last executing test programs: 16.837487s ago: executing program 1 (id=4006): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48}) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r3) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000c00)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x200002, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x23, 0xb728, 0x960, 0x4, 0x5, 0x50, 0x7f3, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0xef, 0x1, 0x7, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x4e, 0x1, 0x7, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0x80000000, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x3, 0x7fff, 0x7, 0xfffffffe, 0xfffffffd, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x7, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6], "8ee43201f26c1c263ceb312aa313a9034c0bb1df2e5f4ad028a43e88065a110e01e68ec90c5f73edf9dba21e64ff911b7787ba7b7e45dd21d4837e896fa802da63a712295a35f3a32c3f4931fe8416f3e5"}}) read(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) 14.900954232s ago: executing program 1 (id=4009): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)}) 13.989245504s ago: executing program 2 (id=4012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 11.566292545s ago: executing program 1 (id=4017): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x400) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x3ff, 0x50b4c0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "3bf72a99"}]}}, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000240)={r9, r4, 0x0, 0x0, 0x502, 0x8, 0x7, 0x1, 0x7, 0x0, 0x6983, 0xca98}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r10, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0xff00) 10.017799322s ago: executing program 3 (id=4019): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x300}, 0x24) 10.016219459s ago: executing program 0 (id=4030): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xc6ce, 0x2, 0x0, 0x3}) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r2, 0x0, 0xffefffff, 0x21, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000700)) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x14, 0x0, 0x20, @remote, @mcast2, 0x700, 0x8, 0xaba, 0xefd}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x1ff, @vifc_lcl_addr=@local, @local}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_ifindex=r5, @broadcast}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 10.015688351s ago: executing program 2 (id=4021): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x404, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@addrtype={{0x2c}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x460) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380), 0x0, r6) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.44785529s ago: executing program 3 (id=4023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x4004851) setsockopt(r5, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) 8.44687224s ago: executing program 0 (id=4034): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x2082) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r6, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getpeername$inet(r6, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.395960324s ago: executing program 1 (id=4024): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8.146425989s ago: executing program 4 (id=4025): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) poll(&(0x7f0000000240)=[{r2, 0x421a}], 0x1, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.904508219s ago: executing program 2 (id=4026): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pread64(0xffffffffffffffff, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x0, 0x5, 0x1, 0x800, 0x1, '\x00\x00\x00\f\x00', '\x00', '\x00\x00:\x00', '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000004000000001000"]}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r4, 0x0, 0x0) 7.176169557s ago: executing program 0 (id=4027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000826000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000440000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f0000000000), 0x0, 0x1}, {&(0x7f0000000140)="9eb29f5cd740f9a7ed60ade502c86c7ba24bbdf671def1fa9106515a41932270b7413c42e591ec36a5915d7eb656cade61fa0040643a33526e006994d64441d321ac5be1d9407e415b565b2dd9aa1150a1f7fe3c945c7df7b05ae4217d4424cbaeba3ef09790b322995d0af3aa895eea87bb46fac0257c1c0f610273915f9447f574dc8ff8ae6a6cf6845efc4cce1b4fa562913ff179db9f12ca9c9d7b3f81bd077a40d72d6aac24b25e098092b6", 0xae, 0x3}, {&(0x7f00000000c0)="fa548c4e356624c578a0235a5d1673880435413526af0134225be075e14d85a29edb5c9f36d198", 0x27, 0x1}]}, 0x3, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.123244856s ago: executing program 4 (id=4028): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) umount2(&(0x7f0000000640)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000001640)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.747326094s ago: executing program 4 (id=4029): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b12", 0x3c, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r6, 0x8) writev(r5, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x1}, 0xfc}, 0x18) 6.634040821s ago: executing program 2 (id=4031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0xe7ff, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 6.287195915s ago: executing program 3 (id=4032): socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8b6c, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20041081) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x2a020480) unshare(0xa000080) 6.217890691s ago: executing program 0 (id=4033): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/10, 0xa}, 0x40000010) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, r4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x18, "4375bcc9835c999774a850934bd962ae997357675d13aa96"}}) 4.312790847s ago: executing program 3 (id=4035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.312243743s ago: executing program 4 (id=4036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x3}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000000000000000000000000000000000000000000000000ffffac1414aa3b02010300000000fc010000000000000000000000000001142898878544aeedc06d4d6568398d21e229b6c2c2d092c2489601ddd4dd10527981d07d5b7896f6e65a784c84369f"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 4.306371023s ago: executing program 1 (id=4045): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6e65772064656661756c7420757365728da8af3e20303030303030303030303030303030303430393300d2abeaff4b4087959818d03a1328ba3726b7666a8c45c20266014d2a45bfde9f097402709fdb601f613fc51000a9d95aac56247598cae355407257686ee7d1e314458e17aaa2a49e02b153100da748001b006be03f32de225fda7583161eaffd1023b0d8e9105f5ade158d24b9dbb4628f89dcd7a52270e83f569ea63e2f6d9c384d94be4caa073b8ca5ad0417a6b81c58f0691bba3cf26af3078b02f0d61904a64af025b594a88e1bc1bc8b0976c6b55c228d4721"], 0x2a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.215467382s ago: executing program 0 (id=4037): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x9, 0x1, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) lseek(0xffffffffffffffff, 0x4, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)}}], 0x2, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071100a0000000000060000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r6, r3, &(0x7f00000000c0)=0x58, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x1000, 0x141283) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f00000005c0)={0x2, "1898efe12602264e5329ea767c2a971f5a255b196a633fb7b93bae0f92c8aa56", 0x7e3e52ee274e9ef1, 0x2, 0x3, 0x0, 0x410, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.425468398s ago: executing program 2 (id=4038): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.934995298s ago: executing program 0 (id=4039): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x50883, 0x0) 2.117754015s ago: executing program 3 (id=4040): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x7ffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x12, 0x6, r0, 0x0, 0x0, 0x0, 0x80000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.080889874s ago: executing program 2 (id=4041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x1, 0xd, 0x9, 0x0, 0x5, 0x2, 0x4}, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x7fffffff, 0x7fffffff, 0x9, 0xfffffffffffffff7, 0x8001}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0xe7ff, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 2.007288917s ago: executing program 1 (id=4042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x54, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.463104846s ago: executing program 4 (id=4043): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000080)=0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(&(0x7f00000015c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}}, 0x0) 482.898522ms ago: executing program 3 (id=4044): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040880) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r2, 0x4493c000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000091) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000095, 0x0, 0x81}]}) 0s ago: executing program 4 (id=4046): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): cd.0: Device attached [ 1222.369106][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1222.405616][T20863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1222.462506][T20863] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 1222.469141][T20863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1222.479370][T20871] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1222.490014][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1222.506056][T20863] vhci_hcd vhci_hcd.0: Device attached [ 1222.542817][T20875] vhci_hcd: connection closed [ 1222.542985][T20879] vhci_hcd: connection closed [ 1222.547888][T20877] vhci_hcd: connection closed [ 1222.549005][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.553888][T20867] vhci_hcd: connection closed [ 1222.557565][T20872] vhci_hcd: connection closed [ 1222.567421][T20869] vhci_hcd: connection closed [ 1222.583123][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.612239][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1222.637095][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.643046][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1222.657688][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.675929][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1222.692520][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.749094][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.768843][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1222.783173][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1222.790824][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.800201][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.813540][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1222.848988][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.854291][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.872248][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1222.892683][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1222.898982][ T36] vhci_hcd vhci_hcd.2: release socket [ 1222.910323][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1222.929197][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1223.039040][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1223.161721][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1223.299119][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1223.357548][T20889] tipc: Enabling of bearer rejected, failed to enable media [ 1223.578983][ T39] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1223.735367][ T39] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1223.775748][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1223.818774][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1223.878167][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1223.906278][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.937955][ T39] usb 1-1: Product: syz [ 1223.955144][ T39] usb 1-1: Manufacturer: syz [ 1223.965661][ T39] usb 1-1: SerialNumber: syz [ 1224.002178][ T39] usb 1-1: config 0 descriptor?? [ 1224.055451][T20887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1224.330405][T20887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1225.146189][T20892] loop8: detected capacity change from 0 to 7 [ 1225.217148][T20892] Dev loop8: unable to read RDB block 7 [ 1225.478983][T20892] loop8: AHDI p1 p2 p3 [ 1225.855050][T20892] loop8: partition table partially beyond EOD, truncated [ 1225.865743][T20892] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1225.972406][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1226.151613][T20892] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1226.915216][T20004] Dev loop8: unable to read RDB block 7 [ 1226.921060][T20004] loop8: AHDI p1 p2 p3 [ 1226.925346][T20004] loop8: partition table partially beyond EOD, truncated [ 1226.936812][T20004] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1226.990918][T20004] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1227.007203][T20894] Dev loop8: unable to read RDB block 7 [ 1227.040703][T20894] loop8: AHDI p1 p2 p3 [ 1227.086761][T20894] loop8: partition table partially beyond EOD, truncated [ 1227.149434][ T6271] net_ratelimit: 29 callbacks suppressed [ 1227.149449][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.197148][T20894] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1227.209372][ T39] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1227.269123][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.271181][T20894] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1227.389096][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.430374][ T39] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1227.443114][ T39] usb 3-1: config 0 has no interface number 0 [ 1227.462672][ T39] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.503653][ T39] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1227.514515][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.533790][ T39] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1227.558126][ T39] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1227.579782][ T39] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1227.598937][ T39] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.617140][ T39] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1227.659359][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.678716][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.713547][ T39] usb 3-1: config 0 descriptor?? [ 1227.734696][T20933] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1227.753746][T20933] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1227.769251][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1227.803122][ T39] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1227.899240][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1228.062455][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1228.094781][T15653] usb 1-1: USB disconnect, device number 66 [ 1228.179848][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1228.309104][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1228.602544][T20942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.634040][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1228.644655][T20946] netlink: 'syz.0.3684': attribute type 12 has an invalid length. [ 1228.653507][T20946] netlink: 