 3 has no interfaces? [ 365.207166][ T10] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 365.227730][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.246721][ T10] usb 4-1: Product: syz [ 365.256561][ T10] usb 4-1: Manufacturer: syz [ 365.261168][ T10] usb 4-1: SerialNumber: syz [ 365.325801][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 365.377767][ T5977] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 365.399718][ T5977] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.562794][ T5977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.134014][ T5977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.153662][ T5977] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.213699][ T5977] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.320638][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.736822][ T6008] usb 4-1: USB disconnect, device number 3 [ 366.814107][ T5977] usb 1-1: usb_control_msg returned -32 [ 366.840943][ T5977] usbtmc 1-1:16.0: can't read capabilities [ 367.204818][ T6258] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 367.420519][ T30] audit: type=1326 audit(1758256700.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.442439][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.521890][ T30] audit: type=1326 audit(1758256700.844:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.675871][ T30] audit: type=1326 audit(1758256700.844:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.702395][ T6266] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 367.728844][ T30] audit: type=1326 audit(1758256700.844:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.751225][ T30] audit: type=1326 audit(1758256700.844:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.773527][ T30] audit: type=1326 audit(1758256700.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.861264][ T30] audit: type=1326 audit(1758256700.854:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 367.932846][ T30] audit: type=1326 audit(1758256700.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 369.201682][ T6008] usb 1-1: USB disconnect, device number 3 [ 369.506300][ T6293] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 370.995169][ T6306] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 371.078404][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 371.249984][ T10] usb 4-1: config 3 has no interfaces? [ 371.258309][ T10] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 371.295973][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.377524][ T10] usb 4-1: Product: syz [ 371.396853][ T10] usb 4-1: Manufacturer: syz [ 371.413563][ T10] usb 4-1: SerialNumber: syz [ 372.115859][ T5977] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 372.197104][ T6025] usb 4-1: USB disconnect, device number 4 [ 372.300998][ T5977] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 372.426230][ T5977] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 372.458576][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.469198][ T5977] usb 1-1: Product: syz [ 372.473387][ T5977] usb 1-1: Manufacturer: syz [ 372.588639][ T5977] usb 1-1: SerialNumber: syz [ 372.607242][ T5977] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 372.625901][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.696146][ T6337] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 373.105935][ T6338] netlink: 10 bytes leftover after parsing attributes in process `syz.4.90'. [ 373.697554][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 373.713573][ T10] ath9k_htc: Failed to initialize the device [ 373.762285][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 373.902141][ T10] usb 1-1: USB disconnect, device number 4 [ 375.415835][ T5977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 375.575913][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 375.600787][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.638020][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.667563][ T5977] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 375.692196][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.747639][ T5977] usb 5-1: config 0 descriptor?? [ 376.092320][ T6378] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 376.586717][ T5977] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 376.691168][ T6024] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 376.833042][ T6385] netlink: 512 bytes leftover after parsing attributes in process `syz.2.104'. [ 377.208285][ T5977] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 377.215605][ T6024] usb 2-1: config 3 has no interfaces? [ 377.237605][ T5977] ft260 0003:0403:6030.0001: failed to retrieve system status [ 377.238385][ T5977] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -32 [ 377.244446][ T6024] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 377.244470][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.244486][ T6024] usb 2-1: Product: syz [ 377.244500][ T6024] usb 2-1: Manufacturer: syz [ 377.244513][ T6024] usb 2-1: SerialNumber: syz [ 377.960426][ T6015] usb 2-1: USB disconnect, device number 4 [ 378.129370][ T6397] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.533479][ T6015] usb 5-1: USB disconnect, device number 4 [ 378.686664][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.693136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.433648][ T6420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.111'. [ 381.350792][ T6431] netlink: 10 bytes leftover after parsing attributes in process `syz.3.115'. [ 381.875928][ T6009] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 382.145800][ T6009] usb 1-1: Using ep0 maxpacket: 32 [ 382.156500][ T6009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.174716][ T6009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.193537][ T6009] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 382.215011][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.282433][ T6009] usb 1-1: config 0 descriptor?? [ 382.575810][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 382.716878][ T6455] @: renamed from vlan0 (while UP) [ 382.824176][ T6009] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 382.840716][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 382.865070][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 382.925378][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.956748][ T6009] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 383.021878][ T10] usb 5-1: config 0 descriptor?? [ 383.027810][ T6449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.157789][ T6009] ft260 0003:0403:6030.0002: failed to retrieve system status [ 383.198046][ T6009] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 383.646941][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 383.688850][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 383.744032][ T10] usb 5-1: USB disconnect, device number 5 [ 384.442945][ T6476] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 384.541288][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 384.677867][ T6478] bridge_slave_1: left allmulticast mode [ 384.695331][ T6478] bridge_slave_1: left promiscuous mode [ 384.703770][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.757354][ T6478] bridge_slave_0: left allmulticast mode [ 384.765132][ T6478] bridge_slave_0: left promiscuous mode [ 384.966964][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.223013][ T1558] usb 1-1: USB disconnect, device number 5 [ 386.402036][ T6487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.135'. [ 387.243243][ T6501] netlink: 10 bytes leftover after parsing attributes in process `syz.1.137'. [ 387.557859][ T6511] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 387.674024][ T6009] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 387.756644][ T6512] vlan2: entered allmulticast mode [ 387.859770][ T6009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 387.871805][ T6009] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 387.990446][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.018526][ T6009] usb 1-1: config 0 descriptor?? [ 388.041997][ T6506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.495798][ T5977] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 388.698051][ T6009] usbhid 1-1:0.0: can't add hid device: -71 [ 388.704088][ T6009] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.722204][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 388.732273][ T6009] usb 1-1: USB disconnect, device number 6 [ 388.771342][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.849860][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.894156][ T5977] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 388.911361][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.948847][ T5977] usb 5-1: config 0 descriptor?? [ 388.966638][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 389.340108][ T6525] bridge_slave_1: left allmulticast mode [ 389.349782][ T6525] bridge_slave_1: left promiscuous mode [ 389.355504][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.404793][ T5977] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 389.502688][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 389.517470][ T6525] bridge_slave_0: left allmulticast mode [ 389.524206][ T6525] bridge_slave_0: left promiscuous mode [ 389.604401][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.754892][ T5977] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 389.813707][ T5977] ft260 0003:0403:6030.0003: failed to retrieve system status [ 389.822100][ T5977] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -32 [ 390.990468][ T6555] netlink: 10 bytes leftover after parsing attributes in process `syz.2.155'. [ 391.067306][ T6553] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 391.188712][ T6558] 9pnet_fd: Insufficient options for proto=fd [ 391.463231][ T6561] sp0: Synchronizing with TNC [ 392.548430][ T5977] usb 5-1: USB disconnect, device number 6 [ 394.446440][ T6595] 9pnet_fd: Insufficient options for proto=fd [ 395.213926][ T6605] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 395.336433][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 395.416805][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.631810][ T6605] veth3: entered promiscuous mode [ 395.654050][ T6605] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 398.707255][ T6638] 9pnet_fd: Insufficient options for proto=fd [ 399.591346][ T30] audit: type=1326 audit(1758256732.604:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 399.616958][ T30] audit: type=1326 audit(1758256732.604:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 399.656556][ T30] audit: type=1326 audit(1758256732.604:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 399.801426][ T30] audit: type=1326 audit(1758256732.604:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 399.992590][ T30] audit: type=1326 audit(1758256732.604:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 400.069276][ T30] audit: type=1326 audit(1758256732.604:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 400.733175][ T6657] warning: `syz.1.