last executing test programs: 2m50.149272364s ago: executing program 1 (id=402): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xffffff00}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef7, 0x0, 0x18, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x3}, 0x4048000) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00#'], 0xe0}}, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) alarm(0x23c000) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendfile(r5, r6, &(0x7f00000001c0), 0xfffffffffffffffb) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0xb, 0x6, 0x0, 0x5}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r7, r7, 0x0) io_setup(0x9, &(0x7f0000000240)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 2m48.999601947s ago: executing program 1 (id=413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) process_vm_writev(0x0, &(0x7f0000001900)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 2m48.451584339s ago: executing program 1 (id=415): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=';.', 0x2}], 0x1, 0x9, 0x9, 0xad52012520d4d21c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002eebc1240ac052a021b5701f5020109022400010d1f10a70904020502034a02ff0905021b284d0905090905040300"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 2m44.999419071s ago: executing program 1 (id=431): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x10001, 0x2) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 2m43.418714516s ago: executing program 1 (id=436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYRES8=r3]) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b3c000/0x4000)=nil, 0x4000, 0x65) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'macsec0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000d8001a80400002803c000180080021000000000008001800000000000800070000000000080009000000000008000c0000000000080012000100000008001f0002000000040007000400070004001c002c000a8014000700fc00000000000000000000000000000014000700ff01000000000000000000000000000128000280240001800800fd0001000000080000000000000008000400000000000800000000000000300002802c00018008001c000080000008000d000300000008800900faffffff08001c000c040000080018000900000004000700"], 0xf8}}, 0x40045) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000030605000000000001000749c800"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0), 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1000}) 2m41.564187072s ago: executing program 1 (id=442): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r2) exit(0xffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x45, 0x2, 0x0, "d569e800001e00000000008000", 0x31363553}) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 2m26.285960938s ago: executing program 32 (id=442): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r2) exit(0xffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x45, 0x2, 0x0, "d569e800001e00000000008000", 0x31363553}) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) 15.083986054s ago: executing program 0 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$dmmidi(&(0x7f00000001c0), 0x200, 0x40200) write$midi(r4, &(0x7f0000000300)="7d8426bf31b480734e583f5c93a9d44f2389090d3be5f3ddfa24d389c75d1b2db38384f41fa6ae3afae61be58a16698da62374996e0e371cb540862b439c82b5dde18da6a9afafd951da56c58b13de78991cf87011eda3bec3b44f42e76ab963ddb724ab90f89e3ad6e10f8544299fe15492c3a0a46dba3a52a265c6c4a5946d5f9b46823ce8fff3", 0x88) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) keyctl$update(0x2, 0x0, 0x0, 0x35) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000d0a0103140000000006000000000000000073797a31000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 12.274803745s ago: executing program 0 (id=892): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)='}', 0x1) sendto$inet(r0, &(0x7f0000000980)="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", 0x1e1, 0x4803, 0x0, 0x0) 11.723160347s ago: executing program 0 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000002c00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = signalfd4(r1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000020000000e0000000082a47d3d00000000000000840ca6ea33d079bbf8de4ffec5b4979de5d13ca55a88e6638d31d6ae2ff3fafe322b09a3a988586867c5365679e4ff5003f8442d503d704cf6e1bf73c084b7dfcc0918b09e2e41a0f31ef8fd3a7bb317b0d8b124d9cb678b28d4f9c7f58d96dd9958d2c8d65e28ea8a0f2029de43263bb939701223d26688a05b9e0ab835dd53871031e9c422f95cf3f4f1a02af8daa1a6422422e2fffaeb63cc2090202b5e70b4a0edef716a30104c2a08d026e330215a25cb28d3657ebf024fdd932a9127574dead8ec5e41"], 0x50) 11.55971074s ago: executing program 3 (id=896): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) 11.076811379s ago: executing program 3 (id=897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100feffffff00000000fc020001000100000000000000000000fc02000000000000000000000000002100001000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000000ffff7f000001200100000000000000000000000000006c0101020000000000000000000000007f0000010000000000000000000000003c040000000000000a0002001c000400feff4e244e200000fe880000000000000000000000000101"], 0xbc}}, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket(0x26, 0x3, 0xffffffff) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x33, 0x1, 0x0, 0x4, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x240008c4) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="040f"]}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x1000}, @TCA_CODEL_TARGET={0xfffffffffffffff7, 0x1, 0x8001}]}}]}, 0x44}}, 0x40040) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]}) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) socket$nl_route(0x10, 0x3, 0x0) 9.571135821s ago: executing program 5 (id=900): capset(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {0x0}], 0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.933855658s ago: executing program 0 (id=901): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.022320686s ago: executing program 2 (id=904): r0 = inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) inotify_add_watch(r0, &(0x7f0000000600)='./cgroup\x00', 0x40000040) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000240)={@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0xc) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 7.475898324s ago: executing program 2 (id=905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[], 0xfb, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) (async) write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="746172676574205043493a5b89d9f46ac070df4e31642e3100"], 0x14) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r7, 0x1}, 0x8) (async) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r4], 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x404, r1}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) syz_open_dev$dri(&(0x7f00000000c0), 0x4d9, 0x2) 7.427624699s ago: executing program 5 (id=906): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000003c0)={0x1, r1, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x20a4b}) 7.032813964s ago: executing program 5 (id=907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x3b9aca00}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.771594629s ago: executing program 3 (id=908): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x80000, 0x0, 0x0, 0x0) 6.612462652s ago: executing program 5 (id=909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r3, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 5.483335084s ago: executing program 0 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000002c00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = signalfd4(r1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000020000000e0000000082a47d3d00000000000000840ca6ea33d079bbf8de4ffec5b4979de5d13ca55a88e6638d31d6ae2ff3fafe322b09a3a988586867c5365679e4ff5003f8442d503d704cf6e1bf73c084b7dfcc0918b09e2e41a0f31ef8fd3a7bb317b0d8b124d9cb678b28d4f9c7f58d96dd9958d2c8d65e28ea8a0f2029de43263bb939701223d26688a05b9e0ab835dd53871031e9c422f95cf3f4f1a02af8daa1a6422422e2fffaeb63cc2090202b5e70b4a0edef716a30104c2a08d026e330215a25cb28d3657ebf024fdd932a9127574dead8ec5e41"], 0x50) 5.40337933s ago: executing program 4 (id=912): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(r3, r4, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[], 0x0) 5.317230503s ago: executing program 2 (id=913): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x7ab980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x18000000, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000189000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000023c0)="660f3a627c0ce0d8c0f30faee9888800ff670f78917c93000066b9230a000066b80500000066ba000000000f30ba410066ed0f20c06635000004000f22c02e2e260f38069aa2d0f3d9e1", 0x4a}], 0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaaf3, 0x17, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xd1, @private0, 0x8}, 0x1c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 4.893596203s ago: executing program 5 (id=914): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x60, 0x2, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x80000003) ioctl$VT_DISALLOCATE(r5, 0x5608) 4.656566916s ago: executing program 4 (id=915): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x33, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x105, 0x0, 0x12, 0x6, 0x0}) 4.558887353s ago: executing program 4 (id=916): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c3dc199"], 0x4, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="192d0400454402000c002b80050002000c00000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) 4.179472418s ago: executing program 4 (id=917): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)='}', 0x1) sendto$inet(r0, &(0x7f0000000980)="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", 0x1e1, 0x4803, 0x0, 0x0) 4.119949786s ago: executing program 4 (id=918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=""/138, 0x8a) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) (async) fcntl$setstatus(r3, 0x4, 0x42800) fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000001540), 0x7c) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) unshare(0x68040200) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 3.841704665s ago: executing program 3 (id=919): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) r0 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x53d1, 0x0, 0x4, 0x0, 0x0) 3.323294624s ago: executing program 0 (id=920): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0), 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.249063463s ago: executing program 3 (id=921): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b0500000000000904", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 3.010405527s ago: executing program 2 (id=922): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.79941887s ago: executing program 4 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, 0x0, 0x0, 0x14a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2788a8451f8100260008004580003c0064000000019078ac1e0001ac1e0101040090780000000040147000006500066221000564010102ac1414aa44001253e000200280007fffac1e010100007fffac14142a000000"], 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) llistxattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20008004) close(r5) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() 1.622984996s ago: executing program 5 (id=924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r3, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 1.582908173s ago: executing program 2 (id=925): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)={0x1150, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "dfacae1fa60148f0584f7e7660bdc814a45130e30a1a643867276fde96f40d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x66, 0x3, "03f304ebc37deae14a970b7cefda821e79494d37b9219e2ca17b1e08c76c09e10cb58814c04f3eaafe55a0a896e13468e561214e0fe3640896c05f9232e1065a73617f67b831dc7991f1b060ebb939b3bcf331626fe592e33c56909b49c412eacd98"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "496568e031cfa29dbc7f355b3316c10fef35fbb730de4c69b33db541e5a6f726fa2e5ec0a82394988d087fdffe8342f49c065c688962dcd9aec4726e36bfc237b6ede1c7bcf5dffd6bdefd52f72df97567c75817b03f09b65aafba43b11b92211886d1b11a05305695f24dec07d422c7cd5b1c3b341981ddce90ad7184c5d7f42e67610e3dde25f198be821b5738d0e7090140dea77c3f8606295706e84fd05404dea57c07c29a93f2c1691fe6dfcb1618cca77277625d139d9e8c937512fd17b413a625413d1f37fb3fcbdfff524667b06ffbf5146dc0ed5196312ebbd45337ebffafeb9d4a89d95824a25e2472a9be748741408e4f8430ea35c22dbf2a573ec6b7ef36ece2680544b8cf5ac903cd2759edd491fe4f67555e9026f5b11e03f1c7bc07d54cd313b827182a7adb8d5b12f0fd32f211c2717093f6527feeb5f0561eb04da8165561078c2bb6aea646ee300bd0088de3fa71f71d936949fa0a8bf373db212fc5e00494be57df2453036878015d4373e51045b8685e24220a6d1b0bf28c8d7f1bfd065ecdcfa8051e8ef21dd865e5b84bf1e7c58fa1f8a7c16ab2f01d13311d34c73dc6822b60d3d804a13dd659c358f4bc70192ab5eb8879de96a9ddf77856921e64a603f6ee0a0ad5cfc62b5864d6084c58836f63663abe954654b3dc66f910e83da083315e77a346d3b53ade049bae1a346a23f0301e4dfff4c837bed578f9afedb0d16554cbf42b34384b7b4004f63b2013049a5977f1ab38360dba0f22a0e2b46fec1ff0b82893245d65293b6e8d7daf8c4919c88b6695c70fcee42f9462f75455ade986eec9b2c8da24b7ae1703fbcd5b3d05a0308ea3bd389674b0395d85972e7752ee9d60bc197a286f92510d1249b8d17498c5ca4a2963a7601deb9779a9d2c1e73d23a54c61b7114ff516e1f8d6b423403ddfc5e1c6a80bba2da2ad2aef53a48cf3efd4badf19b7752be15c3e7d97763d6e12ee6b26bac3a70bdd5e2413060c77a2f35c9ba56404f933ad6f13fb3337b06773cfe2cafd2d8d67a2b52e3ef041f27fbe738f7d4f55f3ba0e754f6e43cada3747c7749ad894df5b0b5d49ae272c8d1016fd18150d94df304ddb57c28b4f5df9caddf242e84bf1a0824115721c52cf7958ca3712e9a509af238f60d005061d4eac8c7bca105d1514d9b8175707b1eb77edfd0f533c970f24bde4e6273f8a7017461820f18e9214ed9af96c0111140c6069345ccb16256a05af89c4dbf6bf9d47a0bb63aee0362f45df2421ca71d1fcee7453255c1961d9532fae08ea3dc914672bd996a380685ef80c6c42ff62e0d9eee426b312d2781348109d1f210ce60ed6eef95fad53f4d8a5f1c261d33cef5561c21556e32817071bf0eea3dc7c643099ad6078a798f091784eab7671c903dfb68601c1ffa3631345b2939cf4cd913a994028257f9a638710efd5b315f16e2bad104b69b1703158384fc8ce62d8dd181689f594c2f3040d35c26b40fdc6813d6803a0adb96e41b0c8a9ce9999e27fb80a38ee118bc5c50c02bf0bcc0153376595f1f25f3105ee61b0c3f4ed827bf8e20ac4ecf2d78afa6d881e6dd197f9a4df3b0c714d583c0ad218e4d61a7f05ab6d8452156c92d8d1348ca5923d34c716af556f33e0c1140a729ed35dd3ae148a9a8755091a352bfe906eb526035d9726500230dea171c7371776fb07399e3d68800a7d88e4eba846294da596354e995fd5ab36aa13dad5c3872ab2030c19a5b0881a2b0d3eb98a8835f3b26a97769d64a2543ff9c22fb8e8e6a85a46812a940a40bf7b68c8690b5e90b6f3dc82f09859842a6dfa083f36108f696d2e534b8c2edd3d9b7b712374173c359674dcd46f50800b72259bf8c7ec37bba5d667733476e9b137e66aaae7fba8527dd70c8adad5fe777dc76c61e1b87f1a780e7a0fcc2e6fac5d658c37c6e54a6d0d0ca214ae0809f807dd02ff6c6a2aba63752f5de6579ea919ffb436a42eaa5459f94837d1d425c64e8a275537e281581c0662433be4645be2ebfef01e291e4c57eab4db6000018784645d56cd3a234e529c4e42e8073e961b51cf3003db25b17068084bb249c9ea3ed953fb10124bd9d66a712b0d36a676669a59f4110509664fd4ce7deba19ffd6e5169581b63dc65a1bb54d43fb2cbcd2dd59d429817e0f2159d46e40b6ef925e62f7a9ae21fa6a15313fe8fd6a62f7323cda75b340fb5802bce018f3ae18f9f53f25f9a3b7c322d233a5058399fea2d6cebcc33e9596585661b473176142c70b2f9e60e0efb415be61acbd91b156f3f9fa34607c568c96eef2b246b7ef7db7ff7c616fd691e1d9936dc6f7bf2c71e93ee9ca0f503799fed25a373f6de24bfa249c6b9227755f65423f2922bb68adf5eb46016ed1a44e44064e807b67aa07a554e421c03df7fdae140446c2fd4420ac674763ce8513ac241bb233347e7c8434b0768a90c3ad6f309888be70df620cd1bffaa6b2ccc459ff16b149f3942bd8c16a9475b6dfe83a3dcc32382e2078528f40688879557abd2918ca419ecfb90b4fcaccf46657aaf8ddcf94f3b844c8b7976adca1a23e10c6c4b37886197eeac52661d37a77d1fbb39688337e8a63fc3fcbaac92ace923716fe597bbb0eebcdbf32a272e1b841ccf02bfcce845dc3bb7d4a8d87b62f16c9eb13437690a6433a03fdc39a7e27d1854d1369c4276b0995b3577fa69e98b14a654b40d12b1decc72d291b8899467e23b3444c48d17a86cc8d5f688b471a01d20a7742b2f7c6d00b5015c2520c1f7a59a5e5d4fdef8d3e5e94dd7bada7ae3e829ede8eee3591b37dd3b12a47776a8527bf426b7eb811a9e85715c4abb9e4e3be42a4d03d0c2b9e21ce61ca52600a30e4d9ebbf7ce57da1ea6196e02a7387a971ccffbc678ffe2e2090dad5964df54cf7afa242edae602f43a26cf4d7bff4a409f61fe44029aeece1575b74f01c52b352ce543b5a9b46ece9522b900772bb9832822883d51b5d347dec06a0c16ebc74dffd610a0ec8ff0a088a921ffc471b39cfcc1175d13cc504b35ddbad752154510123f054835f8e10a621363aae102178ccdd4fc049ed2b19228fb896a5903250747d478ee5e6aea7eb69f3f7c84bd7dc147c19b5f0cbe8ebd993888ef6ec27f9b5f7b8e8ef60898836ff5a0006c28865f6f094e88744976cbc169449ed1d7e40105c323c45e5e4be2567029ae446d7922f1691aca2be15f3f5e28bb2203de16a332394d4096fc7944c27a9a7cbc131be7f38e02a4fe85d27b98fb67b01fab