last executing test programs: 20.719253391s ago: executing program 1 (id=1213): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfcfb1000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/161, 0xa1}], 0x1, 0x7, 0x63b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0xd000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) 19.999386779s ago: executing program 1 (id=1217): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000002200)="50a42e", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000000)="5cf3", 0x2, 0x3b00, 0x0, 0xf00) 19.921835074s ago: executing program 1 (id=1219): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000300)={0xa, 0x2, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x62ea450d}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x10000, 0x0, 0x0, 0x5, 0x9, 0x7, 0x1000, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000", @ANYRESDEC=r1], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500ee032c719f7a474fd88fe949b4fce17200000000ffe0c5d1ab089cdb94", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fcdbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="36000e0080000000ffffffffffff08021100000008021100000000000000000000000000ff7f01000301ab0503063c033c80000000000000000026006c09000008000c006400000008000d000000000010005a800c0000800500010030000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20043041}, 0x0) 7.651819112s ago: executing program 3 (id=1257): r0 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) userfaultfd(0x80001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x2000000, 0x0, 0x0, 0xfffffdcf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400060022000b0fd25a806c8c6f94f90124fc605c83cf566193238d5cb425d933e9ee78e582bebdd4019bedb88426ea76169c", 0x33}], 0x1}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r4, &(0x7f00000025c0)='./file0\x00') writev(r0, 0x0, 0x0) 6.808570021s ago: executing program 3 (id=1258): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000140)={0xa, 0x0, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103", @ANYBLOB, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0be692e18d88c64c38fc2e47013a98b13137eef1634685f895f35f7650cb679bf9e1e4050c70544e4df42f9d15f771806086d3b6ce7c7c5bde7afc0a18b32b1f0f57e61b6f652760637e07dc54ddd8de61bb81644aae1ca935b446ecdb6e866eee6b34e48bb1020ef26b30989607f02a5997354b2d05"], 0x0}, 0x0) (rerun: 32) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4000000) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0xfffffffd}}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x4) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000280)={0x30000010}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee7f0102030140dc0902120001000010000904b8070096d1"], 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x37, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) 4.981943708s ago: executing program 1 (id=1267): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x400000040039) keyctl$clear(0x7, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) add_key(&(0x7f0000000100)='syzkaller\x00', 0x0, &(0x7f0000000140)="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", 0x130, r2) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x997) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) 4.875815574s ago: executing program 4 (id=1268): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x800, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x21}, 0x4}}, 0x50}}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002d00090027bd70000000000004000000080018000bac0f009f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.625107748s ago: executing program 4 (id=1269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a537860f47a0"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0xf8c0, 0x2, 0x2, {{0x11, 0x4, 0x1, 0x9, 0x44, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x23, 0x0, [{0x7, 0x2}, {0x2, 0x12, "4107220ce208a140432b078b444114c1"}, {0x1, 0x2}, {0x1, 0x7, "434c36e509"}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 4.251822348s ago: executing program 2 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44881}, 0x0) 4.028641289s ago: executing program 2 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x347, @time={0x9, 0x5}, 0x9, {0x6, 0x6}, 0x5, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}]}]}, 0x30}}, 0x4000) 3.938797345s ago: executing program 2 (id=1273): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) read$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e230000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.795030384s ago: executing program 2 (id=1275): socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) syz_emit_ethernet(0x46, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000103aff00000000000000000000ffff7f000001043fdf3c00000000000000000000000186009078000102000000000002000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x1fa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x3, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x0, 0x1, 0x8, 0x10000, 0x1, 0x7, 0x2, 0x1000000081, 0x5, 0x3, 0x5, 0x2, 0xffff, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc8302b063a7e25fe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.21846549s ago: executing program 4 (id=1276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r3, @ANYBLOB='\fid=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x7fff, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0xfffffffffffffff5, 0x0, {0x4000000000003, 0xfffffffd, 0x0, {0x4000, 0x4, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x7, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f00000001c0)={0x0, 0x4, 0x80}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000501000/0x1000)=nil, 0x1000}, 0x5}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90e0, 0x33}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008845}, 0x0) 2.927620717s ago: executing program 1 (id=1277): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1b) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) (async) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) (async) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) 2.68884865s ago: executing program 3 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'gre0\x00'}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x20040140) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a00000200000000000000000000014f97ea9f5230d74aad47ca7c48c0a404dc9437932977390fb8549daa1cbcb72001ae19e5ce204ad2fa4d"], 0x10}}, 0x0) recvmmsg(r6, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, 0x0}}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) sched_getattr(r5, &(0x7f0000000200)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}, 0xf7fe}) 2.588896884s ago: executing program 2 (id=1279): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838079f96bd206d4776368ed2a92432e5af71", 0x33}], 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x18, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 2.459731572s ago: executing program 2 (id=1281): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x1df8000000, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x4, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x403, 0x5, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x3, 0x5, 0x0, 0x6, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x8000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x3, 0x8, 0x8000, 0x8000000000000001, 0xfffffe0000000002, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7ff, 0x1, 0x0, 0x4, 0x0, 0x1, 0x8000000, 0x9, 0x0, 0x0, 0x2, 0x20001, 0x1, 0x0, 0x7, 0x80, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x100, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) fsync(r1) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="1e30", 0x2) 2.459057407s ago: executing program 0 (id=1282): r0 = syz_io_uring_setup(0x3, &(0x7f0000000300)={0x0, 0x6107, 0x1, 0x1, 0x10001a4}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="86", 0x1}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x4000000) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0x60000000, 0x0, 0x4) 2.124312971s ago: executing program 4 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44881}, 0x0) 2.056050271s ago: executing program 4 (id=1284): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b000000", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100002800508005000200e9c119d084b3d49537d5000000000800030009ac0f000900dfff7de5d52ffd0000000800070000000000c03363b2f721ab0974a86f"], 0x50}}, 0x20000000) 1.655260198s ago: executing program 1 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) memfd_create(&(0x7f0000000000)='@:#].\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000a6000000000000009500"/32], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) openat2(r7, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r8, 0x0) shmget(0x1, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) 1.653616096s ago: executing program 4 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0xfffffffff0000000, 0x100000000}) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0xd, 0x88200) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r7, &(0x7f0000000340)="e2", 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r8, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(r9, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000029000b0027bd700000000000050000000c00", @ANYRES32=0x0, @ANYBLOB="4a2425b28046f630ea27c1db1300"/27], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.503869405s ago: executing program 0 (id=1287): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x20000000) 1.315325942s ago: executing program 0 (id=1288): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x7f, 0x0, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x1fe, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x9, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x401, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2002, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffef6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x981, 0x9, 0x1, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0xec, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x2, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x20000005, 0x2, 0x4e1b, 0x1, 0x1000, 0x9, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x0, 0x79, 0x8, 0x9, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd}}], 0x1, 0x4000000) 1.278106425s ago: executing program 0 (id=1289): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2000000}]}]}, 0x34}}, 0x20000000) 1.179276652s ago: executing program 0 (id=1290): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x10000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@any, 0x2}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x6, &(0x7f00000001c0)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/230, 0xe6}], 0x3) r4 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000004c0)=r3) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x50, r0, 0x82000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)={0x62, 0x0, '\x00', [@enc_lim]}, 0x10) sendto(r4, &(0x7f0000000540)="ca2d6c0a729bd0fdd3366ae4333caf4a0c10740b3178b79734d05def0fddbf761693e3ec00765e0a565d13e51d034137e5c6822ab90177d2595a59bc3db056445f88f6e903f583cd7391fd29476a6b953a89238409ddc07a513dcb73566fbb75fa44207e1ec3eab715c49414bcc9062f5160a8a3a1a0a1e6fd4195850714dcd47530b197dccbf67a7fbef4a5a4ad0677ee52b2", 0x93, 0x1, &(0x7f0000000600)=@can, 0x80) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000680)={{0x2, 0x4e23, @loopback}, {0x306}, 0x54, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 'bond0\x00'}) r5 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2a}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x24008090) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000880)={0x3, @sdr={0x47425247, 0x280000}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000980)=0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000009c0)={r6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x6, 0x200, 0x40, 0x3, 0x1000, 0x1, 0x8, 0x10000, 0x7a34, 0x9, 0x9, 0x8, 0x2, 0x0, 0x3]}, &(0x7f0000000b00)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000b40)={r7, 0x3, 0x1000, "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"}, 0x1008) connect$unix(0xffffffffffffffff, &(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r2, {r4}}, './file0/file0\x00'}) writev(r6, &(0x7f0000001d80)=[{&(0x7f0000001c40)="7dc8f6dcced7fe5ead23685333abb27fbe99ee6dce8be5d89d42cfd28bc1bfced0cc82ee2f257836fccbc837c28a498886056d8668211b29d3e577a37e8615f1586d082599f45c4a6dec773578169950dc3e3f2fdd580578b4bb4488e5211df040b59efe0bb4efba3d688b58", 0x6c}, {&(0x7f0000001cc0)="b495ed59048ef2245950e6582638eec5a56509c77a6c05d7a65ae881d77357d2abf70d0261c016be113b7d1984f999c0b227e5af44ab76993ea43396f60aa98e933ae38c3d1cf7b5a4a2f6c19617b24f1ecf140a9db3846506105b3575854b90a27e7070d3cda88dec4c3887677248b7da4d704951c270e46270da6453a667938abd0519001112aec9d8a83ddc7f138c8246cf57f10c56f47935", 0x9a}], 0x2) sendmmsg$inet(r5, &(0x7f00000046c0)=[{{&(0x7f0000001dc0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001e00)="ec1da991a75d3d3fde0eaca14f7d45e54777a4ed15c9777f51e0af2f163aafc3ed0e5f538e44967268f919fcd85eb35d898ee6e94cca3f53f7c9b5fee981", 0x3e}], 0x1, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9d92}}], 0x18}}, {{&(0x7f0000001ec0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001f00)="ee0c550f6d4c35d0d5ed970ebf280a75d8187076653ff022b4508ab721529ea01877e274f69b651fec5d4c2c3dec3ad5d9f5e837a4d17bb68cbfdc85771ad0683cbf2bc3a12ee43b95bd27d8e5fb88a36d43a2743d1d4b52891c096345cb7925c9e2d37a406011980a74ec902da7dfa3d54e3ba734a24c660962fdcd42d63cbf88e235c5241dbbfdf6500d25ba39bd0d3f039445a457e1a77d91bcc6bc5c1db65cb60e337b5e51c9e0711e4f91d7febc1a5c24830d18d2fde7550cbbf9085b918d94a0e1b4b81f90c9f7b04d2e9b7745ded1", 0xd2}, {&(0x7f0000002000)="55305d1c94d1151d814f0b0966dd4828d4561a55252c940b85d174426537bef655545891969eb7402aa0f577db1960b08461e16160192f81bcc9ba5804fead7d7571cfc5323704fa365e838b71684db5a56fce7abac93e7266db84c236682329959a71d3dc188a95c8455cf574a97e24fed60aa9b1182c6bd0410857016590cd68a851416d6482c067d2fcfb3fef9a81407f0c68482d44e15f5072bf8994fb60f0a5bc0ea3b291c3c49de94d64e1768ac1e0685ebf07a0c3046d5372d80005d92fbb6f825c571e80f0ae4259d0a612b6142bae500a7e09", 0xd7}], 0x2, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x18}}, {{&(0x7f0000002180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002200)=[{&(0x7f00000021c0)="e5daa41917e6b10ba92ce7be70e65e09a017c6e14071c2ea7d6c1f6814c62bcaf29d0e207acf2ca548e7a142de58d94991eab32f83e050", 0x37}], 0x1, &(0x7f0000002380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7c17}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x4c, [@remote, @rand_addr=0x64010102]}, @noop]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xbd, [@multicast1, @empty]}, @timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0x8, [{@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@multicast2, 0x97}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0xb0}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003740)=[{&(0x7f0000002480)="ad266629f26945bddeb76bbfdc8cfcd413641cce5e70b0c06dddf9f352e1057de42e15e6d87f64e578f8bbde92a8ed2d4fbc655a7d2a592eba3bb61105aa3006898dd6398ec64e926152131e", 0x4c}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="87f30ff4a0b5ab73a131881e3efa43f264e3fdd9ee38c20f493abfd3b96c8089439e512a7f38cacc8117af44ebc55ca7d12821c132f48e9080d2b93b0c0185b434d2beda3b38dab2a4dcb7fde7ea517c4e752c81c5c7e6e82536465e8d2ab4cdeb47cd14f6c3cb05b85c30333f492e93ba93eba50a4151f5f7cce3eb44f16423", 0x80}, {&(0x7f0000003580)="cf3fe2d4c271c6f10f2e23e1d84b85a8ae13ad6ce82478f54f192fba52ddac457e4e67", 0x23}, {&(0x7f00000035c0)="aad1c0c87e974a8489992477cce4d053cb8a5245bb46968982b2c5c0a73d00e741f494b8d8957b2021211af8f325566ac1a14560d1ea2c9f5276fd12639b9e11e4ef66ba753100b25291b14eb383564ceb38585545aff9e8f82de1f2caff91c9620acf785a2d877efed1071813cc03395c914efa4b09ed5c920e575875e7b1d15f69d128ca8e5e835ecc531d3934228334f36545de2f623f2c0ed13a00950d6a47e9db0d7bc6a21a6fc4baa4c52dd3d309f99d3ddee26cf1f91552035e8dfc5ef2ed92f17414871b29c5f689a271e2deff09c76bee36f0ee02b3b9376b17ba0e6e6e38b13896711505360e45caded90053b92a877e93", 0xf6}, {&(0x7f00000036c0)="d77a0a2ad81c5f7cfacf88d52cb7caf259f395d3250354236824184e8f6f74378431aae95ba8c8fb4c8f5968b1e05f12fcc4adce8b654aafb1f7155cd2f90cb6b35bc8461d86b088bbe3f823d0bd8b16d3a65cda44a616486e97b5cb3d", 0x5d}], 0x6, &(0x7f00000037c0)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000003800)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000003840)="15a39917a446abe00f82375c57351d2f011ad47dbf38290fbd83f39b275e05cc92f67ea9da4d8b6584eac68301b2d6f8eb1c3f90792d4daf9a8e8e2dc909f8fc4d962a6464705038cf055c28389780d1474fefd3038bc66dd6361ec5a6ff72fd57256c53452f536ef3fa8e44f58dc89508190fc3e5adc5fc978dc7a97b3937eccb44d3e07246207d82b5b850a014d8fbe2400fdf9c41f013fd53a6db87f93da318ff980750b761d9de608456a76d47e14a025fdc8e72fcdf5375ace79181bd8b6cd882e13ca68191fc2c3cbee01af6341d7eb564c709342f42fea6d8d412b276ad", 0xe1}, {&(0x7f0000003940)="220ec3793a50e80936154c15c22ad90c3dc76026da6b21bc45a40bb04d7e507514e433eb8676a5273b4257250237c4b310986b024bd0237dbc28204ace5391d28f23d4c720a27259569c90067ee5872ff88ed1e2b16f231fd84662d0e0e34a2183442cde79fd995da523367f7a4b67317c783c53712b96aa2284a16d2dd95e462c7973783e369fefee718dd081b5f2bf717f6376f2", 0x95}, {&(0x7f0000003a00)="8ad3bc2ad43427e0fde543d266df76a3b7f7ffda063a088e843774f3518caf558e7ef645eddb5562e2facfec72ef4039ccfb0dc4be41c48e90f22944b8de6a4cc296a437d04cb51814fa8ab7edc1e4e498ca182ea0710f912706845b9150e666455faec1187b562f6ef2e1518fbff97660aa3e6941a0c4c52af633c7cd5db90c2285a5bc8af9af0ab7262208efd5b7b115ad55eb105f7b1422e270983636289c3d97145032b8eb207b57b6f1b3d38b0675e0f8ded6e527382f69677bdd69100a0f22da324666ab83ab4e1470781b6f0ce3f30b5e6e903687176ee3618f0c80031f50054c2214630b7728584cd5a987ede040b3a3", 0xf4}, {&(0x7f0000003b00)="1e7e558830fb32d1c74ef43d20c6005ecd0cfce4e861b8acf0a761cca84714c5a00e4a95de61f40c40acb0f34d70309f6cfed47043f8adb4e7ed0e4f3e94dcaf58eda868a52390b5e7383ff965ea2a9509bee3611c3e46", 