last executing test programs: 1m19.673055971s ago: executing program 2 (id=36): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000906"], 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2d) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m19.037671899s ago: executing program 2 (id=41): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x23e9c9e, 0x0) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0/file0', [{0x20, '+@&\':-}&D#\'@/.7'}, {0x20, 'SMC_PNETID\x00'}, {0x20, '-'}], 0xa, "d20fc820a91c663dbce081f79e4e7be556062c37f7098f849fdb4f749e7c500a01efa77bcf5429dafc475ba4a200d25c767f720670f24d215d8f445fe7c4a7a37dc81928c9e029a21fd63b89ad26c9a0b45bfd15779b84111714ffcb6ac10a6aac598f24f9444114ea85b403bb73bedef89bea830ef4bcd4de28d097265fee2e5f7bad7a0cbcd4a4d5"}, 0xb8) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) 1m18.802219568s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6=@icmpv6={0xa, 0x6, "08b2b0", 0x214, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x33, 0x22, '\x00', [@generic={0x9, 0xf6, "f849d80c9f57ecf00c7595a70c79c599287ff4de68eeb94c50615180b58e3fff9ac362865db0b5335b306b6320193ea6b7f8069ec5e2cd21a2c410774cc899f120d18f39642560c8577eb51035b34edd8832b0cd3f025ba022ea5e86570974a5d6de2ec0feef5353d4c90f92c656d78c554dfc4a3f34f5861410e27ab0b038c7960617bfe5e3e833836476d19f11eed8e0ece727e405e0b98b363f578c2274071209daa17683047309e4522f8f0a5b58fb21856145afb4a8dc83d6d09241428b574eea0a3f9d0626522df4191624c7383ae01d8757def762e3692dbf7db6fc5114fbf2b45e9a0b9bb9cae7876882abf69f5d50f8ee3c"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xc5}, @ra={0x5, 0x2, 0xa75a}, @enc_lim, @ra={0x5, 0x2, 0xc}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}, @srh={0x33, 0xc, 0x4, 0x6, 0x3, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x3, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, @remote, @empty, @empty]}}}}, 0x23c) 1m18.40606672s ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) syz_usb_connect(0x3, 0x112, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xf8, 0xe7, 0x6e, 0x20, 0x10b8, 0x1f90, 0x8455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x1, 0xf2, 0xff, 0x1e06a499d5815fb9, 0x81, "", [{{0x9, 0x4, 0x6, 0x8, 0xa, 0x57, 0xbb, 0x1f, 0x7, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x1, 0x4, 0xff}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x40, 0x1, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x8, 0xfa, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x8, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}, @generic={0x78, 0xb, "39d16d15b869cac7f8728d392dbbe5e133ac4c6ff1c259bd54a9b53533d446c59a9f539074e7d264a3eac632d9f806b1210edc970dbb3dde78e72a3f1a79925b74bb464f566ca5523b86fcc7d9c21a0ee4a615296a4919ce9d7233b0f7262a4f86eca88774b470e13f0e10df15cf78b6e10b8a245d07"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x0, 0xf}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x83, 0x10, 0x0, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x6, 0x4b, 0x6}}]}}]}}]}}, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 1m16.483840847s ago: executing program 2 (id=49): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f047b931904"], 0x7) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)={0x0, 0x200000}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000540)}], 0x1, 0x4, 0x10001) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m14.642350961s ago: executing program 2 (id=58): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0xfffffffffffffeb6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000200)="b82c", 0x2}, {&(0x7f0000000800)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 1m13.73208652s ago: executing program 32 (id=58): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0xfffffffffffffeb6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000200)="b82c", 0x2}, {&(0x7f0000000800)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 7.440531878s ago: executing program 1 (id=359): clock_adjtime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[], 0x0) 5.555791027s ago: executing program 0 (id=369): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x9, @mcast2, 0x2}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x587c, 0x4) recvmmsg(r1, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0xff}, {&(0x7f00000001c0)="6b65b245210eb4947e96e2a46e681e1d7db684f7f93ce2fad4d85c3872222da9a0d524394eb3777e95af9d78620acf7f2cc5120af2ba215d1f7457569f50fd594816891a3f01fc2f34da52a95c7a4c47a977856aaf0cbd63d1217caceb26516425eb0528e337f49f1c32c4dede43528eca6fee667c89b595d4b09fe4", 0x7c}, {&(0x7f0000000240)="25f0d950b7b7666562d73be020c81b0f53f1e5c0b6b34c80dcf75f635dc9cb66c3837056126a71de71f0fffa55dc53fe9ea5f7f1109718f6e681456a4960b6e42af1c5f886c795596b8222b354547a8738d2cdebab08cc6ac1cc673ae1", 0x5d}, {&(0x7f00000002c0)="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", 0x3c1}], 0x4}, 0x7101}], 0x1, 0x4001c00) 5.348237447s ago: executing program 0 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x32) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6=@icmpv6={0xa, 0x6, "08b2b0", 0x214, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x33, 0x22, '\x00', [@generic={0x9, 0xf6, "f849d80c9f57ecf00c7595a70c79c599287ff4de68eeb94c50615180b58e3fff9ac362865db0b5335b306b6320193ea6b7f8069ec5e2cd21a2c410774cc899f120d18f39642560c8577eb51035b34edd8832b0cd3f025ba022ea5e86570974a5d6de2ec0feef5353d4c90f92c656d78c554dfc4a3f34f5861410e27ab0b038c7960617bfe5e3e833836476d19f11eed8e0ece727e405e0b98b363f578c2274071209daa17683047309e4522f8f0a5b58fb21856145afb4a8dc83d6d09241428b574eea0a3f9d0626522df4191624c7383ae01d8757def762e3692dbf7db6fc5114fbf2b45e9a0b9bb9cae7876882abf69f5d50f8ee3c"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xc5}, @ra={0x5, 0x2, 0xa75a}, @enc_lim, @ra={0x5, 0x2, 0xc}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}, @srh={0x33, 0xc, 0x4, 0x6, 0x3, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x3, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, @remote, @empty, @empty]}}}}, 0x23c) 4.564269425s ago: executing program 0 (id=375): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0x16, 0x11, "0a67be78cc4385fce155c9db4a474052f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x8, 0x1, 0x9) 4.244115755s ago: executing program 1 (id=376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 3.591439418s ago: executing program 1 (id=377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000003c0)) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r5, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x40, 0x5, 0xe1, {0xe1, 0x22, "82ccc70adaf8d2d48d108d11353a199b98f49639317d43c3896a01d20732599c2f9028e2d574ec35792486e1850b942f3de69142b1304a651e1b5525cba0cb9449f9e250da851334fa69eb4af41464784eb06ee1fb66bc13f59aaa3aae39b93111fb4326e7c92abba88b04d434148172b034f3bf511969b5d7eb17108281491d23e0ea89cad497094cd45ec5b9c853445a03a058af6183dc010be484402ab6091a85ed2b6073c3442bb7f1996f39d634d8ce9cb41561773661b932acb6381e1d6babdf34c04fbfd51e6a552387448e623f1c8e81189b4665429f3b6f1439f1"}}, &(0x7f0000000180)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "3192972b35a073034cd52e3e54a9f033d0784ebc4b43e9b0aa30d28519ea771c0fc6f5777830721fcebfe6eb80a83a983a89dca70c32fe95f2409103c0248085839fbd06455297dcb55dfe38b2bdeb29f25217a29eaf52bbe23ada88a421959067cef3a05955a5edc6414e3428237953ec32e17b2e7391f56f94db64503e1cd3ff9a6fb26f7a1e6552c83cbe163b31c0f990959d480d4e8d152bbc6cbf0ffadf0d8c37f4f2669450698bc7c2e21fe485803eb7d48d71a736ece89fa3afa2ee3defc6ea48fddabd232cc9dcee350fc2fb7cb5035a164c34f90e3935e08cd86e20c22b5f9d8d80bbc77d02166ed14ea75418cec1b0f27d48dc"}}}, &(0x7f00000008c0)={0x1c, &(0x7f00000002c0)={0x40, 0x0, 0x1c, "018f2cafb6f8f3863bb045659c169d8f90433607d0d0317c92a263b0"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000880)={0x21, 0x0, 0x1, 'Q'}}) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000140)='g') 2.728366186s ago: executing program 0 (id=381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x4040) io_setup(0x6, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x100fdff, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 2.490386306s ago: executing program 0 (id=383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'devlink\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) (fail_nth: 6) 2.416893108s ago: executing program 0 (id=384): clock_adjtime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[], 0x0) 2.131382992s ago: executing program 4 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x201, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}}, 0x0) 1.961665309s ago: executing program 3 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf252500000008000200", @ANYRES32=r6, @ANYBLOB="05002e006900000005002b00235281"], 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r13, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}, 0x1, 0x3000000}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200c080}, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1.927193499s ago: executing