17f971fe104033a8d325ecd08124954c308e92bcb5486222ceca37852e38f788392034a9e9892b10910e9c317562ba2d9271d51e515855e3f62b5aaccc005ce4293c2705e6acbf33bd5870d3c7f393ac42731f9062b5bad98b80558455f04629ec6229d8bb66989719dcc4ab8a85f276f7517d5e778da9cde78d5cc9319a525f22d2c6365834ec4411748fe3a81b17432696762c6c339f4d27c672e0c66d9709d94cc3078d83a5e8fa469242100352602f1d4d93b3f7995b3b39c24c2f48e3ea40da31a6a591ff25e2d2003864ae885cec8a55bad035753d2abeb5e729b242ab4fb557352da7e2d44e271555b06f93a4fc374ba6647dbc04fc2e461f9fbb3eb3b9b54650dde19cd26abcc870b6422b029340e759edf3994fe0b160ff74f89a3e9eac83b974a1c97dc1533c94d0e9d745c31e4b82acba4be5f2adf5b8d79b625d3cdf0f90151faf2f019c44c9ae7438d67c460c22cc5eaba216c6651d2c2bd3e77cbd6d44bf3d9cbccdc5a725d1d1f0906a8bc3271cbd0187652f527cfb8c4b1eab2436c0132041179c7cb016c9a8c50be34bf54f73a9e9c08cf034faf0bf06de91266d87cd58c390eeaf6f94e08bdf4aa5d50edb64a14ff6342f234c1a63199771415d52dbe9ef7a669e4c26f7104bfa770eae2dab4463b0b70bcd89a3bdb2ad63345fcda92fa060bce15df464ad6fc06d9676f2953a667092e8609e451f3213405bb2d9355b8655876c24e61f0ce4c41329be94d9522b139d2b250d0e871a0f0399040a1e4b52e532362289adb866146090169d83a08328bc1f7bf7b6d3c8eee8f55799c242b6c429b527903593af7d452f6d123513a482ab9a98ac7acd1f50d0ed441d62ff067ec80396e742c27803760e7a238c215f6a86054bd55dc85929b09f35acb048ce92960160c7deb6b9dd8f8142871868033843f6297c16258def480a50dbfb33dda618fcc3fbee836b4952b0b7cf3c87324e114333c58526b4cbaccfaeca42fd3968d2f9dbaed20cd911e9ee9fd4e085b6d708c3677ec049706dcd3d4407629889752547ee75a5ba01d943da60cb01497dc7262ec22462fbb7480d309e04753a2360b6242b71a2978061308dee66d0ceb6c18e4ab9532f02f6249f44cf6425d8770de59e6489bc96e4069a5953d43f93887da3e71e4b3cf064b5c9b7c644456575d150d2742c674a78c425339cbc167f46b3f36fd4c74c734769338b804bf4d1e60f3e740a4eeea5cfb291b7473110fc4fe63028020be0dd0016b0f9c8eec5559e20bec3991bbf350d1d48fc21e166fc2ec13f8bba38634114f5bc9f1257a7c89805d488c0d7f14ffb0935552c1c3aa6d6f46d7e1af027c16be707c0f4760cd844ff14b869059675b71f5770f7ca8843849f972575d63a1d2a85351fafb3f4229d5253b9d93126865553b8c28db8b04b5815655941de34ac9992ffb0612e24c4d96b7796c2a2af41465c1e1c0b02a5c4305790d97145d5bc2ff1a38ee0ca4fc0481c60db70b0637afc6e324e717aa889882f19b22807476e43483af927fc04e0f4445f01dc82f9abb1d14c40aa5b7eacd607bab170b94c9a5eb81fd80dd1189cd4ce201756f3d330385a92f11f599d1fe5843a648118d608b5d34b95c1657d63e1811d52b2b0c346f161a7c6974b8e487e5b3f3aba50ee8723f612a095e4241dc05776661befcb13bf59252ab1476b4c4b449f6c343ba5109fccf77a728e1c40259ef704665db29fc5e1f681e381976c42cb055f8ec6cef09f68bf8c1ca81356d51ba1f8ec548cf4faba0777a7c81cf85ae0497c36ef57b3769e5d089e89ec8ef27112295530629ff5eb43b6809db65613ebafab5b48c9640cf22ccce64dffdf2d02516b874351aecd18df4362c050069851dfc85931fad4e7caab7755d41231feae760828cdc1494887229bc4284581a81a7321253f7db0f4be01ea441f95a10c8c2ce5221251ccfb8e450e3ede9fce5e6218d96a85f6ca54d79e62554531152cca229eee3daeba0f4f2c9f6a01f906e185693b9deea027fbbb196d0bddb1041acf2db466229b664b492aae5cab636bd0b3c74a2d6763137cf2e4a575a519515b89b8a9bb23e174c230833fac838b6b2755c7f90f463ab3b675dbbe6fa9d6368c008e9f7a4dfcdb0de864e06d83a4411715a65b314f96a0eab65919ce4e90b5fd2e690a54273f53bdacf38a25d830c2835fef2d197cf1cd87fdab382d8d76fa5628a418b0f2bd8183636323976f91847ec527c742c2617c3402388ff757e3ed58eb0ab8f97fb85027a08c392f061f6b476307b8e75d795bdb483884cae9ed1fec1fb136c3d480c30d13db0deceae4c5f99d659d2af7ce81be9f1d26d98e9fe7ebbe3d888acefff338872510ddfeceba44467d4aa635acf2034a48539b6ee1ed4b408646bd979a51f948fbc3c88989870bd4809d6eb3bcf91f6b21388074483739f0ca1e3e01979b6d0fe304ff13c5fed595ee3ac1922c96480ec544a42ae76ced44a779a9d38c2c155d3c72"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1150}}, 0x4) 395.325837ms ago: executing program 2 (id=926): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(r3, r4, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[], 0x0) 0s ago: executing program 3 (id=927): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001e80), 0x0, 0x33, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x105, 0x0, 0x12, 0x6, 0x0}) kernel console output (not intermixed with test programs): 211.503442][ T7666] ? __kmalloc_noprof+0x29b/0x4f0 [ 211.503462][ T7666] ? wiphy_new_nm+0x625/0x19e0 [ 211.503480][ T7666] wiphy_new_nm+0x7a1/0x19e0 [ 211.503493][ T7666] ? ieee80211_alloc_hw_nm+0x3da/0x1f20 [ 211.503519][ T7666] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 211.503538][ T7666] ieee80211_alloc_hw_nm+0x3f3/0x1f20 [ 211.503557][ T7666] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 211.503583][ T7666] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 211.503613][ T7666] ? __pfx____ratelimit+0x10/0x10 [ 211.503633][ T7666] ? __pfx__printk+0x10/0x10 [ 211.503651][ T7666] ? netlink_unicast+0x741/0x9e0 [ 211.503680][ T7666] ? rcu_is_watching+0x15/0xb0 [ 211.503696][ T7666] ? do_trace_netlink_extack+0x7e/0x1d0 [ 211.503718][ T7666] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.503738][ T7666] ? __nla_validate_parse+0x251c/0x2d40 [ 211.503755][ T7666] ? __sock_sendmsg+0x21c/0x270 [ 211.503775][ T7666] ? ____sys_sendmsg+0x505/0x830 [ 211.503806][ T7666] hwsim_new_radio_nl+0xea4/0x1b10 [ 211.503830][ T7666] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.503860][ T7666] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.503896][ T7666] ? __nla_parse+0x40/0x60 [ 211.503918][ T7666] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 211.503948][ T7666] genl_family_rcv_msg_doit+0x212/0x300 [ 211.503977][ T7666] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.504012][ T7666] ? bpf_lsm_capable+0x9/0x20 [ 211.504031][ T7666] ? security_capable+0x7e/0x2e0 [ 211.504061][ T7666] genl_rcv_msg+0x60e/0x790 [ 211.504088][ T7666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.504114][ T7666] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.504137][ T7666] ? __asan_memcpy+0x40/0x70 [ 211.504153][ T7666] ? __pfx_ref_tracker_free+0x10/0x10 [ 211.504177][ T7666] netlink_rcv_skb+0x208/0x470 [ 211.504193][ T7666] ? __lock_acquire+0xab9/0xd20 [ 211.504216][ T7666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.504237][ T7666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.504273][ T7666] ? down_read+0x1ad/0x2e0 [ 211.504294][ T7666] genl_rcv+0x28/0x40 [ 211.504314][ T7666] netlink_unicast+0x82c/0x9e0 [ 211.504347][ T7666] ? __pfx_netlink_unicast+0x10/0x10 [ 211.504372][ T7666] ? netlink_sendmsg+0x642/0xb30 [ 211.504387][ T7666] ? skb_put+0x11b/0x210 [ 211.504410][ T7666] netlink_sendmsg+0x805/0xb30 [ 211.504440][ T7666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.504460][ T7666] ? __import_iovec+0x5d4/0x7f0 [ 211.504478][ T7666] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.504498][ T7666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.504515][ T7666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.504534][ T7666] __sock_sendmsg+0x21c/0x270 [ 211.504560][ T7666] ____sys_sendmsg+0x505/0x830 [ 211.504585][ T7666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.504621][ T7666] ___sys_sendmsg+0x21f/0x2a0 [ 211.504644][ T7666] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.504694][ T7666] ? __fget_files+0x2a/0x420 [ 211.504707][ T7666] ? __fget_files+0x3a0/0x420 [ 211.504731][ T7666] __sys_sendmsg+0x164/0x220 [ 211.504752][ T7666] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.504786][ T7666] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.504806][ T7666] __do_fast_syscall_32+0xb6/0x2b0 [ 211.504824][ T7666] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.504843][ T7666] do_fast_syscall_32+0x34/0x80 [ 211.504861][ T7666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.504878][ T7666] RIP: 0023:0xf70ce539 [ 211.504894][ T7666] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 211.504908][ T7666] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 211.504924][ T7666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 211.504936][ T7666] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.504945][ T7666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.504954][ T7666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.504963][ T7666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.504988][ T7666] [ 212.131579][ T7671] syzkaller0: create flow: hash 2738729294 index 1 [ 212.387389][ T7670] syzkaller0: delete flow: hash 2738729294 index 1 [ 212.426568][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.610298][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.684318][ T24] usb 2-1: config 13 has an invalid interface number: 2 but max is 0 [ 212.692574][ T24] usb 2-1: config 13 has no interface number 0 [ 212.698963][ T24] usb 2-1: config 13 interface 2 altsetting 5 endpoint 0x2 has invalid maxpacket 17704, setting to 1024 [ 212.721570][ T24] usb 2-1: config 13 interface 2 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 212.736464][ T24] usb 2-1: config 13 interface 2 altsetting 5 endpoint 0x4 has invalid wMaxPacketSize 0 [ 212.749406][ T24] usb 2-1: config 13 interface 2 has no altsetting 0 [ 212.758663][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=57.1b [ 212.767954][ T24] usb 2-1: New USB device strings: Mfr=1, Product=245, SerialNumber=2 [ 212.780248][ T24] usb 2-1: Product: syz [ 212.784510][ T24] usb 2-1: Manufacturer: syz [ 212.789784][ T24] usb 2-1: SerialNumber: syz [ 212.803865][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.993947][ T24] usb 2-1: can't set config #13, error -71 [ 213.022446][ T24] usb 2-1: USB disconnect, device number 12 [ 214.608268][ T43] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 214.645979][ T43] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.700153][ T7708] fuse: Bad value for 'fd' [ 214.942163][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 215.872783][ T7701] mmap: syz.2.434 (7701): VmData 25747456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 217.136040][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 217.185744][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.245741][ T7749] netlink: 'syz.3.440': attribute type 3 has an invalid length. [ 217.253829][ T7749] netlink: 137316 bytes leftover after parsing attributes in process `syz.3.440'. [ 217.601908][ T30] audit: type=1326 audit(1758422832.592:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 217.873461][ T30] audit: type=1326 audit(1758422832.592:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 217.918204][ T30] audit: type=1326 audit(1758422832.602:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 217.975739][ T30] audit: type=1326 audit(1758422833.002:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 218.022848][ T30] audit: type=1326 audit(1758422833.002:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 219.126737][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 219.562489][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 219.582685][ T7779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'. [ 220.007519][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 220.202204][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.222462][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60463, setting to 1024 [ 220.241715][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 220.252382][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.264731][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.282477][ T7785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.328583][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.198687][ T5957] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 222.692177][ T106] usb 4-1: USB disconnect, device number 21 [ 222.905845][ T5957] usb 1-1: config 0 has no interfaces? [ 222.915695][ T5957] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.945658][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.004568][ T5957] usb 1-1: config 0 descriptor?? [ 223.171099][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 223.355749][ T5957] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 223.428619][ T7818] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[7818] [ 223.495814][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 223.524097][ T5957] usb 4-1: device descriptor read/64, error -71 [ 223.655831][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 223.667752][ T43] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 223.693600][ T43] usb 3-1: config 8 has no interface number 0 [ 223.715788][ T43] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 223.796914][ T43] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.823061][ T43] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 223.834505][ T43] usb 3-1: config 8 interface 39 has no altsetting 0 [ 223.845677][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 223.856303][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.865792][ T43] usb 3-1: Product: syz [ 223.870119][ T43] usb 3-1: Manufacturer: syz [ 223.875252][ T43] usb 3-1: SerialNumber: syz [ 223.926010][ T5957] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 224.105902][ T5957] usb 4-1: device descriptor read/64, error -71 [ 224.216068][ T5957] usb usb4-port1: attempt power cycle [ 224.224697][ T43] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 224.239032][ T43] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 224.261061][ T43] usb 3-1: USB disconnect, device number 13 [ 224.575812][ T5957] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 224.620264][ T5957] usb 4-1: device descriptor read/8, error -71 [ 224.791700][ T43] usb 1-1: USB disconnect, device number 22 [ 224.926847][ T5957] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 224.967930][ T7824] could not allocate digest TFM handle sha512-ssse3 [ 225.019650][ T5957] usb 4-1: device descriptor read/8, error -71 [ 225.146108][ T5957] usb usb4-port1: unable to enumerate USB device [ 226.406389][ T7844] program syz.2.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.624153][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 226.788110][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.827180][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 227.109652][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.131845][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 227.198986][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 227.337685][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.337716][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.337734][ T9] usb 4-1: Product: syz [ 227.337832][ T9] usb 4-1: Manufacturer: syz [ 227.460973][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 227.460995][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 227.531531][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 227.531569][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 227.791332][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.803204][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.834373][ T7852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 228.114258][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 228.120839][ T9] usb 4-1: USB disconnect, device number 26 [ 228.121067][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 228.132841][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 228.200229][ T7856] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 229.902171][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 229.936902][ T7872] netlink: 277 bytes leftover after parsing attributes in process `syz.0.475'. [ 229.955197][ T7872] netlink: 277 bytes leftover after parsing attributes in process `syz.0.475'. [ 230.587007][ T7883] could not allocate digest TFM handle sha512-ssse3 [ 232.341384][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 232.517160][ T7895] vlan2: entered promiscuous mode [ 232.565703][ T7895] syz_tun: entered promiscuous mode [ 232.651711][ T7902] program syz.3.