0x57}, {&(0x7f0000003b80)="8a2cac50df0f9ac6d9f62244b46b5f1dd0b6e372745282d84784071149a0867b1e5a9001275af2715f05dfa4369a81709e4d5668d9a7157c8bd0122752b4607a6967efbee9d63e7db406757e9bbc4932d238c1c49341b7baa4746dc572f408b733cc32cfe71cb32ab086f8f05aac60182756a648a77a4a46f2e3a2ccc673471f5c389c5d1f73e84a0b75efdb9ad7b4b1efa458dcbe064a6c4a5a6ad83434bb4576760884e7c773a4e32aa41cf8264316008b82f719d4e641531ca9d26e8b2864dffbbb054e2f565bdddf965784d785370931ad8b913548e53b", 0xd9}], 0x5, &(0x7f0000003dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101}}}], 0x20}}, {{&(0x7f0000003e00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000043c0)=[{&(0x7f0000003e40)="02ea38086bf337628055134a01d933d42568be3fff05bdabd93a6765f5e4ad25178ba50c0115b7ead00d0b579197460c6da4407abab1ff85d395cdc518c2960c2a2b0f6d1464c4934bed6106dab5b858d2282ddce290a000d171535ac7a8c0700842ca5ad5de77a8ff9b230ede61671e520350", 0x73}, {&(0x7f0000003ec0)="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", 0xfa}, {&(0x7f0000003fc0)="5152c538240918c379b42709e16898f6334a9ac0852b98f682db6e6195991ce61a5f2af2897a42aa1d9b455d440d8596113275ec4f1744e87871b53a497087bd6fe1a3f6b1389239a3a1291e535552f44d04648a65d5f0ae9351ed25abd005d5e203623fe37754ec3fadca8e4beffd098023c309a3bf5fe803b804f250d9cb3cd40bfec3db20141bbad2c8eb46f682d706fec2338928256eb6f2fe292135c04875bd073b0bc02410b724ac69d8598ed3718c2b6c00c619bbd0874cee505d1049ec17dbd1ee8d38c6bc09624e954406ca3623b98cbbb9e8be0d654628d825298f00997d74a42bdd6ca06df14aae5783b04b09", 0xf2}, {&(0x7f00000040c0)="d7f1c8c173fc736d63cdcdcca70853dbcf71ee9a043abca868c83ff4670ab00931146f5511fb347686a912b0e54a1f941bf85d0e44717a8bc0a889fa7f24be3d76dc4984d2539d306d3b6279a2d376bdc06a9fb0213125428c3ae2924d594bf54d5ca1170408487157a5fbc248174702ff1f2fbfd5749ef7867675233bb528d1", 0x80}, {&(0x7f0000004140)="54dfeb8da798a6c6a6383e1f0815c2c819553a00d52a1e09c3d196f3401338344dc05237fde727dd6823d770bf58c0bb568c6e78d218392d5230caf959edce234fb33a5382a7b1a4bc7fdd3968059a6326ea750ad5510939d9209a247a7acb8e76b52d7efe0c2a5db0a62c3d59635f5fa15a9c755ffe4193510f6991651d2d003892843d59771bb2dafbb1beb71efdbbf734c082c96a13", 0x97}, {&(0x7f0000004200)="f66686302833e4911042d53152742a9bb35c1b49dc6e1d4f82e95560b6ba9f93e9ff05e11a2d12e5f0dec533a0bd6c8c7fa59cbb367512231b4eadbe3adcac22a4687f45658a2c47b20e48757f8c3458867d550d10d5563f0eeab1094dd9465c099d729bf6a10b2d360a37136c90d44e2d3ea314490e32993c2f9a2c2fb8f91c248d364cfd3b39ce8f84705de78deb67c7472cd34ddbd577dfa58c50db75e2ccad3d45af06540d43b21948d8ed1c31b470ad71add90ed01941854280b031c7808981f9c7ee9d1c2addc5e4a18ddd45d7e476448e9586603ea1737580e3", 0xdd}, {&(0x7f0000004300)="dab5657ed21552a083bdaa2047b751594a7451892de425e5fb5c96e84b8c3e0667b285d1d9cd43442210e0d9b40027f0aee4f4bef6e53d47dfa687dbfb8997e3286e150407e9d364785a0f7fefb7541d078d2be24eba9a03309e3548e4ebc68781ff7d8d84f7e90e9789b17a8c0684b5758037", 0x73}, {&(0x7f0000004380)}], 0x8, &(0x7f0000004580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93ece2c}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x23, [@rand_addr=0x64010102, @remote, @local, @dev={0xac, 0x14, 0x14, 0x38}]}, @rr={0x7, 0x17, 0x57, [@multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}]}, @cipso={0x86, 0x2f, 0x1, [{0x0, 0xb, "e81de946576a069f91"}, {0x0, 0x10, "b3ef02aa50afdbcb25897cc3e346"}, {0x6, 0xe, "5533e39a0e263a28a2c01856"}]}, @timestamp_addr={0x44, 0x1c, 0x6d, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa4d3}, {@loopback, 0x3}, {@private=0xa010101}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x7, 0xd, "501341c6beae6caa58e387"}, @ssrr={0x89, 0x1b, 0xd, [@dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @multicast1, @local, @broadcast, @multicast2]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x140}}], 0x6, 0x8800) 1.178660565s ago: executing program 0 (id=1291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x80}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x10, &(0x7f0000006680)=0x1) setregid(0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d6f0ac8e41898693b791dea9a7be93fd7a02535aadb7075a599ab0d2f764238a0ce652e3b5e1124ad645276557fb9905d6abc3b71796cb88118bc4e11edaa4cc9247fbb94a5b48d8b0ffc5f7d19fc47953d860c5802066c16d3509c43c41f51e322bacb12a1c937e37dfec58f7da36741f193bdb480d13d36b8eee69f66d6c9788f3"], 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 3 (id=1292): unshare(0x2c020680) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000051405000400a0a5c494c5017600010000000000"], 0x18}}, 0x24008000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r2, &(0x7f0000000240)=' ', 0x1) close(r2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x10020) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setfsgid(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x524, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xe}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4f4, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x62}, @TCA_ROUTE4_ACT={0x4d8, 0x6, [@m_nat={0xc4, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x4, 0x6, 0xf}, @loopback, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x8001, 0x10000000, 0x6, 0x2}, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffffe, 0x6, 0x8, 0x1}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x22, 0x6, "6fd43c5c0d8106e98b37d8ae4e8699f3211e22debc2c71eadd5add989cf6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x194, 0x13, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xfffffffd, 0x10000000, 0x3, 0x401}, @multicast1, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0xff, 0x8, 0x2, 0x16}, @loopback, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x31d, 0x6e53677c, 0x4, 0x6, 0x80007}, @empty, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0x4, 0xfa, 0xfffffffe}, @rand_addr=0x64010100, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe99, 0x2, 0x7, 0x3, 0x100}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x3, 0x3, 0xff}, @multicast2, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xd5e, 0x6, 0x200, 0x5}, @rand_addr=0x64010100, @loopback, 0xff, 0x1}}]}, {0x52, 0x6, "680d93bf38178355c0a13376a91911e4db6ae59e537a0474b42ecac8736ceac07894be8da508258ceae7ff3031928c88ca84cc63929981b16a221a1a05d6f9dccffde2b2f5bbe23da45967125c7b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0xaf, 0x6, "b4762aac7acd675f93dc418df243a356d8d761206d9a54bf533326db853a4290c4f5b3b9903f4868ee86af7fa222e989fc2690bf0fcd1616d3cfd544a3829ccb42dd270fe0e5aa481fe3d06e31d7de870cfd7c431babc14fbe986bb911b217f6f0a75b7c34479769eb22b2ee11fa8ea629190722c507b7133bddf31636cbe9a2998d8efaf5119ed30a661ee648f5a2adc14b6130b7ab84a1ea39397af069a54180310ec9e8c476c95818af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x13c, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x10000000, 0x3, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x11d6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f96, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xff, 0x8, 0x1000, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2417, 0xffffffffffffffff}}]}, {0xbc, 0x6, "b9ba84cbab283e8188d61cc17ab3e58e9f09b940579f2d35bd652727a240c557199504c89b59c644b8430280011ecb19d32b1a17c579de0265a4e7cf516a10bdb297453dffb58e3797a51c771f4ad0b89efb0b4c41e510729732d7b41aee7046f25abce679560f6959c685932651ddecb1fcd6b344409ded05e27a46da674db33ce4dadc57247df09bf8ea4aa86945f458ef96a19247d825589806db6e2b0b223896be831e08ab169bb480b3e6548337e013dc204bbb721d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x64, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x541}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x44d9a6d1}]}, {0x26, 0x6, "5aa80629c1e60f887cf1546ad1f369c4f9e9901adbf26500e891b4aeb1a1fbbc43a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x10}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd7}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0xf, 0x3, 0x0, 0x7, 0x0}) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x200) r9 = fanotify_init(0x40, 0x400) fanotify_mark(r9, 0x4, 0x8000008, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f00000004c0)=""/74, 0x4a}], 0x3, 0x92, 0x10001) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) kernel console output (not intermixed with test programs): 269.252857][ T43] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 269.284044][ T2986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.293225][ T5961] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 269.296071][ T9242] misc userio: Can't change port type on an already running userio instance [ 269.303393][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.337046][ T5961] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 269.348349][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.356704][ T5961] usb 4-1: Product: syz [ 269.363818][ T43] usb 5-1: config 0 descriptor?? [ 269.369251][ T5961] usb 4-1: Manufacturer: syz [ 269.374348][ T5961] usb 4-1: SerialNumber: syz [ 269.381767][ T30] audit: type=1326 audit(1755705480.125:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 269.427673][ T5961] usb 4-1: config 0 descriptor?? [ 269.449090][ T9228] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.466699][ T5961] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 269.474049][ T5961] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 269.481077][ T5961] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 269.487359][ T5961] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 269.496613][ T30] audit: type=1326 audit(1755705480.145:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 269.524161][ T9244] netlink: 'syz.0.753': attribute type 12 has an invalid length. [ 269.532200][ T5961] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 269.539388][ T9244] netlink: 'syz.0.753': attribute type 29 has an invalid length. [ 269.550932][ T9244] netlink: 148 bytes leftover after parsing attributes in process `syz.0.753'. [ 269.560589][ T30] audit: type=1326 audit(1755705480.155:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 269.588398][ T9244] netlink: 59 bytes leftover after parsing attributes in process `syz.0.753'. [ 269.600667][ T43] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 269.615697][ T9245] Lens A: ================= START STATUS ================= [ 269.623556][ T30] audit: type=1326 audit(1755705480.155:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 269.646285][ T9245] Lens A: Focus, Absolute: 0 [ 269.659919][ T9245] Lens A: ================== END STATUS ================== [ 269.682996][ T30] audit: type=1326 audit(1755705480.155:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 269.705478][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.798792][ T9] usb 5-1: USB disconnect, device number 32 [ 269.813570][ T9228] netlink: 'syz.3.750': attribute type 5 has an invalid length. [ 269.830812][ T9] usblp0: removed [ 269.935540][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 269.991696][ T30] audit: type=1326 audit(1755705480.155:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 270.072729][ T30] audit: type=1326 audit(1755705480.155:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27998ebe9 code=0x7ffc0000 [ 270.179526][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 271.145051][ T9269] FAULT_INJECTION: forcing a failure. [ 271.145051][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.160193][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.1.760 Not tainted syzkaller #0 PREEMPT(full) [ 271.160213][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.160221][ T9269] Call Trace: [ 271.160226][ T9269] [ 271.160231][ T9269] dump_stack_lvl+0x189/0x250 [ 271.160250][ T9269] ? __pfx____ratelimit+0x10/0x10 [ 271.160266][ T9269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.160279][ T9269] ? __pfx__printk+0x10/0x10 [ 271.160294][ T9269] ? __might_fault+0xb0/0x130 [ 271.160314][ T9269] ? rcu_is_watching+0x15/0xb0 [ 271.160327][ T9269] should_fail_ex+0x414/0x560 [ 271.160343][ T9269] _copy_from_user+0x2d/0xb0 [ 271.160357][ T9269] ___sys_sendmsg+0x158/0x2a0 [ 271.160370][ T9269] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.160387][ T9269] ? __fget_files+0x2a/0x420 [ 271.160404][ T9269] ? __fget_files+0x3a0/0x420 [ 271.160423][ T9269] __x64_sys_sendmsg+0x19b/0x260 [ 271.160434][ T9269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.160448][ T9269] ? __pfx_ksys_write+0x10/0x10 [ 271.160462][ T9269] ? rcu_is_watching+0x15/0xb0 [ 271.160473][ T9269] ? rcu_is_watching+0x15/0xb0 [ 271.160484][ T9269] do_syscall_64+0xfa/0x3b0 [ 271.160506][ T9269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.160518][ T9269] ? clear_bhb_loop+0x60/0xb0 [ 271.160531][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.160542][ T9269] RIP: 0033:0x7fb27998ebe9 [ 271.160553][ T9269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.160566][ T9269] RSP: 002b:00007fb27a856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.160589][ T9269] RAX: ffffffffffffffda RBX: 00007fb279bb5fa0 RCX: 00007fb27998ebe9 [ 271.160605][ T9269] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 271.160617][ T9269] RBP: 00007fb27a856090 R08: 0000000000000000 R09: 0000000000000000 [ 271.160630][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.160641][ T9269] R13: 00007fb279bb6038 R14: 00007fb279bb5fa0 R15: 00007fb279cdfa28 [ 271.160660][ T9269] [ 271.466843][ T5961] usb 4-1: USB disconnect, device number 36 [ 271.474154][ T5961] mcba_usb 4-1:0.0 can0: device disconnected [ 271.780257][ T5988] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 271.882268][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'. [ 272.010224][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 272.020247][ T5961] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 272.033119][ T5988] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 272.048429][ T5988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 272.064147][ T5988] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.240192][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 272.253226][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 272.484220][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.496318][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.506663][ T5988] usb 2-1: Product: syz [ 272.511453][ T5988] usb 2-1: Manufacturer: syz [ 272.516926][ T5988] usb 2-1: SerialNumber: syz [ 272.517059][ T5961] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.532242][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.540602][ T5961] usb 4-1: Product: syz [ 272.547992][ T5961] usb 4-1: Manufacturer: syz [ 272.555152][ T5988] usb 2-1: config 0 descriptor?? [ 272.590343][ T5961] usb 4-1: SerialNumber: syz [ 272.600019][ T5988] usb 2-1: selecting invalid altsetting 0 [ 272.623845][ T5961] usb 4-1: config 0 descriptor?? [ 272.637528][ T5961] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.647811][ T5961] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 272.807675][ T5988] usb 2-1: USB disconnect, device number 38 [ 273.255703][ T5961] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 273.299208][ T5961] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 273.495085][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.533713][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.613287][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 274.216102][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 274.909469][ T5961] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 274.942678][ T5961] em28xx 4-1:0.0: No AC97 audio processor [ 275.211240][ T9317] netlink: 'syz.0.771': attribute type 21 has an invalid length. [ 275.219399][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 275.233296][ T9317] netlink: 'syz.0.771': attribute type 21 has an invalid length. [ 275.242251][ T9317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.771'. [ 275.252641][ T9317] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 275.576938][ T5961] usb 4-1: USB disconnect, device number 37 [ 275.584631][ T5961] em28xx 4-1:0.0: Disconnecting em28xx [ 275.669798][ T5961] em28xx 4-1:0.0: Freeing device [ 275.888355][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 276.250204][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 276.481991][ T9335] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 276.847863][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.863035][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.950206][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 277.244451][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.259614][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 277.270974][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.306502][ T43] usb 5-1: config 0 descriptor?? [ 277.321397][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.369715][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.806463][ T43] logitech-djreceiver 0003:046D:C71F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 278.356410][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 279.121220][ T5961] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 280.120272][ T5961] usb 5-1: device descriptor read/64, error -71 [ 280.410172][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 280.435403][ T9384] futex_wake_op: syz.3.783 tries to shift op by 32; fix this program [ 280.447885][ T5961] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 280.460436][ T5961] usb 5-1: device reset changed ep0 maxpacket size! [ 280.467634][ T43] usb 5-1: USB disconnect, device number 33 [ 280.600176][ T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 280.790209][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 280.797424][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 280.813677][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.868318][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.894982][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.947909][ T43] usb 5-1: Product: syz [ 280.957558][ T43] usb 5-1: Manufacturer: syz [ 280.971740][ T43] usb 5-1: SerialNumber: syz [ 281.239755][ T43] usb 5-1: config 0 descriptor?? [ 281.262746][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 281.293256][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 281.411891][ T9396] netlink: 'syz.1.790': attribute type 5 has an invalid length. [ 281.607256][ T9398] atomic_op ffff88806ba66998 conn xmit_atomic 0000000000000000 [ 281.864597][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 281.883862][ T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 282.116100][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.258802][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.490191][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 283.081054][ T43] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 283.112947][ T43] em28xx 5-1:0.0: No AC97 audio processor [ 283.594093][ T9432] binder: 9428:9432 ioctl c018620c 200000000000 returned -22 [ 283.947192][ T9438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.799'. [ 283.980362][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 284.110802][ T5949] usb 5-1: USB disconnect, device number 34 [ 284.140415][ T10] usb 3-1: device descriptor read/64, error -71 [ 284.160983][ T5949] em28xx 5-1:0.0: Disconnecting em28xx [ 284.168841][ T5949] em28xx 5-1:0.0: Freeing device [ 284.200401][ T9441] program syz.4.