program 4 (id=388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0/file0', [{0x20, '+@&\':-}&D#\'@/.7'}, {0x20, 'SMC_PNETID\x00'}, {0x20, '-'}], 0xa, "d20fc820a91c663dbce081f79e4e7be556062c37f7098f849fdb4f749e7c500a01efa77bcf5429dafc475ba4a200d25c767f720670f24d215d8f445fe7c4a7a37dc81928c9e029a21fd63b89ad26c9a0b45bfd15779b84111714ffcb6ac10a6aac598f24f9444114ea85b403bb73bedef89bea830ef4bcd4de28d097265fee2e5f7bad7a0cbcd4a4d5"}, 0xb8) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) 1.500156108s ago: executing program 3 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x29, 0x1}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15a}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f292fd8b3523e5a2dd95177db84a801f0bc70819805a52b1b1b8f6c392056eb5f511d865324a88857277ce16e07bd12fc8b20b4c1b57b6ec2ca63497036679cad780c686", 0x18c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600", 0xeb}, {&(0x7f0000000040)="7542473782798be019c2", 0xa}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb86749", 0x68}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead3", 0x1f}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 1.130797934s ago: executing program 3 (id=390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 1.106344368s ago: executing program 3 (id=391): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0xfe, 0x3, 0x32, @loopback, @empty, 0x7800, 0x40, 0x9, 0x2}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004200)={&(0x7f0000001c40)=@deltfilter={0x25a4, 0x2d, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x10, 0x6}, {0x8, 0xfff3}, {0x6, 0xd}}, [@f_rsvp6={{0xa}, {0x8fc, 0x2, [@TCA_RSVP_POLICE={0x8a4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5b5, 0xffffffffffffffff, 0x8, 0x800, 0x6, {0x4, 0x2, 0x374, 0x8, 0x8001}, {0xf8, 0x1, 0x9, 0x7, 0x7, 0x1}, 0xf15, 0x5, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0x1, 0x0, 0xb1, 0x80000000, 0x9, 0xfffffc1d, 0x8001, 0x7ff, 0x8, 0x8, 0x4, 0x1, 0x8, 0x9, 0x7, 0xfffffff9, 0xfffffff9, 0x6, 0xfffffffd, 0xa, 0x55921be3, 0x6, 0x6939, 0x3, 0x9, 0x81, 0x6, 0x8, 0x8, 0x1f, 0x0, 0x0, 0x4, 0xffffffff, 0x3, 0x2c00, 0xfffffffc, 0x7, 0x401, 0xb407, 0x5, 0x8, 0x8, 0xd, 0x10000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x8, 0x9, 0xfffffffb, 0xf, 0xf, 0x8, 0x5, 0x6, 0x7, 0x1, 0x4, 0xb, 0xa, 0x6, 0xffff, 0x4, 0x0, 0xffffffff, 0x7, 0x1, 0x81, 0x6067afca, 0x3, 0x61a, 0xffffffff, 0x1, 0x7ff, 0xfffffffa, 0xe4e8, 0x9, 0x5, 0x3b9a, 0x9, 0xfffffffc, 0x7, 0x7, 0xb6e4, 0x1e3df90f, 0x6, 0x2, 0x100, 0x3, 0x8, 0xfffffffc, 0x10001, 0x8, 0x5, 0xc, 0x5, 0xb9f, 0x9, 0xfffffff3, 0x54c8, 0xa4, 0x0, 0xfffffffe, 0x5, 0x8, 0x8, 0x8, 0x7, 0xca, 0x5, 0x3, 0xd91, 0x5, 0x3, 0x2, 0xf6, 0x9, 0x1000, 0x4, 0x7, 0x9, 0x7ff, 0x93a2, 0x9, 0x0, 0x4, 0x5, 0x7, 0x100, 0x5, 0x2, 0x0, 0x7, 0x8, 0x4, 0x5, 0x8000, 0x3, 0x401, 0x8, 0xffffffff, 0x10000, 0xff, 0x0, 0x3, 0x30b, 0x10001, 0x1, 0x2, 0x9, 0x1, 0x1, 0x7fffffff, 0x80, 0x6, 0xc62, 0x2, 0x9, 0xee, 0x7fff, 0x105, 0x7f, 0x0, 0x7, 0x7, 0x80000001, 0x8, 0xfffffff8, 0xb, 0xff, 0x3, 0x6, 0x1a, 0x7, 0x2, 0x4, 0x7, 0x1000, 0x91, 0x916, 0x4, 0xffff, 0x4, 0x5, 0x400, 0x1, 0x7fff, 0x3, 0x8, 0x5, 0x5, 0x7, 0x0, 0x9, 0x0, 0x78ab, 0x4, 0x6, 0x2, 0x4, 0x7, 0x1, 0x8, 0x4, 0x1, 0x0, 0x1, 0x68, 0x0, 0xff, 0x3642, 0x2, 0x7, 0x7, 0x8000, 0x1, 0x1ff, 0x6, 0x3, 0x0, 0x66, 0x8, 0x3, 0x6, 0x1ff, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xd74, 0x6, 0xa6, 0xfffffffb, 0xffffff81, 0x2, 0xff, 0x1, 0x800, 0x4, 0x8000, 0x3, 0x4, 0x6, 0xf22, 0x1, 0x1, 0x5eb0, 0xfffffffe, 0x7fffffff, 0x80000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfa67, 0x2a, 0x800, 0x2, 0x1, 0xffffff36, 0xb, 0x7ff, 0x5d, 0x1, 0x4, 0x0, 0x40400000, 0x1, 0x62, 0x2, 0x6, 0x80000000, 0x529, 0x6, 0x81, 0x3, 0xffffffff, 0x6, 0x6, 0x200, 0xf4, 0x6, 0x80000000, 0xfe6, 0x705, 0xa, 0x1, 0x2, 0x9, 0x0, 0x0, 0x8, 0x4, 0xd5c3, 0x6, 0x1, 0x6, 0x3, 0x7f, 0x6, 0x7fa, 0x1, 0x8b, 0x6, 0x1, 0x6, 0x0, 0x6bd3, 0x8, 0x3ff, 0x2, 0xfe, 0x49, 0x200, 0xe6db, 0x80a8, 0x3, 0x3, 0x2f36a6a8, 0x1, 0xb, 0xfffffffb, 0x0, 0x5, 0xe, 0x2, 0x4, 0x7, 0xbd5a, 0x2980f77c, 0x9, 0x8, 0x8, 0x6, 0x8, 0x5, 0xd, 0x7f, 0x6de, 0x1, 0xffff0001, 0x24, 0x1, 0x3, 0x7, 0x3, 0x800, 0xb9, 0x2, 0x6, 0x3, 0x1, 0x3, 0x2, 0xf2, 0x7, 0x9, 0x1, 0x1743cf2, 0xbe, 0x1, 0x7d83, 0x9, 0x9, 0x7, 0x7, 0x5, 0x6, 0x3, 0x8, 0x10000, 0x3, 0x3, 0x4, 0xc, 0xf, 0x80, 0x1, 0x8000, 0x2, 0x8c, 0x8, 0x9, 0x8, 0x400, 0x7, 0x8001, 0x4, 0x0, 0x200, 0x4, 0x1, 0x8, 0x5, 0x6, 0xf647, 0x0, 0xbb06, 0x5, 0x7, 0x4081, 0xd, 0x4, 0x3, 0x9, 0x7, 0x3323887f, 0x80000001, 0xfffffff7, 0x1, 0xa9, 0x8, 0x7, 0x0, 0x2, 0x6, 0x40, 0x7, 0x24, 0x3, 0x7, 0x100, 0x3, 0x1dc, 0x5, 0x0, 0x8000, 0x5, 0x4, 0x12d, 0x2, 0xfe0, 0x40, 0x101, 0x5, 0xf929, 0x4, 0x37a9, 0x7, 0x2, 0x65c, 0x3, 0x7, 0x0, 0x5, 0x8, 0x8, 0x941a, 0x9, 0x81, 0x40, 0x7fff, 0xc, 0x1c, 0xffffffff, 0x7, 0x9, 0x1, 0x1, 0x9, 0xfffffe00, 0x1, 0x6, 0x0, 0x8, 0x10001, 0x2, 0x2, 0x5, 0x7, 0x6, 0x2785, 0xfa8c, 0x9, 0x49f, 0x3, 0x501, 0xa, 0x5, 0x4, 0x3, 0x8, 0xffffff15, 0xfff, 0xcdd, 0xf8c, 0x3, 0x0, 0xe, 0xff, 0x4, 0x4, 0xa, 0x2, 0xb, 0x80000000, 0x2, 0x0, 0x4, 0x8, 0x9470, 0x2, 0x9, 0x8, 0x1, 0x41e, 0x8, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x23, 0x0, 0x8, 0x800, 0x284ffb3f, {0x4, 0x1, 0x1000, 0x80, 0x10, 0x5}, {0x7, 0x2, 0x8, 0x3ff, 0x8000, 0x8}, 0x7, 0x1, 0x4f7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x3, 0x9}, {0x80fb, 0x9, 0x401}, 0x84, 0x8, 0x35}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x8, 0x8001}, {0xfffff801, 0x9, 0xb}, 0x2e, 0xfc, 0x8d}}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}}, @f_rsvp6={{0xa}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}]}, @TCA_RSVP_DST={0x14, 0x2, @private0}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}}, @f_tcindex={{0xc}, {0x2a4, 0x2, [@TCA_TCINDEX_ACT={0x2a0, 0x7, [@m_skbmod={0xbc, 0x14, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="c061dfc26a26"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x5c, 0x6, "36e415cef146c60cdaed3e88a75d9c3e1614d4c76d0a38f678818617d3368aff63f577aada2375889a9801894b440c4d592ff9c544ed3bfd84c7b7ce567436fe69eff0244bbf5589924aa17eb8c70ec4944eb74abea5955f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x68, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "af3a1e61b3c4cf8d9f61aa6d696d888709550b2d6fe695cf835b97f9bf777751b475f91a7176ee0136def78f534450b01c8382b7bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x178, 0xe, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xc, 0xffffffffffffffff, 0x6, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x97, 0xd1c0, 0x5, 0xfff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x6, 0x1, 0x4}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x13, 0x3, '-(\xeb$\xe1^,{^$$*+(\x00'}]}, {0xdf, 0x6, "6ebbda0f0be0a96474fe14e6b9d8d255b1194249d27b7b1148d1728a8702e36b22d92140154b6e0aa8aed653c6662d43ff381f52169773572a715a1053331c56dfb9f8a058871f64a3a6cf942ba4889f9648dae99ce337b3a23c5dadcd0a5bc5ca4b2e2bdc2b51719d4b5ddec8897aeb22fd6fda7e8c44069666c5f64a22ea31cfdcea521ad921d98f5d3161c915112fa15ff8f7e1d19d44740748450ff69035089570336e3e0bb2e19704137226fdcd6b90eff4e1c97e2be99c65462e328419b8d003a8bf728790385f5c3d2dc99ab418b081a0b8b5adb663a6b0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @f_rsvp6={{0xa}, {0x470, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x5, 0x6, 0x2, {0x80, 0x2, 0x4, 0x9, 0x8000, 0xbd}, {0x9, 0x1, 0x9, 0x6, 0xb7, 0x10}, 0x5, 0x3, 0xfffffffd}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9ac, 0x4, 0x2, 0xac, 0x9f, 0x100, 0x81, 0x9, 0x10, 0x8, 0x4, 0xfffffff6, 0x4, 0x6, 0x2, 0x1, 0x8001, 0x0, 0x40, 0x100, 0x6, 0x5, 0x7, 0x100, 0x3, 0xd20, 0x7, 0x0, 0xffffffff, 0x9, 0xb98, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x800, 0x7, 0x81, 0x192b, 0x8000, 0x64, 0xc, 0x0, 0x88, 0x5, 0xffffffff, 0x1000, 0x7e, 0x7, 0x5, 0x5, 0x6, 0x7, 0xcb, 0x2, 0x9, 0x2, 0xac5, 0x7, 0xe8, 0x1, 0x6, 0x1000, 0x80, 0xf, 0x3, 0x8, 0xff8000, 0x4, 0x8, 0x7, 0x2, 0x7, 0x3, 0x2, 0x199, 0x9, 0x0, 0x8100, 0xa, 0x200, 0x9, 0x1, 0x5, 0x7, 0x10000, 0xfffffff8, 0x1, 0x8ea0, 0x9, 0x4, 0x1, 0x7e7, 0x1, 0x8001, 0x2, 0x3, 0x8000, 0x3, 0x9, 0x8, 0x97c, 0x8, 0x7, 0x80000001, 0xf400000, 0x8, 0xfffffff7, 0xfffffff7, 0x63, 0x2, 0xfffffffe, 0x55, 0x3, 0x0, 0x9, 0x8, 0x935, 0x996a, 0x6c35, 0x74f7, 0x0, 0x8, 0x6, 0x4, 0x7ff, 0xfffff932, 0x7, 0x7, 0x101, 0x7, 0x5, 0x10000, 0x3, 0x1, 0x7, 0x5, 0x33, 0x4, 0x4, 0x0, 0x1, 0x9e, 0x8, 0x7, 0x7, 0xc, 0x9, 0x81, 0x5, 0x0, 0xcf, 0x1, 0x5, 0xfffffdf5, 0x101, 0xd9, 0xffff5dfe, 0x0, 0x7, 0x2, 0x2, 0x7, 0x29c000, 0xfffffffd, 0x7, 0x4, 0x4, 0x6, 0x81, 0x81, 0x80, 0x9, 0x2d99, 0x38, 0x4, 0x5, 0x2, 0x10000, 0x43d, 0x2, 0x400, 0x8, 0x7, 0x10000, 0x2, 0xb, 0x8, 0x4, 0x81, 0x712, 0x0, 0x9, 0xb4c, 0x1, 0x9, 0x6, 0x4, 0x5ec4, 0x3, 0x0, 0x8, 0x6, 0x7, 0x6, 0x9b, 0xe9, 0xfffffe00, 0x0, 0x0, 0x0, 0x4, 0x4, 0x47, 0x2, 0x8, 0x7, 0x1, 0x31, 0x40, 0x1, 0xe, 0x5, 0x7, 0x1, 0x5, 0x1, 0x7, 0xcb, 0x0, 0xfff, 0x271, 0x4, 0x792, 0x0, 0x8, 0xfffffffe, 0xffff, 0x80, 0x7fffffff, 0xe, 0x8000, 0x6, 0x8, 0x8, 0x0, 0x1, 0x6, 0xfffffffc, 0x8, 0x80, 