'syz.0.3684': attribute type 13 has an invalid length. [ 1228.696361][T20946] vxlan0: entered promiscuous mode [ 1228.704194][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.717248][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.734475][T20942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.759447][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.789699][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.614050][T20953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1229.620575][T20953] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1229.629229][T20953] vhci_hcd vhci_hcd.0: Device attached [ 1229.693984][T20953] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1229.700613][T20953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1229.718443][T20953] vhci_hcd vhci_hcd.0: Device attached [ 1229.718537][T20958] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1229.730495][T20958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1229.745651][T20958] vhci_hcd vhci_hcd.0: Device attached [ 1229.760859][T20961] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 1229.767474][T20961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1229.781484][T20961] vhci_hcd vhci_hcd.0: Device attached [ 1229.808999][T15653] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1229.829458][T20953] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 1229.836054][T20953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1229.852931][T20953] vhci_hcd vhci_hcd.0: Device attached [ 1229.869196][T15653] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1229.888246][T20953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 1229.894854][T20953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1229.904012][T20953] vhci_hcd vhci_hcd.0: Device attached [ 1229.919567][T20953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1229.935257][ T39] usb 3-1: USB disconnect, device number 82 [ 1229.960245][T20953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1229.969038][ T39] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 1230.011660][T20958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1230.041990][T20953] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(29) [ 1230.048588][T20953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1230.071282][T20953] vhci_hcd vhci_hcd.0: Device attached [ 1230.125846][T20959] vhci_hcd: connection closed [ 1230.126025][T20956] vhci_hcd: connection closed [ 1230.131043][T20954] vhci_hcd: connection reset by peer [ 1230.142079][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.147335][T20962] vhci_hcd: connection closed [ 1230.148144][T20974] vhci_hcd: connection closed [ 1230.163171][T20966] vhci_hcd: connection closed [ 1230.167995][T20968] vhci_hcd: connection closed [ 1230.173948][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.199700][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.224371][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.238966][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.274027][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.305310][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.320952][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.326521][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.334676][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.340105][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.345839][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.370258][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.375491][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.390250][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.400486][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.405868][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.411715][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1230.417541][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1230.433091][ T36] vhci_hcd vhci_hcd.0: release socket [ 1230.440280][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1231.060157][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1231.391790][ T5908] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1231.961946][T21002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1231.977173][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 1231.983816][T21002] lo: Caught tx_queue_len zero misconfig [ 1231.991720][T21002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1232.042959][ T5908] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1232.071945][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.101686][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.125857][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1232.151920][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.202131][T20970] netlink: 'syz.1.3687': attribute type 33 has an invalid length. [ 1232.220293][ T12] net_ratelimit: 32 callbacks suppressed [ 1232.220308][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.233218][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1232.261544][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.390220][T20970] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3687'. [ 1232.409912][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.529298][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.540638][ T5908] usb 1-1: GET_CAPABILITIES returned 0 [ 1232.551445][ T5908] usbtmc 1-1:16.0: can't read capabilities [ 1232.639238][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.752097][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.879046][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1232.999076][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1233.119026][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1233.257045][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1233.379055][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1233.579034][ T39] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1233.856239][ T39] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1233.869852][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1233.897706][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1233.946221][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1233.959576][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.971354][ T39] usb 3-1: Product: syz [ 1233.977961][ T39] usb 3-1: Manufacturer: syz [ 1233.984544][ T39] usb 3-1: SerialNumber: syz [ 1233.991746][ T39] usb 3-1: config 0 descriptor?? [ 1234.029414][T21015] usb 1-1: USB disconnect, device number 67 [ 1234.089261][T20977] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1234.111116][T21009] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1234.260063][T20977] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1234.274103][T20977] usb 4-1: can't read configurations, error -61 [ 1234.439198][T20977] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1234.630280][T20977] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1234.650688][T20977] usb 4-1: can't read configurations, error -61 [ 1234.670461][T20977] usb usb4-port1: attempt power cycle [ 1234.792127][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1234.792147][ T30] audit: type=1326 audit(1770491288.807:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21017 comm="syz.0.3695" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 1234.821345][T21009] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1235.057949][T15653] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1235.064578][T20977] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1235.192564][T20977] usb 4-1: device descriptor read/8, error -71 [ 1235.979061][ T39] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1236.162222][ T39] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1236.172179][ T39] usb 1-1: config 0 has no interface number 0 [ 1236.179579][ T39] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1236.217450][ T39] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1236.229044][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.237105][ T39] usb 1-1: Product: syz [ 1236.271254][ T39] usb 1-1: Manufacturer: syz [ 1236.323792][ T39] usb 1-1: SerialNumber: syz [ 1236.330650][ T39] usb 1-1: config 0 descriptor?? [ 1236.359721][T16194] usb usb34-port1: attempt power cycle [ 1237.020514][T16194] usb usb34-port1: unable to enumerate USB device [ 1237.080534][ T39] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1237.199755][ T39] usb 3-1: USB disconnect, device number 83 [ 1237.339366][ T6277] net_ratelimit: 31 callbacks suppressed [ 1237.339386][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1237.469513][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1237.579477][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1237.694460][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1237.809268][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1237.919082][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1238.029007][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1238.140782][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1238.269127][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1238.390612][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1238.701975][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.748915][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.002616][T21082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1239.159000][ T5908] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1239.335921][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 1239.366281][ T5908] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1239.376353][ T5908] usb 4-1: config 0 has no interface number 0 [ 1239.386453][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.406638][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.416769][ T5908] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1239.443689][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.468692][ T5908] usb 4-1: config 0 descriptor?? [ 1240.019620][ T5880] usb 1-1: USB disconnect, device number 68 [ 1240.175334][ T5908] usbhid 4-1:0.1: can't add hid device: -71 [ 1240.181572][ T5908] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1240.196358][ T5908] usb 4-1: USB disconnect, device number 88 [ 1240.212492][T21090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3710'. [ 1240.469256][ T5880] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1240.629078][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 1240.636735][ T5880] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 1240.646241][ T5880] usb 1-1: config 0 has no interface number 0 [ 1240.654916][ T5880] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1240.673724][ T5880] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1240.697050][ T5880] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1240.728090][ T5880] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1240.743462][ T5880] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1240.761737][ T5880] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.790991][ T5880] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1240.808972][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.819028][ T5880] usb 1-1: Product: syz [ 1240.823349][ T5880] usb 1-1: Manufacturer: syz [ 1240.832508][ T5880] usb 1-1: SerialNumber: syz [ 1240.843503][ T5880] usb 1-1: config 0 descriptor?? [ 1240.851588][T21090] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1240.869318][T21090] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1240.883271][ T5880] ipaq 1-1:0.19: PocketPC PDA converter detected [ 1240.899199][ T5880] usb 1-1: active config #0 != 1 ?? [ 1241.159094][ T39] usb 1-1: USB disconnect, device number 69 [ 1242.409083][ T6271] net_ratelimit: 35 callbacks suppressed [ 1242.409103][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1242.553549][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1242.669807][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1242.789782][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1242.934841][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1243.059016][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1243.169228][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1243.290978][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1243.399001][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1243.510225][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1245.369008][ T39] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1245.572372][ T39] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1245.607550][T21162] vivid-002: disconnect [ 1245.626276][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1245.729895][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1245.781634][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1245.802424][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.841211][ T39] usb 3-1: Product: syz [ 1245.849974][ T39] usb 3-1: Manufacturer: syz [ 1245.874765][ T39] usb 3-1: SerialNumber: syz [ 1245.901185][ T39] usb 3-1: config 0 descriptor?? [ 1245.909234][T21157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1246.160999][T21157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1246.631020][T21159] vivid-002: reconnect [ 1247.514672][ T6287] net_ratelimit: 12 callbacks suppressed [ 1247.514689][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1247.639810][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1247.750713][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1247.859149][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1247.911484][T21181] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1247.918105][T21181] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1247.950949][ T39] usb 3-1: USB disconnect, device number 84 [ 1247.970700][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1247.987537][T21181] vhci_hcd vhci_hcd.0: Device attached [ 1248.016041][T21184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 1248.022657][T21184] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1248.050553][T21184] vhci_hcd vhci_hcd.0: Device attached [ 1248.080658][T21181] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 1248.087280][T21181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1248.109117][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1248.116936][T21181] vhci_hcd vhci_hcd.0: Device attached [ 1248.149898][T21192] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 1248.156519][T21192] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1248.219166][T20154] usb 42-1: SetAddress Request (2) to port 0 [ 1248.225230][T20154] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1248.233221][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1248.267403][T21181] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(22) [ 1248.274021][T21181] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1248.302545][T21192] vhci_hcd vhci_hcd.0: Device attached [ 1248.349024][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1248.364702][T21181] vhci_hcd vhci_hcd.0: Device attached [ 1248.461104][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1248.579060][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1248.816402][T21197] vhci_hcd: connection closed [ 1248.816653][ T6271] vhci_hcd vhci_hcd.4: stop threads [ 1248.827884][ T6271] vhci_hcd vhci_hcd.4: release socket [ 1248.836805][ T6271] vhci_hcd vhci_hcd.4: disconnect device [ 1248.843483][T21182] vhci_hcd: connection reset by peer [ 1248.849005][T21193] vhci_hcd: connection closed [ 1248.849246][T21185] vhci_hcd: connection closed [ 1248.851527][ T6271] vhci_hcd vhci_hcd.4: stop threads [ 1248.854164][T21189] vhci_hcd: connection closed [ 1248.868476][ T6271] vhci_hcd vhci_hcd.4: release socket [ 1248.881518][ T6271] vhci_hcd vhci_hcd.4: disconnect device [ 1248.890509][ T6271] vhci_hcd vhci_hcd.4: stop threads [ 1248.897918][ T6271] vhci_hcd vhci_hcd.4: release socket [ 1248.910039][ T6271] vhci_hcd vhci_hcd.4: disconnect device [ 1248.920242][ T6271] vhci_hcd vhci_hcd.4: stop threads [ 1248.926012][ T6271] vhci_hcd vhci_hcd.4: release socket [ 1248.934664][ T6271] vhci_hcd vhci_hcd.4: disconnect device [ 1248.969060][ T6271] vhci_hcd vhci_hcd.4: stop threads [ 1248.988644][ T6271] vhci_hcd vhci_hcd.4: release socket [ 1249.005500][ T6271] vhci_hcd vhci_hcd.4: disconnect device [ 1249.699522][T21215] usb usb8: usbfs: process 21215 (syz.4.3734) did not claim interface 0 before use [ 1249.711544][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1249.749340][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1249.828267][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1250.019181][ T39] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1250.185448][ T39] usb 5-1: config 255 has an invalid interface number: 175 but max is 0 [ 1250.194919][ T39] usb 5-1: config 255 has no interface number 0 [ 1250.231345][ T39] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 1250.240872][T16194] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1250.253003][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.278992][ T39] usb 5-1: Product: syz [ 1250.295240][ T39] usb 5-1: Manufacturer: syz [ 1250.309052][ T39] usb 5-1: SerialNumber: syz [ 1250.344753][ T39] asix 5-1:255.175: probe with driver asix failed with error -22 [ 1250.410252][T16194] usb 4-1: Using ep0 maxpacket: 8 [ 1250.424124][T16194] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1250.436069][T16194] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1250.449564][T16194] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1250.463221][T16194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.475194][T16194] usb 4-1: Product: syz [ 1250.483790][T16194] usb 4-1: Manufacturer: syz [ 1250.492065][T16194] usb 4-1: SerialNumber: syz [ 1250.508117][T16194] usb 4-1: config 0 descriptor?? [ 1250.532764][T16194] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1250.623351][ T39] usb 5-1: USB disconnect, device number 95 [ 1250.744700][T16194] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1250.754873][T16194] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1250.768129][T16194] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1251.011226][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.041880][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.142663][T21231] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1251.959017][ T5908] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1252.137105][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1252.180287][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1252.234626][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1252.266727][ T5908] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1252.283288][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.308610][ T5908] usb 3-1: Product: syz [ 1252.317042][ T5908] usb 3-1: Manufacturer: syz [ 1252.331472][ T5908] usb 3-1: SerialNumber: syz [ 1252.351128][ T5908] usb 3-1: config 0 descriptor?? [ 1252.377820][T21247] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1252.590256][ T6273] net_ratelimit: 34 callbacks suppressed [ 1252.590277][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1252.641993][T21247] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1252.719688][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1252.859722][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1252.974405][T21251] syz.0.3741 (21251): drop_caches: 2 [ 1253.009447][ T6271] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.129229][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.240660][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.306113][ T5908] usb 4-1: USB disconnect, device number 89 [ 1253.339371][T20154] usb 42-1: device descriptor read/8, error -110 [ 1253.349138][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.479159][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.539053][ T5880] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1253.868999][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1253.982116][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1254.351107][T21268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1254.375980][T21268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1254.532204][T20154] usb usb42-port1: attempt power cycle [ 1255.064594][T21273] syzkaller0: entered promiscuous mode [ 1255.070951][T21273] syzkaller0: entered allmulticast mode [ 1255.079922][T21273] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1255.110286][T20154] usb usb42-port1: unable to enumerate USB device [ 1255.130219][T21229] delete_channel: no stack [ 1255.399245][T16194] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 1255.421223][T20248] usb 3-1: USB disconnect, device number 85 [ 1255.542872][T21280] input: syz1 as /devices/virtual/input/input64 [ 1255.589171][T16194] usb 1-1: config 0 has no interfaces? [ 1255.596970][T16194] usb 1-1: config 0 has no interfaces? [ 1255.606609][T16194] usb 1-1: config 0 has no interfaces? [ 1255.629797][T16194] usb 1-1: string descriptor 0 read error: -22 [ 1255.637568][T16194] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1255.653272][T16194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.709267][T16194] usb 1-1: config 0 descriptor?? [ 1255.944554][T16194] usb 1-1: USB disconnect, device number 70 [ 1256.053612][T21293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1256.060134][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1256.157662][T21296] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 1256.164282][T21296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1256.176968][T21296] vhci_hcd vhci_hcd.0: Device attached [ 1256.185955][T21299] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 1256.192553][T21299] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1256.229492][T21293] vhci_hcd vhci_hcd.0: Device attached [ 1256.282326][T21299] vhci_hcd vhci_hcd.0: Device attached [ 1256.282653][T21296] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 1256.294388][T21296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1256.349153][T16194] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1256.369009][T21293] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1256.375605][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1256.419868][T16194] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1256.438552][T21299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 1256.445144][T21299] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1256.491119][T21293] vhci_hcd vhci_hcd.0: Device attached [ 1256.507418][T21308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1256.516020][T21299] vhci_hcd vhci_hcd.0: Device attached [ 1256.549907][T21296] vhci_hcd vhci_hcd.0: Device attached [ 1256.569899][T21293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1256.676373][T21293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1256.696334][T21293] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(29) [ 1256.702928][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1256.720163][T21293] vhci_hcd vhci_hcd.0: Device attached [ 1256.812631][T21314] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1256.951478][T21311] vhci_hcd: connection closed [ 1256.951730][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1256.969204][ T36] vhci_hcd vhci_hcd.3: release socket [ 1256.973779][T21306] vhci_hcd: connection closed [ 1256.982161][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1256.982605][T21302] vhci_hcd: connection closed [ 1256.992904][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.010604][T21304] vhci_hcd: connection closed [ 1257.010914][T21300] vhci_hcd: connection closed [ 1257.016067][T21297] vhci_hcd: connection closed [ 1257.030798][T21294] vhci_hcd: connection reset by peer [ 1257.050388][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.061207][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.071363][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.076732][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.106459][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.145915][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.164314][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.171245][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.184254][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.202188][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.211922][T21323] vivid-004: disconnect [ 1257.219839][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.258185][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.276954][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.290276][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.298367][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1257.304136][ T36] vhci_hcd vhci_hcd.3: release socket [ 1257.311679][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1257.629693][ T13] net_ratelimit: 23 callbacks suppressed [ 1257.629707][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1257.789015][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1257.899182][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.010211][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.129024][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.239095][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.389142][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.450923][T21340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1258.457462][T21340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1258.480990][T21340] vhci_hcd vhci_hcd.0: Device attached [ 1258.779138][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1258.898994][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1259.012210][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1259.144510][T21341] vhci_hcd: connection closed [ 1259.144804][ T6273] vhci_hcd vhci_hcd.3: stop threads [ 1259.163198][ T6273] vhci_hcd vhci_hcd.3: release socket [ 1259.169214][T15653] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1259.198457][ T6273] vhci_hcd vhci_hcd.3: disconnect device [ 1259.369930][T15653] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1259.389698][T15653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1259.447016][T15653] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1259.587770][T15653] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1259.637780][T15653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.669137][T15653] usb 5-1: Product: syz [ 1259.693668][T15653] usb 5-1: Manufacturer: syz [ 1259.698284][T15653] usb 5-1: SerialNumber: syz [ 1259.712732][T15653] usb 5-1: config 0 descriptor?? [ 1259.759831][T21357] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1260.039360][T21357] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1260.185789][T21370] pim6reg: entered allmulticast mode [ 1260.198738][T21370] pim6reg: left allmulticast mode [ 1260.234690][T21369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1260.241311][T21369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.336509][T21375] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 1260.343108][T21375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1260.360856][T21373] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 1260.367472][T21373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.398315][T21369] vhci_hcd vhci_hcd.0: Device attached [ 1260.437373][T21379] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 1260.444000][T21379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.503554][T21375] vhci_hcd vhci_hcd.0: Device attached [ 1260.532907][T21369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 1260.539518][T21369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1260.547294][T21373] vhci_hcd vhci_hcd.0: Device attached [ 1260.556503][T21382] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 1260.563099][T21382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.599291][T21379] vhci_hcd vhci_hcd.0: Device attached [ 1260.630019][T21373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.638986][T20977] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1260.649909][T21369] vhci_hcd vhci_hcd.0: Device attached [ 1260.658845][T21382] vhci_hcd vhci_hcd.0: Device attached [ 1260.691145][T21373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.719679][T21369] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 1260.726290][T21369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.737624][T21369] vhci_hcd vhci_hcd.0: Device attached [ 1260.751876][T21369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.795136][T21387] vhci_hcd: connection closed [ 1260.795410][T21385] vhci_hcd: connection closed [ 1260.796291][T21374] vhci_hcd: connection closed [ 1260.800348][T21376] vhci_hcd: connection closed [ 1260.805664][T21371] vhci_hcd: connection reset by peer [ 1260.810118][T21380] vhci_hcd: connection closed [ 1260.815389][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.819924][T21383] vhci_hcd: connection closed [ 1260.824608][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.843315][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.851578][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.857688][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.864800][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.872992][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.879555][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.886428][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.893824][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.900709][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.907650][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.915723][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.922571][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.930356][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.937556][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.944335][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.953286][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1260.961305][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1260.968968][ T13] vhci_hcd vhci_hcd.1: release socket [ 1260.979295][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1261.364376][T21398] libceph: resolve '0..' (ret=-3): failed [ 1261.569990][T16194] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1262.331894][T20248] usb 5-1: USB disconnect, device number 96 [ 1262.359136][T20154] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1262.549077][T20154] usb 3-1: Using ep0 maxpacket: 16 [ 1262.574074][T20154] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1262.588449][T20154] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.611443][T20154] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1262.629937][T20154] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice= 0.00 [ 1262.641085][ T6273] net_ratelimit: 23 callbacks suppressed [ 1262.641097][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1262.655473][T20154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.769068][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1262.835807][ T39] usb usb40-port1: attempt power cycle [ 1262.889653][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1262.999052][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.093514][T20154] usb 