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.253478][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.802'. [ 284.290172][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 284.402721][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 284.450163][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 284.457028][ T9] usb 2-1: config 8 has an invalid interface number: 109 but max is 1 [ 284.472218][ T9] usb 2-1: config 8 has an invalid interface number: 255 but max is 1 [ 284.485836][ T9] usb 2-1: config 8 has no interface number 0 [ 284.498362][ T9450] FAULT_INJECTION: forcing a failure. [ 284.498362][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.540191][ T10] usb 3-1: device descriptor read/64, error -71 [ 284.584451][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 284.591004][ T9] usb 2-1: config 8 has no interface number 1 [ 284.597213][ T9] usb 2-1: config 8 interface 109 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 284.608872][ T9] usb 2-1: config 8 interface 255 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 284.619809][ T9] usb 2-1: config 8 interface 255 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024 [ 284.621942][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.4.803 Not tainted syzkaller #0 PREEMPT(full) [ 284.621967][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.621978][ T9450] Call Trace: [ 284.621986][ T9450] [ 284.621994][ T9450] dump_stack_lvl+0x189/0x250 [ 284.622020][ T9450] ? __pfx____ratelimit+0x10/0x10 [ 284.622044][ T9450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.622064][ T9450] ? __pfx__printk+0x10/0x10 [ 284.622089][ T9450] ? rcu_is_watching+0x15/0xb0 [ 284.622108][ T9450] should_fail_ex+0x414/0x560 [ 284.622132][ T9450] _copy_to_user+0x31/0xb0 [ 284.622152][ T9450] simple_read_from_buffer+0xe1/0x170 [ 284.622178][ T9450] proc_fail_nth_read+0x1b3/0x220 [ 284.622199][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.622219][ T9450] ? rw_verify_area+0x2a6/0x4d0 [ 284.622240][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.622259][ T9450] vfs_read+0x200/0xa30 [ 284.622280][ T9450] ? fdget_pos+0x247/0x320 [ 284.622296][ T9450] ? __pfx___mutex_lock+0x10/0x10 [ 284.622321][ T9450] ? __pfx_vfs_read+0x10/0x10 [ 284.622345][ T9450] ? __fget_files+0x3a0/0x420 [ 284.622369][ T9450] ? __fget_files+0x2a/0x420 [ 284.622396][ T9450] ksys_read+0x145/0x250 [ 284.622419][ T9450] ? __pfx_ksys_read+0x10/0x10 [ 284.622439][ T9450] ? rcu_is_watching+0x15/0xb0 [ 284.622457][ T9450] ? rcu_is_watching+0x15/0xb0 [ 284.622474][ T9450] do_syscall_64+0xfa/0x3b0 [ 284.622500][ T9450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.622517][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 284.622536][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.622553][ T9450] RIP: 0033:0x7fd04918d5fc [ 284.622568][ T9450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.622593][ T9450] RSP: 002b:00007fd049f7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.622614][ T9450] RAX: ffffffffffffffda RBX: 00007fd0493b5fa0 RCX: 00007fd04918d5fc [ 284.622628][ T9450] RDX: 000000000000000f RSI: 00007fd049f7e0a0 RDI: 0000000000000004 [ 284.622639][ T9450] RBP: 00007fd049f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.622650][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.622661][ T9450] R13: 00007fd0493b6038 R14: 00007fd0493b5fa0 R15: 00007fd0494dfa28 [ 284.622679][ T9450] [ 284.872310][ T10] usb usb3-port1: attempt power cycle [ 284.887001][ T9] usb 2-1: config 8 interface 255 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 285.013469][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 285.177255][ T9] usb 2-1: config 8 interface 255 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 285.208239][ T9] usb 2-1: config 8 interface 109 has no altsetting 0 [ 285.220252][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 285.232304][ T9455] netlink: 'syz.4.805': attribute type 12 has an invalid length. [ 285.240503][ T9455] netlink: 'syz.4.805': attribute type 29 has an invalid length. [ 285.248225][ T9455] netlink: 148 bytes leftover after parsing attributes in process `syz.4.805'. [ 285.258400][ T9455] netlink: 59 bytes leftover after parsing attributes in process `syz.4.805'. [ 285.258957][ T10] usb 3-1: device descriptor read/8, error -71 [ 285.283863][ T9] usb 2-1: config 8 interface 255 has no altsetting 0 [ 285.284194][ T9455] Lens A: ================= START STATUS ================= [ 285.315863][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 285.337330][ T9455] Lens A: Focus, Absolute: 0 [ 285.342231][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.387422][ T9455] Lens A: ================== END STATUS ================== [ 285.395580][ T9] usb 2-1: Product: syz [ 285.399918][ T9] usb 2-1: Manufacturer: syz [ 285.408343][ T9] usb 2-1: SerialNumber: syz [ 285.532401][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 285.580986][ T10] usb 3-1: device descriptor read/8, error -71 [ 286.150885][ T10] usb usb3-port1: unable to enumerate USB device [ 286.662274][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 287.487106][ T9] ssu100 2-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 287.501273][ T9] ssu100 2-1:8.109: probe with driver ssu100 failed with error -71 [ 287.511904][ T9] ssu100 2-1:8.255: Quatech SSU-100 USB to Serial Driver converter detected [ 287.522579][ T9] ssu100 2-1:8.255: probe with driver ssu100 failed with error -71 [ 287.535462][ T9] usb 2-1: USB disconnect, device number 39 [ 287.573034][ T9468] netlink: 'syz.0.808': attribute type 27 has an invalid length. [ 287.586749][ T9469] netlink: 'syz.0.808': attribute type 27 has an invalid length. [ 287.694604][ T9468] bridge0: port 3(macsec0) entered disabled state [ 287.701204][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.708449][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.721299][ T30] audit: type=1326 audit(1755705498.465:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.744200][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.760537][ T5961] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 287.791809][ T30] audit: type=1326 audit(1755705498.465:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.831030][ T30] audit: type=1326 audit(1755705498.465:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.873225][ T30] audit: type=1326 audit(1755705498.465:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.885925][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.896972][ T30] audit: type=1326 audit(1755705498.465:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.926314][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.935255][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.942901][ T30] audit: type=1326 audit(1755705498.465:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 287.987029][ T9468] veth1_macvtap: left allmulticast mode [ 287.995432][ T30] audit: type=1326 audit(1755705498.465:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 288.003593][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 288.032743][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 288.038314][ T30] audit: type=1326 audit(1755705498.465:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 288.069973][ T9468] macsec1: left promiscuous mode [ 288.077929][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 288.092453][ T5988] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 288.105136][ T5961] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 288.117883][ T9468] ip6erspan0: left promiscuous mode [ 288.125991][ T5961] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 288.138118][ T9468] erspan1: left promiscuous mode [ 288.144818][ T9468] erspan1: left allmulticast mode [ 288.151943][ T5961] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 288.162995][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.176379][ T5961] usb 5-1: Product: syz [ 288.180467][ T9] usb 2-1: device descriptor read/64, error -71 [ 288.186624][ T5961] usb 5-1: Manufacturer: syz [ 288.197037][ T5961] usb 5-1: SerialNumber: syz [ 288.204206][ T5961] usb 5-1: config 0 descriptor?? [ 288.209886][ T9464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.217681][ T9470] bridge0: left promiscuous mode [ 288.228698][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.242772][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.253293][ T9470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.269075][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 288.276460][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.289689][ T2986] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.299012][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.310615][ T3592] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.321484][ T5988] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.336438][ T5961] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 288.337055][ T3592] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.343216][ T5961] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 288.355325][ T3592] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.358194][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.370309][ T5949] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.375582][ T5961] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 288.390257][ T5988] usb 3-1: Product: syz [ 288.394571][ T5988] usb 3-1: Manufacturer: syz [ 288.399285][ T5988] usb 3-1: SerialNumber: syz [ 288.405450][ T5961] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 288.413548][ T5988] usb 3-1: config 0 descriptor?? [ 288.419134][ T5961] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 288.430363][ T9464] netlink: 'syz.4.807': attribute type 5 has an invalid length. [ 288.441392][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 288.451995][ T5988] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.462610][ T5988] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 288.530300][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 288.537117][ T5949] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.568173][ T5949] usb 4-1: config 0 has no interface number 0 [ 288.609491][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.612199][ T9] usb 2-1: device descriptor read/64, error -71 [ 288.628882][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.638000][ T5949] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 288.690291][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.706418][ T5949] usb 4-1: Product: syz [ 288.711159][ T5949] usb 4-1: Manufacturer: syz [ 288.716108][ T5949] usb 4-1: SerialNumber: syz [ 288.724513][ T5949] usb 4-1: config 0 descriptor?? [ 288.730804][ T9] usb usb2-port1: attempt power cycle [ 288.747525][ T5949] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 289.070587][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 289.080289][ T5988] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 289.087032][ T5988] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 289.150779][ T9] usb 2-1: device descriptor read/8, error -71 [ 289.159790][ T9483] netlink: zone id is out of range [ 289.166042][ T9483] netlink: zone id is out of range [ 289.173125][ T9483] netlink: zone id is out of range [ 289.180443][ T9483] netlink: zone id is out of range [ 289.186131][ T9483] netlink: zone id is out of range [ 289.194927][ T9483] netlink: zone id is out of range [ 289.200715][ T9483] netlink: zone id is out of range [ 289.206267][ T9483] netlink: zone id is out of range [ 289.216398][ T9483] netlink: zone id is out of range [ 289.332321][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.343730][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.390620][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 289.430789][ T9] usb 2-1: device descriptor read/8, error -71 [ 289.460370][ T5949] gspca_spca1528: reg_w err -110 [ 289.480741][ T5949] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 289.491665][ T848] usb 5-1: USB disconnect, device number 35 [ 289.498318][ T848] mcba_usb 5-1:0.0 can0: device disconnected [ 289.540493][ T9] usb usb2-port1: unable to enumerate USB device [ 289.571771][ T9496] batadv0: entered promiscuous mode [ 289.577418][ T9496] vlan2: entered promiscuous mode [ 289.727029][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 289.850857][ T9499] netlink: 'syz.4.817': attribute type 12 has an invalid length. [ 289.859335][ T9499] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 289.868628][ T9499] netlink: 148 bytes leftover after parsing attributes in process `syz.4.817'. [ 289.878871][ T9499] netlink: 59 bytes leftover after parsing attributes in process `syz.4.817'. [ 289.892822][ T9499] Lens A: ================= START STATUS ================= [ 289.900709][ T9499] Lens A: Focus, Absolute: 0 [ 289.905529][ T9499] Lens A: ================== END STATUS ================== [ 290.170448][ T5988] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 290.177815][ T5988] em28xx 3-1:0.0: No AC97 audio processor [ 290.530154][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 290.680168][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 290.687397][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 290.696112][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 290.704861][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 290.714220][ T10] usb 5-1: config 1 has no interface number 0 [ 290.720427][ T10] usb 5-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 290.732230][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 290.742043][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 290.755767][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 290.765022][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.779324][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 290.882552][ T9] usb 4-1: USB disconnect, device number 38 [ 290.898020][ T5988] usb 3-1: USB disconnect, device number 41 [ 290.956212][ T5988] em28xx 3-1:0.0: Disconnecting em28xx [ 290.982093][ T10] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 290.991632][ T5988] em28xx 3-1:0.0: Freeing device [ 291.033207][ T10] snd_usb_pod 5-1:1.1: invalid control EP [ 291.093887][ T10] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 291.120498][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 291.134276][ T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 291.271349][ T5862] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 292.053905][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.126115][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.452649][ T43] usb 5-1: USB disconnect, device number 36 [ 292.496584][ T9528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.824'. [ 292.541332][ T9530] atomic_op ffff8880563ff198 conn xmit_atomic 0000000000000000 [ 292.771804][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 292.860902][ T5988] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 293.160701][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 293.167854][ T5988] usb 3-1: config 8 has an invalid interface number: 109 but max is 1 [ 293.187346][ T5988] usb 3-1: config 8 has an invalid interface number: 255 but max is 1 [ 293.225926][ T5988] usb 3-1: config 8 has no interface number 0 [ 293.289633][ T5988] usb 3-1: config 8 has no interface number 1 [ 293.309150][ T5988] usb 3-1: config 8 interface 109 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 293.310267][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 293.344252][ T5988] usb 3-1: config 8 interface 255 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 293.369333][ T5988] usb 3-1: config 8 interface 255 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024 [ 293.397711][ T5988] usb 3-1: config 8 interface 255 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 293.411750][ T5988] usb 3-1: config 8 interface 255 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 293.422403][ T5988] usb 3-1: config 8 interface 109 has no altsetting 0 [ 293.429536][ T5988] usb 3-1: config 8 interface 255 has no altsetting 0 [ 293.443040][ T9540] netlink: 'syz.1.828': attribute type 12 has an invalid length. [ 293.456815][ T9540] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 293.470315][ T9540] netlink: 148 bytes leftover after parsing attributes in process `syz.1.828'. [ 293.484744][ T9540] netlink: 59 bytes leftover after parsing attributes in process `syz.1.828'. [ 293.496533][ T5988] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 293.506338][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.515116][ T5988] usb 3-1: Product: syz [ 293.519725][ T5988] usb 3-1: Manufacturer: syz [ 293.524798][ T5988] usb 3-1: SerialNumber: syz [ 293.879403][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.892418][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.108330][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.117736][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.295278][ T5988] ssu100 3-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 