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 400.776744][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 400.787430][ T6657] netlink: 'syz.1.185': attribute type 10 has an invalid length. [ 400.818429][ T6657] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 400.917900][ T6660] overlayfs: missing 'lowerdir' [ 400.931463][ T6660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.184'. [ 402.678841][ T6679] tipc: Started in network mode [ 402.683829][ T6679] tipc: Node identity 5ec21c4a28f, cluster identity 4711 [ 402.713372][ T6679] tipc: Enabled bearer , priority 0 [ 402.748774][ T6680] syzkaller0: entered promiscuous mode [ 402.755932][ T6680] syzkaller0: entered allmulticast mode [ 402.817944][ T6679] tipc: Resetting bearer [ 402.915969][ T6678] tipc: Resetting bearer [ 403.055394][ T6678] tipc: Disabling bearer [ 403.193779][ T6685] vlan2: entered allmulticast mode [ 403.264450][ T6685] bridge0: entered allmulticast mode [ 405.508157][ T6703] @: renamed from vlan0 (while UP) [ 405.866561][ T6705] fuse: Unknown parameter '00000000000000000000' [ 408.282422][ T6739] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 408.357147][ T6742] netlink: 10 bytes leftover after parsing attributes in process `syz.0.206'. [ 408.493680][ T6743] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 409.334753][ T6748] ptrace attach of "./syz-executor exec"[5905] was attempted by "./syz-executor exec"[6748] [ 410.290763][ T6761] fuse: Unknown parameter '00000000000000000000' [ 411.980945][ T6788] netlink: 136 bytes leftover after parsing attributes in process `syz.3.216'. [ 412.003638][ T6788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 412.008461][ T6780] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.053717][ T6780] FAT-fs (loop1): unable to read boot sector [ 412.389548][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 412.439862][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 412.616198][ T6800] ptrace attach of "./syz-executor exec"[5905] was attempted by "./syz-executor exec"[6800] [ 413.023374][ T6804] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 413.780454][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 413.808329][ T6808] fuse: Bad value for 'rootmode' [ 414.165421][ T6819] fuse: Unknown parameter '00000000000000000000' [ 415.543703][ T6833] netlink: 512 bytes leftover after parsing attributes in process `syz.1.230'. [ 416.500889][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 416.567585][ T6847] fuse: Bad value for 'rootmode' [ 416.793505][ T1558] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 417.238139][ T1558] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.715939][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.758185][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.869888][ T1558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.945585][ T1558] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.075827][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.145766][ T6866] netlink: 512 bytes leftover after parsing attributes in process `syz.0.243'. [ 418.165322][ T1558] usb 2-1: config 0 descriptor?? [ 418.227579][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 418.525178][ T10] usb 4-1: config 3 has no interfaces? [ 418.656114][ T10] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 418.667856][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.676239][ T10] usb 4-1: Product: syz [ 418.685874][ T10] usb 4-1: Manufacturer: syz [ 418.690879][ T10] usb 4-1: SerialNumber: syz [ 418.968111][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 418.979146][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 419.070322][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 419.204648][ T6873] fuse: Bad value for 'fd' [ 421.079822][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.087343][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.094751][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.102224][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.109677][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.117106][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.124834][ T1558] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 421.196426][ T1558] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 421.203401][ T6009] usb 4-1: USB disconnect, device number 5 [ 421.278480][ T1558] usb 2-1: USB disconnect, device number 5 [ 422.044715][ T6878] fido_id[6878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 422.541090][ T6896] tipc: Enabled bearer , priority 0 [ 422.549833][ T6896] syzkaller0: entered promiscuous mode [ 422.572820][ T6896] syzkaller0: entered allmulticast mode [ 422.648545][ T6896] tipc: Resetting bearer [ 422.670225][ T6899] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 422.689837][ T6899] EXT4-fs (loop4): unable to read superblock [ 422.704443][ T6895] tipc: Resetting bearer [ 422.741354][ T6895] tipc: Disabling bearer [ 422.808672][ T6899] netlink: 148 bytes leftover after parsing attributes in process `syz.4.251'. [ 422.817719][ T6899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.251'. [ 422.826599][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'. [ 424.561453][ T30] audit: type=1326 audit(1758256758.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 424.630221][ T30] audit: type=1326 audit(1758256758.024:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ad8985b67 code=0x7ffc0000 [ 424.656168][ T6015] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 424.674180][ T30] audit: type=1326 audit(1758256758.024:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ad892ada9 code=0x7ffc0000 [ 424.704110][ T30] audit: type=1326 audit(1758256758.024:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 424.752745][ T30] audit: type=1326 audit(1758256758.024:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 424.779174][ T6931] erofs (device loop4): cannot find valid erofs superblock [ 424.872847][ T6015] usb 1-1: config 3 has no interfaces? [ 425.084451][ T6936] ntfs3: Bad value for 'uid' [ 425.089183][ T6936] ntfs3: Bad value for 'uid' [ 425.129415][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 426.087705][ T6015] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 426.389904][ T30] audit: type=1326 audit(1758256758.044:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ad8985b67 code=0x7ffc0000 [ 426.415144][ T30] audit: type=1326 audit(1758256758.044:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ad892ada9 code=0x7ffc0000 [ 426.438425][ T30] audit: type=1326 audit(1758256758.044:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 426.461462][ T30] audit: type=1326 audit(1758256758.044:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ad898eba9 code=0x7ffc0000 [ 426.496353][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.512517][ T6015] usb 1-1: Product: syz [ 426.539510][ T6015] usb 1-1: Manufacturer: syz [ 426.622361][ T6015] usb 1-1: SerialNumber: syz [ 426.642766][ T6939] sp0: Synchronizing with TNC [ 426.649775][ T6941] tipc: Started in network mode [ 426.654779][ T6941] tipc: Node identity 080211000001, cluster identity 4711 [ 426.829337][ T6941] tipc: Enabled bearer , priority 0 [ 426.884346][ T6945] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 426.893030][ T6945] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 426.918357][ T6941] tipc: Resetting bearer [ 428.096781][ T6025] tipc: Node number set to 134418688 [ 428.141760][ T6025] usb 1-1: USB disconnect, device number 7 [ 428.271502][ T6958] netlink: 'syz.4.267': attribute type 20 has an invalid length. [ 428.518922][ T6958] dvmrp1: entered allmulticast mode [ 429.092323][ T6973] ptrace attach of "./syz-executor exec"[5917] was attempted by "./syz-executor exec"[6973] [ 430.914403][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.273'. [ 431.199603][ T6997] tipc: Started in network mode [ 431.206104][ T6997] tipc: Node identity eea5cbebd335, cluster identity 4711 [ 431.226931][ T6997] tipc: Enabled bearer , priority 0 [ 431.296952][ T7000] syzkaller0: entered promiscuous mode [ 431.342231][ T7000] syzkaller0: entered allmulticast mode [ 431.353547][ T7002] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 431.364247][ T7002] EXT4-fs (loop0): unable to read superblock [ 431.478275][ T7007] netlink: 148 bytes leftover after parsing attributes in process `syz.0.277'. [ 431.491410][ T7007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.277'. [ 431.500885][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.277'. [ 431.846487][ T7000] tipc: Resetting bearer [ 431.884638][ T6996] tipc: Resetting bearer [ 432.069504][ T6996] tipc: Disabling bearer [ 432.826798][ T1558] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 433.068372][ T1558] usb 1-1: config 3 has no interfaces? [ 433.121363][ T1558] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 433.131240][ T1558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.652934][ T7020] netlink: 'syz.3.282': attribute type 20 has an invalid length. [ 433.709651][ T1558] usb 1-1: Product: syz [ 433.856891][ T1558] usb 1-1: Manufacturer: syz [ 433.879739][ T7020] dvmrp1: entered allmulticast mode [ 434.063601][ T1558] usb 1-1: SerialNumber: syz [ 435.040873][ T7032] overlayfs: failed to resolve './bus': -2 [ 435.289965][ T7036] sp0: Synchronizing with TNC [ 435.503450][ T1558] usb 1-1: USB disconnect, device number 8 [ 435.932983][ T7049] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 435.967044][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.290'. [ 440.043794][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.050285][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.354275][ T30] audit: type=1326 audit(1758256773.334:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.376490][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.593653][ T30] audit: type=1326 audit(1758256773.334:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.630259][ T7094] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 440.654218][ T30] audit: type=1326 audit(1758256773.334:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.676345][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.845507][ T30] audit: type=1326 audit(1758256773.334:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.869319][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 440.900616][ T30] audit: type=1326 audit(1758256773.334:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.901599][ T30] audit: type=1326 audit(1758256773.334:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c46d8eba9 code=0x7ffc0000 [ 440.922714][ T7099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.947234][ T7094] veth3: entered promiscuous mode [ 440.949313][ T7094] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 442.376973][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'. [ 443.097459][ T7116] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 443.636150][ T7122] fuse: Bad value for 'fd' [ 443.654816][ T7116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 444.739807][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 445.046691][ T43] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 445.207513][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.237930][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.407744][ T43] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 445.417048][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.425046][ T43] usb 5-1: Product: syz [ 445.445730][ T43] usb 5-1: Manufacturer: syz [ 445.927676][ T43] usb 5-1: SerialNumber: syz [ 445.946521][ T43] usb 5-1: config 0 descriptor?? [ 446.142484][ T7158] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 446.164631][ T6015] usb 5-1: USB disconnect, device number 7 [ 446.208801][ T7157] netlink: 10 bytes leftover after parsing attributes in process `syz.1.321'. [ 446.361201][ T7162] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 447.141983][ T7170] trusted_key: encrypted_key: master key parameter 'usesyz' is invalid [ 447.215905][ T7174] random: crng reseeded on system resumption [ 447.416960][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 448.814964][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 448.823945][ T7188] bridge_slave_1: left allmulticast mode [ 448.829698][ T7188] bridge_slave_1: left promiscuous mode [ 448.835556][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.180050][ T7188] bridge_slave_0: left allmulticast mode [ 449.186107][ T7188] bridge_slave_0: left promiscuous mode [ 449.193237][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.501410][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 452.336427][ T7219] program syz.2.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.963238][ T7237] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 454.772070][ T7246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.002234][ T7237] veth3: entered promiscuous mode [ 455.022275][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 455.030041][ T7237] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 455.166615][ T7255] netlink: 'syz.2.347': attribute type 10 has an invalid length. [ 455.266087][ T7250] @: renamed from vlan0 (while UP) [ 455.517271][ T7265] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 456.596881][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 456.692152][ T7285] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 457.688858][ T7292] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 458.077733][ T7282] bridge_slave_1: left allmulticast mode [ 458.083526][ T7282] bridge_slave_1: left promiscuous mode [ 458.090910][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.189024][ T7282] bridge_slave_0: left allmulticast mode [ 458.212847][ T7282] bridge_slave_0: left promiscuous mode [ 458.224527][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.649348][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.359'. [ 459.159243][ T7299] tipc: Enabled bearer , priority 0 [ 459.192923][ T7299] syzkaller0: entered promiscuous mode [ 459.199297][ T7299] syzkaller0: entered allmulticast mode [ 459.392167][ T7299] tipc: Resetting bearer [ 459.459742][ T7308] netlink: 136 bytes leftover after parsing attributes in process `syz.3.361'. [ 459.482879][ T7308] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 459.518648][ T7298] tipc: Resetting bearer [ 459.613385][ T7298] tipc: Disabling bearer [ 460.397989][ T7329] netlink: 10 bytes leftover after parsing attributes in process `syz.2.366'. [ 460.697887][ T7330] netlink: 'syz.2.366': attribute type 4 has an invalid length. [ 461.857105][ T7334] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 462.569162][ T5923] Bluetooth: hci1: command 0x0406 tx timeout [ 462.578493][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 462.587370][ T5923] Bluetooth: hci3: command 0x0406 tx timeout [ 462.593390][ T5923] Bluetooth: hci4: command 0x0406 tx timeout [ 462.593769][ T5912] Bluetooth: hci0: command 0x0406 tx timeout [ 462.600981][ T5923] Bluetooth: hci2: command 0x0406 tx timeout [ 462.759545][ T7345] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 463.296209][ T7352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.468494][ T7345] veth5: entered promiscuous mode [ 463.479090][ T7345] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 463.787401][ T7354] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 463.824975][ T7354] FAT-fs (loop1): unable to read boot sector [ 464.227505][ T7362] sp0: Synchronizing with TNC [ 464.378132][ T7367] netlink: 136 bytes leftover after parsing attributes in process `syz.2.375'. [ 464.395801][ T7367] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 464.471626][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4002 [ 464.502811][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x2 [ 464.537790][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4002 [ 464.565989][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x2 [ 464.587529][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4002 [ 464.618797][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x2 [ 464.692556][ T7360] kvm: kvm [7359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4002 [ 465.663628][ T7391] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 467.250289][ T7398] erofs (device loop1): cannot find valid erofs superblock [ 467.583722][ T7403] ntfs3: Bad value for 'uid' [ 467.588455][ T7403] ntfs3: Bad value for 'uid' [ 467.627698][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 469.128024][ T7406] vlan0: entered allmulticast mode [ 470.000345][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 474.175594][ T7465] ptrace attach of "./syz-executor exec"[5917] was attempted by "./syz-executor exec"[7465] [ 474.263090][ T7467] erofs (device loop3): cannot find valid erofs superblock [ 474.968688][ T7468] ntfs3: Bad value for 'uid' [ 474.973367][ T7468] ntfs3: Bad value for 'uid' [ 475.007442][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 476.793883][ T7472] dvmrp1: entered allmulticast mode [ 477.301584][ T7480] fuse: Unknown parameter '0x0000000000000003' [ 478.897419][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.407'. [ 479.127846][ T7508] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 480.074129][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 480.401676][ T7521] bridge_slave_1: left allmulticast mode [ 480.412963][ T7521] bridge_slave_1: left promiscuous mode [ 480.419631][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.683159][ T7521] bridge_slave_0: left allmulticast mode [ 480.689044][ T7521] bridge_slave_0: left promiscuous mode [ 480.695444][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.038107][ T7530] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 483.483981][ T7541] dvmrp1: entered allmulticast mode [ 485.372717][ T7569] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 486.475910][ T6008] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 486.695734][ T6008] usb 4-1: device descriptor read/64, error -71 [ 487.122910][ T6008] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 487.367085][ T6008] usb 4-1: device descriptor read/64, error -71 [ 488.104380][ T6008] usb usb4-port1: attempt power cycle [ 488.663385][ T7611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.433'. [ 488.915461][ T7617] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 492.246667][ T7662] bond0: (slave wlan1): Releasing backup interface [ 492.648096][ T6024] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 493.193844][ T30] audit: type=1326 audit(1758256826.164:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.229153][ T30] audit: type=1326 audit(1758256826.164:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.263020][ T30] audit: type=1326 audit(1758256826.164:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.323419][ T6024] usb 3-1: device descriptor read/64, error -71 [ 493.406617][ T30] audit: type=1326 audit(1758256826.164:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.428631][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.445111][ T30] audit: type=1326 audit(1758256826.164:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.501439][ T30] audit: type=1326 audit(1758256826.164:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 493.759936][ T6024] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 493.915752][ T6024] usb 3-1: device descriptor read/64, error -71 [ 494.067650][ T6024] usb usb3-port1: attempt power cycle [ 494.217440][ T7685] tipc: Started in network mode [ 494.259949][ T7685] tipc: Node identity 0ebc511df939, cluster identity 4711 [ 494.398663][ T7685] tipc: Enabled bearer , priority 0 [ 494.416586][ T7686] syzkaller0: entered promiscuous mode [ 494.426640][ T7686] syzkaller0: entered allmulticast mode [ 494.485720][ T6024] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 494.613444][ T6024] usb 3-1: device descriptor read/8, error -71 [ 494.684651][ T7686] tipc: Resetting bearer [ 494.708380][ T7684] tipc: Resetting bearer [ 494.809438][ T7684] tipc: Disabling bearer [ 494.855932][ T6024] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 494.896505][ T6024] usb 3-1: device descriptor read/8, error -71 [ 495.006706][ T6024] usb usb3-port1: unable to enumerate USB device [ 496.827987][ T6008] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 497.009532][ T6008] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.122606][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.144211][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.246483][ T6008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.275667][ T6008] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.296220][ T6008] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 497.348023][ T6008] usb 5-1: Manufacturer: syz [ 497.420258][ T6008] usb 5-1: config 0 descriptor?? [ 497.905529][ T6008] hid_parser_main: 5 callbacks suppressed [ 497.905550][ T6008] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 498.009215][ T6008] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 498.319723][ T7731] tipc: Enabled bearer , priority 0 [ 498.334337][ T7731] syzkaller0: entered promiscuous mode [ 498.366276][ T7731] syzkaller0: entered allmulticast mode [ 498.403735][ T7731] tipc: Resetting bearer [ 498.428759][ T7730] tipc: Resetting bearer [ 498.494907][ T7730] tipc: Disabling bearer [ 498.669358][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 500.067859][ T43] usb 5-1: USB disconnect, device number 8 [ 500.644067][ T7761] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.703600][ T7761] FAT-fs (loop3): unable to read boot sector [ 500.853683][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 500.888716][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 502.000941][ T30] audit: type=1326 audit(1758256834.944:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.023545][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.030303][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.150433][ T30] audit: type=1326 audit(1758256834.944:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.204963][ T7778] fuse: Unknown parameter 'fd0x0000000000000003' [ 502.221638][ T30] audit: type=1326 audit(1758256834.944:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.424431][ T30] audit: type=1326 audit(1758256834.944:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.564128][ T30] audit: type=1326 audit(1758256834.954:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.652906][ T30] audit: type=1326 audit(1758256834.954:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96b38eba9 code=0x7ffc0000 [ 502.796123][ T6015] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 503.085107][ T7787] dvmrp1: entered allmulticast mode [ 503.346116][ T6015] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 503.359522][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.381504][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.503120][ T6015] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 503.567093][ T6015] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 503.576423][ T6015] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 503.584541][ T6015] usb 5-1: Manufacturer: syz [ 503.592181][ T6015] usb 5-1: config 0 descriptor?? [ 504.091104][ T6015] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 504.730796][ T6015] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 506.087039][ T1558] usb 5-1: USB disconnect, device number 9 [ 507.581315][ T7843] program syz.3.