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.218570][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 233.316374][ T7915] netlink: 'syz.0.488': attribute type 2 has an invalid length. [ 233.449526][ T7913] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 233.520176][ T7913] veth1_macvtap: left promiscuous mode [ 233.599682][ T5186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.610768][ T5186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.649839][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.661885][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.670746][ T5186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.682040][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.689517][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.696898][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.705765][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.713431][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.767871][ T7913] bridge0: port 3(macsec0) entered blocking state [ 233.774359][ T7913] bridge0: port 3(macsec0) entered disabled state [ 233.855954][ T7913] macsec0: entered allmulticast mode [ 233.863305][ T106] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.871146][ T7913] macsec0: entered promiscuous mode [ 233.889996][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 234.007908][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.025065][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 234.065798][ T106] usb 5-1: device descriptor read/64, error -32 [ 234.305703][ T106] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.511101][ T106] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.589649][ T106] usb 5-1: config 0 has no interfaces? [ 234.646544][ T106] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 234.680385][ T106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.738431][ T106] usb 5-1: Product: syz [ 234.742718][ T106] usb 5-1: Manufacturer: syz [ 234.758119][ T106] usb 5-1: SerialNumber: syz [ 234.763264][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 234.791419][ T106] usb 5-1: config 0 descriptor?? [ 234.955658][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.143634][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.154973][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.165018][ T7922] bridge_slave_0: entered allmulticast mode [ 235.183093][ T7922] bridge_slave_0: entered promiscuous mode [ 235.197228][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.215025][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.215960][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 235.222431][ T7922] bridge_slave_1: entered allmulticast mode [ 235.245795][ T7951] netlink: 104 bytes leftover after parsing attributes in process `syz.3.497'. [ 235.266308][ T7951] netlink: 104 bytes leftover after parsing attributes in process `syz.3.497'. [ 235.298840][ T7922] bridge_slave_1: entered promiscuous mode [ 235.320647][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.362428][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.443364][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.535031][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.544576][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.573222][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.723842][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.742105][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.781839][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.815957][ T5186] Bluetooth: hci5: command tx timeout [ 235.851135][ T7962] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 235.900760][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.926335][ T7922] team0: Port device team_slave_0 added [ 235.951108][ T7922] team0: Port device team_slave_1 added [ 236.053439][ T7960] could not allocate digest TFM handle sha512-ssse3 [ 236.120847][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.130705][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.170466][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.214311][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.235717][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.329125][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.370138][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.414184][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.425827][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.464182][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.479806][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.545844][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.578104][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 236.664363][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.664823][ T5957] usb 5-1: USB disconnect, device number 16 [ 236.710477][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.750558][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.807651][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.842658][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.859040][ T7922] hsr_slave_0: entered promiscuous mode [ 236.865223][ T7922] hsr_slave_1: entered promiscuous mode [ 236.897522][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.902920][ T7922] debugfs: 'hsr0' already exists in 'hsr' [ 236.919358][ T7922] Cannot create hsr debugfs directory [ 236.975653][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.075705][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.094902][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.135636][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.200533][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.210223][ T24] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.219015][ T24] usb 1-1: Product: syz [ 237.226017][ T24] usb 1-1: Manufacturer: syz [ 237.230708][ T24] usb 1-1: SerialNumber: syz [ 237.239921][ T24] usb 1-1: config 0 descriptor?? [ 237.259745][ T24] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 237.906462][ T5186] Bluetooth: hci5: command tx timeout [ 237.978605][ T7977] could not allocate digest TFM handle sha512-ssse3 [ 238.117927][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 238.119608][ T106] usb 1-1: USB disconnect, device number 23 [ 238.157920][ T106] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 238.903926][ T7989] team0: Port device netdevsim0 removed [ 239.165020][ T7922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.222792][ T7922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.311882][ T7922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.376067][ T7922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.982803][ T5186] Bluetooth: hci5: command tx timeout [ 240.118940][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.387824][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.635256][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 240.808151][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.815278][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.064954][ T8026] could not allocate digest TFM handle sha512-ssse3 [ 241.281259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.288441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.055687][ T5186] Bluetooth: hci5: command tx timeout [ 242.436072][ T8050] netlink: 196 bytes leftover after parsing attributes in process `syz.0.515'. [ 242.464698][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.515'. [ 242.490585][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.515'. [ 242.935210][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.528793][ T7922] veth0_vlan: entered promiscuous mode [ 243.675852][ T5996] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 243.719941][ T7922] veth1_vlan: entered promiscuous mode [ 243.848339][ T5996] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 243.862522][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.917903][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.996148][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.034590][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.067988][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.102457][ T7922] veth0_macvtap: entered promiscuous mode [ 244.118166][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.143967][ T7922] veth1_macvtap: entered promiscuous mode [ 244.156981][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.193817][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.232090][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.252645][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.267445][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.278692][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.294931][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.321245][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.335002][ T1204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.354222][ T1204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.372878][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.382972][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.403129][ T1204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.413268][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.429848][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.439111][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.460126][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.487993][ T1204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.500152][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.516749][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.565137][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.618963][ T43] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 244.646213][ T43] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 244.663278][ T5996] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.682408][ T5996] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 244.715206][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.726487][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.739550][ T5996] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.764256][ T5996] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 244.791684][ T5996] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 244.862992][ T5996] usb 4-1: Product: syz [ 245.027263][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 245.085779][ T5996] usb 4-1: Manufacturer: syz [ 245.205866][ T5996] usb 4-1: SerialNumber: syz [ 245.215197][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.235234][ T8070] fido_id[8070]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.249204][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.337038][ T5996] usb 4-1: config 0 descriptor?? [ 245.370130][ T5996] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 245.428977][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 245.440586][ T43] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 245.449718][ T43] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 245.480608][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 245.692318][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 245.721069][ T8079] FAULT_INJECTION: forcing a failure. [ 245.721069][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.734730][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.790659][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.832900][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.5.479 Not tainted syzkaller #0 PREEMPT(full) [ 245.832917][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.832930][ T8079] Call Trace: [ 245.832935][ T8079] [ 245.832940][ T8079] dump_stack_lvl+0x189/0x250 [ 245.832957][ T8079] ? __pfx____ratelimit+0x10/0x10 [ 245.832968][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.832980][ T8079] ? __pfx__printk+0x10/0x10 [ 245.832993][ T8079] ? __might_fault+0xb0/0x130 [ 245.833015][ T8079] should_fail_ex+0x414/0x560 [ 245.833033][ T8079] _copy_from_user+0x2d/0xb0 [ 245.833046][ T8079] snd_seq_oss_write+0x515/0x930 [ 245.833071][ T8079] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 245.833089][ T8079] ? security_file_permission+0x75/0x290 [ 245.833105][ T8079] odev_write+0x5a/0x80 [ 245.833117][ T8079] ? __pfx_odev_write+0x10/0x10 [ 245.833130][ T8079] vfs_write+0x27b/0xb30 [ 245.833148][ T8079] ? __pfx_vfs_write+0x10/0x10 [ 245.833161][ T8079] ? __fget_files+0x2a/0x420 [ 245.833171][ T8079] ? __fget_files+0x2a/0x420 [ 245.833179][ T8079] ? __fget_files+0x3a0/0x420 [ 245.833186][ T8079] ? __fget_files+0x2a/0x420 [ 245.833199][ T8079] ksys_write+0x145/0x250 [ 245.833213][ T8079] ? __pfx_ksys_write+0x10/0x10 [ 245.833227][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.833239][ T8079] __do_fast_syscall_32+0xb6/0x2b0 [ 245.833251][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.833262][ T8079] do_fast_syscall_32+0x34/0x80 [ 245.833273][ T8079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.833285][ T8079] RIP: 0023:0xf70ce539 [ 245.833294][ T8079] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.833302][ T8079] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 245.833313][ T8079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 245.833320][ T8079] RDX: 000000000000fd85 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.833326][ T8079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.833331][ T8079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.833337][ T8079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.833351][ T8079] [ 246.058097][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.069880][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 246.088653][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 246.089880][ T5919] usb 4-1: USB disconnect, device number 27 [ 246.348970][ T5919] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 246.356176][ T43] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 246.411246][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.464387][ T43] usb 1-1: Product: syz [ 246.500700][ T43] usb 1-1: Manufacturer: syz [ 246.505337][ T43] usb 1-1: SerialNumber: syz [ 246.611647][ T43] usb 1-1: config 0 descriptor?? [ 246.669823][ T8069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 246.670049][ T8089] binder: 8088:8089 ioctl c0306201 0 returned -14 [ 246.687967][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 246.696360][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 246.798564][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 246.924931][ T43] usb 1-1: USB disconnect, device number 24 [ 247.096794][ T5996] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 247.328727][ T5996] usb 3-1: device descriptor read/64, error -71 [ 247.585715][ T5996] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 247.715714][ T5996] usb 3-1: device descriptor read/64, error -71 [ 247.847046][ T5996] usb usb3-port1: attempt power cycle [ 247.875821][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 248.078904][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.089951][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.100067][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.135656][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.175649][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.223345][ T5996] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.294027][ T5996] usb 3-1: device descriptor read/8, error -71 [ 248.317486][ T9] usb 1-1: config 0 descriptor?? [ 248.543385][ T5996] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.577845][ T5996] usb 3-1: device descriptor read/8, error -71 [ 248.716456][ T5996] usb usb3-port1: unable to enumerate USB device [ 248.769134][ T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 250.206002][ T5996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.452534][ T5996] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 250.465118][ T5996] usb 6-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 250.528949][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.671909][ T5996] usb 6-1: config 0 has no interface number 0 [ 250.710738][ T5996] usb 6-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 250.770072][ T5996] usb 6-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 251.332075][ T24] hid (null): invalid report_size 28520 [ 251.341830][ T43] usb 1-1: USB disconnect, device number 25 [ 251.354315][ T24] hid-generic 00A0:0006:0003.000E: invalid report_size 28520 [ 251.410891][ T5996] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 251.422942][ T24] hid-generic 00A0:0006:0003.000E: item 0 2 1 7 parsing failed [ 251.444193][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.462065][ T24] hid-generic 00A0:0006:0003.000E: probe with driver hid-generic failed with error -22 [ 251.483951][ T5996] usb 6-1: Product: syz [ 251.494130][ T5996] usb 6-1: Manufacturer: syz [ 251.524469][ T5996] usb 6-1: SerialNumber: syz [ 251.548878][ T5996] usb 6-1: config 0 descriptor?? [ 251.565305][ T5996] cdc_ether 6-1:0.185: skipping garbage [ 251.595445][ T5996] cdc_ether 6-1:0.185: skipping garbage [ 251.604133][ T5996] cdc_ether 6-1:0.185: skipping garbage [ 251.610501][ T106] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 251.655623][ T5996] usb 6-1: bad CDC descriptors [ 251.672623][ T5996] usb 6-1: unsupported MDLM descriptors [ 251.806549][ T106] usb 3-1: config 0 has no interfaces? [ 251.812192][ T106] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 251.842317][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.855942][ T106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.899858][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.946691][ T106] usb 3-1: config 0 descriptor?? [ 