295.318804][ T5988] ssu100 3-1:8.109: probe with driver ssu100 failed with error -71 [ 295.336164][ T5988] ssu100 3-1:8.255: Quatech SSU-100 USB to Serial Driver converter detected [ 295.386179][ T5988] ssu100 3-1:8.255: probe with driver ssu100 failed with error -71 [ 295.418909][ T5988] usb 3-1: USB disconnect, device number 42 [ 295.740172][ T5988] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 295.890278][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 295.897771][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.909482][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.919494][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.934178][ T5988] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 295.943375][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.952818][ T5988] usb 3-1: config 0 descriptor?? [ 296.261371][ T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 296.389124][ T5988] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 296.423256][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.432116][ T43] usb 4-1: config 1 has an invalid interface number: 43 but max is 1 [ 296.441536][ T43] usb 4-1: config 1 has no interface number 1 [ 296.447702][ T43] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.461227][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 296.469935][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 296.479812][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.488139][ T43] usb 4-1: Product: syz [ 296.492380][ T43] usb 4-1: Manufacturer: syz [ 296.497000][ T43] usb 4-1: SerialNumber: syz [ 296.715522][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.730565][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.757797][ T43] smsusb:smsusb_probe: board id=8, interface number 0 [ 296.773504][ T43] smsusb:smsusb_probe: board id=8, interface number 43 [ 296.784161][ T43] usb 4-1: USB disconnect, device number 39 [ 296.794049][ T9592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.839'. [ 297.020293][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 297.156580][ T9602] tipc: Started in network mode [ 297.162415][ T9602] tipc: Node identity 9a717710526, cluster identity 4711 [ 297.169882][ T9602] tipc: Enabled bearer , priority 0 [ 297.179672][ T9602] syzkaller0: entered promiscuous mode [ 297.185371][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 297.190914][ T9602] syzkaller0: entered allmulticast mode [ 297.202179][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 297.212917][ T10] usb 5-1: config 0 has no interface number 0 [ 297.222493][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 297.235960][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 297.244611][ T10] usb 5-1: Product: syz [ 297.248977][ T10] usb 5-1: SerialNumber: syz [ 297.256764][ T10] usb 5-1: config 0 descriptor?? [ 297.266547][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 297.279038][ T9602] tipc: Resetting bearer [ 297.304489][ T9601] tipc: Resetting bearer [ 297.326296][ T9601] tipc: Disabling bearer [ 297.494576][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.502130][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.509348][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.516635][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.523784][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.530898][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.538171][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.545439][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.552554][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.559725][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.578632][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 297.594403][ T9] usb 5-1: USB disconnect, device number 37 [ 297.606059][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 297.832796][ T848] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 298.158661][ T9616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.849'. [ 298.173459][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.184177][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.517561][ T9628] block device autoloading is deprecated and will be removed. [ 298.528406][ T9628] syz.1.852: attempt to access beyond end of device [ 298.528406][ T9628] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 298.821723][ T5988] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 299.195831][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.206557][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 299.218535][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 299.400191][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 299.411182][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 299.435563][ T5988] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 299.444699][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 299.453383][ T5988] usb 4-1: Product: syz [ 299.457614][ T5988] usb 4-1: Manufacturer: syz [ 299.462753][ T5988] usb 4-1: SerialNumber: syz [ 299.469503][ T5988] usb 4-1: config 0 descriptor?? [ 299.551330][ T10] usb 3-1: USB disconnect, device number 43 [ 299.584859][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 299.712281][ T9622] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 299.948344][ T5988] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 300.039416][ T5988] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 300.067415][ T5988] usb 4-1: USB disconnect, device number 40 [ 300.260880][ T9648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.858'. [ 300.363790][ T9652] net_ratelimit: 20 callbacks suppressed [ 300.363805][ T9652] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 300.570522][ T9659] netlink: 'syz.2.859': attribute type 21 has an invalid length. [ 300.578871][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 300.590272][ T9659] netlink: 'syz.2.859': attribute type 21 has an invalid length. [ 300.598153][ T9659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.859'. [ 300.607224][ T9659] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 301.050172][ T5988] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 301.354326][ T5988] usb 4-1: Using ep0 maxpacket: 8 [ 301.409228][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 301.500194][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 301.522120][ T5988] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 301.531553][ T5988] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 301.540108][ T5988] usb 4-1: Product: syz [ 301.547209][ T5988] usb 4-1: Manufacturer: syz [ 301.554653][ T5988] usb 4-1: SerialNumber: syz [ 301.631859][ T5988] usb 4-1: config 0 descriptor?? [ 301.639880][ T5988] smsusb:smsusb_probe: board id=2, interface number 0 [ 301.670803][ T5988] smsusb:smsusb_probe: Device initialized with return code -19 [ 301.908152][ T5988] usb 4-1: USB disconnect, device number 41 [ 302.278090][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 302.360357][ T5988] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 302.512757][ T5988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.513187][ T5988] usb 3-1: not running at top speed; connect to a high speed hub [ 302.514015][ T5988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.514037][ T5988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.516112][ T5988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.516133][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.516145][ T5988] usb 3-1: Product: syz [ 302.516154][ T5988] usb 3-1: Manufacturer: syz [ 302.516163][ T5988] usb 3-1: SerialNumber: syz [ 302.829854][ T5988] usb 3-1: 0:2 : does not exist [ 302.835526][ T5988] usb 3-1: unit 4 not found! [ 302.843734][ T5988] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 302.892193][ T5988] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 302.930235][ T5988] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 302.948600][ T5988] usb 3-1: USB disconnect, device number 44 [ 304.029836][ T9722] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 304.037792][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 304.047446][ T9722] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 304.055512][ T9722] netlink: 132 bytes leftover after parsing attributes in process `syz.2.876'. [ 304.064814][ T9722] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 304.286118][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'. [ 304.731166][ T9737] program syz.0.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.974056][ T9741] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 304.983538][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 305.007323][ T9741] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 305.035284][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.878'. [ 305.110321][ C1] sd 0:0:1:0: [sda] tag#3396 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 305.120978][ C1] sd 0:0:1:0: [sda] tag#3396 CDB: Write(6) 0a 00 00 00 b1 d6 [ 305.211264][ T9741] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 305.230503][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 305.412971][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 306.010467][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 306.193683][ T9759] netlink: 52 bytes leftover after parsing attributes in process `syz.1.887'. [ 306.380224][ T5988] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 306.542582][ T5988] usb 3-1: config 49 has an invalid interface number: 223 but max is 0 [ 306.553732][ T5988] usb 3-1: config 49 has no interface number 0 [ 306.561708][ T5988] usb 3-1: config 49 interface 223 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 306.591370][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.600397][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.612001][ T9771] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 306.641795][ T5988] usb 3-1: config 49 interface 223 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 306.690249][ T5988] usb 3-1: config 49 interface 223 has no altsetting 0 [ 306.743349][ T5988] usb 3-1: New USB device found, idVendor=a168, idProduct=0615, bcdDevice=cb.9c [ 306.756722][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.782164][ T5988] usb 3-1: Product: Ⰺ [ 306.788739][ T5988] usb 3-1: Manufacturer: ␉ [ 306.901952][ T9774] netlink: 'syz.4.893': attribute type 12 has an invalid length. [ 306.933105][ T9774] netlink: 'syz.4.893': attribute type 29 has an invalid length. [ 306.950851][ T9774] Lens A: ================= START STATUS ================= [ 306.980229][ T9774] Lens A: Focus, Absolute: [ 306.980244][ T5988] usb 3-1: SerialNumber: syz [ 306.990736][ T9774] 0 [ 306.993356][ T9774] Lens A: ================== END STATUS ================== [ 307.220509][ T5988] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0615 [ 307.256809][ T5988] gspca_sn9c20x: Write register 1000 failed -71 [ 307.279242][ T5988] gspca_sn9c20x: Device initialization failed [ 307.342279][ T5988] gspca_sn9c20x 3-1:49.223: probe with driver gspca_sn9c20x failed with error -71 [ 307.383591][ T5988] usb 3-1: USB disconnect, device number 45 [ 308.080396][ T848] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 308.188053][ T9798] program syz.3.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.230913][ T848] usb 5-1: device descriptor read/64, error -71 [ 308.265944][ T9800] __nla_validate_parse: 4 callbacks suppressed [ 308.265959][ T9800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.898'. [ 308.488539][ T848] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 308.489398][ C1] sd 0:0:1:0: [sda] tag#3406 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 308.506701][ C1] sd 0:0:1:0: [sda] tag#3406 CDB: Write(6) 0a 00 00 00 b1 d6 [ 308.540157][ T5961] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 308.640185][ T848] usb 5-1: device descriptor read/64, error -71 [ 308.720141][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 308.730271][ T5961] usb 2-1: config 8 has an invalid interface number: 109 but max is 1 [ 308.738561][ T5961] usb 2-1: config 8 has an invalid interface number: 255 but max is 1 [ 308.748801][ T5961] usb 2-1: config 8 has no interface number 0 [ 308.758167][ T5961] usb 2-1: config 8 has no interface number 1 [ 308.766836][ T5961] usb 2-1: config 8 interface 109 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 308.770520][ T848] usb usb5-port1: attempt power cycle [ 308.786217][ T5961] usb 2-1: config 8 interface 255 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 308.797349][ T5961] usb 2-1: config 8 interface 255 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024 [ 308.808346][ T5961] usb 2-1: config 8 interface 255 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 308.819072][ T5961] usb 2-1: config 8 interface 255 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 308.829226][ T5961] usb 2-1: config 8 interface 109 has no altsetting 0 [ 308.836847][ T5961] usb 2-1: config 8 interface 255 has no altsetting 0 [ 308.852535][ T5961] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 308.863085][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.871986][ T5961] usb 2-1: Product: syz [ 308.876941][ T5961] usb 2-1: Manufacturer: syz [ 308.881873][ T5961] usb 2-1: SerialNumber: syz [ 308.985123][ T9814] macvlan2: entered allmulticast mode [ 308.996272][ T9814] veth1_vlan: entered allmulticast mode [ 309.013243][ T9814] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 309.080238][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 309.130163][ T848] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 309.194929][ T848] usb 5-1: device descriptor read/8, error -71 [ 309.296766][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.354519][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.366413][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 309.405395][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.478312][ T848] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 309.540291][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.549667][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.585353][ T848] usb 5-1: device descriptor read/8, error -71 [ 309.622689][ T10] usb 4-1: config 0 descriptor?? [ 309.720493][ T848] usb usb5-port1: unable to enumerate USB device [ 309.863274][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 310.034871][ T10] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 310.067585][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 310.546695][ T30] audit: type=1326 audit(1755705521.275:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 310.688544][ T9841] netlink: 'syz.3.902': attribute type 12 has an invalid length. [ 310.749599][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 310.758809][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 310.849607][ T30] audit: type=1326 audit(1755705521.275:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 310.957783][ T30] audit: type=1326 audit(1755705521.275:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 310.991162][ T30] audit: type=1326 audit(1755705521.275:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.020347][ T30] audit: type=1326 audit(1755705521.285:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.095706][ T30] audit: type=1326 audit(1755705521.285:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.150419][ T30] audit: type=1326 audit(1755705521.285:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.238638][ T30] audit: type=1326 audit(1755705521.285:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.270275][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 311.284877][ T5961] ssu100 2-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 311.294684][ T30] audit: type=1326 audit(1755705521.305:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.317521][ T5961] ssu100 2-1:8.109: probe with driver ssu100 failed with error -71 [ 311.347884][ T5961] ssu100 2-1:8.255: Quatech SSU-100 USB to Serial Driver converter detected [ 311.364736][ T30] audit: type=1326 audit(1755705521.315:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 311.395448][ T5961] ssu100 2-1:8.255: probe with driver ssu100 failed with error -71 [ 311.435989][ T5961] usb 2-1: USB disconnect, device number 44 [ 311.452724][ T9852] program syz.4.