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.056298][ T1558] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 510.238370][ T1558] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 510.264578][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.510957][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.581819][ T1558] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 510.621688][ T1558] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 510.630924][ T1558] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 510.651178][ T1558] usb 3-1: Manufacturer: syz [ 510.823764][ T1558] usb 3-1: config 0 descriptor?? [ 511.246049][ T1558] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 511.352581][ T1558] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 511.745709][ T6009] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 511.836049][ T7884] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 511.871994][ T7884] EXT4-fs (loop3): unable to read superblock [ 511.907582][ T6009] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 511.926236][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 512.024965][ T6009] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 512.034407][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 512.066594][ T6009] usb 1-1: Product: syz [ 512.072218][ T7884] netlink: 148 bytes leftover after parsing attributes in process `syz.3.506'. [ 512.081933][ T7884] netlink: 56 bytes leftover after parsing attributes in process `syz.3.506'. [ 512.091042][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 512.125272][ T6009] usb 1-1: Manufacturer: syz [ 512.143821][ T6009] usb 1-1: SerialNumber: syz [ 512.172560][ T6009] usb 1-1: config 0 descriptor?? [ 512.189988][ T6009] usb 1-1: selecting invalid altsetting 0 [ 512.233957][ T7885] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.245145][ T7885] FAT-fs (loop4): unable to read boot sector [ 512.343051][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 512.355902][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 512.428218][ T1558] usb 1-1: USB disconnect, device number 9 [ 512.875752][ T6015] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 513.120254][ T6015] usb 5-1: config 3 has no interfaces? [ 513.133097][ T6015] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 513.157022][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.167617][ T6015] usb 5-1: Product: syz [ 513.172440][ T6015] usb 5-1: Manufacturer: syz [ 513.197868][ T6015] usb 5-1: SerialNumber: syz [ 513.333542][ T6009] usb 3-1: USB disconnect, device number 6 [ 513.664776][ T7891] binder: 7890:7891 ioctl 4018620d 0 returned -22 [ 514.328362][ T1558] usb 5-1: USB disconnect, device number 10 [ 515.505919][ T6009] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 516.300527][ T6009] usb 2-1: config 3 has no interfaces? [ 516.344705][ T6009] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 516.464284][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.145702][ T6009] usb 2-1: Product: syz [ 517.205755][ T6009] usb 2-1: Manufacturer: syz [ 517.210399][ T6009] usb 2-1: SerialNumber: syz [ 518.107639][ T10] usb 2-1: USB disconnect, device number 6 [ 518.295724][ T6024] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 518.387413][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 518.467301][ T6024] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 518.609624][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.660958][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.673656][ T6024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 518.770903][ T6024] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 518.780967][ T6024] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 518.794152][ T6024] usb 5-1: Manufacturer: syz [ 518.823461][ T6024] usb 5-1: config 0 descriptor?? [ 519.432277][ T6024] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 519.539514][ T6024] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 522.167764][ T1558] usb 5-1: USB disconnect, device number 11 [ 522.775399][ T1558] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 522.858158][ T7998] syzkaller0: entered promiscuous mode [ 522.863640][ T7998] syzkaller0: entered allmulticast mode [ 523.191174][ T1558] usb 5-1: config 3 has no interfaces? [ 523.209627][ T1558] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 523.221031][ T1558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.294573][ T1558] usb 5-1: Product: syz [ 523.304891][ T1558] usb 5-1: Manufacturer: syz [ 523.346106][ T1558] usb 5-1: SerialNumber: syz [ 524.039637][ T8013] program syz.2.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.343546][ T43] usb 5-1: USB disconnect, device number 12 [ 526.319744][ T8032] netlink: 512 bytes leftover after parsing attributes in process `syz.1.542'. [ 526.979037][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 529.730009][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 530.316772][ T8071] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.327413][ T8071] FAT-fs (loop4): unable to read boot sector [ 530.428789][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'. [ 530.437828][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'. [ 531.129792][ T8073] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 531.513458][ T8080] erofs (device loop4): cannot find valid erofs superblock [ 531.826523][ T8085] ntfs3: Bad value for 'uid' [ 531.831290][ T8085] ntfs3: Bad value for 'uid' [ 534.585759][ T30] audit: type=1800 audit(1758256868.024:43): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.558" name="bus" dev="ramfs" ino=17750 res=0 errno=0 [ 534.605250][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.718529][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 534.745295][ T8106] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 534.752616][ T8106] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 536.245225][ T8120] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 536.767540][ T8127] ptrace attach of "./syz-executor exec"[5903] was attempted by "./syz-executor exec"[8127] [ 538.912139][ T8143] sp0: Synchronizing with TNC [ 541.075739][ T6015] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 541.227713][ T6015] usb 3-1: config 3 has no interfaces? [ 541.235169][ T6015] usb 3-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 541.261820][ T6015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.281695][ T6015] usb 3-1: Product: syz [ 541.286238][ T6015] usb 3-1: Manufacturer: syz [ 541.290837][ T6015] usb 3-1: SerialNumber: syz [ 542.055888][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 542.112814][ T6024] usb 3-1: USB disconnect, device number 7 [ 542.358965][ T10] usb 5-1: config 3 has no interfaces? [ 542.369449][ T10] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 542.385204][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.428012][ T10] usb 5-1: Product: syz [ 542.474076][ T10] usb 5-1: Manufacturer: syz [ 542.481210][ T10] usb 5-1: SerialNumber: syz [ 543.504696][ T10] usb 5-1: USB disconnect, device number 13 [ 543.673975][ T8190] netlink: 512 bytes leftover after parsing attributes in process `syz.1.582'. [ 545.523826][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 546.569231][ T6008] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 546.794697][ T8217] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.860657][ T6008] usb 2-1: config index 0 descriptor too short (expected 126, got 72) [ 547.158898][ T6008] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 547.461382][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.585714][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 548.075660][ T6008] usb 2-1: Product: syz [ 548.090075][ T6008] usb 2-1: Manufacturer: syz [ 548.094712][ T6008] usb 2-1: SerialNumber: syz [ 548.219603][ T6008] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 548.234881][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 548.836013][ T6008] usb 2-1: USB disconnect, device number 7 [ 548.906054][ T6025] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 549.107508][ T6025] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 549.121572][ T6025] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 549.140805][ T6025] usb 5-1: config 220 interface 0 has no altsetting 0 [ 549.178811][ T6025] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 549.195690][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.245972][ T6025] usb 5-1: Product: syz [ 549.265706][ T6025] usb 5-1: Manufacturer: syz [ 549.272054][ T6025] usb 5-1: SerialNumber: syz [ 549.302425][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 549.351470][ T43] ath9k_htc: Failed to initialize the device [ 549.369080][ T6008] usb 2-1: ath9k_htc: USB layer deinitialized [ 551.256406][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 551.406692][ T6025] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 551.446580][ T6025] uvcvideo 5-1:220.0: No valid video chain found. [ 551.561924][ T8259] ptrace attach of "./syz-executor exec"[5904] was attempted by "./syz-executor exec"[8259] [ 551.593495][ T6025] usb 5-1: USB disconnect, device number 14 [ 551.615879][ T1558] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 551.922684][ T1558] usb 3-1: Using ep0 maxpacket: 8 [ 551.958951][ T1558] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 551.985125][ T1558] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.015702][ T1558] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.039243][ T1558] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.058501][ T1558] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.093759][ T1558] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.114099][ T1558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.354945][ T8262] tipc: Enabled bearer , priority 0 [ 552.392119][ T8262] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 552.415839][ T8262] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 552.590642][ T1558] usb 3-1: usb_control_msg returned -32 [ 552.603144][ T1558] usbtmc 3-1:16.0: can't read capabilities [ 552.655201][ T8267] tipc: Resetting bearer [ 552.666167][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.806056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.945658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.085910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.225694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.467707][ T1558] tipc: Node number set to 4152709405 [ 553.505672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.626342][ T8280] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 553.775688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.305656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.470322][ T8290] netlink: 'syz.0.605': attribute type 4 has an invalid length. [ 554.551496][ T8292] netlink: 148 bytes leftover after parsing attributes in process `syz.3.606'. [ 554.560668][ T8292] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 555.365650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.455020][ T1558] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 556.105727][ T1558] usb 4-1: device descriptor read/64, error -71 [ 556.258467][ T8310] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 556.342036][ T6025] usb 3-1: USB disconnect, device number 8 [ 556.350040][ T1558] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 556.439810][ T8313] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 556.508655][ T8310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.515715][ T1558] usb 4-1: device descriptor read/64, error -71 [ 556.540131][ T8310] veth3: entered promiscuous mode [ 556.563172][ T8310] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 556.669920][ T1558] usb usb4-port1: attempt power cycle [ 557.275725][ T1558] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 557.339196][ T1558] usb 4-1: device descriptor read/8, error -71 [ 557.678543][ T1558] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 557.697815][ T1558] usb 4-1: device descriptor read/8, error -71 [ 557.744952][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 557.814999][ T1558] usb usb4-port1: unable to enumerate USB device [ 557.866074][ T8330] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.880751][ T8330] FAT-fs (loop4): unable to read boot sector [ 558.084338][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 558.097064][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.614'. [ 558.527446][ T8347] erofs (device loop3): cannot find valid erofs superblock [ 558.928404][ T8349] ntfs3: Bad value for 'uid' [ 558.933117][ T8349] ntfs3: Bad value for 'uid' [ 559.040294][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 561.240960][ T8369] erofs (device loop2): cannot find valid erofs superblock [ 562.326109][ T8377] ntfs3: Bad value for 'uid' [ 562.330764][ T8377] ntfs3: Bad value for 'uid' [ 562.365432][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 563.545763][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.552073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.613121][ T6008] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 563.885794][ T6008] usb 2-1: device descriptor read/64, error -71 [ 564.276011][ T6008] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 564.436538][ T6008] usb 2-1: device descriptor read/64, error -71 [ 564.600347][ T6008] usb usb2-port1: attempt power cycle [ 564.835666][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 565.057274][ T43] usb 1-1: config 3 has no interfaces? [ 565.190265][ T43] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 565.201116][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.225203][ T43] usb 1-1: Product: syz [ 565.244482][ T43] usb 1-1: Manufacturer: syz [ 565.261884][ T43] usb 1-1: SerialNumber: syz [ 566.537767][ T1558] usb 1-1: USB disconnect, device number 10 [ 567.342021][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 567.462019][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 567.926103][ T6008] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 568.383344][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 568.411262][ T6008] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 568.419659][ T6008] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.430623][ T6008] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.440543][ T6008] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.450771][ T6008] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.537574][ T6008] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 568.575725][ T6015] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 568.592174][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.705725][ T6015] usb 1-1: device descriptor read/64, error -71 [ 568.879588][ T6008] usb 5-1: usb_control_msg returned -32 [ 568.885166][ T6008] usbtmc 5-1:16.0: can't read capabilities [ 568.956215][ T6015] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 569.125929][ T6015] usb 1-1: device descriptor read/64, error -71 [ 569.270173][ T6015] usb usb1-port1: attempt power cycle [ 569.655712][ T6015] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 569.696448][ T6015] usb 1-1: device descriptor read/8, error -71 [ 569.806070][ T8420] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 570.135810][ T6015] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.208914][ T6015] usb 1-1: device descriptor read/8, error -71 [ 570.576412][ T6015] usb usb1-port1: unable to enumerate USB device [ 572.134478][ T1558] usb 5-1: USB disconnect, device number 15 [ 572.397996][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 573.195230][ T8475] syzkaller0: entered promiscuous mode [ 573.205694][ T8475] syzkaller0: entered allmulticast mode [ 575.452616][ T8494] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 575.566447][ T8494] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 575.613789][ T8494] veth5: entered promiscuous mode [ 575.647164][ T8494] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 575.926042][ T8503] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 577.415678][ T1558] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 577.847592][ T1558] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.858203][ T1558] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 578.229372][ T1558] usb 5-1: config 220 interface 0 has no altsetting 0 [ 578.243848][ T1558] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 578.265783][ T1558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.284006][ T1558] usb 5-1: Product: syz [ 578.295624][ T1558] usb 5-1: Manufacturer: syz [ 578.314339][ T1558] usb 5-1: SerialNumber: syz [ 578.855375][ T1558] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 578.902101][ T1558] uvcvideo 5-1:220.0: No valid video chain found. [ 579.130730][ T1558] usb 5-1: USB disconnect, device number 16 [ 579.873471][ T8541] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 582.383682][ T8563] fuse: Bad value for 'fd' [ 582.582798][ T6015] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 582.948203][ T6015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.969819][ T6015] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.039679][ T6015] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 583.064681][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.151068][ T6015] usb 5-1: Product: syz [ 583.211159][ T6015] usb 5-1: Manufacturer: syz [ 583.221417][ T6015] usb 5-1: SerialNumber: syz [ 583.240672][ T6015] usb 5-1: config 0 descriptor?? [ 583.580002][ T1558] usb 5-1: USB disconnect, device number 17 [ 583.650359][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 584.452012][ T8593] netlink: 324 bytes leftover after parsing attributes in process `syz.4.680'. [ 585.047296][ T8601] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 585.853493][ T8606] program syz.4.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.569146][ T6008] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 588.330788][ T6008] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 588.342231][ T6008] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 588.358178][ T6008] usb 3-1: config 220 interface 0 has no altsetting 0 [ 588.390077][ T6008] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 588.399914][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.419580][ T6008] usb 3-1: Product: syz [ 588.432937][ T6008] usb 3-1: Manufacturer: syz [ 588.455681][ T6008] usb 3-1: SerialNumber: syz [ 588.538686][ T8632] fuse: Bad value for 'fd' [ 588.703924][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 588.982644][ T6008] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 589.001798][ T6008] uvcvideo 3-1:220.0: No valid video chain found. [ 589.132841][ T6008] usb 3-1: USB disconnect, device number 9 [ 589.938048][ T8650] program syz.4.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.491987][ T8666] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 593.726367][ T8684] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 595.575757][ T8705] fuse: Bad value for 'fd' [ 595.856473][ T1558] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 596.036047][ T1558] usb 2-1: Using ep0 maxpacket: 8 [ 596.193483][ T1558] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 596.219484][ T1558] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.245660][ T1558] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.281324][ T1558] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.320215][ T1558] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.345658][ T1558] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.375812][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.313864][ T8723] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 599.800823][ T6015] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 600.625020][ T6015] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 600.635556][ T6015] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 600.666990][ T6015] usb 1-1: config 220 interface 0 has no altsetting 0 [ 600.703505][ T6015] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 600.725407][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.756103][ T6015] usb 1-1: Product: syz [ 600.775664][ T6015] usb 1-1: Manufacturer: syz [ 600.792839][ T6015] usb 1-1: SerialNumber: syz [ 600.995751][ T1558] usb 2-1: usb_control_msg returned -71 [ 601.001467][ T1558] usbtmc 2-1:16.0: can't read capabilities [ 601.112851][ T1558] usb 2-1: USB disconnect, device number 11 [ 601.385089][ T6015] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 601.402893][ T6015] uvcvideo 1-1:220.0: No valid video chain found. [ 601.429813][ T6015] usb 1-1: USB disconnect, device number 15 [ 601.589798][ T8746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.713'. [ 603.399299][ T8766] fuse: Bad value for 'fd' [ 603.538837][ T8768] program syz.1.