252.097223][ T106] usb 6-1: USB disconnect, device number 2 [ 252.189710][ T8133] netlink: 5 bytes leftover after parsing attributes in process `syz.2.536'. [ 252.199233][ T8133] 0XD: renamed from macvtap0 (while UP) [ 252.280743][ T8133] 0XD: entered allmulticast mode [ 252.286613][ T8133] veth0_macvtap: entered allmulticast mode [ 252.301491][ T8133] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 252.576103][ T106] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.666889][ T8157] fuse: Bad value for 'fd' [ 252.769766][ T106] usb 6-1: Using ep0 maxpacket: 8 [ 252.864436][ T106] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 252.874663][ T106] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 252.899641][ T106] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 252.948466][ T106] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 252.959494][ T106] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.973942][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.119935][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.141011][ T106] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 253.431811][ T8163] could not allocate digest TFM handle sha512-ssse3 [ 253.443912][ T106] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 253.453575][ T106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.473810][ T106] usb 6-1: Product: syz [ 253.491028][ T106] usb 6-1: Manufacturer: syz [ 253.524149][ T106] usb 6-1: SerialNumber: syz [ 253.560406][ T106] usb 6-1: config 0 descriptor?? [ 253.597486][ T8150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.610875][ T106] hub 6-1:0.0: bad descriptor, ignoring hub [ 253.624175][ T106] hub 6-1:0.0: probe with driver hub failed with error -5 [ 253.652338][ T106] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 254.098591][ T106] usb 3-1: USB disconnect, device number 18 [ 254.249641][ T24] usb 6-1: USB disconnect, device number 3 [ 254.552987][ T8170] netlink: 'syz.2.544': attribute type 6 has an invalid length. [ 254.606372][ T8170] netlink: 'syz.2.544': attribute type 3 has an invalid length. [ 254.614046][ T8170] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.544'. [ 254.721399][ T8173] fuse: Unknown parameter '00000000000000000000' [ 255.022512][ T8188] binder: 8174:8188 ioctl c0306201 80000080 returned -14 [ 255.202696][ T8187] netlink: 'syz.4.549': attribute type 1 has an invalid length. [ 255.353574][ T8193] bond2: (slave gretap1): making interface the new active one [ 255.585218][ T8193] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 255.660011][ T8187] vlan2: entered allmulticast mode [ 255.665240][ T8187] bond2: entered allmulticast mode [ 255.673569][ T8187] gretap1: entered allmulticast mode [ 255.679980][ T8187] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 255.729595][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735998][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.825699][ T5919] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 257.995785][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 258.007556][ T5919] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 258.059164][ T5919] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 258.067793][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 258.078005][ T5919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 258.089224][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.154803][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.244370][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 258.313531][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 258.373058][ T43] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 258.739190][ T43] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.832070][ T43] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 258.851631][ T43] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.872413][ T5919] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 258.889762][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.913340][ T5919] usb 4-1: Product: syz [ 259.194113][ T5919] usb 4-1: Manufacturer: syz [ 259.205364][ T5919] usb 4-1: SerialNumber: syz [ 259.572067][ T5919] usb 4-1: config 0 descriptor?? [ 259.650264][ T8236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.665233][ T5919] hub 4-1:0.0: bad descriptor, ignoring hub [ 259.685344][ T5919] hub 4-1:0.0: probe with driver hub failed with error -5 [ 259.712373][ T8252] fido_id[8252]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.729670][ T5919] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 259.890788][ T8263] fido_id[8263]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.943344][ T5919] usb 4-1: USB disconnect, device number 28 [ 260.745797][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 261.008531][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.020935][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.148627][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.832122][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.099410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.153118][ T24] usb 3-1: config 0 descriptor?? [ 262.640150][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 262.725727][ T106] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 263.087786][ T106] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.215702][ T106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.238238][ T8299] could not allocate digest TFM handle sha512-ssse3 [ 263.300759][ T106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.341070][ T106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.401711][ T106] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.722369][ T106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.775431][ T106] usb 5-1: config 0 descriptor?? [ 264.207394][ T106] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 264.717452][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 264.895712][ T106] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 264.905762][ T43] usb 3-1: USB disconnect, device number 19 [ 265.085693][ T106] usb 6-1: Using ep0 maxpacket: 16 [ 265.163552][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 265.245451][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 265.351324][ T106] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 265.408117][ T8333] could not allocate digest TFM handle sha512-ssse3 [ 265.725653][ T5919] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 265.865640][ T106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.007284][ T106] usb 6-1: config 0 descriptor?? [ 266.025698][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 266.094425][ T5919] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 266.161606][ T5919] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 266.182272][ T9] usb 5-1: USB disconnect, device number 17 [ 266.244108][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 266.255700][ T8340] [U] v3f"S/4:XTzWtlW= [ 266.301845][ T8340] [U] J"e:" [ 266.304906][ T5919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 266.357360][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.466297][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.506473][ T106] bigben 0003:146B:0902.0013: unexpected rdesc, please submit for review [ 266.544402][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.572337][ T106] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 266.604238][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 266.617356][ T106] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 266.617391][ T106] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 266.617419][ T106] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 266.617443][ T106] bigben 0003:146B:0902.0013: item fetching failed at offset 4/5 [ 266.618201][ T106] bigben 0003:146B:0902.0013: parse failed [ 266.655376][ T106] bigben 0003:146B:0902.0013: probe with driver bigben failed with error -22 [ 266.705302][ T106] usb 6-1: USB disconnect, device number 4 [ 266.731227][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 266.782042][ T5919] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 266.832286][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.854216][ T8346] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 266.867400][ T8346] veth1_macvtap: left promiscuous mode [ 266.877799][ T8346] bridge0: port 1(macsec0) entered blocking state [ 266.884478][ T8346] bridge0: port 1(macsec0) entered disabled state [ 266.891338][ T8346] macsec0: entered allmulticast mode [ 266.900587][ T8346] macsec0: entered promiscuous mode [ 267.069653][ T5919] usb 4-1: Product: syz [ 267.074503][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 267.095754][ T5919] usb 4-1: Manufacturer: syz [ 267.105626][ T5919] usb 4-1: SerialNumber: syz [ 267.123641][ T5919] usb 4-1: config 0 descriptor?? [ 267.201654][ T8338] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 267.240294][ T5919] hub 4-1:0.0: bad descriptor, ignoring hub [ 267.261380][ T5919] hub 4-1:0.0: probe with driver hub failed with error -5 [ 267.300236][ T5919] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 267.676251][ T9] usb 4-1: USB disconnect, device number 29 [ 267.682235][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 267.997525][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 268.096942][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 269.217061][ T8377] binder: 8369:8377 ioctl c0306201 80000080 returned -14 [ 272.776003][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.952088][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.054816][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.130668][ T8397] loop6: detected capacity change from 0 to 7 [ 273.166651][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 273.187771][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.253912][ T9] usb 1-1: config 0 descriptor?? [ 273.333841][ T8397] Dev loop6: unable to read RDB block 7 [ 273.355969][ T8397] loop6: unable to read partition table [ 273.376684][ T8397] loop6: partition table beyond EOD, truncated [ 273.675803][ T8397] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 274.256200][ T8405] batadv_slave_1: entered promiscuous mode [ 274.262621][ T8405] lo: entered promiscuous mode [ 274.313747][ T8404] lo: left promiscuous mode [ 274.346023][ T8404] batadv_slave_1: left promiscuous mode [ 274.698528][ T9] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #100: -71 [ 274.707741][ T9] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 274.719136][ T9] uclogic 0003:256C:006D.0014: failed probing pen v1 parameters: -71 [ 274.750162][ T9] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 274.805681][ T5996] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 275.209214][ T5957] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 275.247873][ T9] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 275.264883][ T5957] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.312736][ T9] usb 1-1: USB disconnect, device number 26 [ 275.339044][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 275.426128][ T5996] usb 6-1: Using ep0 maxpacket: 8 [ 275.492587][ T5996] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 275.525656][ T5996] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 275.590705][ T5996] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 275.632276][ T5996] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 275.692172][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.749262][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.804274][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 275.865727][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 275.955656][ T5996] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 275.985006][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.995871][ T5996] usb 6-1: Product: syz [ 276.000047][ T5996] usb 6-1: Manufacturer: syz [ 276.014867][ T5996] usb 6-1: SerialNumber: syz [ 276.038044][ T5996] usb 6-1: config 0 descriptor?? [ 276.045166][ T8413] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 276.059919][ T5996] hub 6-1:0.0: bad descriptor, ignoring hub [ 276.074767][ T5996] hub 6-1:0.0: probe with driver hub failed with error -5 [ 276.090171][ T5996] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 276.351694][ T9] usb 6-1: USB disconnect, device number 5 [ 276.695060][ T5957] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 276.737104][ T8445] netlink: zone id is out of range [ 276.779177][ T8445] netlink: zone id is out of range [ 276.805054][ T8445] netlink: zone id is out of range [ 276.850373][ T8445] netlink: zone id is out of range [ 276.858424][ T5957] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.884750][ T8445] netlink: zone id is out of range [ 276.965664][ T8445] netlink: zone id is out of range [ 276.971719][ T8445] netlink: zone id is out of range [ 277.235685][ T8445] netlink: zone id is out of range [ 277.281052][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 277.315938][ T8445] netlink: zone id is out of range [ 277.321059][ T8445] netlink: zone id is out of range [ 279.130563][ T8488] tipc: Enabling of bearer rejected, failed to enable media [ 279.638791][ T5996] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 279.688354][ T5996] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.976437][ T8494] fido_id[8494]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.998325][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 280.097008][ T8496] FAULT_INJECTION: forcing a failure. [ 280.097008][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.225679][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 280.225696][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.225702][ T8496] Call Trace: [ 280.225708][ T8496] [ 280.225713][ T8496] dump_stack_lvl+0x189/0x250 [ 280.225730][ T8496] ? __pfx____ratelimit+0x10/0x10 [ 280.225741][ T8496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.225753][ T8496] ? __pfx__printk+0x10/0x10 [ 280.225767][ T8496] ? __might_fault+0xb0/0x130 [ 280.225786][ T8496] should_fail_ex+0x414/0x560 [ 280.225803][ T8496] fpu__restore_sig+0x9de/0x1100 [ 280.225823][ T8496] ? __pfx_fpu__restore_sig+0x10/0x10 [ 280.225851][ T8496] ia32_restore_sigcontext+0x449/0x5b0 [ 280.225864][ T8496] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 280.225875][ T8496] ? _raw_spin_lock_irq+0xae/0xf0 [ 280.225890][ T8496] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 280.225910][ T8496] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.225924][ T8496] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.225935][ T8496] __ia32_compat_sys_rt_sigreturn+0x140/0x200 [ 280.225946][ T8496] ? __task_pid_nr_ns+0x28/0x470 [ 280.225959][ T8496] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 280.225972][ T8496] ? do_int80_emulation+0xec/0x390 [ 280.225983][ T8496] ? asm_int80_emulation+0x1a/0x20 [ 280.225993][ T8496] do_int80_emulation+0x126/0x390 [ 280.226004][ T8496] ? clear_bhb_loop+0x60/0xb0 [ 280.226014][ T8496] ? clear_bhb_loop+0x60/0xb0 [ 280.226030][ T8496] asm_int80_emulation+0x1a/0x20 [ 280.226043][ T8496] RIP: 0023:0xf707e537 [ 280.226055][ T8496] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.226064][ T8496] RSP: 002b:00000000f546e55c EFLAGS: 00000206 [ 280.226073][ T8496] RAX: 0000000000000174 RBX: 0000000000000004 RCX: 0000000080000240 [ 280.226080][ T8496] RDX: 0000000040010020 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.226086][ T8496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.226091][ T8496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.226097][ T8496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.226111][ T8496] [ 281.295804][ T8516] program syz.5.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.616540][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.631'. [ 281.683895][ T8526] netlink: 'syz.5.631': attribute type 10 has an invalid length. [ 281.749013][ T8526] veth1_macvtap: left promiscuous mode [ 281.763441][ T8526] bridge0: port 3(macsec0) entered blocking state [ 281.789875][ T8526] bridge0: port 3(macsec0) entered disabled state [ 281.798510][ T8526] macsec0: entered allmulticast mode [ 281.812425][ T8526] macsec0: entered promiscuous mode [ 281.995766][ T106] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 282.018930][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.634'. [ 282.259429][ T106] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.268924][ T106] usb 6-1: config 0 has no interfaces? [ 282.277364][ T106] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 282.286560][ T106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.396259][ T106] usb 6-1: Product: syz [ 282.669376][ T106] usb 6-1: Manufacturer: syz [ 282.702883][ T106] usb 6-1: SerialNumber: syz [ 282.735358][ T106] usb 6-1: config 0 descriptor?? [ 282.894697][ T8546] [U] v3f"S/4:XTzWtlW= [ 282.900932][ T8546] [U] J"e:" [ 282.946608][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.640'. [ 283.180716][ T8552] program syz.0.