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.470792][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 311.477373][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 311.487171][ T5988] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 311.500946][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 311.526758][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 311.530489][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 311.552131][ T43] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 311.566677][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.575070][ T43] usb 3-1: Product: syz [ 311.579857][ T43] usb 3-1: Manufacturer: syz [ 311.586603][ T43] usb 3-1: SerialNumber: syz [ 311.594078][ T43] usb 3-1: config 0 descriptor?? [ 311.599821][ T9847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.618186][ T43] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 311.624678][ T5988] usb 4-1: device descriptor read/64, error -32 [ 311.631833][ T43] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 311.639389][ T43] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 311.645391][ T43] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 311.652451][ T43] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 311.701259][ C1] sd 0:0:1:0: [sda] tag#3413 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 311.711839][ C1] sd 0:0:1:0: [sda] tag#3413 CDB: Write(6) 0a 00 00 00 b1 d6 [ 311.848026][ T9845] netlink: 'syz.2.913': attribute type 5 has an invalid length. [ 311.895324][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.906908][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.925603][ T9863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.987415][ T5988] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 312.072386][ T9859] bridge0: left promiscuous mode [ 312.097401][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.108742][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.128955][ T9859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.150536][ T5988] usb 4-1: device descriptor read/64, error -32 [ 312.181272][ T5961] usb 3-1: USB disconnect, device number 46 [ 312.187951][ T5961] mcba_usb 3-1:0.0 can0: device disconnected [ 312.410283][ T5988] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 312.431233][ T5988] usb 4-1: device descriptor read/8, error -32 [ 312.702089][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 312.762307][ T848] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 312.930200][ T848] usb 5-1: Using ep0 maxpacket: 32 [ 313.002969][ T848] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 313.014755][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 313.040319][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 313.062516][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 313.123788][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 313.125524][ T5988] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 313.183663][ T848] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 313.328866][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.340153][ T848] usb 5-1: Product: syz [ 313.344665][ T848] usb 5-1: Manufacturer: syz [ 313.352845][ T5988] usb 4-1: device reset changed ep0 maxpacket size! [ 313.352876][ T848] usb 5-1: SerialNumber: syz [ 313.360241][ T5923] usb 4-1: USB disconnect, device number 42 [ 313.419056][ T848] usb 5-1: config 0 descriptor?? [ 313.535209][ T9878] netlink: 'syz.2.920': attribute type 13 has an invalid length. [ 313.623059][ T5923] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 313.663772][ T9878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.786654][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 313.825339][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 313.832067][ T5923] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 313.841796][ T5923] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 313.853416][ T5923] usb 4-1: config 162 has no interface number 0 [ 313.863366][ T5923] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 313.875149][ T5923] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.886837][ T5923] usb 4-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.901389][ T5923] usb 4-1: config 162 interface 166 has no altsetting 0 [ 313.916063][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 313.933919][ T848] input input17: Device does not respond to id packet M [ 313.942318][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.951432][ T5923] usb 4-1: Product: syz [ 313.956191][ T5923] usb 4-1: Manufacturer: syz [ 313.962261][ T5923] usb 4-1: SerialNumber: syz [ 314.135404][ T848] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 314.143219][ T848] input input17: Device does not respond to id packet P [ 314.151386][ T848] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 314.157620][ T848] input input17: Device does not respond to id packet B [ 314.166699][ T848] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 314.173160][ T848] input input17: Device does not respond to id packet N [ 314.761197][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.786371][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.925696][ T848] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 315.007886][ T848] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 315.024101][ T848] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 315.034370][ T848] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 315.086651][ T848] usb 5-1: USB disconnect, device number 42 [ 315.098769][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.138603][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.383902][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 315.678695][ T5923] appledisplay 4-1:162.166: Could not find int-in endpoint [ 315.777925][ T5923] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 316.038813][ T9917] program syz.4.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.061314][ T5923] usb 4-1: USB disconnect, device number 43 [ 316.456537][ C1] sd 0:0:1:0: [sda] tag#3423 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 316.467273][ C1] sd 0:0:1:0: [sda] tag#3423 CDB: Write(6) 0a 00 00 00 b1 d6 [ 316.739019][ T848] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 316.790205][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 317.000217][ T848] usb 3-1: Using ep0 maxpacket: 16 [ 317.005430][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 317.014244][ T848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 317.026492][ T848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 317.041286][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 317.051917][ T848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 317.063356][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 317.092670][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 317.106440][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 317.119057][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.129316][ T848] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 317.145555][ T848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.155591][ T10] usb 4-1: Product: syz [ 317.161344][ T10] usb 4-1: Manufacturer: syz [ 317.169061][ T848] usb 3-1: Product: syz [ 317.174380][ T10] usb 4-1: SerialNumber: syz [ 317.179122][ T848] usb 3-1: Manufacturer: syz [ 317.187557][ T10] usb 4-1: config 0 descriptor?? [ 317.193348][ T848] usb 3-1: SerialNumber: syz [ 317.199033][ T9925] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 317.207890][ T848] usb 3-1: config 0 descriptor?? [ 317.214361][ T9924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 317.239521][ T848] mcba_usb 3-1:0.0 can1: failed tx_urb -90 [ 317.248560][ T10] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 317.254654][ T848] mcba_usb 3-1:0.0 can1: Failed to send cmd (169) [ 317.261276][ T10] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 317.268276][ T848] mcba_usb 3-1:0.0 can1: failed tx_urb -90 [ 317.274539][ T10] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 317.280443][ T848] mcba_usb 3-1:0.0 can1: Failed to send cmd (169) [ 317.287297][ T10] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 317.293904][ T848] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 317.301059][ T10] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 317.380203][ T5923] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 317.423574][ T9920] netlink: 'syz.3.930': attribute type 5 has an invalid length. [ 317.452868][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459444][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.475424][ T9923] netlink: 'syz.2.931': attribute type 5 has an invalid length. [ 317.487838][ T5988] usb 3-1: USB disconnect, device number 47 [ 317.494609][ T5988] mcba_usb 3-1:0.0 can1: device disconnected [ 317.530377][ T5923] usb 5-1: device descriptor read/64, error -71 [ 317.790161][ T5923] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 317.926446][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.940077][ T5923] usb 5-1: device descriptor read/64, error -71 [ 317.947315][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.050364][ T5923] usb usb5-port1: attempt power cycle [ 318.390141][ T5923] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 318.421135][ T5923] usb 5-1: device descriptor read/8, error -71 [ 318.660165][ T5923] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 318.692583][ T5923] usb 5-1: device descriptor read/8, error -71 [ 318.714064][ T9945] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 318.813721][ T5923] usb usb5-port1: unable to enumerate USB device [ 319.180314][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 319.373406][ T848] usb 4-1: USB disconnect, device number 44 [ 319.387739][ T848] mcba_usb 4-1:0.0 can0: device disconnected [ 319.400308][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 319.407352][ T5923] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 319.417681][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.434068][ T5923] usb 3-1: config 0 descriptor?? [ 319.673562][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 319.682218][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 319.709293][ T5923] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 319.718693][ T5923] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 320.057865][ T9963] veth1_vlan: left allmulticast mode [ 320.063813][ T9963] macvlan2: left allmulticast mode [ 320.570356][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 320.733880][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.749169][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.781924][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 320.849475][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.005495][ T9] usb 5-1: config 0 descriptor?? [ 321.024091][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 321.525084][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.550727][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.635296][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 321.660413][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.675743][ T9] usb 5-1: USB disconnect, device number 47 [ 322.034548][T10007] netlink: 'syz.4.954': attribute type 21 has an invalid length. [ 322.042817][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 322.054499][T10007] netlink: 'syz.4.954': attribute type 21 has an invalid length. [ 322.062743][T10007] netlink: 132 bytes leftover after parsing attributes in process `syz.4.954'. [ 322.075804][T10007] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 322.211719][T10011] netlink: 'syz.1.955': attribute type 21 has an invalid length. [ 322.260938][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 322.315175][T10015] netlink: 'syz.1.955': attribute type 21 has an invalid length. [ 322.325174][T10015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.955'. [ 322.335601][T10015] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 323.442060][T10032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.550174][ T848] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 323.627223][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 323.627244][ T30] audit: type=1326 audit(1755705534.365:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073af8ebe9 code=0x7ffc0000 [ 323.673254][ T30] audit: type=1326 audit(1755705534.365:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f073af8ebe9 code=0x7ffc0000 [ 323.750862][ T848] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 323.762036][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.771454][ T30] audit: type=1326 audit(1755705534.365:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073af8ebe9 code=0x7ffc0000 [ 323.983319][ T848] usb 2-1: config 0 descriptor?? [ 323.989323][ T30] audit: type=1326 audit(1755705534.365:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f073af8ebe9 code=0x7ffc0000 [ 324.016015][T10042] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 324.052449][ T848] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 324.074393][ T30] audit: type=1326 audit(1755705534.365:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073af8ebe9 code=0x7ffc0000 [ 324.494230][ T848] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 324.895319][ T848] gspca_cpia1: usb_control_msg 02, error -32 [ 324.940413][ T848] gspca_cpia1: usb_control_msg 02, error -71 [ 324.976837][ T848] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 325.055019][ T848] usb 2-1: USB disconnect, device number 45 [ 325.233423][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.969'. [ 325.253189][T10081] unsupported nlmsg_type 40 [ 325.474692][T10091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.233049][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.977'. [ 327.389556][T10133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.689021][T10141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.716987][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 327.812479][T10141] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 328.303510][ T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 328.393340][ T848] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 328.456406][ T848] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 328.492415][ T848] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 328.501380][T10156] netlink: 140 bytes leftover after parsing attributes in process `syz.0.988'. [ 328.511904][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 328.525651][ T848] hid-generic 0000:0004:0000.000C: hidraw0: HID v0.05 Device [syz0] on syz0 [ 328.542162][ T9] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 328.578872][ T9] usb 2-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.648567][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 328.659076][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.668862][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.677217][ T9] usb 2-1: Product: 蒔⓮턨缃ףּ语阑賣蘏װፊ摬擞嫰鍞䩹鰰宏 [ 328.687979][ T9] usb 2-1: Manufacturer: С [ 328.692926][ T9] usb 2-1: SerialNumber: ࠾ [ 328.700959][T10158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.200286][T10182] netlink: 'syz.0.990': attribute type 21 has an invalid length. [ 329.208171][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 329.223393][T10182] netlink: 'syz.0.990': attribute type 21 has an invalid length. [ 329.239069][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.990'. [ 329.248438][T10182] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 331.390917][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 331.423164][ T9] usb 2-1: USB disconnect, device number 46 [ 331.876269][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 332.242806][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 332.850958][T10254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.993'. [ 332.910222][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.993'. [ 333.390323][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1008'. [ 333.426114][T10266] program syz.2.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.494750][T10268] misc userio: Can't change port type on an already running userio instance [ 333.626553][T10273] netlink: 'syz.4.1009': attribute type 12 has an invalid length. [ 333.644797][T10273] netlink: 'syz.4.1009': attribute type 29 has an invalid length. [ 333.660488][ C1] sd 0:0:1:0: [sda] tag#3413 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 333.671157][ C1] sd 0:0:1:0: [sda] tag#3413 CDB: Write(6) 0a 00 00 00 b1 d6 [ 333.688009][T10273] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1009'. [ 333.697927][T10273] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1009'. [ 333.762016][T10277] program syz.1.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.869921][T10300] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.600933][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 335.770028][T10306] sctp: [Deprecated]: syz.4.1019 (pid 10306) Use of int in max_burst socket option. [ 335.770028][T10306] Use struct sctp_assoc_value instead [ 335.792231][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.808506][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 335.850169][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 335.903931][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.022533][ T9] usb 4-1: config 0 descriptor?? [ 336.035642][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 336.043620][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 336.054646][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 336.073367][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 336.089144][ T9] usb 4-1: media controller created [ 336.124001][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.197143][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 336.205254][T10316] atomic_op ffff88806b6aa998 conn xmit_atomic 0000000000000000 [ 336.214022][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 336.274347][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 336.293542][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 336.302251][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 336.470734][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 336.476967][ T9] dvb-usb: error while querying for an remote control event. [ 336.640419][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 336.679465][ T9] dvb-usb: error while querying for an remote control event. [ 336.900156][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 336.928765][ T9] dvb-usb: error while querying for an remote control event. [ 337.015241][ T9] usb 4-1: USB disconnect, device number 45 [ 337.063677][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 337.065729][T10319] @: renamed from vlan0 [ 337.193022][T10327] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 337.206884][T10327] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 337.246852][T10327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.435235][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.445792][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.500446][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 337.660135][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 337.684418][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 337.695973][ T10] usb 2-1: config 0 has no interface number 0 [ 337.753805][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 337.764974][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.774881][ T10] usb 2-1: Product: syz [ 337.779078][ T10] usb 2-1: Manufacturer: syz [ 337.799253][ T10] usb 2-1: SerialNumber: syz [ 337.816324][ T10] usb 2-1: config 0 descriptor?? [ 337.855895][ T10] smsc95xx v2.0.0 [ 337.944312][T10340] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 338.198320][ T30] audit: type=1400 