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.390191][ T8784] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 606.165679][ T6015] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 606.768004][ T6015] usb 4-1: Using ep0 maxpacket: 8 [ 606.774990][ T6015] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 606.785691][ T6015] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.800427][ T6015] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.810456][ T6015] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.820479][ T6015] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.835720][ T6015] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.858207][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.085678][ T6015] usb 4-1: usb_control_msg returned -32 [ 607.149488][ T6015] usbtmc 4-1:16.0: can't read capabilities [ 607.255686][ T6024] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 607.407611][ T6024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.433437][ T6024] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.476730][ T6024] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 607.495675][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.503710][ T6024] usb 2-1: Product: syz [ 607.552696][ T6024] usb 2-1: Manufacturer: syz [ 607.564481][ T6024] usb 2-1: SerialNumber: syz [ 607.581518][ T6024] usb 2-1: config 0 descriptor?? [ 607.965558][ T10] usb 2-1: USB disconnect, device number 12 [ 608.000209][ T8806] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 608.185657][ T6024] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 608.345717][ T6024] usb 1-1: Using ep0 maxpacket: 8 [ 608.392253][ T6024] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 608.430400][ T6024] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.490258][ T6024] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.526007][ T6024] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.558346][ T6024] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.674952][ T6024] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.755107][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.185342][ T6015] usb 4-1: USB disconnect, device number 13 [ 609.276237][ T6024] usb 1-1: usb_control_msg returned -32 [ 609.307714][ T6024] usbtmc 1-1:16.0: can't read capabilities [ 610.923668][ T6015] usb 1-1: USB disconnect, device number 16 [ 611.659753][ T8836] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 614.743295][ T8856] program syz.0.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.377338][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 616.125307][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 616.985681][ T6015] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 617.157156][ T6015] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 617.182173][ T6015] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.202201][ T6015] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.211724][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.220606][ T6015] usb 1-1: Product: syz [ 617.229431][ T6015] usb 1-1: Manufacturer: syz [ 617.234174][ T6015] usb 1-1: SerialNumber: syz [ 617.243812][ T6015] usb 1-1: config 0 descriptor?? [ 617.258388][ T6015] usb 1-1: selecting invalid altsetting 0 [ 617.659000][ T6024] usb 1-1: USB disconnect, device number 17 [ 618.176237][ T8889] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 618.798604][ T6008] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 619.021111][ T6008] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 619.054108][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.126720][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.161351][ T6008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 619.231491][ T6008] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 619.275511][ T6008] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 619.309230][ T6008] usb 4-1: Manufacturer: syz [ 619.393655][ T6008] usb 4-1: config 0 descriptor?? [ 620.094878][ T6008] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 620.143686][ T6008] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 620.829862][ T8923] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 620.837804][ T8923] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 622.662828][ T43] usb 4-1: USB disconnect, device number 14 [ 622.802142][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 623.448659][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 623.675696][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 623.683807][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 623.702169][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.801543][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.851580][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.080961][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.094207][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 624.104831][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.320425][ T43] usb 3-1: usb_control_msg returned -32 [ 624.330529][ T43] usbtmc 3-1:16.0: can't read capabilities [ 624.343267][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.351018][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.218914][ T8969] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 625.944691][ T8980] erofs (device loop0): cannot find valid erofs superblock [ 626.456627][ T8984] ntfs3: Bad value for 'uid' [ 626.461337][ T8984] ntfs3: Bad value for 'uid' [ 626.478483][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 628.055994][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 628.733077][ T8996] fuse: Bad value for 'fd' [ 629.919953][ T10] usb 3-1: USB disconnect, device number 10 [ 632.160223][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 632.731289][ T9052] kvm: pic: non byte write [ 633.811981][ T9064] tipc: Enabled bearer , priority 0 [ 633.829593][ T9064] tipc: Resetting bearer [ 633.908314][ T9063] tipc: Disabling bearer [ 634.592334][ T9073] fuse: Bad value for 'fd' [ 637.739912][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 640.289706][ T9145] fuse: Bad value for 'fd' [ 640.537347][ T9149] tipc: Enabling of bearer rejected, failed to enable media [ 642.145670][ T1558] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 642.468986][ T1558] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.479302][ T1558] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 643.212229][ T1558] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 643.230968][ T1558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.431974][ T1558] usb 3-1: Product: syz [ 643.546779][ T1558] usb 3-1: Manufacturer: syz [ 643.554085][ T1558] usb 3-1: SerialNumber: syz [ 643.611004][ T1558] usb 3-1: config 0 descriptor?? [ 643.848102][ T1558] usb 3-1: USB disconnect, device number 11 [ 644.147160][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 644.302987][ T9191] tipc: Enabling of bearer rejected, failed to enable media [ 644.313223][ T9191] syzkaller0: entered promiscuous mode [ 644.319004][ T9191] syzkaller0: entered allmulticast mode [ 644.716561][ T9198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.811'. [ 646.697558][ T9218] fuse: Bad value for 'fd' [ 650.106258][ T9260] program syz.3.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.049694][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 653.291278][ T9286] bond0: (slave wlan1): Releasing backup interface [ 653.598984][ T9295] fuse: Bad value for 'fd' [ 653.966030][ T9302] program syz.2.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.440387][ T9340] tipc: Started in network mode [ 657.445302][ T9340] tipc: Node identity 96a942c23dd5, cluster identity 4711 [ 657.452988][ T9340] tipc: Enabled bearer , priority 0 [ 657.465139][ T9337] syzkaller0: entered promiscuous mode [ 657.484235][ T9337] syzkaller0: entered allmulticast mode [ 657.651207][ T9339] tipc: Resetting bearer [ 657.660292][ T9335] tipc: Resetting bearer [ 657.677936][ T9335] tipc: Disabling bearer [ 658.306932][ T9353] erofs (device loop2): cannot find valid erofs superblock [ 658.696459][ T9358] ntfs3: Bad value for 'uid' [ 658.701113][ T9358] ntfs3: Bad value for 'uid' [ 660.594794][ T9370] program syz.0.844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.041678][ T9379] fuse: Bad value for 'fd' [ 662.510459][ T9388] ext4: Unknown parameter 'euid>00000000000000000000' [ 663.853983][ T9403] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.993486][ T6024] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 664.256621][ T6024] usb 4-1: Using ep0 maxpacket: 16 [ 664.297413][ T6024] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 664.324274][ T6024] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 664.358842][ T6024] usb 4-1: Product: syz [ 664.368952][ T6024] usb 4-1: Manufacturer: syz [ 664.379796][ T6024] usb 4-1: SerialNumber: syz [ 664.390544][ T6024] usb 4-1: config 0 descriptor?? [ 664.675058][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 664.761941][ T1558] usb 4-1: USB disconnect, device number 15 [ 664.848189][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 664.864843][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 665.342255][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.353832][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.374981][ T8257] udevd[8257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.413023][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.433516][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.465628][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 665.484885][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.705436][ T10] usb 2-1: usb_control_msg returned -32 [ 665.713358][ T10] usbtmc 2-1:16.0: can't read capabilities [ 665.753615][ T9413] erofs (device loop3): cannot find valid erofs superblock [ 666.196152][ T9414] ntfs3: Bad value for 'uid' [ 666.200833][ T9414] ntfs3: Bad value for 'uid' [ 667.456234][ T10] usb 2-1: USB disconnect, device number 13 [ 667.775631][ T9430] ext4: Unknown parameter 'euid>00000000000000000000' [ 669.679170][ T9459] fuse: Bad value for 'fd' [ 674.183641][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 674.556330][ T9498] veth3: entered promiscuous mode [ 674.677877][ T9501] erofs (device loop1): cannot find valid erofs superblock [ 674.985578][ T9502] ntfs3: Bad value for 'uid' [ 674.990225][ T9502] ntfs3: Bad value for 'uid' [ 676.408685][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 