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.125710][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 286.324619][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.375719][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.409747][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.434904][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.489062][ T43] usb 1-1: SerialNumber: syz [ 286.527007][ T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 286.575056][ T24] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.584758][ T5996] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.594714][ T43] usb 1-1: can't set config #1, error -71 [ 286.625537][ T43] usb 1-1: USB disconnect, device number 27 [ 286.768980][ T24] usb 6-1: USB disconnect, device number 6 [ 286.783136][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.795086][ T5996] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 286.842073][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.892851][ T5996] usb 5-1: config 0 descriptor?? [ 287.317788][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.376218][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.394826][ T5996] lenovo 0003:17EF:60A3.0019: hidraw1: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 287.545656][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.584299][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 287.773657][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.650'. [ 287.956919][ T8584] vlan2: entered promiscuous mode [ 287.961989][ T8584] bridge0: entered promiscuous mode [ 287.989528][ T8590] program syz.2.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.650541][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.5.658'. [ 289.820966][ T8612] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 290.067845][ T5957] usb 5-1: USB disconnect, device number 18 [ 290.186455][ T8622] fuse: Bad value for 'user_id' [ 290.191347][ T8622] fuse: Bad value for 'user_id' [ 290.192545][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'. [ 290.248346][ T8623] hsr0: entered promiscuous mode [ 290.376374][ T8612] veth3: entered promiscuous mode [ 290.388357][ T8612] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 290.969271][ T5919] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 291.147884][ T5919] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.369595][ T8636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.827815][ T8637] fido_id[8637]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.929545][ T30] audit: type=1326 audit(1758422906.982:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 291.951363][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.007283][ T30] audit: type=1326 audit(1758422906.982:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 292.031296][ T30] audit: type=1326 audit(1758422906.982:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 292.053428][ T30] audit: type=1326 audit(1758422906.982:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 292.076937][ T30] audit: type=1326 audit(1758422906.982:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 292.098742][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.105133][ T30] audit: type=1326 audit(1758422906.982:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 292.201542][ T30] audit: type=1326 audit(1758422907.032:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 292.266600][ T30] audit: type=1326 audit(1758422907.032:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 292.290347][ T30] audit: type=1326 audit(1758422907.032:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 292.314455][ T30] audit: type=1326 audit(1758422907.032:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 292.675989][ T5919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 292.845793][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 292.864450][ T5919] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 292.913276][ T5919] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 292.977010][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 293.042427][ T5919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 293.195411][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.284431][ T8610] hsr0: left promiscuous mode [ 293.355774][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 293.396644][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.670'. [ 293.428084][ T5919] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 293.445850][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.525546][ T5919] usb 5-1: Product: syz [ 293.534141][ T5919] usb 5-1: Manufacturer: syz [ 293.595998][ T5919] usb 5-1: SerialNumber: syz [ 293.659838][ T5919] usb 5-1: config 0 descriptor?? [ 293.679426][ T5919] hub 5-1:0.0: bad descriptor, ignoring hub [ 293.692790][ T5919] hub 5-1:0.0: probe with driver hub failed with error -5 [ 294.206458][ T5957] usb 5-1: USB disconnect, device number 19 [ 294.516958][ T8668] netlink: 'syz.5.674': attribute type 1 has an invalid length. [ 294.584225][ T8668] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 295.000124][ T8672] veth3: entered promiscuous mode [ 295.139467][ T8675] ======================================================= [ 295.139467][ T8675] WARNING: The mand mount option has been deprecated and [ 295.139467][ T8675] and is ignored by this kernel. Remove the mand [ 295.139467][ T8675] option from the mount to silence this warning. [ 295.139467][ T8675] ======================================================= [ 295.525969][ T5957] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 295.635923][ T106] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 295.695723][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 295.768299][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 295.800126][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.984941][ T5957] pvrusb2: Hardware description: Terratec Grabster AV400 [ 295.992398][ T5957] pvrusb2: ********** [ 296.000717][ T5957] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.022267][ T5957] pvrusb2: Important functionality might not be entirely working. [ 296.114929][ T5957] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.181106][ T5957] pvrusb2: ********** [ 296.202490][ T2346] pvrusb2: Invalid write control endpoint [ 296.463045][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.471887][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.489427][ T5957] usb 3-1: USB disconnect, device number 20 [ 296.589453][ T2346] pvrusb2: Invalid write control endpoint [ 296.600016][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 296.610885][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 296.624599][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 296.655086][ T2346] pvrusb2: Device being rendered inoperable [ 296.679245][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 296.703296][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 296.750816][ T2346] pvrusb2: Attached sub-driver cx25840 [ 296.790222][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 296.860088][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 297.842083][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 298.631465][ T8708] net_ratelimit: 77 callbacks suppressed [ 298.631485][ T8708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.887697][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.147412][ T8722] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 299.239253][ T8722] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 299.450915][ T5957] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 299.626940][ T8725] veth3: entered promiscuous mode [ 299.718101][ T8725] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 299.727619][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 299.755885][ T5957] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 299.784433][ T5957] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 299.863153][ T5957] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 299.910871][ T8730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.936457][ T5957] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 299.963796][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.005096][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 300.180506][ T5957] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 300.193108][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.258330][ T5957] usb 4-1: Product: syz [ 300.282519][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 300.311759][ T5957] usb 4-1: Manufacturer: syz [ 300.329821][ T5957] usb 4-1: SerialNumber: syz [ 300.335941][ T8736] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 300.357893][ T106] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 300.377565][ T5957] usb 4-1: config 0 descriptor?? [ 300.386466][ T8736] veth1_macvtap: left promiscuous mode [ 300.395151][ T8736] bridge0: port 3(macsec0) entered blocking state [ 300.422832][ T5957] hub 4-1:0.0: bad descriptor, ignoring hub [ 300.452510][ T5957] hub 4-1:0.0: probe with driver hub failed with error -5 [ 300.479529][ T8736] bridge0: port 3(macsec0) entered disabled state [ 300.599365][ T8736] macsec0: entered allmulticast mode [ 300.615692][ T106] usb 1-1: Using ep0 maxpacket: 16 [ 300.635205][ T106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.661542][ T8736] macsec0: entered promiscuous mode [ 300.696122][ T5957] usb 4-1: USB disconnect, device number 30 [ 300.770832][ T106] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.823711][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.879449][ T106] usb 1-1: Product: syz [ 300.893344][ T106] usb 1-1: Manufacturer: syz [ 300.920437][ T106] usb 1-1: SerialNumber: syz [ 300.985803][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 301.059991][ T106] usb 1-1: config 0 descriptor?? [ 301.111887][ T106] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.199515][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 301.226090][ T106] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 301.338084][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.400032][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 301.413688][ T8745] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 301.422161][ T8745] veth1_macvtap: left promiscuous mode [ 301.467498][ T8741] netlink: 'syz.5.693': attribute type 10 has an invalid length. [ 301.845078][ T8745] bridge0: port 1(macsec0) entered blocking state [ 301.854052][ T8745] bridge0: port 1(macsec0) entered disabled state [ 301.874211][ T24] usb 3-1: config 0 has no interfaces? [ 301.901519][ T8745] macsec0: entered allmulticast mode [ 301.907262][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 301.928441][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 301.977376][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.993193][ T8745] macsec0: entered promiscuous mode [ 302.059654][ T24] usb 3-1: Product: syz [ 302.071442][ T24] usb 3-1: Manufacturer: syz [ 302.113749][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 302.145828][ T24] usb 3-1: SerialNumber: syz [ 302.158486][ T43] usb 6-1: config 0 has no interfaces? [ 302.176955][ T43] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 302.193488][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.222731][ T5996] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 302.263954][ T24] usb 3-1: config 0 descriptor?? [ 302.290231][ T43] usb 6-1: Product: syz [ 302.311142][ T43] usb 6-1: Manufacturer: syz [ 302.350353][ T43] usb 6-1: SerialNumber: syz [ 302.397621][ T43] usb 6-1: config 0 descriptor?? [ 302.451513][ T106] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 302.458999][ T5996] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.482302][ T5996] usb 4-1: config 0 has no interfaces? [ 302.491903][ T5996] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 302.503435][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.512006][ T5996] usb 4-1: Product: syz [ 302.518402][ T5996] usb 4-1: Manufacturer: syz [ 302.523108][ T5996] usb 4-1: SerialNumber: syz [ 302.554612][ T106] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.604430][ T5996] usb 4-1: config 0 descriptor?? [ 302.614999][ T106] em28xx 1-1:0.0: board has no eeprom [ 302.956922][ T106] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.979707][ T106] em28xx 1-1:0.0: dvb set to bulk mode. [ 303.077533][ T24] em28xx 1-1:0.0: Binding DVB extension [ 303.151468][ T106] usb 1-1: USB disconnect, device number 28 [ 303.173298][ T106] em28xx 1-1:0.0: Disconnecting em28xx [ 303.311026][ T8752] ipvlan1: entered promiscuous mode [ 303.316503][ T8752] ipvlan1: entered allmulticast mode [ 303.321999][ T8752] veth0_vlan: entered allmulticast mode [ 303.377925][ T24] em28xx 1-1:0.0: Registering input extension [ 303.384392][ T106] em28xx 1-1:0.0: Closing input extension [ 303.515547][ T106] em28xx 1-1:0.0: Freeing device [ 303.562300][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 303.595975][ T5996] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 303.778931][ T5996] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 303.813083][ T5996] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.837023][ T5996] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 303.848929][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.881022][ T5996] usb 5-1: Product: syz [ 303.894513][ T5996] usb 5-1: Manufacturer: syz [ 303.910798][ T5996] usb 5-1: SerialNumber: syz [ 303.932500][ T5996] usb 5-1: config 0 descriptor?? [ 303.984919][ T5996] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 304.237117][ T106] usb 6-1: USB disconnect, device number 9 [ 304.321972][ T5957] usb 3-1: USB disconnect, device number 21 [ 304.800056][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 304.809388][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 304.836952][ T5996] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 304.910024][ T5996] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 304.945106][ T5996] usb 5-1: USB disconnect, device number 20 [ 305.450343][ T5996] usb 4-1: USB disconnect, device number 31 [ 306.803303][ T8771] vivid-000: ================= START STATUS ================= [ 306.873983][ T8771] vivid-000: Test Pattern: 75% Colorbar [ 306.936058][ T8771] vivid-000: Fill Percentage of Frame: 100 [ 306.977296][ T8771] vivid-000: Horizontal Movement: No Movement [ 306.977453][ T8771] vivid-000: Vertical Movement: Move Up [ 306.977503][ T8771] vivid-000: OSD Text Mode: All [ 306.977526][ T8771] vivid-000: Show Border: false [ 306.977551][ T8771] vivid-000: Show Square: false [ 306.977572][ T8771] vivid-000: Sensor Flipped Horizontally: false [ 306.981834][ T8771] vivid-000: Sensor Flipped Vertically: false [ 306.981856][ T8771] vivid-000: Insert SAV Code in Image: false [ 306.983109][ T8771] vivid-000: Insert EAV Code in Image: false [ 307.150566][ T8771] vivid-000: Insert Video Guard Band: false [ 307.185753][ T8771] vivid-000: Reduced Framerate: false [ 307.221797][ T8771] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 307.265857][ T8771] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 307.305837][ T8771] vivid-000: Enable Capture Cropping: true grabbed [ 307.361487][ T8771] vivid-000: Enable Capture Composing: true grabbed [ 307.523454][ T8771] vivid-000: Enable Capture Scaler: true grabbed [ 307.618706][ T8771] vivid-000: Timestamp Source: End of Frame [ 307.675859][ T5957] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 307.799856][ T8771] vivid-000: Colorspace: sRGB [ 307.811381][ T8771] vivid-000: Transfer Function: Default [ 307.827932][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 307.852383][ T8771] vivid-000: Y'CbCr Encoding: Default [ 307.914033][ T5957] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 307.946143][ T8771] vivid-000: HSV Encoding: Hue 0-179 [ 307.951478][ T8771] vivid-000: Quantization: Default [ 307.979938][ T5957] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 308.034161][ T5957] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 308.058534][ T8771] vivid-000: Apply Alpha To Red Only: false [ 308.087994][ T5957] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 308.101793][ T8771] vivid-000: Standard Aspect Ratio: 4x3 [ 308.143446][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.179152][ T8771] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 