audit(1755705548.935:1636): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10342 comm="syz.0.1029" [ 339.240270][ T5961] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 339.373892][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 339.387866][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 339.402879][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 339.413320][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.417194][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 339.438501][ T10] usb 2-1: USB disconnect, device number 47 [ 339.444452][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.455044][ T5961] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 339.465618][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.474819][ T5961] usb 5-1: Product: syz [ 339.479004][ T5961] usb 5-1: Manufacturer: syz [ 339.483893][ T5961] usb 5-1: SerialNumber: syz [ 339.503404][ T5961] usb 5-1: config 0 descriptor?? [ 339.520798][ T5961] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 339.532053][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.542392][ T5961] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 339.553450][ T5961] usb 5-1: media controller created [ 339.569163][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.622168][ T5961] DVB: Unable to find symbol tda10046_attach() [ 339.628458][ T5961] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 339.637596][ T5961] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 340.353875][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 340.714832][ T5862] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 340.723065][ T5862] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 341.127045][ T5961] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 341.153281][ T5961] usb 5-1: USB disconnect, device number 48 [ 341.433680][T10399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 341.465519][T10390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 341.482076][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 341.486937][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 341.650136][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 341.683452][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.697665][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.713017][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 341.722484][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.736186][ T10] usb 2-1: config 0 descriptor?? [ 341.955558][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.964517][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.110167][ T5961] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 342.236590][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 342.243878][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 342.256582][ T10] usb 2-1: USB disconnect, device number 48 [ 342.270458][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 342.281185][ T5961] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.294789][ T5961] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.305725][ T5961] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 342.322507][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.329557][ T5961] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 342.339042][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.354406][ T5961] usb 5-1: config 0 descriptor?? [ 342.361850][ T43] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 342.402567][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.412572][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.423050][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.432238][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.465628][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 342.477736][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.487802][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.522507][ T43] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 342.531327][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.541606][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.551579][ T43] usb 4-1: config 1 has no interface number 0 [ 342.557903][ T43] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.569515][ T43] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.583179][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.592623][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.600864][ T43] usb 4-1: Product: syz [ 342.605188][ T43] usb 4-1: Manufacturer: syz [ 342.609797][ T43] usb 4-1: SerialNumber: syz [ 342.617388][ T43] cdc_wdm 4-1:1.128: skipping garbage [ 342.624350][ T43] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 342.630898][ T43] cdc_wdm 4-1:1.128: Unknown control protocol [ 342.784754][ T5961] hid (null): unknown global tag 0xd [ 342.791405][ T5961] hid (null): report_id 3474074428 is invalid [ 342.802958][ T5961] hid (null): unknown global tag 0xe [ 342.965404][ T5961] usb 4-1: USB disconnect, device number 46 [ 342.989708][T10438] program syz.1.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.026665][ T9] usb 5-1: USB disconnect, device number 49 [ 343.076140][T10440] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1055'. [ 343.086850][T10440] netlink: 'syz.0.1055': attribute type 3 has an invalid length. [ 343.096189][T10440] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1055'. [ 343.210346][ C1] sd 0:0:1:0: [sda] tag#3427 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 343.220780][ C1] sd 0:0:1:0: [sda] tag#3427 CDB: Write(6) 0a 00 00 00 b1 d6 [ 343.392466][T10445] netlink: 'syz.0.1056': attribute type 21 has an invalid length. [ 343.400649][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 343.410577][T10445] netlink: 'syz.0.1056': attribute type 21 has an invalid length. [ 343.418503][T10445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1056'. [ 343.427642][T10445] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 343.777872][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 344.649210][T10458] misc userio: Can't change port type on an already running userio instance [ 344.731127][ T5862] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 344.739868][ T5862] Bluetooth: hci4: Injecting HCI hardware error event [ 344.747000][ T5862] Bluetooth: hci4: hardware error 0x00 [ 344.827420][T10461] netlink: 'syz.1.1060': attribute type 12 has an invalid length. [ 344.846555][T10461] netlink: 'syz.1.1060': attribute type 29 has an invalid length. [ 344.867506][T10463] fuse: Unknown parameter 'gro' [ 344.928293][T10466] input: syz1 as /devices/virtual/input/input22 [ 345.050572][T10471] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 346.813967][ T5862] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 346.910196][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 347.004040][T10497] program syz.1.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.040404][ T9] usb 5-1: device descriptor read/64, error -71 [ 347.250327][ C1] sd 0:0:1:0: [sda] tag#3437 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 347.260998][ C1] sd 0:0:1:0: [sda] tag#3437 CDB: Write(6) 0a 00 00 00 b1 d6 [ 347.290153][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 347.421411][ T9] usb 5-1: device descriptor read/64, error -71 [ 347.531934][ T9] usb usb5-port1: attempt power cycle [ 347.880276][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 347.902270][ T9] usb 5-1: device descriptor read/8, error -71 [ 348.250207][ T5961] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 348.430206][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 348.445259][T10514] __nla_validate_parse: 3 callbacks suppressed [ 348.445287][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 348.651320][ T9] usb 5-1: device descriptor read/8, error -71 [ 348.792691][ T9] usb usb5-port1: unable to enumerate USB device [ 348.800896][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.825295][ T5961] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.880133][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.993826][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1076'. [ 349.018664][ T5961] usb 4-1: config 0 descriptor?? [ 349.264416][ T5961] usbhid 4-1:0.0: can't add hid device: -71 [ 349.275181][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 349.294773][ T5961] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 349.393416][ T5961] usb 4-1: USB disconnect, device number 47 [ 349.406479][T10535] Lens A: ================= START STATUS ================= [ 349.414969][T10535] Lens A: Focus, Absolute: 0 [ 349.419786][T10535] Lens A: ================== END STATUS ================== [ 349.539461][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 350.023921][T10546] misc userio: Can't change port type on an already running userio instance [ 350.038682][T10546] netlink: 'syz.0.1084': attribute type 12 has an invalid length. [ 350.048170][T10546] netlink: 'syz.0.1084': attribute type 29 has an invalid length. [ 350.056195][T10546] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1084'. [ 350.057785][ T5961] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 350.065511][T10546] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1084'. [ 350.230100][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 350.247385][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.266584][ T5961] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 350.272676][T10551] program syz.1.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.291397][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.303248][ T5961] usb 4-1: config 0 descriptor?? [ 350.500354][ C1] sd 0:0:1:0: [sda] tag#3443 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 350.511041][ C1] sd 0:0:1:0: [sda] tag#3443 CDB: Write(6) 0a 00 00 00 b1 d6 [ 350.717427][T10556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1087'. [ 350.729980][ T5961] kye 0003:0458:5016.000E: control desc unexpectedly large [ 351.285207][T10558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1088'. [ 351.402112][ T5961] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input27 [ 351.514403][ T5961] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input28 [ 351.606008][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.621869][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.624203][ T5961] kye 0003:0458:5016.000E: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 351.744006][ T9] usb 4-1: USB disconnect, device number 48 [ 351.997460][T10581] netlink: 'syz.3.1096': attribute type 21 has an invalid length. [ 352.029060][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 352.599436][T10583] syz.0.1094 (10583): drop_caches: 2 [ 352.624746][T10583] syz.0.1094 (10583): drop_caches: 2 [ 352.891245][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 353.811669][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.823078][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.451476][T10601] tipc: Started in network mode [ 354.458998][T10601] tipc: Node identity 4615f86780c9, cluster identity 4711 [ 354.483539][T10601] tipc: Enabled bearer , priority 0 [ 354.506870][T10601] syzkaller0: entered promiscuous mode [ 354.555256][T10601] syzkaller0: entered allmulticast mode [ 354.648581][T10601] tipc: Resetting bearer [ 354.737985][T10600] tipc: Resetting bearer [ 354.758366][T10600] tipc: Disabling bearer [ 354.790453][ T5961] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 354.844937][ T5961] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 354.892412][T10617] netlink: 'syz.2.1106': attribute type 21 has an invalid length. [ 354.900437][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 354.910503][T10617] netlink: 'syz.2.1106': attribute type 21 has an invalid length. [ 354.918644][T10617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1106'. [ 354.928217][T10617] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 355.143969][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.182425][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.099184][T10667] pim6reg1: entered promiscuous mode [ 357.105602][T10667] pim6reg1: entered allmulticast mode [ 358.101083][T10729] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 358.224871][T10737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1158'. [ 358.230886][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 358.362120][T10743] netlink: 'syz.0.1159': attribute type 12 has an invalid length. [ 358.370323][T10743] netlink: 'syz.0.1159': attribute type 29 has an invalid length. [ 358.378150][T10743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1159'. [ 358.432682][T10743] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1159'. [ 358.724857][T10754] netlink: 'syz.3.1160': attribute type 21 has an invalid length. [ 358.733147][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 358.744520][T10754] netlink: 'syz.3.1160': attribute type 21 has an invalid length. [ 358.753420][T10754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1160'. [ 358.837272][T10754] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 359.301919][T10765] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 359.347636][ T848] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 359.670255][ T848] usb 5-1: Using ep0 maxpacket: 16 [ 359.680787][ T848] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 359.724615][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.839148][ T848] usb 5-1: Product: syz [ 359.872511][ T848] usb 5-1: Manufacturer: syz [ 359.897402][ T848] usb 5-1: SerialNumber: syz [ 359.937548][ T848] r8152-cfgselector 5-1: Unknown version 0x0000 [ 359.950356][ T848] r8152-cfgselector 5-1: config 0 descriptor?? [ 360.483271][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 360.734526][T10777] could not allocate digest TFM handle blake2s-256 [ 360.826194][ T30] audit: type=1326 audit(1755705571.565:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 360.902730][T10791] netlink: 'syz.0.1170': attribute type 5 has an invalid length. [ 360.939843][ T30] audit: type=1326 audit(1755705571.595:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 360.967120][ T30] audit: type=1326 audit(1755705571.595:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7df85ba7 code=0x7ffc0000 [ 361.128986][ T30] audit: type=1326 audit(1755705571.595:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7df2add9 code=0x7ffc0000 [ 361.152278][T10798] misc userio: Can't change port type on an already running userio instance [ 361.182235][ T30] audit: type=1326 audit(1755705571.595:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7df8ebe9 code=0x7ffc0000 [ 361.268223][ T30] audit: type=1326 audit(1755705571.605:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7df85ba7 code=0x7ffc0000 [ 361.293548][ T30] audit: type=1326 audit(1755705571.605:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7df2add9 code=0x7ffc0000 [ 361.362706][ T30] audit: type=1326 audit(1755705571.605:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7df85ba7 code=0x7ffc0000 [ 361.438412][ T30] audit: type=1326 audit(1755705571.605:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7df2add9 code=0x7ffc0000 [ 361.471862][ T30] audit: type=1326 audit(1755705571.605:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7df85ba7 code=0x7ffc0000 [ 361.573765][T10809] program syz.1.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.810526][ C1] sd 0:0:1:0: [sda] tag#3397 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 361.821259][ C1] sd 0:0:1:0: [sda] tag#3397 CDB: Write(6) 0a 00 00 00 b1 d6 [ 361.949057][ T848] r8152-cfgselector 5-1: Unknown version 0x0000 [ 361.969230][T10819] misc userio: Can't change port type on an already running userio instance [ 361.970658][ T848] r8152-cfgselector 5-1: bad CDC descriptors [ 362.409719][ T848] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 363.080198][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 363.551918][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'. [ 364.783370][T10860] misc userio: Can't change port type on an already running userio instance [ 364.796500][T10860] netlink: 'syz.0.1188': attribute type 12 has an invalid length. [ 364.804703][T10860] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 364.820317][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 364.877274][T10860] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1188'. [ 364.895449][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1189'. [ 364.912773][T10860] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1188'. [ 365.338664][T10868] bridge0: port 1(macsec0) entered disabled state [ 365.373540][T10868] tipc: Resetting bearer [ 365.482637][T10868] veth1_macvtap: left allmulticast mode [ 365.537622][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.551734][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.576910][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.591131][ T2986] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.512582][T10897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.732245][T10904] tipc: Enabling of bearer rejected, failed to enable media [ 367.467764][T10912] netlink: 'syz.0.1205': attribute type 12 has an invalid length. [ 367.475820][T10912] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 367.485303][T10912] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1205'. [ 367.494681][T10912] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1205'. [ 367.530405][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 367.610224][T10878] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 367.610327][ T5862] Bluetooth: hci0: command 0x0406 tx timeout [ 367.622813][T10878] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 368.077379][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 368.395569][T10878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.409305][T10878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 368.419950][T10878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.426777][T10878] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 368.435156][T10878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.441529][T10878] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 