3-1: USB disconnect, device number 86 [ 1263.109080][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.219054][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.329477][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.400309][ T39] usb usb40-port1: unable to enumerate USB device [ 1263.439070][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.549024][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1263.669188][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1264.225831][T21443] IPVS: Error connecting to the multicast addr [ 1264.899082][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1265.303226][ T5880] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1265.473061][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1265.514917][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1265.531919][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1265.566364][ T5880] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1265.575706][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.585605][ T5880] usb 3-1: Product: syz [ 1265.591838][ T5880] usb 3-1: Manufacturer: syz [ 1265.596626][ T5880] usb 3-1: SerialNumber: syz [ 1265.615339][ T5880] usb 3-1: config 0 descriptor?? [ 1265.621285][T21460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1265.729599][T20977] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1265.831195][T21460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1265.869128][T20154] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1266.031546][T20154] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1266.049469][T20154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1266.064181][T20154] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1266.087329][T20154] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1266.097724][T20154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.099000][ T39] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1266.117845][T20154] usb 5-1: Product: syz [ 1266.125061][T20154] usb 5-1: Manufacturer: syz [ 1266.132362][T20154] usb 5-1: SerialNumber: syz [ 1266.145920][T20154] usb 5-1: config 0 descriptor?? [ 1266.157604][T21466] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1266.300356][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.320518][ T39] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1266.329983][ T39] usb 1-1: New USB device found, idVendor=0cf3, idProduct=0475, bcdDevice=1a.00 [ 1266.346410][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.380429][ T39] usb 1-1: config 0 descriptor?? [ 1266.391490][T21466] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1266.687413][T21464] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 1266.731968][ T39] usb 1-1: USB disconnect, device number 71 [ 1267.050704][T21015] usb usb36-port1: attempt power cycle [ 1267.611390][T21015] usb usb36-port1: unable to enumerate USB device [ 1267.683999][ T6273] net_ratelimit: 31 callbacks suppressed [ 1267.684017][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1267.819135][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1267.929100][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1267.968606][T20154] usb 3-1: USB disconnect, device number 87 [ 1268.040760][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.159443][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.279208][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.389066][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.508988][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.545137][T21490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1268.629049][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.739085][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1268.862861][T21496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1268.869490][T21496] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1268.885851][T21496] vhci_hcd vhci_hcd.0: Device attached [ 1268.920277][T21496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 1268.926899][T21496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1268.945859][T21496] vhci_hcd vhci_hcd.0: Device attached [ 1269.000324][T21496] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 1269.006941][T21496] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1269.038284][T21496] vhci_hcd vhci_hcd.0: Device attached [ 1269.062119][T21503] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1269.068727][T21503] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1269.089908][T21503] vhci_hcd vhci_hcd.0: Device attached [ 1269.149269][T20154] usb 34-1: SetAddress Request (6) to port 0 [ 1269.162115][T20154] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1269.162175][T21496] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 1269.176206][T21496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1269.207472][T21496] vhci_hcd vhci_hcd.0: Device attached [ 1269.550554][T21506] vhci_hcd: connection closed [ 1269.550852][T21504] vhci_hcd: connection closed [ 1269.555860][T21501] vhci_hcd: connection closed [ 1269.558624][T21499] vhci_hcd: connection closed [ 1269.561972][T21497] vhci_hcd: connection reset by peer [ 1269.598781][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1269.628995][ T12] vhci_hcd vhci_hcd.0: release socket [ 1269.634568][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1269.653087][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1269.658397][ T12] vhci_hcd vhci_hcd.0: release socket [ 1269.670354][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1269.676119][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1269.687121][ T12] vhci_hcd vhci_hcd.0: release socket [ 1269.696206][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1269.710086][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1269.747497][ T12] vhci_hcd vhci_hcd.0: release socket [ 1269.761291][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1269.773202][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1269.782195][ T12] vhci_hcd vhci_hcd.0: release socket [ 1269.792390][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1270.318627][ T5880] usb 5-1: USB disconnect, device number 97 [ 1270.992478][T21541] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 1271.021941][T21541] !: entered promiscuous mode [ 1271.029242][T21532] loop7: detected capacity change from 0 to 16383 [ 1271.062349][T21541] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 1271.171724][T21541] !: left promiscuous mode [ 1271.270693][T20977] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1271.432537][T20977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1271.455358][T20977] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1271.497479][T20977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1271.530931][T20977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.580678][T20977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.620276][T20977] usb 5-1: invalid MIDI out EP 0 [ 1271.796249][T20977] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1272.406162][T21555] delete_channel: no stack [ 1272.672711][T21557] syzkaller0: entered promiscuous mode [ 1272.683523][T21557] syzkaller0: entered allmulticast mode [ 1272.715294][T21557] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1272.769541][ T6287] net_ratelimit: 31 callbacks suppressed [ 1272.769554][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1272.910442][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.009013][T20977] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1273.030045][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.139123][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.208120][T20977] usb 1-1: config 0 has no interfaces? [ 1273.220095][T20977] usb 1-1: config 0 has no interfaces? [ 1273.238406][T20977] usb 1-1: config 0 has no interfaces? [ 1273.250979][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.263513][T20977] usb 1-1: string descriptor 0 read error: -22 [ 1273.269802][T20977] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1273.287126][T20977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.308484][T20977] usb 1-1: config 0 descriptor?? [ 1273.371046][T21559] tipc: Enabled bearer , priority 0 [ 1273.385593][T21559] syzkaller0: entered promiscuous mode [ 1273.392449][T21559] syzkaller0: entered allmulticast mode [ 1273.451440][T21559] tipc: Resetting bearer [ 1273.468502][T21558] tipc: Resetting bearer [ 1273.489845][T21558] tipc: Disabling bearer [ 1273.519168][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.540459][T20248] usb 1-1: USB disconnect, device number 72 [ 1273.629347][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.740240][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.849083][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1273.969124][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1274.161400][ T5880] usb 5-1: USB disconnect, device number 98 [ 1274.219186][T20154] usb 34-1: device descriptor read/8, error -110 [ 1274.329591][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 1274.425141][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3800'. [ 1274.669466][T20977] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1274.670450][T20154] usb usb34-port1: attempt power cycle [ 1274.739215][T21015] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1274.773168][T21584] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 1274.774166][T21579] IPVS: stopping master sync thread 21584 ... [ 1274.840648][T20977] usb 1-1: Using ep0 maxpacket: 32 [ 1274.847436][T20977] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1274.855718][T20977] usb 1-1: config 0 has no interface number 0 [ 1274.864905][T20977] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1274.883321][T20977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.894124][T20977] usb 1-1: Product: syz [ 1274.898857][T20977] usb 1-1: Manufacturer: syz [ 1274.903797][T20977] usb 1-1: SerialNumber: syz [ 1274.914478][T20977] usb 1-1: config 0 descriptor?? [ 1274.919881][ T39] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1274.932300][T20977] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.129255][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1275.155317][T20977] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1275.170169][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1275.192770][T20977] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1275.204080][ T39] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1275.388487][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1275.411300][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.451060][ T39] usb 4-1: Product: syz [ 1275.462267][ T39] usb 4-1: Manufacturer: syz [ 1275.480034][ T39] usb 4-1: SerialNumber: syz [ 1275.504037][ T39] usb 4-1: config 0 descriptor?? [ 1275.538101][T21581] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1275.959991][T21581] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1276.062190][T20154] usb usb34-port1: unable to enumerate USB device [ 1276.305510][T21599] libceph: resolve '0..' (ret=-3): failed [ 1276.392724][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1276.462749][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.475298][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.494965][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.540989][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.574600][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1276.625621][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.688836][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.739215][T21601] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1277.299790][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1277.300171][T20154] usb 1-1: USB disconnect, device number 73 [ 1277.347265][T20154] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1277.395760][T20154] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1277.405099][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.426779][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.433743][T20154] quatech2 1-1:0.51: device disconnected [ 1277.434421][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.453614][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.469436][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.487177][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.498952][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.510792][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.520577][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.539393][ T39] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0 [ 1277.572398][ T39] hid-generic 0006:0004:0009.0021: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1277.704163][ T39] usb 4-1: USB disconnect, device number 90 [ 1277.783097][T21615] fido_id[21615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1277.819819][ T6277] net_ratelimit: 32 callbacks suppressed [ 1277.819832][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1277.979276][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1277.994239][T21621] syzkaller0: entered promiscuous mode [ 1278.043682][T21621] syzkaller0: entered allmulticast mode [ 1278.109044][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1278.117799][T21623] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1278.269015][ T5880] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 1278.309991][T21624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.400926][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1278.444577][T21624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.474285][ T5880] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1278.489073][ T5880] usb 4-1: config 0 has no interface number 0 [ 1278.502039][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1278.519024][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1278.546535][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1278.577775][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1278.619671][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1278.649186][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1278.670108][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1278.700000][ T39] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1278.707882][ T5880] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1278.722661][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.751084][ T5880] usb 4-1: config 0 descriptor?? [ 1278.757574][T21622] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1278.780205][T21622] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1278.799145][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1278.813824][ T5880] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1278.860379][ T39] usb 3-1: not running at top speed; connect to a high speed hub [ 1278.875511][ T39] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1278.894730][ T39] usb 3-1: config 1 has no interface number 1 [ 1278.899370][T21634] fuse: Bad value for 'fd' [ 1278.909227][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1278.926627][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1278.964303][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.979050][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.997348][ T39] usb 3-1: Product: syz [ 1279.008648][ T39] usb 3-1: Manufacturer: syz [ 1279.020206][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1279.039480][ T39] usb 3-1: SerialNumber: syz [ 1279.129131][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1279.238992][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1279.267564][ T39] usb 3-1: failed to