308.214023][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 308.289200][ T5957] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 308.298318][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.307728][ T5957] usb 6-1: Product: syz [ 308.313108][ T5957] usb 6-1: Manufacturer: syz [ 308.317986][ T5957] usb 6-1: SerialNumber: syz [ 308.334814][ T5957] usb 6-1: config 0 descriptor?? [ 308.335652][ T8771] vivid-000: DV Timings: [ 308.347354][ T5957] hub 6-1:0.0: bad descriptor, ignoring hub [ 308.374744][ T8771] 640x480p59 inactive [ 308.380118][ T8771] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 308.397189][ T5957] hub 6-1:0.0: probe with driver hub failed with error -5 [ 308.410790][ T8771] vivid-000: Maximum EDID Blocks: 2 [ 308.429354][ T8771] vivid-000: Limited RGB Range (16-235): false [ 308.481037][ T8771] vivid-000: Rx RGB Quantization Range: Automatic [ 308.487712][ T8771] vivid-000: Power Present: 0x00000001 [ 308.503425][ T8771] tpg source WxH: 3840x2160 (R'G'B) [ 308.513582][ T8771] tpg field: 1 [ 308.547293][ T8771] tpg crop: (0,0)/3840x2160 [ 308.571483][ T8771] tpg compose: (0,0)/3840x2160 [ 308.611696][ T8771] tpg colorspace: 8 [ 308.625914][ T8771] tpg transfer function: 0/2 [ 308.675926][ T5996] usb 6-1: USB disconnect, device number 10 [ 308.688701][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 308.704040][ T8804] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 308.735093][ T8771] tpg quantization: 0/1 [ 308.750572][ T8771] tpg RGB range: 0/2 [ 308.830939][ T8771] vivid-000: ================== END STATUS ================== [ 309.045601][ T5996] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 309.246630][ T5996] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.291992][ T5996] usb 4-1: config 0 has no interfaces? [ 309.302718][ T5996] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 309.322165][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.365759][ T5996] usb 4-1: Product: syz [ 309.385609][ T5996] usb 4-1: Manufacturer: syz [ 309.390225][ T5996] usb 4-1: SerialNumber: syz [ 309.448852][ T5996] usb 4-1: config 0 descriptor?? [ 310.431826][ T8817] block nbd0: Attempted send on invalid socket [ 310.472332][ T8817] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 311.173758][ T8825] tipc: New replicast peer: 255.255.255.255 [ 311.185486][ T8825] tipc: Enabled bearer , priority 10 [ 311.438081][ T5957] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 311.628038][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.658985][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.699604][ T8833] fuse: Unknown parameter 'g__id' [ 311.699991][ T9] usb 4-1: USB disconnect, device number 32 [ 311.730271][ T5957] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 311.763496][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.900290][ T5957] usb 3-1: SerialNumber: syz [ 312.220259][ T5957] usb 3-1: 0:2 : does not exist [ 312.232895][ T5957] usb 3-1: USB disconnect, device number 22 [ 312.316333][ T9] tipc: Node number set to 537765742 [ 312.769667][ T8166] udevd[8166]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.096661][ T8868] program syz.5.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.124993][ T8857] could not allocate digest TFM handle sha512-ssse3 [ 315.306996][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 315.330058][ T8887] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 315.611774][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 315.962171][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.066995][ T24] usb 3-1: config 0 has no interfaces? [ 316.090909][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 316.119421][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 316.238109][ T8894] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 316.335764][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.343795][ T24] usb 3-1: Product: syz [ 316.446492][ T24] usb 3-1: Manufacturer: syz [ 316.551607][ T24] usb 3-1: SerialNumber: syz [ 316.624422][ T24] usb 3-1: config 0 descriptor?? [ 316.645652][ T106] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 317.599275][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.605687][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.680021][ T106] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.750228][ T106] usb 1-1: config 0 has no interfaces? [ 317.814883][ T106] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 317.874242][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.942179][ T106] usb 1-1: Product: syz [ 317.962601][ T106] usb 1-1: Manufacturer: syz [ 317.987718][ T106] usb 1-1: SerialNumber: syz [ 318.029464][ T106] usb 1-1: config 0 descriptor?? [ 318.795355][ T8919] program syz.3.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.882988][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 318.917441][ T8922] netlink: 236 bytes leftover after parsing attributes in process `syz.4.736'. [ 318.952556][ T8922] netlink: 236 bytes leftover after parsing attributes in process `syz.4.736'. [ 319.782755][ T9] usb 3-1: USB disconnect, device number 23 [ 320.261884][ T5957] usb 1-1: USB disconnect, device number 29 [ 320.267990][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 320.461210][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 320.495816][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.552549][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.581835][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.598638][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.619747][ T9] usb 3-1: Product: syz [ 320.623950][ T9] usb 3-1: Manufacturer: syz [ 320.630679][ T9] usb 3-1: SerialNumber: syz [ 320.666337][ T9] usb 3-1: config 0 descriptor?? [ 320.676378][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 320.687343][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 320.700957][ T9] usb 3-1: selecting invalid altsetting 0 [ 320.779029][ T5919] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 321.136065][ T5919] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.707470][ T9] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 322.292263][ T9] usb 3-1: failed to restore interface 0 altsetting 251 (error=-71) [ 322.326553][ T8964] could not allocate digest TFM handle sha512-ssse3 [ 322.424987][ T8968] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.466844][ T9] usb 3-1: USB disconnect, device number 24 [ 322.517957][ T8960] could not allocate digest TFM handle sha512-ssse3 [ 322.702366][ T8954] fido_id[8954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 322.945895][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 323.148493][ T8974] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 323.177625][ T8974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 323.289940][ T9] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 323.362787][ T9] usb 3-1: string descriptor 0 read error: -71 [ 323.418912][ T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 323.459104][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.529412][ T9] usb 3-1: config 0 descriptor?? [ 323.552821][ T9] usb 3-1: can't set config #0, error -71 [ 323.629212][ T9] usb 3-1: USB disconnect, device number 25 [ 323.845431][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 323.858149][ T8986] netlink: 'syz.5.751': attribute type 10 has an invalid length. [ 324.155832][ T5947] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 324.317461][ T5947] usb 6-1: unable to get BOS descriptor or descriptor too short [ 324.342976][ T5947] usb 6-1: config 0 has no interfaces? [ 324.352128][ T5947] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 324.364388][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.379224][ T5947] usb 6-1: Product: syz [ 324.401319][ T5947] usb 6-1: Manufacturer: syz [ 324.429310][ T5947] usb 6-1: SerialNumber: syz [ 324.482802][ T5947] usb 6-1: config 0 descriptor?? [ 324.821399][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 324.845888][ T8997] netlink: 'syz.4.753': attribute type 10 has an invalid length. [ 325.105703][ T5947] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 325.372901][ T9006] program syz.0.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.400976][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.441326][ T5947] usb 5-1: config 0 has no interfaces? [ 325.656917][ T5947] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 325.680338][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.714064][ T5947] usb 5-1: Product: syz [ 325.756467][ T5947] usb 5-1: Manufacturer: syz [ 325.761097][ T5947] usb 5-1: SerialNumber: syz [ 325.839163][ T5947] usb 5-1: config 0 descriptor?? [ 325.961128][ T9019] netlink: 45 bytes leftover after parsing attributes in process `syz.0.761'. [ 326.298055][ T9019] dlm: Unknown command passed to DLM device : 0 [ 326.298055][ T9019] [ 326.863856][ T43] usb 6-1: USB disconnect, device number 11 [ 327.435443][ T9031] input: syz1 as /devices/virtual/input/input25 [ 328.026666][ T9038] warning: `syz.2.768' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 328.118813][ T9041] program syz.0.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.265933][ T43] usb 5-1: USB disconnect, device number 21 [ 328.379204][ T106] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 328.411770][ T106] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 328.465677][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 328.595736][ T24] usb 3-1: device descriptor read/64, error -71 [ 328.902882][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 328.922219][ T9060] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 328.976964][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 329.119129][ T5947] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 329.686189][ T5947] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 329.963424][ T24] usb 3-1: device descriptor read/64, error -71 [ 330.086214][ T24] usb usb3-port1: attempt power cycle [ 330.365882][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 330.475719][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 330.596728][ T24] usb 3-1: device descriptor read/8, error -71 [ 330.626208][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.651355][ T9] usb 1-1: config 0 has no interfaces? [ 330.668683][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 330.677922][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.686391][ T9] usb 1-1: Product: syz [ 330.690713][ T9] usb 1-1: Manufacturer: syz [ 330.695286][ T9] usb 1-1: SerialNumber: syz [ 330.707747][ T9] usb 1-1: config 0 descriptor?? [ 330.875745][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 331.355682][ T24] usb 3-1: device not accepting address 29, error -71 [ 331.482561][ T24] usb usb3-port1: unable to enumerate USB device [ 331.875397][ T9074] could not allocate digest TFM handle sha512-ssse3 [ 332.001282][ T9078] could not allocate digest TFM handle sha512-ssse3 [ 332.874987][ T9089] netlink: 'syz.3.779': attribute type 13 has an invalid length. [ 332.884892][ T24] usb 1-1: USB disconnect, device number 30 [ 333.030205][ T9091] FAULT_INJECTION: forcing a failure. [ 333.030205][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 333.083553][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.0.780 Not tainted syzkaller #0 PREEMPT(full) [ 333.083578][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.083591][ T9091] Call Trace: [ 333.083597][ T9091] [ 333.083605][ T9091] dump_stack_lvl+0x189/0x250 [ 333.083629][ T9091] ? __pfx____ratelimit+0x10/0x10 [ 333.083647][ T9091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.083666][ T9091] ? __pfx__printk+0x10/0x10 [ 333.083688][ T9091] ? __lock_acquire+0xab9/0xd20 [ 333.083717][ T9091] should_fail_ex+0x414/0x560 [ 333.083749][ T9091] should_failslab+0xa8/0x100 [ 333.083780][ T9091] kmem_cache_alloc_noprof+0x73/0x3c0 [ 333.083799][ T9091] ? skb_clone+0x212/0x3a0 [ 333.083825][ T9091] skb_clone+0x212/0x3a0 [ 333.083847][ T9091] __netlink_deliver_tap+0x404/0x850 [ 333.083877][ T9091] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.083893][ T9091] netlink_deliver_tap+0x19c/0x1b0 [ 333.083909][ T9091] netlink_unicast+0x7fa/0x9e0 [ 333.083936][ T9091] ? __pfx_netlink_unicast+0x10/0x10 [ 333.083959][ T9091] ? netlink_sendmsg+0x642/0xb30 [ 333.083974][ T9091] ? skb_put+0x11b/0x210 [ 333.083994][ T9091] netlink_sendmsg+0x805/0xb30 [ 333.084018][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.084038][ T9091] ? __import_iovec+0x5d4/0x7f0 [ 333.084056][ T9091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.084075][ T9091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.084092][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.084110][ T9091] __sock_sendmsg+0x21c/0x270 [ 333.084136][ T9091] ____sys_sendmsg+0x505/0x830 [ 333.084163][ T9091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.084200][ T9091] ___sys_sendmsg+0x21f/0x2a0 [ 333.084223][ T9091] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.084279][ T9091] ? __fget_files+0x2a/0x420 [ 333.084294][ T9091] ? __fget_files+0x3a0/0x420 [ 333.084326][ T9091] __sys_sendmsg+0x164/0x220 [ 333.084348][ T9091] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.084385][ T9091] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.084406][ T9091] __do_fast_syscall_32+0xb6/0x2b0 [ 333.084425][ T9091] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.084447][ T9091] do_fast_syscall_32+0x34/0x80 [ 333.084466][ T9091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.084490][ T9091] RIP: 0023:0xf70ce539 [ 333.084507][ T9091] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 333.084522][ T9091] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 333.084541][ T9091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 333.084553][ T9091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.084563][ T9091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.084573][ T9091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 333.084584][ T9091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.084611][ T9091] [ 333.368937][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.023701][ T9105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 334.074324][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 334.506526][ T24] usb 6-1: device descriptor read/64, error -71 [ 334.766243][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 334.939331][ T24] usb 6-1: device descriptor read/64, error -71 [ 334.942543][ T5947] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 335.086018][ T24] usb usb6-port1: attempt power cycle [ 335.382651][ T5947] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.435742][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 335.509887][ T24] usb 6-1: device descriptor read/8, error -71 [ 335.916477][ T9123] fido_id[9123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.940310][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 335.996614][ T24] usb 6-1: device descriptor read/8, error -71 [ 336.118295][ T24] usb usb6-port1: unable to enumerate USB device [ 336.824554][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.792'. [ 336.840278][ T9146] netlink: 'syz.5.792': attribute type 10 has an invalid length. [ 337.103520][ T5947] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 337.145872][ T9137] could not allocate digest TFM handle sha512-ssse3 [ 337.177288][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 337.277896][ T9135] could not allocate digest TFM handle sha512-ssse3 [ 337.355801][ T5947] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.374161][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.439562][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.496871][ T43] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 337.518995][ T5947] usb 6-1: config 0 has no interfaces? [ 337.522755][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 337.574561][ T43] usb 1-1: SerialNumber: syz [ 337.622101][ T5947] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 337.682077][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.716401][ T43] usb 1-1: config 0 descriptor?? [ 337.757420][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 337.805045][ T5947] usb 6-1: Product: syz [ 337.827748][ T5947] usb 6-1: Manufacturer: syz [ 337.861382][ T5947] usb 6-1: SerialNumber: syz [ 337.921018][ T5947] usb 6-1: config 0 descriptor?? [ 339.145680][ T5947] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 339.205702][ T106] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 339.307235][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 339.340339][ T5947] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 339.355861][ T106] usb 5-1: device