368.554127][T10925] fuse: Bad value for 'user_id' [ 368.569639][T10925] fuse: Bad value for 'user_id' [ 368.691657][ T848] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 368.746062][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.754955][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.901945][ T848] usb 4-1: Using ep0 maxpacket: 16 [ 368.915670][ T848] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 368.936505][ T848] usb 4-1: config 252 has no interface number 0 [ 369.010993][ T848] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 369.033821][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.042795][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.236515][ T848] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 369.270929][ T848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.289162][ T848] usb 4-1: Product: syz [ 369.301229][ T848] usb 4-1: Manufacturer: syz [ 369.310403][ T848] usb 4-1: SerialNumber: syz [ 369.340363][ T848] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 369.666805][ T3575] usb 4-1: Failed to submit usb control message: -71 [ 369.667017][ T5961] usb 4-1: USB disconnect, device number 49 [ 369.680455][ T3575] usb 4-1: unable to send the bmi data to the device: -71 [ 369.688897][ T3575] usb 4-1: unable to get target info from device [ 369.696455][ T3575] usb 4-1: could not get target info (-71) [ 369.707279][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 369.713711][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 369.732454][ T3575] usb 4-1: could not probe fw (-71) [ 370.490214][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 370.496530][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 370.690740][T10965] misc userio: Can't change port type on an already running userio instance [ 370.792557][T10967] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 371.340912][T10975] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1223'. [ 371.797367][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 372.399045][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.416844][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.570404][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 372.570445][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 373.061760][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 373.184363][T10997] netlink: 'syz.0.1229': attribute type 12 has an invalid length. [ 373.192626][T10997] netlink: 'syz.0.1229': attribute type 29 has an invalid length. [ 373.202049][T10997] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1229'. [ 373.212849][T10997] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1229'. [ 373.225974][T10997] Lens A: ================= START STATUS ================= [ 373.234516][T10997] Lens A: Focus, Absolute: 0 [ 373.239197][T10997] Lens A: ================== END STATUS ================== [ 373.662431][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 374.140890][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1233'. [ 375.900347][ T5961] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 376.050463][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 376.059099][ T5961] usb 4-1: config 1 interface 0 altsetting 165 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.071476][ T5961] usb 4-1: config 1 interface 0 altsetting 165 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.084981][ T5961] usb 4-1: config 1 interface 0 has no altsetting 0 [ 376.093784][ T5961] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.40 [ 376.102920][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.111176][ T5961] usb 4-1: Product: syz [ 376.115375][ T5961] usb 4-1: Manufacturer: 凞箏Ｑ䕸鱝櫔縓ﴌ㼇嗢숎⢓䙅鉪ᬶ䣠哔雖嘠әঝᴡ攣䵳ὐ㸤鲐첮篁饢 [ 376.127750][ T5961] usb 4-1: SerialNumber: syz [ 376.540882][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.549582][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.570464][ T5961] usbhid 4-1:1.0: can't add hid device: -71 [ 376.576571][ T5961] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 376.586681][ T5961] usb 4-1: USB disconnect, device number 50 [ 377.018806][T11015] misc userio: Can't change port type on an already running userio instance [ 377.030928][T11015] netlink: 'syz.0.1236': attribute type 12 has an invalid length. [ 377.038805][T11015] netlink: 'syz.0.1236': attribute type 29 has an invalid length. [ 377.049058][T11015] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1236'. [ 377.059575][T11015] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1236'. [ 377.244663][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 377.500123][ T848] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 377.660396][ T848] usb 4-1: Using ep0 maxpacket: 16 [ 377.996026][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 378.648228][T11030] FAULT_INJECTION: forcing a failure. [ 378.648228][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 378.661152][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) [ 378.661179][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.661192][T11030] Call Trace: [ 378.661198][T11030] [ 378.661206][T11030] dump_stack_lvl+0x189/0x250 [ 378.661236][T11030] ? __pfx____ratelimit+0x10/0x10 [ 378.661261][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.661282][T11030] ? __pfx__printk+0x10/0x10 [ 378.661307][T11030] ? fs_reclaim_acquire+0x7d/0x100 [ 378.661334][T11030] ? rcu_is_watching+0x15/0xb0 [ 378.661351][T11030] ? __pfx___might_resched+0x10/0x10 [ 378.661369][T11030] ? lock_acquire+0x5f/0x360 [ 378.661396][T11030] should_fail_ex+0x414/0x560 [ 378.661431][T11030] should_failslab+0xa8/0x100 [ 378.661458][T11030] __kmalloc_cache_noprof+0x70/0x3d0 [ 378.661482][T11030] ? nft_netdev_hook_alloc+0x1f0/0x530 [ 378.661508][T11030] nft_netdev_hook_alloc+0x1f0/0x530 [ 378.661535][T11030] nf_tables_parse_netdev_hooks+0x10b/0x8e0 [ 378.661564][T11030] nft_flowtable_parse_hook+0x465/0x910 [ 378.661596][T11030] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 378.661627][T11030] ? nf_flow_table_init+0x280/0x2a0 [ 378.661652][T11030] nf_tables_newflowtable+0x14d3/0x2390 [ 378.661679][T11030] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 378.661701][T11030] ? nfnl_pernet+0x23/0x240 [ 378.661722][T11030] ? rcu_is_watching+0x15/0xb0 [ 378.661740][T11030] ? nfnl_pernet+0x23/0x240 [ 378.661761][T11030] ? lock_release+0x4b/0x3e0 [ 378.661786][T11030] ? __nla_parse+0x40/0x60 [ 378.661815][T11030] nfnetlink_rcv+0x1132/0x2520 [ 378.661851][T11030] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 378.661877][T11030] ? kasan_save_track+0x4f/0x80 [ 378.661899][T11030] ? kasan_save_track+0x3e/0x80 [ 378.661918][T11030] ? __kasan_slab_alloc+0x6c/0x80 [ 378.661954][T11030] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.661979][T11030] ? rcu_is_watching+0x15/0xb0 [ 378.661996][T11030] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.662023][T11030] ? lock_release+0x4b/0x3e0 [ 378.662046][T11030] ? net_generic+0x1e/0x240 [ 378.662066][T11030] ? net_generic+0x1e/0x240 [ 378.662091][T11030] netlink_unicast+0x82c/0x9e0 [ 378.662118][T11030] ? __pfx_netlink_unicast+0x10/0x10 [ 378.662142][T11030] ? netlink_sendmsg+0x642/0xb30 [ 378.662166][T11030] ? skb_put+0x11b/0x210 [ 378.662183][T11030] netlink_sendmsg+0x805/0xb30 [ 378.662212][T11030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.662240][T11030] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.662257][T11030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.662277][T11030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.662304][T11030] __sock_sendmsg+0x219/0x270 [ 378.662326][T11030] ____sys_sendmsg+0x505/0x830 [ 378.662347][T11030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.662369][T11030] ? import_iovec+0x74/0xa0 [ 378.662391][T11030] ___sys_sendmsg+0x21f/0x2a0 [ 378.662411][T11030] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.662450][T11030] ? __fget_files+0x2a/0x420 [ 378.662476][T11030] ? __fget_files+0x3a0/0x420 [ 378.662507][T11030] __x64_sys_sendmsg+0x19b/0x260 [ 378.662527][T11030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.662548][T11030] ? __pfx_ksys_write+0x10/0x10 [ 378.662573][T11030] ? rcu_is_watching+0x15/0xb0 [ 378.662590][T11030] do_syscall_64+0xfa/0x3b0 [ 378.662617][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.662635][T11030] ? clear_bhb_loop+0x60/0xb0 [ 378.662655][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.662672][T11030] RIP: 0033:0x7f002af8ebe9 [ 378.662688][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.662702][T11030] RSP: 002b:00007f002be32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.662716][T11030] RAX: ffffffffffffffda RBX: 00007f002b1b5fa0 RCX: 00007f002af8ebe9 [ 378.662725][T11030] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 378.662733][T11030] RBP: 00007f002be32090 R08: 0000000000000000 R09: 0000000000000000 [ 378.662740][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.662750][T11030] R13: 00007f002b1b6038 R14: 00007f002b1b5fa0 R15: 00007f002b2dfa28 [ 378.662768][T11030] [ 379.074882][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.081368][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.114921][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1241'. [ 379.607901][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 379.607921][ T30] audit: type=1326 audit(1755705590.345:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7fc00000 [ 379.643144][T11039] vlan0: entered promiscuous mode [ 380.100337][ T30] audit: type=1326 audit(1755705590.835:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f002af2add9 code=0x7fc00000 [ 380.130400][ T30] audit: type=1326 audit(1755705590.835:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f002af2ae9f code=0x7fc00000 [ 380.155532][ T30] audit: type=1326 audit(1755705590.835:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f002af8ebe9 code=0x7fc00000 [ 380.190379][ T848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.199850][ T848] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 380.210158][ T848] usb 4-1: can't read configurations, error -71 [ 380.224633][T11041] openvswitch: netlink: IP tunnel dst address not specified [ 380.644279][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.654941][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.868891][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.878401][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.398932][T11081] pim6reg1: entered allmulticast mode [ 381.412493][T11081] pim6reg1: left allmulticast mode [ 381.615633][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 382.800190][ T5961] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 382.950111][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 382.956861][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.968018][ T5961] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 382.977443][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.987465][ T5961] usb 4-1: config 0 descriptor?? [ 383.195922][ T5961] usbhid 4-1:0.0: can't add hid device: -32 [ 383.202137][ T5961] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 383.555899][ T5961] usb 4-1: USB disconnect, device number 53 [ 383.744596][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 384.010839][ T5923] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 384.060252][ T848] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 384.107633][ T5923] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 384.165333][ T5923] usb 3-1: USB disconnect, device number 48 [ 384.220262][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 384.290129][ T848] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 384.303958][ T848] usb 4-1: can't read configurations, error -61 [ 384.440365][ T848] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 384.467715][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1268'. [ 384.610136][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 384.660270][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 384.670237][ T848] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 384.677861][ T848] usb 4-1: can't read configurations, error -61 [ 384.704399][ T848] usb usb4-port1: attempt power cycle [ 384.841677][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 384.964486][T11125] syz.4.1269: attempt to access beyond end of device [ 384.964486][T11125] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 385.077415][ T9] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 385.187461][ T848] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 385.202480][ T9] usb 2-1: config 95 has no interface number 0 [ 385.214280][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 385.233511][ T848] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 385.242479][ T848] usb 4-1: can't read configurations, error -61 [ 385.249768][ T9] usb 2-1: config 95 interface 1 has no altsetting 0 [ 385.266181][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 385.281392][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.301447][ T9] usb 2-1: Product: syz [ 385.371028][ T848] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 385.412250][ T9] usb 2-1: Manufacturer: syz [ 385.428347][ T848] usb 4-1: Using ep0 maxpacket: 32 [ 385.495763][ T9] usb 2-1: SerialNumber: syz [ 385.534466][ T848] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 385.542720][ T848] usb 4-1: can't read configurations, error -61 [ 385.550006][ T848] usb usb4-port1: unable to enumerate USB device [ 386.100332][ T5909] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 386.165497][T11145] fuse: Bad value for 'user_id' [ 386.174704][T11145] fuse: Bad value for 'user_id' [ 386.250399][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 386.265404][ T5909] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 386.284659][ T5909] usb 4-1: can't read configurations, error -61 [ 386.433545][ T5909] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 386.532361][ T9] usb 2-1: USB disconnect, device number 49 [ 386.860330][ T5909] usb 4-1: device not accepting address 59, error -71 [ 386.867428][ T5909] usb usb4-port1: attempt power cycle [ 387.220315][ T5923] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 387.340067][T11171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1284'. [ 387.390861][ T5923] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 387.399624][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.418645][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.670313][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.708952][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.732684][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.746635][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.766034][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.776522][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.789688][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.839916][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.008374][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 388.051781][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.079895][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.089199][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 388.155480][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.176652][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.186011][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 388.316286][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.251396][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.273489][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.294857][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.351946][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.373651][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 389.432793][T11198] FAULT_INJECTION: forcing a failure. [ 389.432793][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.450364][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.464385][T11198] CPU: 0 UID: 0 PID: 11198 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) [ 389.464414][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.464422][T11198] Call Trace: [ 389.464426][T11198] [ 389.464431][T11198] dump_stack_lvl+0x189/0x250 [ 389.464450][T11198] ? __pfx____ratelimit+0x10/0x10 [ 389.464467][T11198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.464480][T11198] ? __pfx__printk+0x10/0x10 [ 389.464495][T11198] ? __might_fault+0xb0/0x130 [ 389.464512][T11198] ? rcu_is_watching+0x15/0xb0 [ 389.464524][T11198] should_fail_ex+0x414/0x560 [ 389.464540][T11198] _copy_from_user+0x2d/0xb0 [ 389.464552][T11198] ___sys_sendmsg+0x158/0x2a0 [ 389.464565][T11198] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.464584][T11198] ? __fget_files+0x2a/0x420 [ 389.464600][T11198] ? __fget_files+0x3a0/0x420 [ 389.464619][T11198] __x64_sys_sendmsg+0x19b/0x260 [ 389.464631][T11198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.464644][T11198] ? __pfx_ksys_write+0x10/0x10 [ 389.464658][T11198] ? rcu_is_watching+0x15/0xb0 [ 389.464669][T11198] ? rcu_is_watching+0x15/0xb0 [ 389.464681][T11198] do_syscall_64+0xfa/0x3b0 [ 389.464697][T11198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.464708][T11198] ? clear_bhb_loop+0x60/0xb0 [ 389.464720][T11198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.464731][T11198] RIP: 0033:0x7fb27998ebe9 [ 389.464742][T11198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.464753][T11198] RSP: 002b:00007fb27a856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.464768][T11198] RAX: ffffffffffffffda RBX: 00007fb279bb5fa0 RCX: 00007fb27998ebe9 [ 389.464777][T11198] RDX: 0000000000001050 RSI: 00002000000003c0 RDI: 0000000000000003 [ 389.464785][T11198] RBP: 00007fb27a856090 R08: 0000000000000000 R09: 0000000000000000 [ 389.464792][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.464800][T11198] R13: 00007fb279bb6038 R14: 00007fb279bb5fa0 R15: 00007fb279cdfa28 [ 389.464811][T11198] [ 389.478242][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.505799][T11199] Lens A: ================= START STATUS ================= [ 