enable PITCH for EP 0x82 [ 1279.317165][ T39] usb 3-1: USB disconnect, device number 88 [ 1279.415841][T20161] udevd[20161]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.313414][ T5880] usb 4-1: USB disconnect, device number 91 [ 1281.324176][ T5880] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 1281.427607][T21656] ======================================================= [ 1281.427607][T21656] WARNING: The mand mount option has been deprecated and [ 1281.427607][T21656] and is ignored by this kernel. Remove the mand [ 1281.427607][T21656] option from the mount to silence this warning. [ 1281.427607][T21656] ======================================================= [ 1281.703412][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1282.135133][T21673] netlink: 'syz.3.3821': attribute type 2 has an invalid length. [ 1282.213564][T21674] netlink: 'syz.3.3821': attribute type 2 has an invalid length. [ 1282.250919][T21673] !: entered promiscuous mode [ 1282.271439][T21674] !: left promiscuous mode [ 1282.919124][ T6287] net_ratelimit: 32 callbacks suppressed [ 1282.919138][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.039045][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.149451][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.269209][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.379027][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.499167][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.619039][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.729334][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.839017][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1283.949473][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1284.056280][T21698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1284.827534][T21701] binder_alloc: 21700: binder_alloc_buf, no vma [ 1285.668571][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1285.690802][T21714] netlink: 'syz.1.3830': attribute type 12 has an invalid length. [ 1285.698760][T21714] netlink: 'syz.1.3830': attribute type 13 has an invalid length. [ 1285.831741][T20977] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1286.017296][T20977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1286.043543][T20977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1286.059404][T20977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1286.094049][T20977] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1286.106499][T20977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.119233][T20977] usb 1-1: Product: syz [ 1286.123409][T20977] usb 1-1: Manufacturer: syz [ 1286.128149][T20977] usb 1-1: SerialNumber: syz [ 1286.156534][T20977] usb 1-1: config 0 descriptor?? [ 1286.177175][T21712] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1286.394215][T21712] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1287.019280][T21723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.045194][T21723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.668825][T21736] fuse: Bad value for 'fd' [ 1287.944273][T21744] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1288.329077][ T6287] net_ratelimit: 33 callbacks suppressed [ 1288.329098][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1288.539190][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1288.661535][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1288.779192][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1288.889111][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1288.923177][T21755] netlink: 'syz.2.3842': attribute type 4 has an invalid length. [ 1288.931213][T21755] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1289.002406][T21755] delete_channel: no stack [ 1289.040366][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1289.156384][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1289.269071][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1289.419170][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1289.529040][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1290.099687][ T5880] usb 1-1: USB disconnect, device number 74 [ 1290.919126][T20977] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1291.171791][T20977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1291.210348][T20977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1291.244032][T20977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1291.271341][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1291.302692][T21782] netlink: 'syz.3.3848': attribute type 12 has an invalid length. [ 1291.310973][T21782] netlink: 'syz.3.3848': attribute type 13 has an invalid length. [ 1291.347907][T20977] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1291.360016][T20977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.380468][T20977] usb 5-1: Product: syz [ 1291.384640][T20977] usb 5-1: Manufacturer: syz [ 1291.403104][T20977] usb 5-1: SerialNumber: syz [ 1291.417796][T20977] usb 5-1: config 0 descriptor?? [ 1291.439907][T21775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1291.488606][T21782] vxlan0: entered promiscuous mode [ 1291.593203][ T6277] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.605084][ T6277] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.629342][ T6277] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.653720][ T6277] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.741497][T21775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1291.810914][T21773] usb 5-1: USB disconnect, device number 99 [ 1292.707205][T21788] syz.0.3859 (21788): drop_caches: 2 [ 1292.819038][T20154] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1292.981208][T20154] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1293.000279][T20154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1293.026254][T20154] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1293.055103][T20154] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1293.070278][T20154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.089866][T20154] usb 4-1: Product: syz [ 1293.101345][T20154] usb 4-1: Manufacturer: syz [ 1293.113784][T20154] usb 4-1: SerialNumber: syz [ 1293.127081][T20154] usb 4-1: config 0 descriptor?? [ 1293.144839][T21791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1293.369380][ T6273] net_ratelimit: 31 callbacks suppressed [ 1293.369399][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1293.473657][T21791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1293.500536][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1293.619141][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1293.687166][T20154] usb 4-1: USB disconnect, device number 92 [ 1293.729130][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1293.849249][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1293.859676][T21798] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1293.870180][T21798] random: crng reseeded on system resumption [ 1293.969097][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1294.079005][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1294.219029][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1294.329180][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1294.450653][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1294.615155][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3852'. [ 1294.838216][T21816] input: syz0 as /devices/virtual/input/input66 [ 1294.857135][T21815] syz.2.3855 (21815): drop_caches: 2 [ 1294.869592][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1295.295468][T21823] netlink: 'syz.0.3856': attribute type 4 has an invalid length. [ 1295.384206][T21824] netlink: 'syz.0.3856': attribute type 4 has an invalid length. [ 1295.669389][ T5880] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1295.831447][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 1295.856954][ T5880] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1295.878498][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.897873][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1295.919005][ T5880] pvrusb2: ********** [ 1295.926382][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1295.952553][ T5880] pvrusb2: Important functionality might not be entirely working. [ 1295.978751][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1295.995285][ T5880] pvrusb2: ********** [ 1296.169203][ T2344] pvrusb2: Invalid write control endpoint [ 1296.247647][ T2344] pvrusb2: Invalid write control endpoint [ 1296.259847][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1296.294002][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1296.324997][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1296.355682][ T2344] pvrusb2: Device being rendered inoperable [ 1296.393273][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1296.437131][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1296.447899][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1296.455715][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1296.489098][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1297.055552][T21830] syzkaller0: entered promiscuous mode [ 1297.061333][T21830] syzkaller0: entered allmulticast mode [ 1297.091663][T21830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1297.348978][ T5880] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1297.500752][ T5880] usb 3-1: config 0 has no interfaces? [ 1297.507171][ T5880] usb 3-1: config 0 has no interfaces? [ 1297.515380][ T5880] usb 3-1: config 0 has no interfaces? [ 1297.527323][ T5880] usb 3-1: string descriptor 0 read error: -22 [ 1297.534286][ T5880] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1297.546670][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.556961][ T30] audit: type=1326 audit(1770491351.567:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.586521][ T5880] usb 3-1: config 0 descriptor?? [ 1297.593041][ T30] audit: type=1326 audit(1770491351.597:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.616273][ T30] audit: type=1326 audit(1770491351.597:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.645986][ T30] audit: type=1326 audit(1770491351.597:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.672208][ T30] audit: type=1326 audit(1770491351.597:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.695454][ T30] audit: type=1326 audit(1770491351.597:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.719794][ T30] audit: type=1326 audit(1770491351.597:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.743071][ T30] audit: type=1326 audit(1770491351.597:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.765727][ T30] audit: type=1326 audit(1770491351.597:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.795657][ T30] audit: type=1326 audit(1770491351.597:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21835 comm="syz.3.3860" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1297.842301][ T5880] usb 3-1: USB disconnect, device number 89 [ 1298.106491][T21846] binder: 21841:21846 ioctl 4018620d 0 returned -22 [ 1298.155295][T20248] usb 1-1: USB disconnect, device number 75 [ 1298.201401][T21846] binder: 21841:21846 ioctl c0306201 0 returned -14 [ 1298.397672][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1298.409157][ T12] net_ratelimit: 20 callbacks suppressed [ 1298.409170][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1298.539528][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1298.650792][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1298.759032][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1298.873437][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1298.919266][ T39] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1298.926960][T20977] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1298.999112][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1299.087455][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1299.119142][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1299.131030][T20977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1299.179141][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1299.188254][T20977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1299.213576][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.229543][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1299.239164][T20977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1299.255197][ T39] usb 4-1: Product: syz [ 1299.269179][ T39] usb 4-1: Manufacturer: syz [ 1299.288962][T20977] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1299.307947][ T39] usb 4-1: SerialNumber: syz [ 1299.330424][T20977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.340816][ T39] usb 4-1: config 0 descriptor?? [ 1299.349076][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1299.389008][T20977] usb 3-1: Product: syz [ 1299.393199][T20977] usb 3-1: Manufacturer: syz [ 1299.440753][T20977] usb 3-1: SerialNumber: syz [ 1299.451106][ T39] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1299.470532][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1299.480236][T20977] usb 3-1: config 0 descriptor?? [ 1299.515617][T21857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1299.546389][T20004] udevd[20004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.793124][T21857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1300.142655][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.150140][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.552802][T20977] usb 3-1: USB disconnect, device number 90 [ 1301.637061][T21862] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1301.716546][ T5880] usb 4-1: USB disconnect, device number 93 [ 1301.849675][T21873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.860641][T21873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.409058][T20248] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1302.565471][T20248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.598822][T20248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.623322][T20248] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1302.647760][T20248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.671039][T20248] usb 4-1: config 0 descriptor?? [ 1303.103954][T20248] hid_parser_main: 7 callbacks suppressed [ 1303.103978][T20248] steelseries 0003:1038:12B6.0022: unknown main item tag 0x0 [ 1303.132542][T20248] steelseries 0003:1038:12B6.0022: unknown main item tag 0x0 [ 1303.148321][T20248] steelseries 0003:1038:12B6.0022: unknown main item tag 0x6 [ 1303.172277][T20248] steelseries 0003:1038:12B6.0022: item fetching failed at offset 4/7 [ 1303.200260][T20248] steelseries 0003:1038:12B6.0022: probe with driver steelseries failed with error -22 [ 1303.326518][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3869'. [ 1303.406818][T21875] fuse: root generation should be zero [ 1303.461524][ T6287] net_ratelimit: 35 callbacks suppressed [ 1303.461545][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1303.589328][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1303.707976][T20248] usb 4-1: USB disconnect, device number 94 [ 1303.714083][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1303.829534][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1303.957775][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1304.069002][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1304.179206][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1304.289519][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1304.399296][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1304.453889][T21890] netlink: 5040 