descriptor read/64, error -71 [ 339.369630][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.537041][ T5947] usb 3-1: Product: syz [ 339.571832][ T5947] usb 3-1: Manufacturer: syz [ 339.585746][ T5947] usb 3-1: SerialNumber: syz [ 339.595725][ T106] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 339.614836][ T5947] usb 3-1: config 0 descriptor?? [ 339.656434][ T5947] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 339.704627][ T5947] usb 3-1: Detected FT232H [ 339.756931][ T5919] usb 1-1: USB disconnect, device number 31 [ 339.775800][ T106] usb 5-1: device descriptor read/64, error -71 [ 339.867803][ T5947] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 339.917342][ T106] usb usb5-port1: attempt power cycle [ 340.066350][ T5996] usb 6-1: USB disconnect, device number 16 [ 340.276760][ T106] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 340.316581][ T106] usb 5-1: device descriptor read/8, error -71 [ 340.334478][ T5947] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 340.537142][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.572360][ T5947] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 340.592335][ T106] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 340.596216][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.634353][ T5947] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.662854][ T106] usb 5-1: device descriptor read/8, error -71 [ 340.769597][ T5947] usb 3-1: USB disconnect, device number 30 [ 340.834591][ T5947] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 340.892310][ T5947] ftdi_sio 3-1:0.0: device disconnected [ 340.892423][ T106] usb usb5-port1: unable to enumerate USB device [ 342.375822][ T9194] could not allocate digest TFM handle sha512-ssse3 [ 343.103157][ T9211] fuse: Bad value for 'fd' [ 343.115850][ T9211] fuse: Bad value for 'fd' [ 343.134148][ T9211] netlink: 44 bytes leftover after parsing attributes in process `syz.2.811'. [ 343.386501][ T9206] could not allocate digest TFM handle sha512-ssse3 [ 343.618270][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 343.709267][ T9223] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 344.155789][ T5947] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 344.610514][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.620501][ T5947] usb 1-1: config 0 has no interfaces? [ 344.631706][ T5947] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 344.661360][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.734513][ T5947] usb 1-1: Product: syz [ 344.780852][ T5947] usb 1-1: Manufacturer: syz [ 344.806629][ T5947] usb 1-1: SerialNumber: syz [ 344.819302][ T5947] usb 1-1: config 0 descriptor?? [ 344.862642][ T9237] could not allocate digest TFM handle sha512-ssse3 [ 345.025705][ T106] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 345.202504][ T106] usb 3-1: device descriptor read/64, error -71 [ 345.344204][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.525904][ T106] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 345.675203][ T106] usb 3-1: device descriptor read/64, error -71 [ 345.887684][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 345.935402][ T106] usb usb3-port1: attempt power cycle [ 346.074171][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.092684][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.166726][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.175686][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 346.222381][ T9] usb 5-1: can't read configurations, error -71 [ 346.325807][ T106] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 346.346216][ T106] usb 3-1: device descriptor read/8, error -71 [ 346.595646][ T106] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 346.636512][ T106] usb 3-1: device descriptor read/8, error -71 [ 346.756081][ T106] usb usb3-port1: unable to enumerate USB device [ 347.192688][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.321103][ T5947] usb 1-1: USB disconnect, device number 32 [ 347.356081][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 347.373366][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.427525][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.448890][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 347.488509][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.522988][ T9] usb 5-1: config 0 descriptor?? [ 347.971441][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 347.991181][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 348.095703][ T9] usb 5-1: USB disconnect, device number 27 [ 348.408536][ T9298] netlink: del zone limit has 4 unknown bytes [ 348.517112][ T9289] could not allocate digest TFM handle sha512-ssse3 [ 349.412139][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 349.428824][ T9308] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 349.685700][ T5996] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 349.962359][ T5996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.007052][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 350.014666][ T5996] usb 1-1: config 0 has no interfaces? [ 350.032624][ T5996] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 350.051033][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.062196][ T5996] usb 1-1: Product: syz [ 350.077507][ T5996] usb 1-1: Manufacturer: syz [ 350.077650][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.163791][ T5996] usb 1-1: SerialNumber: syz [ 350.685072][ T7752] syz.1.442: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.738582][ T5996] usb 1-1: config 0 descriptor?? [ 350.765719][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 350.789909][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.1.442 Not tainted syzkaller #0 PREEMPT(full) [ 350.789934][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.789945][ T7752] Call Trace: [ 350.789952][ T7752] [ 350.789959][ T7752] dump_stack_lvl+0x189/0x250 [ 350.789979][ T7752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.789991][ T7752] ? __pfx__printk+0x10/0x10 [ 350.790012][ T7752] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 350.790025][ T7752] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 350.790038][ T7752] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 350.790050][ T7752] warn_alloc+0x214/0x310 [ 350.790070][ T7752] ? __pfx_warn_alloc+0x10/0x10 [ 350.790090][ T7752] ? __get_vm_area_node+0x28f/0x300 [ 350.790105][ T7752] ? relay_open_buf+0x210/0xe50 [ 350.790119][ T7752] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 350.790150][ T7752] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.790168][ T7752] ? rcu_is_watching+0x15/0xb0 [ 350.790179][ T7752] ? relay_open_buf+0x210/0xe50 [ 350.790189][ T7752] ? relay_open_buf+0x210/0xe50 [ 350.790199][ T7752] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 350.790213][ T7752] ? relay_open_buf+0x210/0xe50 [ 350.790223][ T7752] ? trace_kmalloc+0x1f/0xd0 [ 350.790236][ T7752] ? relay_open_buf+0x17f/0xe50 [ 350.790249][ T7752] relay_open_buf+0x210/0xe50 [ 350.790271][ T7752] relay_open+0x427/0x920 [ 350.790286][ T7752] do_blk_trace_setup+0x561/0x980 [ 350.790307][ T7752] blk_trace_setup+0x116/0x1f0 [ 350.790324][ T7752] ? __pfx_blk_trace_setup+0x10/0x10 [ 350.790346][ T7752] ? __lock_acquire+0xab9/0xd20 [ 350.790363][ T7752] sg_ioctl+0xaf3/0x2230 [ 350.790381][ T7752] ? __pfx_sg_ioctl+0x10/0x10 [ 350.790393][ T7752] ? __fget_files+0x2a/0x420 [ 350.790405][ T7752] ? __fget_files+0x3a0/0x420 [ 350.790413][ T7752] ? __fget_files+0x2a/0x420 [ 350.790423][ T7752] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 350.790438][ T7752] __ia32_compat_sys_ioctl+0x540/0x840 [ 350.790454][ T7752] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 350.790470][ T7752] ? __se_sys_futex_time32+0x360/0x3e0 [ 350.790494][ T7752] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.790507][ T7752] __do_fast_syscall_32+0xb6/0x2b0 [ 350.790524][ T7752] do_fast_syscall_32+0x34/0x80 [ 350.790535][ T7752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.790549][ T7752] RIP: 0023:0xf70be539 [ 350.790559][ T7752] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.790567][ T7752] RSP: 002b:00000000f4c2655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 350.790579][ T7752] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0481273 [ 350.790586][ T7752] RDX: 0000000080000b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.790592][ T7752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.790598][ T7752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 350.790603][ T7752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.790618][ T7752] [ 350.790633][ T7752] Mem-Info: [ 351.180323][ T7752] active_anon:4918 inactive_anon:37 isolated_anon:0 [ 351.180323][ T7752] active_file:13284 inactive_file:582 isolated_file:0 [ 351.180323][ T7752] unevictable:768 dirty:32 writeback:0 [ 351.180323][ T7752] slab_reclaimable:6921 slab_unreclaimable:101883 [ 351.180323][ T7752] mapped:41290 shmem:4068 pagetables:3568 [ 351.180323][ T7752] sec_pagetables:0 bounce:0 [ 351.180323][ T7752] kernel_misc_reclaimable:0 [ 351.180323][ T7752] free:140496 free_pcp:30718 free_cma:0 [ 351.192988][ T9327] program syz.3.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.347612][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 351.359860][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 351.370421][ T24] usb 6-1: can't read configurations, error -61 [ 351.392427][ T7752] Node 0 active_anon:8kB inactive_anon:72kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151540kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12304kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 351.505852][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 351.592618][ T7752] Node 1 active_anon:22564kB inactive_anon:76kB active_file:53108kB inactive_file:2128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19920kB dirty:92kB writeback:0kB shmem:17036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:824kB pagetables:9792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.624048][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.795494][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 351.816669][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 351.816694][ T24] usb 6-1: can't read configurations, error -61 [ 351.817037][ T24] usb usb6-port1: attempt power cycle [ 351.862825][ T7752] Node 0 DMA free:10116kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 351.862945][ T7752] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 351.862969][ T7752] Node 0 DMA32 free:42596kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:72kB active_file:28kB inactive_file:180kB unevictable:1536kB writepending:36kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:9492kB local_pcp:3772kB free_cma:0kB [ 351.862999][ T7752] lowmem_reserve[]: 0 0 1 1 1 [ 351.863022][ T7752] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 351.863050][ T7752] lowmem_reserve[]: 0 0 0 0 0 [ 351.863074][ T7752] Node 1 Normal free:508876kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22664kB inactive_anon:76kB active_file:53108kB inactive_file:2128kB unevictable:1536kB writepending:92kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:109552kB local_pcp:53216kB free_cma:0kB [ 351.863128][ T7752] lowmem_reserve[]: 0 0 0 0 0 [ 351.863174][ T7752] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10116kB [ 351.863257][ T7752] Node 0 DMA32: 233*4kB (UME) 210*8kB (UME) 309*16kB (UME) 185*32kB (ME) 117*64kB (UME) 75*128kB (UME) 33*256kB (ME) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 42596kB [ 351.863347][ T7752] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 351.863411][ T7752] Node 1 Normal: 1*4kB (M) 1*8kB (E) 0*16kB 2*32kB (UE) 3*64kB (UME) 31*128kB (ME) 17*256kB (ME) 7*512kB (UM) 5*1024kB (ME) 6*2048kB (ME) 117*4096kB (M) = 508812kB [ 351.863508][ T7752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.863517][ T7752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.863526][ T7752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.863534][ T7752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.863543][ T7752] 19507 total pagecache pages [ 351.863550][ T7752] 977 pages in swap cache [ 351.863554][ T7752] Free swap = 101084kB [ 351.863559][ T7752] Total swap = 124996kB [ 351.863564][ T7752] 2097051 pages RAM [ 351.863568][ T7752] 0 pages HighMem/MovableOnly [ 351.863572][ T7752] 425672 pages reserved [ 351.863576][ T7752] 0 pages cma reserved [ 352.155749][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 352.192489][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 352.198752][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 352.198775][ T24] usb 6-1: can't read configurations, error -61 [ 352.325706][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 352.397286][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.068041][ T106] usb 1-1: USB disconnect, device number 33 [ 353.113948][ T9343] IPVS: set_ctl: invalid protocol: 59 172.20.20.49:20003 [ 353.246447][ T24] usb 6-1: device not accepting address 20, error -71 [ 353.285890][ T24] usb usb6-port1: unable to enumerate USB device [ 353.428588][ T9353] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 353.554248][ T9353] netlink: 830 bytes leftover after parsing attributes in process `syz.2.852'. [ 353.573608][ T9353] bond_slave_0: entered promiscuous mode [ 353.579472][ T9353] bond_slave_1: entered promiscuous mode [ 353.643796][ T9353] netlink: 988 bytes leftover after parsing attributes in process `syz.2.852'. [ 354.235975][ T9356] could not allocate digest TFM handle sha512-ssse3 [ 354.313606][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 354.313619][ T30] audit: type=1400 audit(1758422969.362:204): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9369 comm="syz.4.855" [ 354.342177][ T9370] input: syz0 as /devices/virtual/input/input26 [ 355.117203][ T106] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 355.275857][ T106] usb 5-1: Using ep0 maxpacket: 8 [ 355.301878][ T106] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.358555][ T106] usb 5-1: can't read configurations, error -61 [ 355.462803][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 355.482452][ T9387] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 355.545806][ T106] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 355.775752][ T5947] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 355.826796][ T106] usb 5-1: Using ep0 maxpacket: 8 [ 355.851094][ T106] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.967126][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.984758][ T106] usb 5-1: can't read configurations, error -61 [ 356.001746][ T5947] usb 3-1: config 0 has no interfaces? [ 356.009619][ T106] usb usb5-port1: attempt power cycle [ 356.030096][ T5947] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 356.058175][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.085247][ T5947] usb 3-1: Product: syz [ 356.113182][ T5947] usb 3-1: Manufacturer: syz [ 356.132878][ T5947] usb 3-1: SerialNumber: syz [ 356.164452][ T5947] usb 3-1: config 0 descriptor?? [ 356.365702][ T106] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 356.386489][ T106] usb 5-1: Using ep0 maxpacket: 8 [ 356.393339][ T106] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 356.411559][ T106] usb 5-1: can't read configurations, error -61 [ 356.546639][ T106] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.581526][ T106] usb 5-1: Using ep0 maxpacket: 8 [ 356.588401][ T106] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 356.598619][ T106] usb 5-1: can't read configurations, error -61 [ 356.605383][ T106] usb usb5-port1: unable to enumerate USB device [ 356.756051][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 356.945656][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 356.952401][ T24] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 356.992300][ T24] usb 1-1: config 0 has no interface number 0 [ 357.047703][ T24] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 357.062013][ T24] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 357.089745][ T24] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 357.143060][ T24] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 357.155438][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.164750][ T24] usb 1-1: Product: syz [ 357.174520][ T24] usb 1-1: Manufacturer: syz [ 357.190065][ T24] usb 1-1: SerialNumber: syz [ 357.213038][ T24] usb 1-1: config 0 descriptor?? [ 357.233777][ T9407] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 357.241398][ T9407] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.657421][ T43] usb 3-1: USB disconnect, device number 35 [ 359.145823][ T5947] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 359.335713][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 359.384794][ T24] asix 1-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 359.457543][ T5947] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 359.467509][ T5947] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.513206][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.526278][ T24] asix 1-1:0.255: probe with driver asix failed with error -71 [ 359.627660][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.629064][ T24] usb 1-1: USB disconnect, device number 34 [ 359.710175][ T5947] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.868564][ T5947] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.944754][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.217347][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 360.254002][ T5947] usb 3-1: usb_control_msg returned -32 [ 360.286035][ T5947] usbtmc 3-1:16.0: can't read capabilities [ 360.572101][ T9441] program syz.0.