389.731901][T11199] Lens A: Focus, Absolute: 0 [ 389.736581][T11199] Lens A: ================== END STATUS ================== [ 389.783834][ T5923] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 389.793405][ T5923] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 389.820212][ T5923] usb 3-1: Product: syz [ 389.834787][ T5923] usb 3-1: Manufacturer: syz [ 389.851627][ T5923] usb 3-1: SerialNumber: syz [ 389.878033][ T5923] usb 3-1: config 0 descriptor?? [ 389.879244][T11207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 389.929564][ T5923] usb 3-1: can't set config #0, error -71 [ 389.946325][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.956658][ T5923] usb 3-1: USB disconnect, device number 49 [ 389.976377][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.003614][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'. [ 390.013202][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'. [ 390.023735][T11216] FAULT_INJECTION: forcing a failure. [ 390.023735][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 390.049901][T11211] netlink: 'syz.0.1295': attribute type 5 has an invalid length. [ 390.062134][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.4.1300 Not tainted syzkaller #0 PREEMPT(full) [ 390.062163][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.062175][T11216] Call Trace: [ 390.062182][T11216] [ 390.062190][T11216] dump_stack_lvl+0x189/0x250 [ 390.062218][T11216] ? __pfx____ratelimit+0x10/0x10 [ 390.062254][T11216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.062276][T11216] ? __pfx__printk+0x10/0x10 [ 390.062303][T11216] ? fs_reclaim_acquire+0x7d/0x100 [ 390.062330][T11216] ? rcu_is_watching+0x15/0xb0 [ 390.062348][T11216] ? __pfx___might_resched+0x10/0x10 [ 390.062366][T11216] ? lock_acquire+0x5f/0x360 [ 390.062394][T11216] should_fail_ex+0x414/0x560 [ 390.062421][T11216] should_failslab+0xa8/0x100 [ 390.062467][T11216] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 390.062492][T11216] ? __alloc_skb+0x112/0x2d0 [ 390.062521][T11216] __alloc_skb+0x112/0x2d0 [ 390.062548][T11216] netlink_sendmsg+0x5c6/0xb30 [ 390.062578][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.062605][T11216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.062622][T11216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.062642][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.062667][T11216] __sock_sendmsg+0x219/0x270 [ 390.062689][T11216] ____sys_sendmsg+0x505/0x830 [ 390.062708][T11216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.062729][T11216] ? import_iovec+0x74/0xa0 [ 390.062751][T11216] ___sys_sendmsg+0x21f/0x2a0 [ 390.062770][T11216] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.062800][T11216] ? __fget_files+0x2a/0x420 [ 390.062826][T11216] ? __fget_files+0x3a0/0x420 [ 390.062855][T11216] __x64_sys_sendmsg+0x19b/0x260 [ 390.062876][T11216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.062897][T11216] ? __pfx_ksys_write+0x10/0x10 [ 390.062920][T11216] ? rcu_is_watching+0x15/0xb0 [ 390.062941][T11216] ? rcu_is_watching+0x15/0xb0 [ 390.062958][T11216] do_syscall_64+0xfa/0x3b0 [ 390.062984][T11216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.063000][T11216] ? clear_bhb_loop+0x60/0xb0 [ 390.063021][T11216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.063040][T11216] RIP: 0033:0x7fd04918ebe9 [ 390.063059][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.063078][T11216] RSP: 002b:00007fd049f7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.063101][T11216] RAX: ffffffffffffffda RBX: 00007fd0493b5fa0 RCX: 00007fd04918ebe9 [ 390.063115][T11216] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 390.063134][T11216] RBP: 00007fd049f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.063146][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.063157][T11216] R13: 00007fd0493b6038 R14: 00007fd0493b5fa0 R15: 00007fd0494dfa28 [ 390.063177][T11216] [ 393.610553][ T31] INFO: task kworker/1:5:5944 blocked for more than 143 seconds. [ 393.618348][ T31] Not tainted syzkaller #0 [ 393.623775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.632683][ T31] task:kworker/1:5 state:D stack:20816 pid:5944 tgid:5944 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 393.644736][ T31] Workqueue: usb_hub_wq hub_event [ 393.649906][ T31] Call Trace: [ 393.653438][ T31] [ 393.656373][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 393.660958][ T31] ? __pfx___schedule+0x10/0x10 [ 393.666171][ T31] ? schedule+0x91/0x360 [ 393.670561][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.675372][ T31] ? lock_release+0x4b/0x3e0 [ 393.679993][ T31] ? schedule+0x91/0x360 [ 393.684586][ T31] ? wq_worker_sleeping+0x63/0x250 [ 393.689827][ T31] schedule+0x165/0x360 [ 393.699573][ T31] schedule_timeout+0x9a/0x270 [ 393.775393][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 393.810922][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.815732][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.822406][ T31] ? wait_for_completion+0x267/0x5d0 [ 393.828180][ T31] wait_for_completion+0x2bf/0x5d0 [ 393.835566][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 393.841841][ T31] i2c_del_adapter+0x581/0x6e0 [ 393.846654][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 393.854067][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.858881][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 393.879231][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 393.891812][ T31] dvb_usb_device_exit+0x1be/0x350 [ 393.896990][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 393.940174][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.945179][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 393.980077][ T31] cxusb_probe+0x603/0x700 [ 393.984572][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 394.011954][ T5234] udevd[5234]: worker [7596] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 394.020248][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 394.027888][ T31] usb_probe_interface+0x668/0xc30 [ 394.070131][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 394.076053][ T31] really_probe+0x26a/0x9e0 [ 394.100179][ T31] __driver_probe_device+0x18c/0x2f0 [ 394.105671][ T31] driver_probe_device+0x4f/0x430 [ 394.140110][ T31] __device_attach_driver+0x2ce/0x530 [ 394.145575][ T31] bus_for_each_drv+0x251/0x2e0 [ 394.160436][ T5944] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 394.180214][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 394.186864][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 394.210090][ T31] __device_attach+0x2b8/0x400 [ 394.214943][ T31] ? __pfx___device_attach+0x10/0x10 [ 394.224251][ T5944] usb 1-1: USB disconnect, device number 26 [ 394.290664][ T31] ? unwind_next_frame+0xa5/0x2390 [ 394.295859][ T31] ? cpuacct_charge+0x10e/0x320 [ 394.338806][ T31] ? update_load_avg+0x572/0x1880 [ 394.343497][ T7596] udevd[7596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.353669][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.370259][ T31] ? trace_pelt_se_tp+0x39/0x130 [ 394.375357][ T31] ? switch_ldt+0x10a/0x250 [ 394.379897][ T31] ? __pfx_switch_ldt+0x10/0x10 [ 394.422158][ T31] ? psi_group_change+0xab8/0x1050 [ 394.427411][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.460147][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.465613][ T31] ? __flush_work+0xd2/0xbc0 [ 394.480073][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.485599][ T31] ? __flush_work+0xd2/0xbc0 [ 394.500302][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.502121][ T7596] udevd[7596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.505211][ T31] ? __flush_work+0xd2/0xbc0 [ 394.550079][ T31] ? lock_release+0x4b/0x3e0 [ 394.554747][ T31] ? do_raw_spin_lock+0x121/0x290 [ 394.559809][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.578015][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.583305][ T31] ? do_raw_spin_lock+0x121/0x290 [ 394.585047][ T7170] udevd[7170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.588759][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.632654][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.637489][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.642609][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 394.648110][ T31] ? usb_hcd_flush_endpoint+0x2df/0x400 [ 394.657768][ T31] ? do_raw_spin_lock+0x121/0x290 [ 394.665044][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.672116][ T31] ? do_raw_spin_lock+0x121/0x290 [ 394.679633][ T31] ? do_raw_spin_lock+0x121/0x290 [ 394.686146][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.692120][ T31] ? update_load_avg+0x572/0x1880 [ 394.699601][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 394.707038][ T31] ? sched_clock+0x3f/0x60 [ 394.714897][ T31] ? psi_group_change+0xab8/0x1050 [ 394.722231][ T31] ? mm_cid_get+0x12d/0x6c0 [ 394.729118][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.734697][ T31] ? lock_release+0x4b/0x3e0 [ 394.739510][ T31] ? __schedule+0x1798/0x4cc0 [ 394.747119][ T31] ? __pfx___schedule+0x10/0x10 [ 394.757082][ T31] ? schedule+0x91/0x360 [ 394.767241][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.772649][ T31] ? lock_release+0x4b/0x3e0 [ 394.785704][ T31] ? schedule+0x91/0x360 [ 394.797697][ T31] ? wq_worker_sleeping+0x63/0x250 [ 394.807175][ T31] ? schedule+0x165/0x360 [ 394.811928][ T31] ? worker_thread+0xa82/0xda0 [ 394.818193][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.839789][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 394.866256][ T31] ? __kthread_parkme+0x7b/0x200 [ 394.874786][ T31] ? kthread+0x70e/0x8a0 [ 394.875654][T11225] fido_id[11225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 394.879091][ T31] ? __pfx_worker_thread+0x10/0x10 [ 394.915434][ T31] ? __pfx_kthread+0x10/0x10 [ 394.925100][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.929933][ T31] ? __pfx_kthread+0x10/0x10 [ 394.937047][ T31] ? ret_from_fork+0x3f9/0x770 [ 394.951927][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.957221][ T31] ? __switch_to_asm+0x39/0x70 [ 394.965128][ T31] ? __switch_to_asm+0x33/0x70 [ 394.968451][ T7596] udevd[7596]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.970894][ T31] ? __pfx_kthread+0x10/0x10 [ 394.994078][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 394.999122][ T31] [ 395.005877][ T31] INFO: lockdep is turned off. [ 395.012036][ T31] NMI backtrace for cpu 1 [ 395.012055][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.012077][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.012088][ T31] Call Trace: [ 395.012096][ T31] [ 395.012103][ T31] dump_stack_lvl+0x189/0x250 [ 395.012132][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.012154][ T31] ? __pfx__printk+0x10/0x10 [ 395.012184][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 395.012207][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.012228][ T31] ? __pfx__printk+0x10/0x10 [ 395.012254][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.012283][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.012306][ T31] watchdog+0xf93/0xfe0 [ 395.012333][ T31] ? watchdog+0x1de/0xfe0 [ 395.012359][ T31] kthread+0x70e/0x8a0 [ 395.012383][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.012407][ T31] ? __pfx_kthread+0x10/0x10 [ 395.012430][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.012453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.012477][ T31] ? __pfx_kthread+0x10/0x10 [ 395.012498][ T31] ret_from_fork+0x3f9/0x770 [ 395.012518][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.012539][ T31] ? __switch_to_asm+0x39/0x70 [ 395.012561][ T31] ? __switch_to_asm+0x33/0x70 [ 395.012584][ T31] ? __pfx_kthread+0x10/0x10 [ 395.012606][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.012636][ T31] [ 395.012643][ T31] Sending NMI from CPU 1 to CPUs 0: [ 395.020304][T11226] fido_id[11226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 395.026338][ C0] NMI backtrace for cpu 0 [ 395.026353][ C0] CPU: 0 UID: 0 PID: 11226 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 395.026371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.026393][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 395.026416][ C0] Code: 8e 70 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8c f7 d3 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 17 3e 2d 06 cc 44 89 f9 80 e1 07 38 c1 [ 395.026430][ C0] RSP: 0018:ffffc9000f687410 EFLAGS: 00000002 [ 395.026446][ C0] RAX: 0000000000000035 RBX: 0000000000000035 RCX: 0000000000000000 [ 395.026457][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 395.026467][ C0] RBP: 00000000000003f8 R08: ffff888024718237 R09: 1ffff110048e3046 [ 395.026479][ C0] R10: dffffc0000000000 R11: ffffffff854f1c80 R12: dffffc0000000000 [ 395.026490][ C0] R13: ffffffff99afa8c6 R14: ffffffff99def3e0 R15: 0000000000000000 [ 395.026501][ C0] FS: 00007f2b1356e880(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 395.026515][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.026526][ C0] CR2: 00007f2b12f909c0 CR3: 0000000031dd6000 CR4: 00000000003526f0 [ 395.026543][ C0] Call Trace: [ 395.026549][ C0] [ 395.026557][ C0] serial8250_console_write+0x1410/0x1ba0 [ 395.026576][ C0] ? format_decode+0x5ee/0xe30 [ 395.026594][ C0] ? string+0x279/0x2b0 [ 395.026610][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 395.026626][ C0] ? console_flush_all+0x13a/0xc40 [ 395.026643][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.026659][ C0] ? lock_acquire+0x5f/0x360 [ 395.026681][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 395.026705][ C0] ? console_flush_all+0x13a/0xc40 [ 395.026721][ C0] ? console_flush_all+0x13a/0xc40 [ 395.026738][ C0] console_flush_all+0x725/0xc40 [ 395.026756][ C0] ? console_flush_all+0x13a/0xc40 [ 395.026775][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 395.026795][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 395.026816][ C0] console_unlock+0xc4/0x270 [ 395.026832][ C0] ? __pfx_console_unlock+0x10/0x10 [ 395.026847][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.026863][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.026877][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.026892][ C0] vprintk_emit+0x5b7/0x7a0 [ 395.026907][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.026922][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 395.026937][ C0] ? lock_release+0x4b/0x3e0 [ 395.026957][ C0] ? __might_fault+0xcc/0x130 [ 395.026978][ C0] ? _copy_from_iter+0x694/0x16f0 [ 395.026995][ C0] devkmsg_emit+0xd6/0x120 [ 395.027016][ C0] ? simple_strntoull+0x10e/0x180 [ 395.027033][ C0] ? __pfx_devkmsg_emit+0x10/0x10 [ 395.027053][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.027067][ C0] ? trace_kmalloc+0x1f/0xd0 [ 395.027086][ C0] ? devkmsg_write+0x197/0x3f0 [ 395.027101][ C0] devkmsg_write+0x279/0x3f0 [ 395.027116][ C0] ? __pfx_devkmsg_write+0x10/0x10 [ 395.027133][ C0] do_iter_readv_writev+0x619/0x8b0 [ 395.027157][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 395.027176][ C0] ? common_file_perm+0x1b5/0x230 [ 395.027201][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 395.027218][ C0] ? security_file_permission+0x75/0x290 [ 395.027238][ C0] ? rw_verify_area+0x255/0x4d0 [ 395.027257][ C0] vfs_writev+0x31a/0x960 [ 395.027282][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 395.027299][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.027312][ C0] ? count_memcg_event_mm+0x21/0x260 [ 395.027330][ C0] ? lock_release+0x4b/0x3e0 [ 395.027349][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.027369][ C0] do_writev+0x14d/0x2d0 [ 395.027384][ C0] ? __pfx_do_writev+0x10/0x10 [ 395.027400][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.027415][ C0] do_syscall_64+0xfa/0x3b0 [ 395.027437][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.027451][ C0] ? clear_bhb_loop+0x60/0xb0 [ 395.027467][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.027482][ C0] RIP: 0033:0x7f2b12ea7407 [ 395.027495][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 395.027507][ C0] RSP: 002b:00007fffa16b1520 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 395.027523][ C0] RAX: ffffffffffffffda RBX: 00007f2b1356e880 RCX: 00007f2b12ea7407 [ 395.027534][ C0] RDX: 0000000000000005 RSI: 00007fffa16b15e0 RDI: 0000000000000003 [ 395.027544][ C0] RBP: 00007fffa16b1710 R08: 0000000000000000 R09: 0000000000000000 [ 395.027553][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa16b15e0 [ 395.027563][ C0] R13: 00007fffa16b1670 R14: 0000000000000000 R15: 00007fffa16b1650 [ 395.027579][ C0] [ 395.035295][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.035314][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.035335][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.035347][ T31] Call Trace: [ 395.035355][ T31] [ 395.035362][ T31] dump_stack_lvl+0x99/0x250 [ 395.035387][ T31] ? __asan_memcpy+0x40/0x70 [ 395.035408][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.035429][ T31] ? __pfx__printk+0x10/0x10 [ 395.035458][ T31] vpanic+0x281/0x750 [ 395.035479][ T31] ? __pfx_vpanic+0x10/0x10 [ 395.035499][ T31] ? preempt_schedule+0xae/0xc0 [ 395.035523][ T31] ? preempt_schedule_common+0x83/0xd0 [ 395.035549][ T31] panic+0xb9/0xc0 [ 395.035568][ T31] ? __pfx_panic+0x10/0x10 [ 395.035588][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.035616][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 395.035638][ T31] watchdog+0xfd2/0xfe0 [ 395.035665][ T31] ? watchdog+0x1de/0xfe0 [ 395.035690][ T31] kthread+0x70e/0x8a0 [ 395.035713][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.035736][ T31] ? __pfx_kthread+0x10/0x10 [ 395.035758][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.035779][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.035802][ T31] ? __pfx_kthread+0x10/0x10 [ 395.035823][ T31] ret_from_fork+0x3f9/0x770 [ 395.035842][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.035862][ T31] ? __switch_to_asm+0x39/0x70 [ 395.035884][ T31] ? __switch_to_asm+0x33/0x70 [ 395.035907][ T31] ? __pfx_kthread+0x10/0x10 [ 395.035928][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.035956][ T31] [ 395.037354][ T31] Kernel Offset: disabled