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1304.508978][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1305.123551][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1305.133841][T21902] netlink: 'syz.2.3874': attribute type 12 has an invalid length. [ 1305.149480][T21902] netlink: 'syz.2.3874': attribute type 13 has an invalid length. [ 1305.197097][T21902] vxlan0: entered promiscuous mode [ 1305.204338][ T6277] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.218970][ T6277] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.240771][ T6277] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.254565][ T6277] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.703509][T21909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1305.927595][T21915] sctp: [Deprecated]: syz.1.3878 (pid 21915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1305.927595][T21915] Use struct sctp_sack_info instead [ 1306.064456][T21919] random: crng reseeded on system resumption [ 1306.959097][T20977] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1307.142415][T20977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1307.167016][T20977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1307.212077][T20977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1307.242277][T20977] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1307.262183][T20977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.270342][T20977] usb 3-1: Product: syz [ 1307.274607][T20977] usb 3-1: Manufacturer: syz [ 1307.283095][T20977] usb 3-1: SerialNumber: syz [ 1307.342103][T20977] usb 3-1: config 0 descriptor?? [ 1307.358987][T21937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1307.546667][T21923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1307.569973][T21937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1308.124006][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1308.509212][ T6273] net_ratelimit: 33 callbacks suppressed [ 1308.509232][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1308.629706][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1308.739088][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1308.849018][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1308.959675][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.079373][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.189251][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.326911][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.569011][T20248] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1309.659170][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.732273][T20248] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1309.760922][T20248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1309.779099][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1309.806733][T20977] usb 3-1: USB disconnect, device number 91 [ 1309.814117][T20248] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1309.918727][T20248] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1309.930361][T20248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.944440][T20248] usb 1-1: Product: syz [ 1309.958506][T20248] usb 1-1: Manufacturer: syz [ 1309.999428][T20248] usb 1-1: SerialNumber: syz [ 1310.010860][T20248] usb 1-1: config 0 descriptor?? [ 1310.020836][T21967] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1310.303144][T21967] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1312.013283][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1312.048000][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1313.162203][T20977] usb 1-1: USB disconnect, device number 76 [ 1313.307226][T22008] fuse: Bad value for 'fd' [ 1313.365908][T22010] trusted_key: encrypted_key: insufficient parameters specified [ 1313.549111][ T13] net_ratelimit: 32 callbacks suppressed [ 1313.549131][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1313.679032][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1313.792939][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1313.919236][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.039472][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.309034][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.418989][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.439190][T22024] tipc: Enabling of bearer rejected, failed to enable media [ 1314.551582][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.688987][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1314.829673][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1315.979476][T20248] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1316.144563][T20248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.160557][T20248] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1316.186232][T20248] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1316.203172][T20248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.227627][T20248] usb 3-1: config 0 descriptor?? [ 1316.245567][T20248] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1316.254765][T20248] dvb-usb: bulk message failed: -22 (3/0) [ 1316.274266][T20248] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1316.304538][T20248] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1316.327021][T20248] usb 3-1: media controller created [ 1316.339723][T20248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.378573][T20248] dvb-usb: bulk message failed: -22 (6/0) [ 1316.391372][T20248] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1316.431221][T20248] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67 [ 1316.475139][T20248] dvb-usb: schedule remote query interval to 150 msecs. [ 1316.500565][T20248] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1316.671538][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1316.679772][T20248] dvb-usb: error while querying for an remote control event. [ 1316.810692][T22038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1316.817921][T22038] IPv6: NLM_F_CREATE should be set when creating new route [ 1316.825309][T22038] IPv6: NLM_F_CREATE should be set when creating new route [ 1316.832513][T22038] IPv6: NLM_F_CREATE should be set when creating new route [ 1316.869079][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1316.874881][T20248] dvb-usb: error while querying for an remote control event. [ 1317.049473][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.055390][T20248] dvb-usb: error while querying for an remote control event. [ 1317.229556][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.240158][T20248] dvb-usb: error while querying for an remote control event. [ 1317.409219][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.415123][T20248] dvb-usb: error while querying for an remote control event. [ 1317.530597][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1317.589198][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.596176][T20248] dvb-usb: error while querying for an remote control event. [ 1317.789292][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.797883][T20248] dvb-usb: error while querying for an remote control event. [ 1317.969626][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1317.975486][T20248] dvb-usb: error while querying for an remote control event. [ 1318.148993][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1318.158735][T20248] dvb-usb: error while querying for an remote control event. [ 1318.339761][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1318.351110][T20248] dvb-usb: error while querying for an remote control event. [ 1318.529173][T20248] dvb-usb: bulk message failed: -22 (1/0) [ 1318.537513][T20248] dvb-usb: error while querying for an remote control event. [ 1318.557522][T20977] usb 3-1: USB disconnect, device number 92 [ 1318.639309][ T36] net_ratelimit: 33 callbacks suppressed [ 1318.639328][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1318.779099][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1318.794842][T22058] program syz.0.3902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1318.918202][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.049484][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.159024][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.279433][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.389009][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.499034][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.609712][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.722845][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1319.784476][T20977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1320.504143][T22068] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1320.578958][T20977] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1320.739017][T20977] usb 4-1: Using ep0 maxpacket: 16 [ 1320.805079][T20977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.830307][T20977] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1320.892816][T20977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.937062][T20977] usb 4-1: config 0 descriptor?? [ 1321.253863][T22078] : renamed from bridge_slave_0 [ 1321.576708][T20977] usb 4-1: USB disconnect, device number 95 [ 1321.643318][T22085] fuse: Unknown parameter 'group_i00000000000000000000' [ 1321.798075][T22089] tipc: Enabling of bearer rejected, already enabled [ 1323.098155][T22103] netlink: 'syz.4.3912': attribute type 10 has an invalid length. [ 1323.110910][T22103] netlink: 'syz.4.3912': attribute type 10 has an invalid length. [ 1323.758971][ T6273] net_ratelimit: 30 callbacks suppressed [ 1323.758989][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1323.900034][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.009066][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.119050][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.245816][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.359310][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.406022][T22114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.454243][T22114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.479971][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1324.713469][T22125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1324.724999][T22125] netlink: 'syz.0.3916': attribute type 12 has an invalid length. [ 1324.733121][T22125] netlink: 'syz.0.3916': attribute type 13 has an invalid length. [ 1325.279109][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1325.399196][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1325.519011][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1327.119372][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3923'. [ 1327.419348][T22167] libceph: resolve '0..' (ret=-3): failed [ 1327.606619][T22171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1328.869075][ T12] net_ratelimit: 20 callbacks suppressed [ 1328.869087][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.019619][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.141026][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.279159][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.399038][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.479017][T22184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1329.532507][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.659813][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1329.822989][T22191] input: syz0 as /devices/virtual/input/input68 [ 1330.039116][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1330.050683][T22194] binder: BINDER_SET_CONTEXT_MGR already set [ 1330.058021][T22194] binder: 22193:22194 ioctl 4018620d 80004a80 returned -16 [ 1330.199211][ T36] bond2: (slave macvlan3): failed to get link speed/duplex [ 1330.309071][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1330.590452][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1331.838471][T22225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1334.409904][T22250] could not allocate digest TFM handle crc32-pclmul [ 1334.680395][ T6273] net_ratelimit: 32 callbacks suppressed [ 1334.680411][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1334.822142][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1334.959461][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.069047][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.126194][T22262] binder_alloc: 22261: binder_alloc_buf, no vma [ 1335.179103][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.214913][T22271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3943'. [ 1335.223989][T22271] netlink: 'syz.3.3943': attribute type 12 has an invalid length. [ 1335.232344][T22271] netlink: 'syz.3.3943': attribute type 13 has an invalid length. [ 1335.290063][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.535076][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.666036][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.779145][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.889096][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1335.896819][T22283] fuse: Bad value for 'fd' [ 1337.659141][T22305] netlink: 'syz.1.3950': attribute type 2 has an invalid length. [ 1337.824585][T22305] !: entered promiscuous mode [ 1337.985585][T22304] netlink: 'syz.1.3950': attribute type 2 has an invalid length. [ 1338.986394][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1338.986410][ T30] audit: type=1326 audit(1770491392.997:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.023527][ T30] audit: type=1326 audit(1770491392.997:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.097006][ T30] audit: type=1326 audit(1770491392.997:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.138791][ T30] audit: type=1326 audit(1770491392.997:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.190403][ T30] audit: type=1326 audit(1770491392.997:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.227239][ T30] audit: type=1326 audit(1770491392.997:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.289122][ T30] audit: type=1326 audit(1770491392.997:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.318329][ T30] audit: type=1326 audit(1770491392.997:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.369618][ T30] audit: type=1326 audit(1770491392.997:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.0.3951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000 [ 1339.678444][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1339.779048][ T6277] net_ratelimit: 28 callbacks suppressed [ 1339.779066][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1339.909018][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.029013][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.085626][T22339] program syz.1.3957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.159495][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.283983][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.520428][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.732183][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.800231][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1340.811816][T22349] netlink: 'syz.3.3959': attribute type 12 has an invalid length. [ 1340.830027][T22349] netlink: 'syz.3.3959': attribute type 13 has an invalid length. [ 1340.849322][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1340.958990][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1341.069078][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1341.891781][T22353] usb usb8: usbfs: process 22353 (syz.0.3961) did not claim interface 0 before use [ 1341.979289][T22371] fuse: Unknown parameter 'group_i00000000000000000000' [ 1342.401801][T22370] PKCS7: Unknown OID: [5] (bad) [ 1342.406684][T22370] PKCS7: Only support pkcs7_signedData type [ 1343.343879][T22388] netlink: 