676.579008][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.591411][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.602816][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 676.612990][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.626499][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.635933][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.713809][ T43] usb 3-1: config 0 descriptor?? [ 677.128134][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 677.219525][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 677.281430][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 677.535222][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 677.561048][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 677.962977][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 678.041572][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 678.133497][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 678.211059][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 678.317220][ T43] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 678.663024][ T43] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 679.497583][ T6024] usb 3-1: USB disconnect, device number 12 [ 679.604792][ T9532] fido_id[9532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 679.817119][ T9539] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 679.825970][ T1558] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 679.894094][ T9540] random: crng reseeded on system resumption [ 680.897413][ T1558] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 680.920922][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.941304][ T9547] fuse: Bad value for 'fd' [ 681.126273][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.193486][ T1558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 681.696197][ T1558] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 681.715516][ T1558] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 681.747108][ T6015] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 681.776741][ T9552] sp0: Synchronizing with TNC [ 681.815593][ T1558] usb 2-1: Manufacturer: syz [ 681.864433][ T1558] usb 2-1: config 0 descriptor?? [ 681.896897][ T9554] erofs (device loop4): cannot find valid erofs superblock [ 682.005941][ T6015] usb 4-1: config 3 has no interfaces? [ 682.284531][ T9556] ntfs3: Bad value for 'uid' [ 682.289257][ T9556] ntfs3: Bad value for 'uid' [ 683.261304][ T6015] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 683.270492][ T6015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.279713][ T6015] usb 4-1: Product: syz [ 683.285869][ T6015] usb 4-1: Manufacturer: syz [ 683.293026][ T6015] usb 4-1: SerialNumber: syz [ 683.554792][ T1558] usbhid 2-1:0.0: can't add hid device: -71 [ 683.591587][ T1558] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 684.511509][ T1558] usb 2-1: USB disconnect, device number 14 [ 685.471794][ T6009] usb 4-1: USB disconnect, device number 16 [ 685.778114][ T9585] netlink: 512 bytes leftover after parsing attributes in process `syz.2.894'. [ 685.787989][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.795055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.790764][ T9618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.900'. [ 686.911517][ T6009] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 687.020721][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 687.265659][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 687.275637][ T6009] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 687.289457][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 687.321426][ T6009] usb 5-1: Product: syz [ 687.448406][ T6009] usb 5-1: Manufacturer: syz [ 687.464354][ T6009] usb 5-1: SerialNumber: syz [ 687.527251][ T6009] usb 5-1: config 0 descriptor?? [ 687.575961][ T6015] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 687.791863][ T6009] usb 5-1: USB disconnect, device number 18 [ 687.802344][ T6015] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 687.831361][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.944777][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.036131][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 688.102819][ T6015] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 688.122216][ T6015] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 688.129465][ T8257] udevd[8257]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.147347][ T6015] usb 1-1: Manufacturer: syz [ 688.164339][ T6015] usb 1-1: config 0 descriptor?? [ 688.467001][ T9634] netlink: 'syz.1.903': attribute type 20 has an invalid length. [ 688.602763][ T6015] usbhid 1-1:0.0: can't add hid device: -71 [ 688.609758][ T6015] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 688.672747][ T6015] usb 1-1: USB disconnect, device number 18 [ 689.042617][ T9638] fuse: Bad value for 'fd' [ 689.666080][ T9646] ext4: Unknown parameter 'euid>00000000000000000000' [ 689.975728][ T6015] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 690.567496][ T6015] usb 1-1: config 3 has no interfaces? [ 690.580461][ T6015] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 690.593689][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.639361][ T6015] usb 1-1: Product: syz [ 690.645869][ T6015] usb 1-1: Manufacturer: syz [ 690.652761][ T6015] usb 1-1: SerialNumber: syz [ 691.567157][ T6009] usb 1-1: USB disconnect, device number 19 [ 692.976682][ T1558] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 693.105641][ T9543] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 693.262982][ T9695] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 693.275775][ T1558] usb 5-1: Using ep0 maxpacket: 8 [ 693.298765][ T1558] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 693.311446][ T9543] usb 1-1: config 3 has no interfaces? [ 693.317651][ T1558] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.329209][ T1558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 693.552674][ T1558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 693.564189][ T9543] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 693.574713][ T9543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.590007][ T9543] usb 1-1: Product: syz [ 693.603621][ T1558] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.618091][ T9543] usb 1-1: Manufacturer: syz [ 693.637244][ T9543] usb 1-1: SerialNumber: syz [ 693.743279][ T1558] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 693.833813][ T1558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.930308][ T9698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.981564][ T9695] veth5: entered promiscuous mode [ 694.011491][ T9695] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 694.476415][ T1558] usb 5-1: usb_control_msg returned -32 [ 694.498886][ T1558] usbtmc 5-1:16.0: can't read capabilities [ 694.594682][ T1558] usb 1-1: USB disconnect, device number 20 [ 694.906110][ T9709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.918'. [ 694.963201][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 695.244284][ T9718] ext4: Unknown parameter 'euid>00000000000000000000' [ 696.136450][ T9724] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 697.465829][ T6009] usb 5-1: USB disconnect, device number 19 [ 697.648550][ T9739] fuse: Bad value for 'fd' [ 698.145659][ T6009] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 698.316060][ T9543] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 698.337882][ T6009] usb 2-1: config 3 has no interfaces? [ 698.385984][ T6009] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 698.529680][ T9543] usb 4-1: config 3 has no interfaces? [ 698.538274][ T9543] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 698.547667][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.556042][ T9543] usb 4-1: Product: syz [ 698.560388][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.560408][ T9543] usb 4-1: Manufacturer: syz [ 698.599093][ T6009] usb 2-1: Product: syz [ 698.609763][ T6009] usb 2-1: Manufacturer: syz [ 698.623007][ T6009] usb 2-1: SerialNumber: syz [ 698.660528][ T9543] usb 4-1: SerialNumber: syz [ 699.264984][ T1558] usb 2-1: USB disconnect, device number 15 [ 699.333627][ T6015] usb 4-1: USB disconnect, device number 17 [ 700.358474][ T9767] ext4: Unknown parameter 'euid>00000000000000000000' [ 701.819864][ T9788] fuse: Bad value for 'fd' [ 703.132944][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.940'. [ 703.401372][ T1558] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 703.823597][ T1558] usb 4-1: config 3 has no interfaces? [ 703.848680][ T1558] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 703.965769][ T1558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.984435][ T9805] netlink: 'syz.1.941': attribute type 20 has an invalid length. [ 704.089360][ T1558] usb 4-1: Product: syz [ 704.095867][ T1558] usb 4-1: Manufacturer: syz [ 704.128159][ T1558] usb 4-1: SerialNumber: syz [ 704.677279][ T6015] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 704.880006][ T6015] usb 3-1: config 3 has no interfaces? [ 704.911639][ T6015] usb 3-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 705.068576][ T6015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.082364][ T6015] usb 3-1: Product: syz [ 705.090802][ T6009] usb 4-1: USB disconnect, device number 18 [ 705.101782][ T6015] usb 3-1: Manufacturer: syz [ 705.106730][ T6015] usb 3-1: SerialNumber: syz [ 705.346331][ T43] usb 3-1: USB disconnect, device number 13 [ 705.425934][ T6015] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 705.586833][ T6015] usb 5-1: config 3 has no interfaces? [ 705.594330][ T6015] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 705.604575][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.613492][ T6015] usb 5-1: Product: syz [ 705.620044][ T6015] usb 5-1: Manufacturer: syz [ 705.624654][ T6015] usb 5-1: SerialNumber: syz [ 705.740066][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 706.339877][ T6015] usb 5-1: USB disconnect, device number 20 [ 708.372104][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.954'. [ 709.006811][ T6024] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 709.165670][ T6024] usb 5-1: device descriptor read/64, error -71 [ 709.573435][ T6024] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 709.573439][ T6009] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 709.705623][ T6015] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 709.727123][ T6009] usb 1-1: config 3 has no interfaces? [ 709.734600][ T6009] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice= d.c4 [ 709.736837][ T6024] usb 5-1: device descriptor read/64, error -71 [ 709.743945][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.758047][ T6009] usb 1-1: Product: syz [ 709.766369][ T6009] usb 1-1: Manufacturer: syz [ 709.771078][ T6009] usb 1-1: SerialNumber: syz [ 709.835598][ T6015] usb 4-1: device descriptor read/64, error -71 [ 709.855874][ T6024] usb usb5-port1: attempt power cycle [ 