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.768855][ T43] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 360.856007][ T43] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.182347][ T9457] could not allocate digest TFM handle sha512-ssse3 [ 362.401213][ T5947] usb 3-1: USB disconnect, device number 36 [ 362.875739][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 363.035704][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 363.044479][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 363.092884][ T43] usb 3-1: can't read configurations, error -61 [ 363.336003][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 363.518372][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 363.989585][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 364.015731][ T43] usb 3-1: can't read configurations, error -61 [ 364.069324][ T43] usb usb3-port1: attempt power cycle [ 364.625867][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 364.697042][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 364.709193][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 364.717124][ T43] usb 3-1: can't read configurations, error -61 [ 364.738632][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 364.872637][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 365.097907][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 365.146630][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 365.158319][ T43] usb 3-1: can't read configurations, error -61 [ 365.164908][ T43] usb usb3-port1: unable to enumerate USB device [ 365.767577][ T9490] program syz.4.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.846440][ T5867] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 366.266021][ T5867] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.571123][ T9499] fido_id[9499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.745677][ T5867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 367.225678][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.257756][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.318864][ T5867] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 367.428041][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 367.445951][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.485309][ T5867] usb 5-1: config 0 descriptor?? [ 367.560309][ T9512] netlink: 'syz.3.897': attribute type 10 has an invalid length. [ 367.961791][ T5919] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 368.103065][ T5919] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.241513][ T9522] fido_id[9522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.262207][ T5947] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 368.455886][ T5947] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.487175][ T5947] usb 4-1: config 0 has no interfaces? [ 368.530283][ T5947] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 368.556114][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.615187][ T5947] usb 4-1: Product: syz [ 368.620287][ T5867] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 368.640777][ T5947] usb 4-1: Manufacturer: syz [ 368.645394][ T5947] usb 4-1: SerialNumber: syz [ 368.747649][ T5947] usb 4-1: config 0 descriptor?? [ 368.885307][ T43] usb 5-1: USB disconnect, device number 32 [ 370.195338][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 370.203227][ T9536] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 370.273969][ T9537] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 370.407945][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 370.451875][ T43] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 370.486838][ T43] usb 5-1: config 0 has an invalid interface number: 255 but max is -1 [ 370.535143][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.600187][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 370.665734][ T43] usb 5-1: config 0 has no interface number 0 [ 370.734296][ T43] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 370.757429][ T9546] program syz.5.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.815907][ T43] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 370.891673][ T43] usb 5-1: config 0 interface 255 has no altsetting 0 [ 370.924976][ T43] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 370.954727][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.968915][ T5947] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 371.005486][ T43] usb 5-1: Product: syz [ 371.065854][ T43] usb 5-1: Manufacturer: syz [ 371.070490][ T43] usb 5-1: SerialNumber: syz [ 371.110492][ T43] usb 5-1: config 0 descriptor?? [ 371.140731][ T43] hub 5-1:0.255: bad descriptor, ignoring hub [ 371.173315][ T24] usb 4-1: USB disconnect, device number 34 [ 371.194737][ T43] hub 5-1:0.255: probe with driver hub failed with error -5 [ 371.465971][ T24] usb 5-1: USB disconnect, device number 33 [ 371.860334][ T43] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 372.130925][ T43] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.569716][ T9559] fido_id[9559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.494812][ T9585] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.326078][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 375.606993][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 375.618191][ T43] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 375.630393][ T43] usb 4-1: config 0 has an invalid interface number: 255 but max is -1 [ 375.930829][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.167917][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 376.235077][ T43] usb 4-1: config 0 has no interface number 0 [ 376.376032][ T43] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 376.621501][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 377.297488][ T9] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.316002][ T5947] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 377.364311][ T43] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 377.406726][ T43] usb 4-1: config 0 interface 255 has no altsetting 0 [ 377.430953][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 377.447422][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.511521][ T5947] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 377.522958][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.584853][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 377.728440][ T5947] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 377.749564][ T43] usb 4-1: Product: syz [ 377.769657][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.775704][ T43] usb 4-1: Manufacturer: syz [ 377.792073][ T43] usb 4-1: SerialNumber: syz [ 377.824055][ T5947] usb 5-1: config 0 descriptor?? [ 377.866714][ T43] usb 4-1: config 0 descriptor?? [ 377.984713][ T31] INFO: task syz.1.442:7756 blocked for more than 143 seconds. [ 377.992626][ T43] usb 4-1: can't set config #0, error -71 [ 378.036384][ T31] Not tainted syzkaller #0 [ 378.255033][ T43] usb 4-1: USB disconnect, device number 35 [ 378.263909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.305667][ T31] task:syz.1.442 state:D stack:29416 pid:7756 tgid:7733 ppid:5881 task_flags:0x400040 flags:0x20004004 [ 378.395776][ T31] Call Trace: [ 378.427967][ T5947] holtek_kbd 0003:04D9:A055.0027: bogus close delimiter [ 378.446866][ T5947] holtek_kbd 0003:04D9:A055.0027: item 0 4 2 10 parsing failed [ 378.482977][ T31] [ 378.499984][ T5947] holtek_kbd 0003:04D9:A055.0027: probe with driver holtek_kbd failed with error -22 [ 378.520941][ T31] __schedule+0x1798/0x4cc0 [ 378.543519][ T31] ? __pfx___schedule+0x10/0x10 [ 378.565423][ T31] ? schedule+0x91/0x360 [ 378.604500][ T31] schedule+0x165/0x360 [ 378.612814][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.612900][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675902][ T31] schedule_preempt_disabled+0x13/0x30 [ 378.681519][ T31] __mutex_lock+0x7e6/0x1350 [ 378.686661][ T31] ? __mutex_lock+0x5bb/0x1350 [ 378.691607][ T31] ? blk_trace_remove+0x20/0x40 [ 378.697188][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 378.702347][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 378.707903][ T31] ? __lock_acquire+0xab9/0xd20 [ 378.712911][ T31] blk_trace_remove+0x20/0x40 [ 378.734799][ T31] sg_ioctl+0x47b/0x2230 [ 378.752860][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 378.773833][ T31] ? __fget_files+0x2a/0x420 [ 378.805610][ T31] ? __fget_files+0x3a0/0x420 [ 378.885293][ T31] ? __fget_files+0x2a/0x420 [ 378.918580][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 378.946612][ T31] __ia32_compat_sys_ioctl+0x540/0x840 [ 378.969942][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 378.994845][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.018236][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.040600][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 379.056438][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 379.081913][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 379.110297][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 379.123643][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.145611][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 379.164965][ T31] do_fast_syscall_32+0x34/0x80 [ 379.178534][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.204015][ T31] RIP: 0023:0xf70be539 [ 379.220363][ T31] RSP: 002b:00000000f480355c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 379.253836][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001276 [ 379.282433][ T31] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.310832][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.339268][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.370635][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.409182][ T31] [ 379.418204][ T31] [ 379.418204][ T31] Showing all locks held in the system: [ 379.461578][ T31] 1 lock held by khungtaskd/31: [ 379.543576][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 379.588819][ T31] 2 locks held by kworker/u8:7/2141: [ 379.609726][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 379.651854][ T106] usb 5-1: USB disconnect, device number 34 [ 379.694434][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 379.704944][ T31] 2 locks held by getty/5621: [ 379.719247][ T31] #0: ffff88814e1440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 379.740438][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 379.776101][ T31] 2 locks held by syz.1.442/7752: [ 379.790222][ T31] 1 lock held by syz.1.442/7756: [ 379.811040][ T31] #0: ffff88802509cdd8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 379.845726][ T31] 3 locks held by syz.3.908/9560: [ 379.865845][ T31] 3 locks held by syz.4.923/9610: [ 379.887994][ T31] #0: ffff888054a4e208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 379.902541][ T31] #1: ffff888026c87258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x52/0x310 [ 379.928610][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 379.943347][ T31] [ 379.975365][ T31] ============================================= [ 379.975365][ T31] [ 380.002792][ T31] NMI backtrace for cpu 1 [ 380.002813][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 380.002832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.002840][ T31] Call Trace: [ 380.002845][ T31] [ 380.002850][ T31] dump_stack_lvl+0x189/0x250 [ 380.002868][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.002879][ T31] ? __pfx__printk+0x10/0x10 [ 380.002899][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 380.002915][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 380.002928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.002943][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.002961][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.002976][ T31] watchdog+0xf93/0xfe0 [ 380.003002][ T31] ? watchdog+0x1de/0xfe0 [ 380.003027][ T31] kthread+0x70e/0x8a0 [ 380.003048][ T31] ? __pfx_watchdog+0x10/0x10 [ 380.003068][ T31] ? __pfx_kthread+0x10/0x10 [ 380.003084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.003099][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.003107][ T31] ? __pfx_kthread+0x10/0x10 [ 380.003119][ T31] ret_from_fork+0x439/0x7d0 [ 380.003131][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 380.003143][ T31] ? __switch_to_asm+0x39/0x70 [ 380.003154][ T31] ? __switch_to_asm+0x33/0x70 [ 380.003165][ T31] ? __pfx_kthread+0x10/0x10 [ 380.003177][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.003202][ T31] [ 380.003208][ T31] Sending NMI from CPU 1 to CPUs 0: [ 380.148914][ C0] NMI backtrace for cpu 0 [ 380.148931][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 380.148948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.148959][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 380.148979][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 380.148992][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 380.149006][ C0] RAX: 9d19c69590dbc300 RBX: ffffffff819683f8 RCX: 9d19c69590dbc300 [ 380.149018][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba2fc RDI: ffffffff8be33f80 [ 380.149029][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 380.149041][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a730 [ 380.149052][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 380.149063][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 380.149075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.149086][ C0] CR2: 0000000032e24220 CR3: 000000007480a000 CR4: 00000000003526f0 [ 380.149099][ C0] Call Trace: [ 380.149106][ C0] [ 380.149112][ C0] default_idle+0x13/0x20 [ 380.149128][ C0] default_idle_call+0x74/0xb0 [ 380.149146][ C0] do_idle+0x1e8/0x510 [ 380.149163][ C0] ? __pfx_do_idle+0x10/0x10 [ 380.149185][ C0] cpu_startup_entry+0x44/0x60 [ 380.149198][ C0] rest_init+0x2de/0x300 [ 380.149217][ C0] start_kernel+0x3a9/0x410 [ 380.149235][ C0] x86_64_start_reservations+0x24/0x30 [ 380.149254][ C0] x86_64_start_kernel+0x143/0x1c0 [ 380.149272][ C0] common_startup_64+0x13e/0x147 [ 380.149297][ C0] [ 380.456882][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 380.463750][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 380.472836][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.483043][ T31] Call Trace: [ 380.486314][ T31] [ 380.489314][ T31] dump_stack_lvl+0x99/0x250 [ 380.493884][ T31] ? __asan_memcpy+0x40/0x70 [ 380.498461][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.503639][ T31] ? __pfx__printk+0x10/0x10 [ 380.508223][ T31] vpanic+0x281/0x750 [ 380.512187][ T31] ? __pfx_vpanic+0x10/0x10 [ 380.516668][ T31] ? preempt_schedule+0xae/0xc0 [ 380.521495][ T31] ? preempt_schedule_common+0x83/0xd0 [ 380.526944][ T31] panic+0xb9/0xc0 [ 380.530668][ T31] ? __pfx_panic+0x10/0x10 [ 380.535088][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 380.540453][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 380.546592][ T31] watchdog+0xfd2/0xfe0 [ 380.550730][ T31] ? watchdog+0x1de/0xfe0 [ 380.555035][ T31] kthread+0x70e/0x8a0 [ 380.559081][ T31] ? __pfx_watchdog+0x10/0x10 [ 380.563741][ T31] ? __pfx_kthread+0x10/0x10 [ 380.568313][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.573493][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.578665][ T31] ? __pfx_kthread+0x10/0x10 [ 380.583232][ T31] ret_from_fork+0x439/0x7d0 [ 380.587799][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 380.592890][ T31] ? __switch_to_asm+0x39/0x70 [ 380.597669][ T31] ? __switch_to_asm+0x33/0x70 [ 380.602424][ T31] ? __pfx_kthread+0x10/0x10 [ 380.607026][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.611787][ T31] [ 380.615079][ T31] Kernel Offset: disabled [ 380.619389][ T31] Rebooting in 86400 seconds..