'syz.2.3967': attribute type 4 has an invalid length. [ 1343.356054][T22388] netlink: 'syz.2.3967': attribute type 4 has an invalid length. [ 1343.649074][T20248] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1343.829132][T20248] usb 3-1: Using ep0 maxpacket: 8 [ 1343.866686][T20248] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1343.884405][T20248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.932818][T20248] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1343.940283][T20248] pvrusb2: ********** [ 1343.945450][T20248] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1343.959693][T20248] pvrusb2: Important functionality might not be entirely working. [ 1343.967871][T20248] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1343.992667][T20248] pvrusb2: ********** [ 1344.137196][ T2344] pvrusb2: Invalid write control endpoint [ 1344.230074][ T2344] pvrusb2: Invalid write control endpoint [ 1344.239682][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1344.257050][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1344.265015][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1344.275597][ T2344] pvrusb2: Device being rendered inoperable [ 1344.293796][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1344.320352][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1344.373683][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1344.379550][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1344.400618][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1344.864791][ T6273] net_ratelimit: 25 callbacks suppressed [ 1344.864806][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1344.989080][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.099071][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.209071][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.319055][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.429315][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.457513][ T30] audit: type=1326 audit(1770491399.467:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.487950][ T30] audit: type=1326 audit(1770491399.497:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.513709][ T30] audit: type=1326 audit(1770491399.497:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.541305][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.574745][ T30] audit: type=1326 audit(1770491399.497:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.611574][ T30] audit: type=1326 audit(1770491399.497:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.666343][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.714301][ T30] audit: type=1326 audit(1770491399.497:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.759502][T22405] loop7: detected capacity change from 16383 to 0 [ 1345.767476][ C0] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 1345.777816][ T30] audit: type=1326 audit(1770491399.497:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.799893][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.880825][ T30] audit: type=1326 audit(1770491399.497:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1345.909023][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1345.923171][ T30] audit: type=1326 audit(1770491399.497:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1345.965258][ T30] audit: type=1326 audit(1770491399.497:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1346.283982][T20248] usb 3-1: USB disconnect, device number 93 [ 1346.469584][T22423] program syz.3.3971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1347.702549][T22438] batadv0: entered promiscuous mode [ 1347.725914][T22438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1348.164218][T22448] tipc: Enabling of bearer rejected, failed to enable media [ 1348.307094][T22453] syzkaller0: entered promiscuous mode [ 1348.362627][T22453] syzkaller0: entered allmulticast mode [ 1348.425551][T22448] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1348.467610][T22453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.567408][T22453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.179432][T22469] netlink: 'syz.2.3981': attribute type 2 has an invalid length. [ 1349.274423][T22470] netlink: 'syz.2.3981': attribute type 2 has an invalid length. [ 1350.082737][ T6287] net_ratelimit: 17 callbacks suppressed [ 1350.082756][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.100775][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.170978][T22469] !: entered promiscuous mode [ 1350.183057][T22470] !: left promiscuous mode [ 1350.219579][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.349076][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.459048][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.520744][T22482] netlink: 'syz.3.3984': attribute type 2 has an invalid length. [ 1350.562141][T22482] !: entered promiscuous mode [ 1350.569029][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.679531][T22487] netlink: 'syz.4.3985': attribute type 4 has an invalid length. [ 1350.696680][T22476] netlink: 'syz.3.3984': attribute type 2 has an invalid length. [ 1350.696779][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.723882][T22487] netlink: 'syz.4.3985': attribute type 4 has an invalid length. [ 1350.792719][ T39] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1350.800672][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1350.818988][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.929019][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1350.936357][ T39] usb 1-1: device descriptor read/64, error -32 [ 1351.049032][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1351.194223][ T39] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1351.227110][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1351.399316][ T39] usb 1-1: device descriptor read/64, error -32 [ 1351.509218][ T39] usb usb1-port1: attempt power cycle [ 1351.868990][ T39] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1351.919502][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1351.926669][ T39] usb 1-1: device descriptor read/8, error -32 [ 1352.039070][ T39] raw-gadget.1 gadget.0: failed to queue suspend event [ 1352.048348][ T39] raw-gadget.1 gadget.0: failed to queue reset event [ 1352.129097][ T39] raw-gadget.1 gadget.0: failed to queue resume event [ 1352.199063][ T39] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1352.232593][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 1352.240473][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.251791][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1352.264477][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.298347][ T39] usb 1-1: config 0 descriptor?? [ 1352.941273][ T5880] usb 1-1: USB disconnect, device number 80 [ 1353.030760][T22512] ip6t_REJECT: ECHOREPLY is not supported [ 1354.171719][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1354.181004][T22524] netlink: 'syz.2.3993': attribute type 12 has an invalid length. [ 1354.188820][T22524] netlink: 'syz.2.3993': attribute type 13 has an invalid length. [ 1354.878203][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1354.878216][ T30] audit: type=1326 audit(1770491408.877:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1354.999025][ T30] audit: type=1326 audit(1770491408.877:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1355.058591][ T30] audit: type=1326 audit(1770491408.877:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1355.139119][ T6277] net_ratelimit: 34 callbacks suppressed [ 1355.139133][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.156261][ T30] audit: type=1326 audit(1770491408.877:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1355.260318][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.401563][ T30] audit: type=1326 audit(1770491409.417:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.1.3997" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6539 code=0x0 [ 1355.423239][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.572716][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.698963][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.829331][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1355.888966][ T30] audit: type=1326 audit(1770491409.887:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1355.959187][ T30] audit: type=1326 audit(1770491409.887:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1355.981711][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1356.031171][ T30] audit: type=1326 audit(1770491409.907:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1356.098949][ T30] audit: type=1326 audit(1770491409.907:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1356.179201][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1356.186500][ T30] audit: type=1326 audit(1770491409.907:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22526 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1356.329144][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1356.459256][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1356.959522][T22562] : renamed from bridge_slave_0 (while UP) [ 1357.048960][ T39] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1357.273207][ T39] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1357.282490][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.303661][ T39] usb 3-1: Product: syz [ 1357.310737][ T39] usb 3-1: Manufacturer: syz [ 1357.323840][ T39] usb 3-1: SerialNumber: syz [ 1357.356096][ T39] usb 3-1: config 0 descriptor?? [ 1357.607853][ T39] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1358.395156][T22575] sit2: entered allmulticast mode [ 1359.767239][ T39] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1359.835451][ T39] usb 3-1: USB disconnect, device number 94 [ 1360.220266][ T12] net_ratelimit: 30 callbacks suppressed [ 1360.220280][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.368486][T22593] pim6reg: entered allmulticast mode [ 1360.399096][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.509175][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.619150][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.729085][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.784305][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1360.795290][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1360.809668][T22599] netlink: 'syz.2.4010': attribute type 14 has an invalid length. [ 1360.820285][T22599] netlink: 'syz.2.4010': attribute type 13 has an invalid length. [ 1360.844645][T22600] binder: BINDER_SET_CONTEXT_MGR already set [ 1360.853452][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.866025][T22600] binder: 22595:22600 ioctl 4018620d 80004a80 returned -16 [ 1360.969146][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1360.987947][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1360.987962][ T30] audit: type=1326 audit(1770491414.977:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22596 comm="syz.2.4010" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd539 code=0x0 [ 1361.095035][T22610] netlink: 'syz.1.4009': attribute type 4 has an invalid length. [ 1361.180897][T22612] netlink: 'syz.1.4009': attribute type 4 has an invalid length. [ 1361.323111][T22612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.418439][T22612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.582878][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.589610][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.809079][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1361.849906][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1361.929069][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1362.039012][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1362.119666][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1362.343687][ T30] audit: type=1326 audit(1770491416.347:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1362.537827][ T30] audit: type=1326 audit(1770491416.397:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1362.627229][ T30] audit: type=1326 audit(1770491416.407:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1362.705896][ T30] audit: type=1326 audit(1770491416.407:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1362.707542][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1362.848662][ T5880] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1362.904996][ T30] audit: type=1326 audit(1770491416.407:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1363.014342][ T30] audit: type=1326 audit(1770491416.407:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1363.079794][ T30] audit: type=1326 audit(1770491416.407:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1363.103684][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1363.129218][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1363.183584][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1363.219197][ T30] audit: type=1326 audit(1770491416.417:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1363.259045][ T5880] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1363.282278][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.310959][ T5880] usb 1-1: Product: syz [ 1363.313050][ T30] audit: type=1326 audit(1770491416.417:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22626 comm="syz.3.4015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1363.338185][ T5880] usb 1-1: Manufacturer: syz [ 1363.343213][ T5880] usb 1-1: SerialNumber: syz [ 1363.369760][ T5880] usb 1-1: config 0 descriptor?? [ 1363.377793][T22637] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1363.590202][T22637] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1364.422299][T22644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.453727][T22644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.289569][ T13] net_ratelimit: 18 callbacks suppressed [ 1365.289583][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1365.410234][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1365.465564][ T39] usb 1-1: USB disconnect, device number 81 [ 1365.519407][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1365.648724][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1365.759275][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1365.816524][T22664] syz_tun: entered allmulticast mode [ 1365.877216][T22664] pimreg: entered allmulticast mode [ 1365.891385][T22667] libceph: resolve '0..' (ret=-3): failed [ 1365.909046][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1366.081799][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1366.188289][T22663] sit3: entered allmulticast mode [ 1366.213061][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1366.382027][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1366.509094][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1366.800541][T22653] syz_tun: left allmulticast mode [ 1367.361710][T22682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1367.591303][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1367.648115][T22692] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.666758][T22692] binder: 22689:22692 ioctl 4018620d 80004a80 returned -16 [ 1367.736881][T22690] netlink: 'syz.1.4024': attribute type 10 has an invalid length. [ 1367.817501][T22690] bridge0: entered promiscuous mode [ 1367.825295][T22690] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1369.439457][T20248] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1369.648559][T20248] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1369.685511][T20248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1369.720263][T20248] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1369.805259][T20248] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1369.824850][T20248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.854576][T20248] usb 