710.166113][ T6015] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 710.469516][ T9543] usb 1-1: USB disconnect, device number 21 [ 710.588011][ T6015] usb 4-1: device descriptor read/64, error -71 [ 710.715771][ T6015] usb usb4-port1: attempt power cycle [ 710.744684][ T9883] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.754235][ T9883] FAT-fs (loop2): unable to read boot sector [ 710.795860][ T6024] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 710.826832][ T6024] usb 5-1: device descriptor read/8, error -71 [ 710.874967][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 710.883947][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 711.055787][ T6015] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 711.077082][ T6015] usb 4-1: device descriptor read/8, error -71 [ 711.078585][ T6024] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 711.116833][ T6024] usb 5-1: device descriptor read/8, error -71 [ 711.241850][ T6024] usb usb5-port1: unable to enumerate USB device [ 711.315626][ T6015] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 711.336405][ T6015] usb 4-1: device descriptor read/8, error -71 [ 711.446018][ T6015] usb usb4-port1: unable to enumerate USB device [ 715.017624][ T9930] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 715.081002][ T9930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.152321][ T9930] veth5: entered promiscuous mode [ 715.157546][ T6024] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 715.171865][ T9930] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 715.464393][ T9942] ext4: Unknown parameter 'euid>00000000000000000000' [ 715.472143][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.507739][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.555590][ T6024] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 715.589568][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.332461][ T6024] usb 1-1: config 0 descriptor?? [ 716.862813][ T9543] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 716.959258][ T9954] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 717.051140][ T9955] random: crng reseeded on system resumption [ 717.512292][ T9543] usb 5-1: device descriptor read/64, error -71 [ 717.766595][ T9926] ------------[ cut here ]------------ [ 717.772318][ T9926] WARNING: kernel/vhost_task.c:97 at __vhost_task_wake+0xbb/0xd0, CPU#1: syz.0.973/9926 [ 717.782137][ T9926] Modules linked in: [ 717.783967][ T9953] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 717.786998][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.0.973 Not tainted syzkaller #0 PREEMPT(full) [ 717.803872][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 717.814002][ T9926] RIP: 0010:__vhost_task_wake+0xbb/0xd0 [ 717.819731][ T9926] Code: 38 00 74 08 48 89 df e8 03 8b 95 00 48 8b 3b 5b 41 5e 41 5f e9 a6 45 01 00 e8 81 f0 30 00 90 0f 0b 90 eb 8b e8 76 f0 30 00 90 <0f> 0b 90 5b 41 5e 41 5f e9 18 17 f8 09 cc 0f 1f 80 00 00 00 00 90 [ 717.839419][ T9926] RSP: 0018:ffffc9000c3876c0 EFLAGS: 00010293 [ 717.845500][ T9926] RAX: ffffffff818eed7a RBX: ffff88807a26e800 RCX: ffff88802590dac0 [ 717.853618][ T9926] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 717.861633][ T9926] RBP: ffffc9000c387790 R08: ffff88807a26e877 R09: 1ffff1100f44dd0e [ 717.870196][ T9926] R10: dffffc0000000000 R11: ffffed100f44dd0f R12: 1ffff92001870ee0 [ 717.878400][ T9926] R13: dffffc0000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 717.886464][ T9926] FS: 0000000000000000(0000) GS:ffff888125add000(0000) knlGS:0000000000000000 [ 717.895397][ T9926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.902124][ T9926] CR2: 00007f053a012749 CR3: 0000000069d36000 CR4: 00000000003526f0 [ 717.910136][ T9926] Call Trace: [ 717.913425][ T9926] [ 717.916402][ T9926] vhost_worker_queue+0x194/0x260 [ 717.921445][ T9926] ? __pfx_vhost_worker_queue+0x10/0x10 [ 717.927049][ T9926] ? __init_swait_queue_head+0xa9/0x150 [ 717.932595][ T9926] __vhost_worker_flush+0x134/0x1e0 [ 717.937833][ T9926] ? __pfx___vhost_worker_flush+0x10/0x10 [ 717.943550][ T9926] ? __pfx_vhost_flush_work+0x10/0x10 [ 717.948980][ T9926] ? xa_find+0x25b/0x2b0 [ 717.953221][ T9926] ? xa_find+0x8c/0x2b0 [ 717.957413][ T9926] vhost_dev_flush+0xb2/0x130 [ 717.962098][ T9926] ? __pfx_vhost_dev_flush+0x10/0x10 [ 717.967431][ T9926] ? __pfx___fsnotify_parent+0x10/0x10 [ 717.972892][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 717.978028][ T9926] vhost_net_flush+0x24/0x170 [ 717.982725][ T9926] vhost_net_release+0x66/0x370 [ 717.987656][ T9926] ? __pfx_vhost_net_release+0x10/0x10 [ 717.993126][ T9926] __fput+0x44c/0xa70 [ 717.997159][ T9926] task_work_run+0x1d4/0x260 [ 718.001748][ T9926] ? __pfx_task_work_run+0x10/0x10 [ 718.006931][ T9926] do_exit+0x6b5/0x2300 [ 718.011146][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 718.016235][ T9926] ? __pfx_do_exit+0x10/0x10 [ 718.020854][ T9926] do_group_exit+0x21c/0x2d0 [ 718.025450][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.030709][ T9926] get_signal+0x1285/0x1340 [ 718.035253][ T9926] arch_do_signal_or_restart+0xa0/0x790 [ 718.040855][ T9926] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.046160][ T9926] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.052351][ T9926] ? local_irq_enable_exit_to_user+0x5/0x10 [ 718.058305][ T9926] irqentry_exit_to_user_mode+0x7e/0x110 [ 718.063945][ T9926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.070268][ T9926] RIP: 0033:0x7f0fdaa67ff5 [ 718.074709][ T9926] Code: Unable to access opcode bytes at 0x7f0fdaa67fcb. [ 718.082052][ T9926] RSP: 002b:00007ffe330641f0 EFLAGS: 00000283 [ 718.084660][ T9543] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 718.088458][ T9926] RAX: 00007f0fd98dd910 RBX: 00007f0fd98dd880 RCX: ffffffff88eac765 [ 718.088484][ T9926] RDX: ffffffff88eac765 RSI: ffffffff88eac765 RDI: 00007f0fd98dd938 [ 718.088499][ T9926] RBP: 00007f0fd98dd860 R08: 00007f0fd98dd8c8 R09: 00007f0fdadc2000 [ 718.088512][ T9926] R10: 00007f0fd95f9008 R11: 00000000000000ff R12: 00007f0fd98dd858 [ 718.088525][ T9926] R13: 0000000000000013 R14: 00007ffe33064448 R15: 00007f0fd95f9008 [ 718.088545][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.088572][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.145299][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.149906][ T9926] [ 718.152945][ T9926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 718.160218][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.0.973 Not tainted syzkaller #0 PREEMPT(full) [ 718.169401][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.179444][ T9926] Call Trace: [ 718.182710][ T9926] [ 718.185628][ T9926] dump_stack_lvl+0x99/0x250 [ 718.190213][ T9926] ? __asan_memcpy+0x40/0x70 [ 718.194793][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.199985][ T9926] ? __pfx__printk+0x10/0x10 [ 718.204585][ T9926] vpanic+0x237/0x6d0 [ 718.208566][ T9926] ? __pfx_vpanic+0x10/0x10 [ 718.213054][ T9926] ? is_bpf_text_address+0x292/0x2b0 [ 718.218375][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 718.223573][ T9926] panic+0xb9/0xc0 [ 718.227287][ T9926] ? __pfx_panic+0x10/0x10 [ 718.231702][ T9926] __warn+0x334/0x4c0 [ 718.235670][ T9926] ? __vhost_task_wake+0xbb/0xd0 [ 718.240601][ T9926] ? __vhost_task_wake+0xbb/0xd0 [ 718.245528][ T9926] report_bug+0x2be/0x4f0 [ 718.249870][ T9926] ? __vhost_task_wake+0xbb/0xd0 [ 718.254800][ T9926] ? __vhost_task_wake+0xbb/0xd0 [ 718.259727][ T9926] ? __vhost_task_wake+0xbd/0xd0 [ 718.264650][ T9926] handle_bug+0x84/0x160 [ 718.268883][ T9926] exc_invalid_op+0x1a/0x50 [ 718.273374][ T9926] asm_exc_invalid_op+0x1a/0x20 [ 718.278206][ T9926] RIP: 0010:__vhost_task_wake+0xbb/0xd0 [ 718.283743][ T9926] Code: 38 00 74 08 48 89 df e8 03 8b 95 00 48 8b 3b 5b 41 5e 41 5f e9 a6 45 01 00 e8 81 f0 30 00 90 0f 0b 90 eb 8b e8 76 f0 30 00 90 <0f> 0b 90 5b 41 5e 41 5f e9 18 17 f8 09 cc 0f 1f 80 00 00 00 00 90 [ 718.303331][ T9926] RSP: 0018:ffffc9000c3876c0 EFLAGS: 00010293 [ 718.309408][ T9926] RAX: ffffffff818eed7a RBX: ffff88807a26e800 RCX: ffff88802590dac0 [ 718.317366][ T9926] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 718.325327][ T9926] RBP: ffffc9000c387790 R08: ffff88807a26e877 R09: 1ffff1100f44dd0e [ 718.333283][ T9926] R10: dffffc0000000000 R11: ffffed100f44dd0f R12: 1ffff92001870ee0 [ 718.341246][ T9926] R13: dffffc0000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 718.349213][ T9926] ? __vhost_task_wake+0xba/0xd0 [ 718.354201][ T9926] vhost_worker_queue+0x194/0x260 [ 718.359235][ T9926] ? __pfx_vhost_worker_queue+0x10/0x10 [ 718.364776][ T9926] ? __init_swait_queue_head+0xa9/0x150 [ 718.370314][ T9926] __vhost_worker_flush+0x134/0x1e0 [ 718.375503][ T9926] ? __pfx___vhost_worker_flush+0x10/0x10 [ 718.381219][ T9926] ? __pfx_vhost_flush_work+0x10/0x10 [ 718.386594][ T9926] ? xa_find+0x25b/0x2b0 [ 718.390838][ T9926] ? xa_find+0x8c/0x2b0 [ 718.394998][ T9926] vhost_dev_flush+0xb2/0x130 [ 718.399666][ T9926] ? __pfx_vhost_dev_flush+0x10/0x10 [ 718.404946][ T9926] ? __pfx___fsnotify_parent+0x10/0x10 [ 718.410393][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 718.415426][ T9926] vhost_net_flush+0x24/0x170 [ 718.420107][ T9926] vhost_net_release+0x66/0x370 [ 718.424970][ T9926] ? __pfx_vhost_net_release+0x10/0x10 [ 718.430425][ T9926] __fput+0x44c/0xa70 [ 718.434425][ T9926] task_work_run+0x1d4/0x260 [ 718.439012][ T9926] ? __pfx_task_work_run+0x10/0x10 [ 718.444121][ T9926] do_exit+0x6b5/0x2300 [ 718.448280][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 718.453298][ T9926] ? __pfx_do_exit+0x10/0x10 [ 718.457897][ T9926] do_group_exit+0x21c/0x2d0 [ 718.462480][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.467670][ T9926] get_signal+0x1285/0x1340 [ 718.472194][ T9926] arch_do_signal_or_restart+0xa0/0x790 [ 718.477731][ T9926] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.482932][ T9926] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.489087][ T9926] ? local_irq_enable_exit_to_user+0x5/0x10 [ 718.494969][ T9926] irqentry_exit_to_user_mode+0x7e/0x110 [ 718.500590][ T9926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.506559][ T9926] RIP: 0033:0x7f0fdaa67ff5 [ 718.510958][ T9926] Code: Unable to access opcode bytes at 0x7f0fdaa67fcb. [ 718.517955][ T9926] RSP: 002b:00007ffe330641f0 EFLAGS: 00000283 [ 718.524009][ T9926] RAX: 00007f0fd98dd910 RBX: 00007f0fd98dd880 RCX: ffffffff88eac765 [ 718.532000][ T9926] RDX: ffffffff88eac765 RSI: ffffffff88eac765 RDI: 00007f0fd98dd938 [ 718.539955][ T9926] RBP: 00007f0fd98dd860 R08: 00007f0fd98dd8c8 R09: 00007f0fdadc2000 [ 718.547915][ T9926] R10: 00007f0fd95f9008 R11: 00000000000000ff R12: 00007f0fd98dd858 [ 718.555876][ T9926] R13: 0000000000000013 R14: 00007ffe33064448 R15: 00007f0fd95f9008 [ 718.563843][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.568342][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.572834][ T9926] ? get_tx_bufs+0x35/0x7d0 [ 718.577354][ T9926] [ 718.580608][ T9926] Kernel Offset: disabled [ 718.584935][ T9926] Rebooting in 86400 seconds..