3-1: Product: syz [ 1369.873739][T20248] usb 3-1: Manufacturer: syz [ 1369.899652][T20248] usb 3-1: SerialNumber: syz [ 1369.910433][T20248] usb 3-1: config 0 descriptor?? [ 1369.936723][T22716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1370.163329][T22716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1370.303839][ T6287] net_ratelimit: 32 callbacks suppressed [ 1370.303857][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1370.447019][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1370.598992][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1370.754396][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1370.869022][ T6277] bond2: (slave macvlan3): failed to get link speed/duplex [ 1370.979023][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1371.089076][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1371.199050][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1371.309092][ T12] bond2: (slave macvlan3): failed to get link speed/duplex [ 1371.419003][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1371.631908][T22744] binder: 22729:22744 ioctl 4018620d 0 returned -22 [ 1372.180247][ T39] usb 3-1: USB disconnect, device number 95 [ 1373.024636][T22759] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1373.033198][T22759] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1373.042758][T22759] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1373.588928][T22760] input: syz0 as /devices/virtual/input/input69 [ 1373.719459][T22768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1373.726077][T22768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1373.838852][T22771] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 1373.845473][T22771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1373.880127][T22773] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1373.886734][T22773] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1373.911961][T22778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1373.939043][ T5880] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1373.946840][T22768] vhci_hcd vhci_hcd.0: Device attached [ 1373.999055][T22780] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 1374.005671][T22780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1374.037827][T22771] vhci_hcd vhci_hcd.0: Device attached [ 1374.059909][T22768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 1374.066526][T22768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1374.080008][T22773] vhci_hcd vhci_hcd.0: Device attached [ 1374.094555][T22780] vhci_hcd vhci_hcd.0: Device attached [ 1374.131417][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1374.156724][T22771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1374.165003][T22768] vhci_hcd vhci_hcd.0: Device attached [ 1374.209056][ T39] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1374.219327][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1374.236474][T22768] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(26) [ 1374.243084][T22768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1374.250850][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1374.277549][T22771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1374.287591][T22768] vhci_hcd vhci_hcd.0: Device attached [ 1374.295562][ T5880] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1374.305003][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.319671][ T5880] usb 3-1: Product: syz [ 1374.330253][ T5880] usb 3-1: Manufacturer: syz [ 1374.340525][ T5880] usb 3-1: SerialNumber: syz [ 1374.361936][ T5880] usb 3-1: config 0 descriptor?? [ 1374.397874][T22766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1374.461613][T22781] vhci_hcd: connection closed [ 1374.462164][T22787] vhci_hcd: connection closed [ 1374.467168][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.481961][T22783] vhci_hcd: connection closed [ 1374.495662][T22774] vhci_hcd: connection closed [ 1374.503509][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.514363][T22772] vhci_hcd: connection closed [ 1374.515035][T22769] vhci_hcd: connection reset by peer [ 1374.555397][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1374.579978][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.594245][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.606363][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1374.629391][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.661667][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.673729][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1374.702855][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.708082][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.724613][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1374.741948][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.760764][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.793821][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1374.799958][T22766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1374.809215][ T6287] vhci_hcd vhci_hcd.3: stop threads [ 1374.816188][ T6287] vhci_hcd vhci_hcd.3: release socket [ 1374.835669][ T6287] vhci_hcd vhci_hcd.3: disconnect device [ 1375.335654][ T6273] net_ratelimit: 29 callbacks suppressed [ 1375.335674][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.468966][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.589956][ T13] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.659967][ T31] INFO: task kworker/0:4:5893 blocked for more than 143 seconds. [ 1375.667830][ T31] Tainted: G L syzkaller #0 [ 1375.674741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1375.686724][ T31] task:kworker/0:4 state:D stack:21384 pid:5893 tgid:5893 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1375.699212][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.712042][ T31] Workqueue: usb_hub_wq hub_event [ 1375.720812][ T31] Call Trace: [ 1375.725471][ T31] [ 1375.730901][ T31] __schedule+0x14ea/0x5050 [ 1375.738857][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1375.745598][ T31] ? __pfx___schedule+0x10/0x10 [ 1375.755078][ T31] ? schedule+0x90/0x360 [ 1375.760655][ T31] schedule+0x164/0x360 [ 1375.766314][ T31] schedule_preempt_disabled+0x13/0x30 [ 1375.775212][ T31] __mutex_lock+0x7fe/0x1300 [ 1375.782202][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1375.790377][ T31] ? hub_event+0x21a2/0x4f30 [ 1375.796890][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1375.804688][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1375.810780][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.821880][ T31] hub_event+0x21a2/0x4f30 [ 1375.828314][ T31] ? __pfx_hub_event+0x10/0x10 [ 1375.836029][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1375.845400][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1375.854101][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1375.864359][ T31] process_scheduled_works+0xaec/0x17a0 [ 1375.872985][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1375.882730][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1375.890214][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1375.897932][ T31] ? schedule+0x90/0x360 [ 1375.906971][ T31] worker_thread+0xda6/0x1360 [ 1375.915315][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 1375.920775][ T6287] bond2: (slave macvlan3): failed to get link speed/duplex [ 1375.930111][ T31] kthread+0x726/0x8b0 [ 1375.936435][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1375.948540][ T31] ? __pfx_kthread+0x10/0x10 [ 1375.957666][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1375.965249][ T31] ? __pfx_kthread+0x10/0x10 [ 1375.972469][ T31] ret_from_fork+0x51b/0xa40 [ 1375.985487][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1375.990949][ T31] ? __switch_to+0xc82/0x1410 [ 1375.998215][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.004792][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.013058][ T31] [ 1376.016409][ T31] [ 1376.016409][ T31] Showing all locks held in the system: [ 1376.027404][ T31] 1 lock held by khungtaskd/31: [ 1376.033417][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1376.033709][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1376.051004][ T31] 5 locks held by kworker/1:1/39: [ 1376.056048][ T31] #0: ffff8880202c6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1376.070209][ T31] #1: ffffc90000af7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1376.091344][ T31] #2: ffff888029f80198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1376.118442][ T31] #3: ffff888029f83518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1376.138789][ T31] #4: ffff888029126968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1376.149049][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1376.170367][ T31] 2 locks held by getty/5581: [ 1376.181172][ T31] #0: ffff8880357250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1376.194689][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1376.208569][ T31] 5 locks held by kworker/0:4/5893: [ 1376.216989][ T31] #0: ffff8880202c6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1376.232766][ T31] #1: ffffc900050afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1376.247310][ T31] #2: ffff888029f33198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1376.256456][ T31] #3: ffff888029f36518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1376.266585][ T31] #4: ffff888029be7c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1376.269096][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1376.283775][ T31] 5 locks held by kworker/1:6/5907: [ 1376.299887][ T31] #0: ffff8880202c6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1376.312325][ T31] #1: ffffc900051a7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1376.324736][ T31] #2: ffff888029ed5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1376.333854][ T31] #3: ffff888029ee8518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1376.344058][ T31] #4: ffff888029be7c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1376.353964][ T31] 5 locks held by kworker/0:1/20248: [ 1376.361315][ T31] #0: ffff8880202c6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1376.377032][ T31] #1: ffffc90019db7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1376.392591][ T31] #2: ffff888029fa9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1376.408125][ T31] #3: ffff888029fac518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1376.410214][ T6273] bond2: (slave macvlan3): failed to get link speed/duplex [ 1376.425645][ T31] #4: ffff888029126968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1376.435703][ T31] 3 locks held by kworker/1:2/20977: [ 1376.441098][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1376.454580][ T31] #1: ffffc9000f4cfbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1376.469092][ T31] #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.482557][ T31] 2 locks held by syz.0.4039/22760: [ 1376.491569][ T31] 1 lock held by syz.3.4044/22799: [ 1376.500352][ T31] [ 1376.502822][ T31] ============================================= [ 1376.502822][ T31] [ 1376.519019][ T31] NMI backtrace for cpu 1 [ 1376.519037][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.519062][ T31] Tainted: [L]=SOFTLOCKUP [ 1376.519076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1376.519086][ T31] Call Trace: [ 1376.519094][ T31] [ 1376.519101][ T31] dump_stack_lvl+0xe8/0x150 [ 1376.519125][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1376.519229][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1376.519254][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1376.519277][ T31] sys_info+0x135/0x170 [ 1376.519322][ T31] watchdog+0xf90/0xfe0 [ 1376.519344][ T31] ? watchdog+0x209/0xfe0 [ 1376.519367][ T31] kthread+0x726/0x8b0 [ 1376.519388][ T31] ? __pfx_watchdog+0x10/0x10 [ 1376.519404][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.519424][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.519439][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.519457][ T31] ret_from_fork+0x51b/0xa40 [ 1376.519475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.519489][ T31] ? __switch_to+0xc82/0x1410 [ 1376.519513][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.519531][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.519565][ T31] [ 1376.519592][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1376.644300][ C0] NMI backtrace for cpu 0 [ 1376.644319][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.644341][ C0] Tainted: [L]=SOFTLOCKUP [ 1376.644348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1376.644358][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1376.644382][ C0] Code: 98 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 49 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1376.644397][ C0] RSP: 0000:ffffffff8e207dc0 EFLAGS: 00000242 [ 1376.644412][ C0] RAX: 00000000026b6ec1 RBX: ffffffff8199570d RCX: 0000000080000001 [ 1376.644427][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9d7a RDI: ffffffff8c073b00 [ 1376.644439][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1376.644451][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef2070 [ 1376.644463][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 1376.644475][ C0] FS: 0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000 [ 1376.644488][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1376.644499][ C0] CR2: 00000000800cd018 CR3: 0000000068f2c000 CR4: 00000000003526f0 [ 1376.644514][ C0] Call Trace: [ 1376.644520][ C0] [ 1376.644526][ C0] default_idle+0x9/0x20 [ 1376.644545][ C0] default_idle_call+0x72/0xb0 [ 1376.644564][ C0] do_idle+0x1bd/0x500 [ 1376.644578][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1376.644597][ C0] ? __pfx_do_idle+0x10/0x10 [ 1376.644615][ C0] cpu_startup_entry+0x43/0x60 [ 1376.644629][ C0] rest_init+0x2de/0x300 [ 1376.644650][ C0] start_kernel+0x380/0x3d0 [ 1376.644761][ C0] x86_64_start_reservations+0x24/0x30 [ 1376.644802][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1376.644820][ C0] common_startup_64+0x13e/0x147 [ 1376.644846][ C0] [ 1376.868081][T20977] usb 3-1: USB disconnect, device number 96 [ 1376.937027][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1376.943882][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.954533][ T31] Tainted: [L]=SOFTLOCKUP [ 1376.958833][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1376.968872][ T31] Call Trace: [ 1376.972156][ T31] [ 1376.975170][ T31] vpanic+0x1e0/0x670 [ 1376.979162][ T31] panic+0xc5/0xd0 [ 1376.982868][ T31] ? __pfx_panic+0x10/0x10 [ 1376.987270][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1376.992629][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1376.998768][ T31] watchdog+0xfda/0xfe0 [ 1377.002913][ T31] ? watchdog+0x209/0xfe0 [ 1377.007231][ T31] kthread+0x726/0x8b0 [ 1377.011295][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.015972][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.020543][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.025725][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.030304][ T31] ret_from_fork+0x51b/0xa40 [ 1377.034880][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1377.039971][ T31] ? __switch_to+0xc82/0x1410 [ 1377.044635][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.049216][ T31] ret_from_fork_asm+0x1a/0x30 [ 1377.053994][ T31] [ 1377.057336][ T31] Kernel Offset: disabled [ 1377.061641][ T31] Rebooting in 86400 seconds..