0x5, 0x2, 0x2, 0x8]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0xf, 0x383}, {0x5, 0x3, 0xa7bc}, 0x11, 0x8, 0x4}}]}}, @f_tcindex={{0xc}, {0x14f0, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x636}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_ACT={0x220, 0x7, [@m_ife={0x104, 0x9, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x91}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xbd, 0x6, "7fd9433bb5fb9b6265b36eebfdbca8b4b170813ee7e6b01cf20079974d490718fbea9b15529ecbc9b127d59ae4e6fe34d82c341f48fa9ad21d2603f0e5189103dc99d7c4193855a4dc6746839d0232e2175969d1af037e079f231e8b9bb6ce7ca11cdce063d60e6e70706c2778342a9bc0a9b8784c4d9060a0f59057e79c91596452e3ebb65790ccee8e9488cef9a73613e5acead0c663925fc7ea22422c3374969f0d53c89879b6afde7726d463da44193fc3c26cc1a26952"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe8, 0x2, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xae, 0x6, "9e9b3b358362bbbad5ec49d87ec154e602b446cb2ebd65ffb5070a6e428d47025f239aef46b2c0c67b6166d01659c85513d32acd0aa61f114ecf58be7626037ee2d6e0ddf83ce4142a5f6578e6cacd4ca8622b80e6b76dae4f320e60b25c024bc86422bcd43dcb17750e6806aca35262ec4ed3121c1132727ee1b9c41ff558abc539667428ab13a4d09381998c00eac85c955f99d2253581d6fd96cbcc2d8ec0fbd910334cbe575af463"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x30, 0x16, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xd}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x2}}, @TCA_TCINDEX_ACT={0x1284, 0x7, [@m_skbmod={0x1054, 0xd, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="a90cfbfd0c45"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="9208f88ad612"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x4508f4a5f8f16d55}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe0, 0x12, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0xffffffff, 0x5, 0x3, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x6}}]}, {0x8c, 0x6, "03d7dc885e1f6ac7010b0ddb31e5a63aa953f3574e2b1ac03f9f4b04cbc9e22fcb04d5b2080a5a00e67a1e5845aa49e57efbaf18c80a1e59357b901e7461a7c31d4c173df215d972fe423c662b00e713edb4fbd950917bf1cab7fd08d2e3fd90db8438cc4515f3fa79b69de9e69534b871ff7e7ed0ca30dc9dc91abacffebca25661caf6c9814c4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xb8, 0xd, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x0, 0x6ba8fcfe, 0x101}, 0x1}}]}, {0x53, 0x6, "623249dd9e94eb57cf4202068ed317d2981a5ac57609fe086d63b8328cd1e9a91faab3378f48fd8e19e8fcd7d46b5a1c4ba519c2876ec027701e88a318936818c4d75c146c5c728ad5b0ded3f92452"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x94, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x10e, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9c4, 0x3, 0x278}}]}, {0x44, 0x6, "b57f87d560211aa70236e58a9b27fd25248ca7c923a166aa53887f49f9132b2f2c7777c432f5e7ee6e87344828a8204e655721e974456fd8d66f2b11918ef302"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_POLICE={0x20, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}]}}]}, 0x25a4}}, 0x8006) r1 = syz_clone3(&(0x7f0000005440)={0x408004400, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000a00140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/246) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 0x37, 0x2, {0x1, 0xfffffffffffffff7, 0x1, r1, 0x8, 'skbedit\x00'}}, 0x26) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) 1.010961655s ago: executing program 4 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="31830100000000000000190000000c0001800800030004"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 929.592247ms ago: executing program 4 (id=393): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000120010002abd7000ffdbdf25fe800000000000000000ae8278d43230440000000000bb000004d202002b0005001900330000000800180001000000982edd061092c0d86054b3d8978e16345a170d17e0f270fede889e"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) utimes(0x0, &(0x7f0000000100)={{0x3, 0x8001}, {0x8fd, 0x200}}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x5}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040050) connect(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x2, 0x0, 0x3, 0x1}}, 0x80) socket$kcm(0x29, 0x5, 0x0) 878.32859ms ago: executing program 3 (id=394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0xfdef) 812.077305ms ago: executing program 4 (id=395): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0xffe0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e04c0e69cb5bcd805c5819e14e521da93883e8c628a01c7a746e50bd2a63c68141965f3fbcf0e16", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004000) 747.56928ms ago: executing program 4 (id=396): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) (async) r1 = dup(r0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) (async) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000000)=""/80, &(0x7f0000000140)=0x50) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100100009041302028367160009050402000200fa000905810b40"], 0x0) 477.762899ms ago: executing program 1 (id=397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r1, &(0x7f0000000100)="a00064bced2a4a68", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'devlink\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) 438.175091ms ago: executing program 1 (id=398): unshare(0x20040600) r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008, r1}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fstatfs(r2, &(0x7f00000002c0)=""/148) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x84) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0x5000000, 0x0) read$FUSE(r8, &(0x7f0000000ac0)={0x2020}, 0x2020) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x9}}, 0x24) bind$rxrpc(r5, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x9}}, 0x24) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r9, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x3049, 0x3, "93e9d307a6569b9a0fe138fb03e42031d503fdfb712bdcb46b25bb69c2eb5e4840df4cb5c4ca602f4c412b26c67928f978c99de02e67e727aafa85cf13fc6d37dda9d7d4cee4f975d2bed113a122a91a325840d35300c784224532480e9a28dd626faedd35cc5195021e0b49aa6c4a93c3047e0bec1b1b2661644be70453bf55c973b56fb08e9f96405e1d402a5902e670a2cefb24ad7df874e1dbdb4d551f4f2fc03160e334000104ef41456bdd57c96c32b25430e95edf4c402eef795c5221f9578b643b95a80a94c9d0617abc9deababbf3a4dd819794aac3e9b0da96250b36fb27bd54d1d7ca4d8c6e0c78f10f5cd800", 0xa, 0x9, 0x5, 0x7f, 0x6, 0xfa, 0x10}, r4}}, 0x120) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) 282.610585ms ago: executing program 1 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @empty, 0x18}, 0x1c) r2 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) cachestat(r2, &(0x7f00000001c0)={0xa000000, 0x6}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000140), 0x6, 0x800000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000500)=""/241, 0xf1}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x105901, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, 0x0) fsync(r6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x9d, "20dc08b3c9055784620e3c8c8b1f52d9ff815ecc37b1bc39549933af644986311c8e37372717b44856d4220706cbc26411795dd7925d4f7f88b9a4f190a6fd43e3561d83d1fa378733b923cd7b1065932825a043ef816fd33fa9c9bb33e07be39d10f3fe18f4c538b2f3227adc93d7481e59502fa214c01dfeb9409fba5c1a4af9d7598ae9fb65c984af969629f5605bf1d4285f1f9958d6ee6a199739"}, &(0x7f0000000480)=0xa5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000004c0)={r9, 0xd}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) 0s ago: executing program 3 (id=400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0/file0', [{0x20, '+@&\':-}&D#\'@/.7'}, {0x20, 'SMC_PNETID\x00'}, {0x20, '-'}], 0xa, "d20fc820a91c663dbce081f79e4e7be556062c37f7098f849fdb4f749e7c500a01efa77bcf5429dafc475ba4a200d25c767f720670f24d215d8f445fe7c4a7a37dc81928c9e029a21fd63b89ad26c9a0b45bfd15779b84111714ffcb6ac10a6aac598f24f9444114ea85b403bb73bedef89bea830ef4bcd4de28d097265fee2e5f7bad7a0cbcd4a4d5"}, 0xb8) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 79.140980][ T5810] cgroup: Unknown subsys name 'net' [ 79.381176][ T5810] cgroup: Unknown subsys name 'cpuset' [ 79.436909][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.371394][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.983383][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.995272][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.004256][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.020931][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.026755][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.048271][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.055370][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.076846][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.085380][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.086291][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.185709][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.211326][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.213218][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.228227][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.229425][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.252619][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.269788][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.272228][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.277740][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.279796][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.144487][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.201845][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.224660][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.344326][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.537635][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.538849][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.539235][ T5827] bridge_slave_0: entered allmulticast mode [ 86.541970][ T5827] bridge_slave_0: entered promiscuous mode [ 86.600071][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.600254][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.600417][ T5827] bridge_slave_1: entered allmulticast mode [ 86.602431][ T5827] bridge_slave_1: entered promiscuous mode [ 86.604793][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.605119][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.605364][ T5823] bridge_slave_0: entered allmulticast mode [ 86.616847][ T5823] bridge_slave_0: entered promiscuous mode [ 86.637215][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.637546][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.637818][ T5831] bridge_slave_0: entered allmulticast mode [ 86.641285][ T5831] bridge_slave_0: entered promiscuous mode [ 86.675125][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.675440][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.675699][ T5823] bridge_slave_1: entered allmulticast mode [ 86.680049][ T5823] bridge_slave_1: entered promiscuous mode [ 86.712723][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.713006][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.713245][ T5831] bridge_slave_1: entered allmulticast mode [ 86.717579][ T5831] bridge_slave_1: entered promiscuous mode [ 86.798998][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.820153][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.820570][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.820845][ T5833] bridge_slave_0: entered allmulticast mode [ 86.822923][ T5833] bridge_slave_0: entered promiscuous mode [ 86.855663][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.865562][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.868174][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.868929][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.869531][ T5833] bridge_slave_1: entered allmulticast mode [ 86.875818][ T5833] bridge_slave_1: entered promiscuous mode [ 86.887212][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.916956][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.938014][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.049776][ T1256] cfg80211: failed to load regulatory.db [ 87.109080][ T5143] Bluetooth: hci1: command tx timeout [ 87.152482][ T5827] team0: Port device team_slave_0 added [ 87.188437][ T5143] Bluetooth: hci0: command tx timeout [ 87.201027][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.251916][ T5827] team0: Port device team_slave_1 added [ 87.262979][ T5823] team0: Port device team_slave_0 added [ 87.275722][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.291528][ T5831] team0: Port device team_slave_0 added [ 87.334034][ T5823] team0: Port device team_slave_1 added [ 87.347396][ T5143] Bluetooth: hci2: command tx timeout [ 87.347424][ T5828] Bluetooth: hci3: command tx timeout [ 87.377082][ T5831] team0: Port device team_slave_1 added [ 87.445001][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.445013][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.445028][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.485015][ T5833] team0: Port device team_slave_0 added [ 87.511897][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.511909][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.511924][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.513673][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.513682][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.513697][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.579722][ T5833] team0: Port device team_slave_1 added [ 87.582017][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.582038][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.582062][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.603491][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.603507][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.603530][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.631105][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.631120][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.631145][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.716676][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.716693][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.716717][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.755116][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.755132][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.755156][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.851006][ T5827] hsr_slave_0: entered promiscuous mode [ 87.852647][ T5827] hsr_slave_1: entered promiscuous mode [ 87.899339][ T5823] hsr_slave_0: entered promiscuous mode [ 87.900699][ T5823] hsr_slave_1: entered promiscuous mode [ 87.901932][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 87.902006][ T5823] Cannot create hsr debugfs directory [ 87.914752][ T5831] hsr_slave_0: entered promiscuous mode [ 87.917468][ T5831] hsr_slave_1: entered promiscuous mode [ 87.919225][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.919247][ T5831] Cannot create hsr debugfs directory [ 88.018607][ T5833] hsr_slave_0: entered promiscuous mode [ 88.020053][ T5833] hsr_slave_1: entered promiscuous mode [ 88.021110][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 88.021134][ T5833] Cannot create hsr debugfs directory [ 88.974364][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.017558][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.023608][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.055258][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.065767][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.102061][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.124065][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.161651][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.188498][ T5143] Bluetooth: hci1: command tx timeout [ 89.263149][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.266223][ T5143] Bluetooth: hci0: command tx timeout [ 89.291853][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.300577][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.340618][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.360843][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.411701][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.426428][ T5143] Bluetooth: hci2: command tx timeout [ 89.437305][ T5143] Bluetooth: hci3: command tx timeout [ 89.449755][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.474797][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.645568][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.681073][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.704915][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.744226][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.758708][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.795253][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.820352][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.860219][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.031924][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.073019][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.094311][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.130435][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.135173][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.153697][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.167258][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.212932][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.317914][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.469704][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.521400][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.544275][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.545265][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.628335][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.628530][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.693483][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.700969][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.744460][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.744635][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.811756][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.811884][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.846806][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.927376][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.927610][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.948114][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.999687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.999843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.111526][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.191223][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.191347][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.269597][ T5143] Bluetooth: hci1: command tx timeout [ 91.274489][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.274681][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.348400][ T5143] Bluetooth: hci0: command tx timeout [ 91.507164][ T5143] Bluetooth: hci3: command tx timeout [ 91.507199][ T5143] Bluetooth: hci2: command tx timeout [ 91.613173][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.960356][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.074721][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.108959][ T5827] veth0_vlan: entered promiscuous mode [ 92.184492][ T5827] veth1_vlan: entered promiscuous mode [ 92.280230][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.322022][ T5831] veth0_vlan: entered promiscuous mode [ 92.401001][ T5831] veth1_vlan: entered promiscuous mode [ 92.408381][ T5833] veth0_vlan: entered promiscuous mode [ 92.421345][ T5827] veth0_macvtap: entered promiscuous mode [ 92.463807][ T5827] veth1_macvtap: entered promiscuous mode [ 92.491495][ T5833] veth1_vlan: entered promiscuous mode [ 92.582669][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.613131][ T5823] veth0_vlan: entered promiscuous mode [ 92.633063][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.663548][ T5831] veth0_macvtap: entered promiscuous mode [ 92.703893][ T1445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.722443][ T5831] veth1_macvtap: entered promiscuous mode [ 92.732349][ T1445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.737630][ T5823] veth1_vlan: entered promiscuous mode [ 92.753729][ T1445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.780408][ T1445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.832069][ T5833] veth0_macvtap: entered promiscuous mode [ 92.901577][ T5833] veth1_macvtap: entered promiscuous mode [ 92.995523][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.132866][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.233751][ T2096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241401][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.254697][ T2096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.281284][ T2096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.293989][ T2096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.318306][ T5823] veth0_macvtap: entered promiscuous mode [ 93.330183][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.348397][ T5828] Bluetooth: hci1: command tx timeout [ 93.353357][ T1518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.353378][ T1518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.405797][ T5823] veth1_macvtap: entered promiscuous mode [ 93.426429][ T5828] Bluetooth: hci0: command tx timeout [ 93.441903][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459474][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525391][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.581337][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.587052][ T5828] Bluetooth: hci2: command tx timeout [ 93.587071][ T5143] Bluetooth: hci3: command tx timeout [ 93.649705][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.649727][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832258][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.039596][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.060691][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.060713][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.253676][ T1511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.281740][ T1511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.331714][ T1511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.350272][ T1511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.433746][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.476417][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.476438][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.640210][ T2096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.640232][ T2096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.105334][ T349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.105354][ T349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.334432][ T2096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.334453][ T2096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.577771][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 95.787533][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.787554][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.422762][ T5929] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 99.623957][ T5963] syz.0.13 (5963) used greatest stack depth: 19096 bytes left [ 100.586761][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.799054][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.802143][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 100.802197][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 100.802210][ T5892] usb 1-1: Product: syz [ 100.852817][ T5892] usb 1-1: config 0 descriptor?? [ 100.960029][ T5892] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 101.326098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.346097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.356118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.366107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.376109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.386096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.396097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.406087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.416101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.426090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.575622][ T5975] syz.0.17 (5975): drop_caches: 2 [ 103.672628][ T5943] usb 1-1: USB disconnect, device number 2 [ 104.854352][ T6025] syz.1.31 (6025) used greatest stack depth: 17656 bytes left [ 106.026332][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.223332][ T32] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 106.223360][ T32] usb 2-1: config 0 has no interface number 0 [ 106.223391][ T32] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 106.223442][ T32] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 106.223470][ T32] usb 2-1: config 0 interface 255 has no altsetting 0 [ 106.276618][ T32] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 106.276649][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.276669][ T32] usb 2-1: Product: syz [ 106.276683][ T32] usb 2-1: Manufacturer: syz [ 106.276698][ T32] usb 2-1: SerialNumber: syz [ 106.403895][ T32] usb 2-1: config 0 descriptor?? [ 106.456375][ T5890] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 106.637970][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.645259][ T5890] usb 4-1: not running at top speed; connect to a high speed hub [ 106.671466][ T5890] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 64, using maximum allowed: 30 [ 106.671579][ T5890] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 106.709914][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.710669][ T5890] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 106.710763][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.710785][ T5890] usb 4-1: Product: syz [ 106.710798][ T5890] usb 4-1: Manufacturer: syz [ 106.710812][ T5890] usb 4-1: SerialNumber: syz [ 106.756804][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.910712][ T32] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 106.910744][ T32] f81604 2-1:0.255: Setting termination of CH#0 failed: -EPROTO [ 106.910781][ T32] f81604 2-1:0.255: probe with driver f81604 failed with error -71 [ 107.116732][ T32] usb 2-1: USB disconnect, device number 2 [ 107.335215][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.340768][ T5943] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.368374][ T5890] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 107.447844][ T5890] usb 4-1: USB disconnect, device number 2 [ 107.538096][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 107.542472][ T5943] usb 3-1: config 242 has an invalid interface number: 6 but max is 0 [ 107.542494][ T5943] usb 3-1: config 242 has no interface number 0 [ 107.542522][ T5943] usb 3-1: config 242 interface 6 altsetting 8 endpoint 0x8 has an invalid bInterval 64, changing to 7 [ 107.542538][ T5943] usb 3-1: config 242 interface 6 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 107.542552][ T5943] usb 3-1: config 242 interface 6 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 107.542564][ T5943] usb 3-1: config 242 interface 6 altsetting 8 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.542577][ T5943] usb 3-1: config 242 interface 6 has no altsetting 0 [ 107.544806][ T5943] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f90, bcdDevice=84.55 [ 107.544834][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.544852][ T5943] usb 3-1: Product: syz [ 107.544860][ T5943] usb 3-1: Manufacturer: syz [ 107.544868][ T5943] usb 3-1: SerialNumber: syz [ 107.748008][ T6064] Zero length message leads to an empty skb [ 107.934558][ T5943] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 108.209734][ T5943] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 108.209880][ T5943] dib0700: firmware download failed at 7 with -8 [ 108.302595][ T5943] usb 3-1: USB disconnect, device number 2 [ 109.678752][ T6097] netlink: 1 bytes leftover after parsing attributes in process `syz.3.54'. [ 109.701605][ T6097] xt_policy: neither incoming nor outgoing policy selected [ 110.604342][ T6120] FAULT_INJECTION: forcing a failure. [ 110.604342][ T6120] name failslab, interval 1, probability 0, space 0, times 1 [ 110.605037][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.605060][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.605070][ T6120] Call Trace: [ 110.605077][ T6120] [ 110.605083][ T6120] dump_stack_lvl+0xe8/0x150 [ 110.605107][ T6120] should_fail_ex+0x46b/0x600 [ 110.605137][ T6120] should_failslab+0xa8/0x100 [ 110.605163][ T6120] __kmalloc_noprof+0xdf/0x7b0 [ 110.605185][ T6120] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 110.605207][ T6120] ? alloc_pipe_info+0x1fc/0x4d0 [ 110.605229][ T6120] ? alloc_pipe_info+0xe8/0x4d0 [ 110.605256][ T6120] alloc_pipe_info+0x1fc/0x4d0 [ 110.605282][ T6120] splice_direct_to_actor+0xa19/0xc80 [ 110.605308][ T6120] ? kstrtouint+0x6e/0xe0 [ 110.605332][ T6120] ? __pfx_direct_splice_actor+0x10/0x10 [ 110.605355][ T6120] ? __pfx_aa_file_perm+0x10/0x10 [ 110.605382][ T6120] ? __lock_acquire+0x6b5/0x2cf0 [ 110.605404][ T6120] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 110.605434][ T6120] do_splice_direct+0x19b/0x2a0 [ 110.605458][ T6120] ? __pfx_do_splice_direct+0x10/0x10 [ 110.605481][ T6120] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 110.605508][ T6120] ? rw_verify_area+0x25b/0x4e0 [ 110.605534][ T6120] do_sendfile+0x547/0x7e0 [ 110.605552][ T6120] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 110.605581][ T6120] ? __pfx_do_sendfile+0x10/0x10 [ 110.605612][ T6120] __se_sys_sendfile64+0x144/0x1a0 [ 110.605632][ T6120] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 110.605658][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.605676][ T6120] do_syscall_64+0x15f/0xf80 [ 110.605696][ T6120] ? trace_irq_disable+0x3b/0x140 [ 110.605715][ T6120] ? clear_bhb_loop+0x40/0x90 [ 110.605735][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.605751][ T6120] RIP: 0033:0x7fb61661cdd9 [ 110.605768][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.605781][ T6120] RSP: 002b:00007fb61486e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 110.605800][ T6120] RAX: ffffffffffffffda RBX: 00007fb616895fa0 RCX: 00007fb61661cdd9 [ 110.605813][ T6120] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 110.605822][ T6120] RBP: 00007fb61486e090 R08: 0000000000000000 R09: 0000000000000000 [ 110.605832][ T6120] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 110.605843][ T6120] R13: 00007fb616896038 R14: 00007fb616895fa0 R15: 00007ffc1cd05cf8 [ 110.605882][ T6120] [ 111.366718][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.864736][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.867933][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 111.922005][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.957528][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.970378][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.981198][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.201511][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.646913][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.737267][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.832702][ T32] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 112.832736][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.832757][ T32] usb 1-1: Product: syz [ 112.832772][ T32] usb 1-1: Manufacturer: syz [ 112.832799][ T32] usb 1-1: SerialNumber: syz [ 112.888481][ T32] usb 1-1: config 0 descriptor?? [ 112.956618][ T5943] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.128776][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 113.132132][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.133677][ T5943] usb 4-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 113.133733][ T5943] usb 4-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.133761][ T5943] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.218888][ T5943] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 113.218921][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.218941][ T5943] usb 4-1: Product: syz [ 113.218955][ T5943] usb 4-1: Manufacturer: syz [ 113.218969][ T5943] usb 4-1: SerialNumber: syz [ 113.368451][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.564307][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.582393][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.650819][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 113.760221][ T5179] bcm5974 4-1:1.0: could not read from device [ 113.893995][ T5179] bcm5974 4-1:1.0: could not read from device [ 114.037568][ T5179] bcm5974 4-1:1.0: could not read from device [ 114.047062][ T5943] usb 4-1: USB disconnect, device number 3 [ 114.071275][ T5143] Bluetooth: hci3: command tx timeout [ 114.182211][ T32] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 114.302633][ T32] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 114.393102][ T32] usb 1-1: USB disconnect, device number 3 [ 114.890048][ T32] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 115.255643][ T32] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 115.318215][ T6161] syz.3.72 (6161) used greatest stack depth: 17024 bytes left [ 116.146506][ T5143] Bluetooth: hci3: command tx timeout [ 116.316967][ T32] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 116.421378][ T43] bridge_slave_1: left allmulticast mode [ 116.421525][ T43] bridge_slave_1: left promiscuous mode [ 116.438168][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.494092][ T32] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 116.494112][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.494124][ T32] usb 2-1: Product: syz [ 116.494132][ T32] usb 2-1: Manufacturer: syz [ 116.494139][ T32] usb 2-1: SerialNumber: syz [ 116.518185][ T32] usb 2-1: config 0 descriptor?? [ 116.534052][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 116.581995][ T43] bridge_slave_0: left allmulticast mode [ 116.582036][ T43] bridge_slave_0: left promiscuous mode [ 116.582547][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.738748][ T32] gspca_stk1135: reg_w 0x2 err -71 [ 116.739791][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739801][ T32] gspca_stk1135: Sensor write failed [ 116.739820][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739825][ T32] gspca_stk1135: Sensor write failed [ 116.739844][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739849][ T32] gspca_stk1135: Sensor read failed [ 116.739868][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739873][ T32] gspca_stk1135: Sensor read failed [ 116.739877][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 116.739898][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739903][ T32] gspca_stk1135: Sensor read failed [ 116.739921][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739926][ T32] gspca_stk1135: Sensor read failed [ 116.739944][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739948][ T32] gspca_stk1135: Sensor write failed [ 116.739967][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 116.739971][ T32] gspca_stk1135: Sensor write failed [ 116.740029][ T32] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 116.779303][ T32] usb 2-1: USB disconnect, device number 3 [ 118.187327][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.227383][ T5143] Bluetooth: hci3: command tx timeout [ 118.271347][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.276581][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.289821][ T43] bond0 (unregistering): Released all slaves [ 118.467239][ T32] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 118.477022][ T32] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 118.477051][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.477069][ T32] usb 4-1: Product: syz [ 118.477082][ T32] usb 4-1: Manufacturer: syz [ 118.477094][ T32] usb 4-1: SerialNumber: syz [ 118.742022][ T5210] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.923740][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 118.934997][ T5210] usb 2-1: not running at top speed; connect to a high speed hub [ 118.953638][ T5210] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.972449][ T5210] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.972483][ T5210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.972503][ T5210] usb 2-1: Product: syz [ 118.972518][ T5210] usb 2-1: Manufacturer: 򡔑 [ 118.972533][ T5210] usb 2-1: SerialNumber: syz [ 119.190308][ T32] usb 4-1: USB disconnect, device number 4 [ 119.491512][ T6207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.492960][ T6217] process 'syz.3.88' launched './file2' with NULL argv: empty string added [ 119.572416][ T5210] usbhid 2-1:1.0: can't add hid device: -71 [ 119.572559][ T5210] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 119.630085][ T5210] usb 2-1: USB disconnect, device number 4 [ 119.638938][ T6216] netlink: 'syz.3.88': attribute type 75 has an invalid length. [ 120.079864][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'. [ 120.310375][ T5143] Bluetooth: hci3: command tx timeout [ 120.446398][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 120.976292][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.131292][ T5892] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 121.131326][ T5892] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.131348][ T5892] usb 2-1: Manufacturer: syz [ 121.137637][ T5892] usb 2-1: config 0 descriptor?? [ 121.223084][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.223472][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.223766][ T6135] bridge_slave_0: entered allmulticast mode [ 121.248109][ T6135] bridge_slave_0: entered promiscuous mode [ 121.264286][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.265280][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.265559][ T6135] bridge_slave_1: entered allmulticast mode [ 121.292025][ T6135] bridge_slave_1: entered promiscuous mode [ 121.503834][ T5892] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 121.655080][ T5892] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 121.700239][ T5892] usb 2-1: USB disconnect, device number 5 [ 121.994046][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.262699][ T6264] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 122.296936][ T43] hsr_slave_0: left promiscuous mode [ 122.363990][ T43] hsr_slave_1: left promiscuous mode [ 122.367093][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.401780][ T821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.443848][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.502017][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.502046][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.550593][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 122.564179][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.568399][ T821] usb 1-1: config 3 has an invalid interface number: 44 but max is 0 [ 122.568425][ T821] usb 1-1: config 3 has no interface number 0 [ 122.568454][ T821] usb 1-1: config 3 interface 44 has no altsetting 0 [ 122.607661][ T821] usb 1-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=e8.de [ 122.607691][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.607711][ T821] usb 1-1: Product: syz [ 122.607724][ T821] usb 1-1: Manufacturer: syz [ 122.607737][ T821] usb 1-1: SerialNumber: syz [ 122.649896][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.856295][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 122.906548][ T32] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 122.906582][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.906663][ T32] usb 2-1: Product: syz [ 122.906680][ T32] usb 2-1: Manufacturer: syz [ 122.906694][ T32] usb 2-1: SerialNumber: syz [ 123.005613][ T32] usb 2-1: config 0 descriptor?? [ 123.028854][ T821] uvcvideo 1-1:3.44: Found UVC 0.00 device syz (0408:4035) [ 123.028888][ T821] uvcvideo 1-1:3.44: Forcing UVC version to 1.0a [ 123.028908][ T821] uvcvideo 1-1:3.44: No valid video chain found. [ 123.111462][ T821] usb 1-1: USB disconnect, device number 4 [ 123.200430][ T43] veth1_macvtap: left promiscuous mode [ 123.240223][ T43] veth0_macvtap: left promiscuous mode [ 123.304056][ T43] veth1_vlan: left promiscuous mode [ 123.372962][ T43] veth0_vlan: left promiscuous mode [ 123.811904][ T32] usb write operation failed. (-71) [ 123.829560][ T32] usb write operation failed. (-71) [ 123.829586][ T32] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 123.833669][ T32] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 123.833695][ T32] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 123.954246][ T6283] kAFS: unparsable volume name [ 124.458215][ T43] team0 (unregistering): Port device team_slave_1 removed [ 124.578184][ T43] team0 (unregistering): Port device team_slave_0 removed [ 125.135111][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 125.288378][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.288710][ T6272] batadv_slave_0: entered promiscuous mode [ 125.674622][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.802446][ T6273] batadv_slave_0: left promiscuous mode [ 125.930457][ T6135] team0: Port device team_slave_0 added [ 125.965450][ T6135] team0: Port device team_slave_1 added [ 126.233051][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.233070][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.233097][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.240714][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.240731][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.240756][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.898521][ T6135] hsr_slave_0: entered promiscuous mode [ 126.937173][ T6135] hsr_slave_1: entered promiscuous mode [ 126.944924][ T6135] debugfs: 'hsr0' already exists in 'hsr' [ 126.944953][ T6135] Cannot create hsr debugfs directory [ 127.938246][ T6348] ======================================================= [ 127.938246][ T6348] WARNING: The mand mount option has been deprecated and [ 127.938246][ T6348] and is ignored by this kernel. Remove the mand [ 127.938246][ T6348] option from the mount to silence this warning. [ 127.938246][ T6348] ======================================================= [ 128.304098][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 128.362504][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 128.586867][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.646187][ T5912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.751729][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.764825][ T5892] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 128.796664][ T5892] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 128.796698][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.796730][ T5892] usb 4-1: Product: syz [ 128.796745][ T5892] usb 4-1: Manufacturer: syz [ 128.796759][ T5892] usb 4-1: SerialNumber: syz [ 128.840250][ T5912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.840328][ T5912] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.875284][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.875318][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.875338][ T5912] usb 1-1: SerialNumber: syz [ 129.012871][ T5912] cdc_ether 1-1:1.0: skipping garbage [ 129.024414][ T5912] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.146387][ T5892] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.351391][ T5892] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 129.351422][ T5892] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 129.351444][ T5892] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 129.351595][ T5892] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 129.351616][ T5892] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 129.351635][ T5892] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 129.403630][ T5912] usb 1-1: USB disconnect, device number 5 [ 129.562599][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 129.602789][ T6135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.658900][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.694660][ T6135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.760705][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.769271][ T6135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.803757][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.819811][ T6135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.859925][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.524114][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.696364][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.875704][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.875893][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.994924][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.995113][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.254856][ T5892] usb 4-1: USB disconnect, device number 5 [ 131.509779][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.693475][ T5890] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 131.693512][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.693548][ T5890] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 131.693570][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.786076][ T5890] usb 1-1: config 0 descriptor?? [ 131.796835][ T6398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.948698][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 132.538854][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.538901][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540734][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540765][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540789][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540813][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540837][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540862][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540887][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.540911][ T5890] mcp2200 0003:04D8:00DF.0001: unknown main item tag 0x0 [ 132.542061][ T5890] mcp2200 0003:04D8:00DF.0001: unexpected long global item [ 132.563476][ T6400] netlink: 'syz.1.125': attribute type 21 has an invalid length. [ 132.563497][ T6400] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 132.563508][ T6400] netlink: 128 bytes leftover after parsing attributes in process `syz.1.125'. [ 132.567730][ T5890] mcp2200 0003:04D8:00DF.0001: can't parse reports [ 132.567859][ T5890] mcp2200 0003:04D8:00DF.0001: probe with driver mcp2200 failed with error -22 [ 133.129912][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131858][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.441845][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.749307][ T6135] veth0_vlan: entered promiscuous mode [ 133.778652][ T6135] veth1_vlan: entered promiscuous mode [ 133.853860][ T6135] veth0_macvtap: entered promiscuous mode [ 133.890936][ T6135] veth1_macvtap: entered promiscuous mode [ 134.071774][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.121349][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.171322][ T1511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.174336][ T1511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.174385][ T1511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.174421][ T1511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.504044][ T5210] usb 1-1: USB disconnect, device number 6 [ 135.342729][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.342749][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.510843][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.510865][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.483385][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 136.747720][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.899418][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 136.936470][ T10] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 136.936501][ T10] usb 4-1: config 0 has no interface number 0 [ 136.936550][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 136.936576][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 136.939204][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 136.939233][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 136.939252][ T10] usb 4-1: Product: syz [ 136.939266][ T10] usb 4-1: Manufacturer: syz [ 136.939280][ T10] usb 4-1: SerialNumber: syz [ 136.959224][ T10] usb 4-1: config 0 descriptor?? [ 137.045887][ T10] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 137.048014][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 137.167437][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 137.174744][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.264566][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 137.321397][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 137.325679][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 137.333713][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 137.359497][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 137.412237][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 137.480367][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 137.498351][ T10] usb 4-1: USB disconnect, device number 6 [ 137.708180][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 137.765951][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 137.794509][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 137.891568][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 137.909064][ T10] keyspan 4-1:0.107: device disconnected [ 138.499849][ T6520] syzkaller1: entered promiscuous mode [ 138.499877][ T6520] syzkaller1: entered allmulticast mode [ 140.136228][ T5835] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.309135][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.309170][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.309192][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.309235][ T5835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.309256][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.332125][ T5835] usb 4-1: config 0 descriptor?? [ 140.811971][ T5835] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.919251][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.952888][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.953529][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.097517][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 141.118834][ T5892] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 141.118864][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.118891][ T5892] usb 5-1: config 0 has no interface number 0 [ 141.118936][ T5892] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 141.118961][ T5892] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 141.118986][ T5892] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 141.119011][ T5892] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 141.119031][ T5892] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 141.119052][ T5892] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 141.122404][ T5892] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 141.122434][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.122450][ T5892] usb 5-1: Product: syz [ 141.122458][ T5892] usb 5-1: Manufacturer: syz [ 141.122466][ T5892] usb 5-1: SerialNumber: syz [ 141.134625][ T6575] usb usb7: usbfs: process 6575 (syz.0.171) did not claim interface 0 before use [ 141.134973][ T6575] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.171' sets config #4 [ 141.280208][ T5892] usb 5-1: config 0 descriptor?? [ 141.281216][ T6572] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 141.281355][ T6572] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 141.571611][ T5892] usb 5-1: NFC: intf ffff888039f58000 id ffffffff8ed98ec0 [ 141.640707][ T5892] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 141.724963][ T5892] usb 5-1: USB disconnect, device number 2 [ 141.737601][ T5892] usb 5-1: NFC: intf ffff888039f58000 [ 143.043595][ T6611] netlink: 256 bytes leftover after parsing attributes in process `syz.4.177'. [ 143.043620][ T6611] netlink: 'syz.4.177': attribute type 10 has an invalid length. [ 143.172831][ T5892] usb 4-1: USB disconnect, device number 7 [ 143.631764][ T6615] netlink: 136 bytes leftover after parsing attributes in process `syz.0.178'. [ 143.672243][ T6615] netlink: 212 bytes leftover after parsing attributes in process `syz.0.178'. [ 143.818781][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.992180][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.993517][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 143.993566][ T5870] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 144.034853][ T5870] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 144.034895][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.034915][ T5870] usb 5-1: Product: syz [ 144.034930][ T5870] usb 5-1: Manufacturer: syz [ 144.034944][ T5870] usb 5-1: SerialNumber: syz [ 144.383183][ T5870] usb 5-1: unit 4: unexpected type 0x03 [ 144.725790][ T6649] kvm_intel: kvm [6647]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 144.901956][ T5870] usb 5-1: USB disconnect, device number 3 [ 144.997036][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.146161][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 145.170629][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 145.170656][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.170674][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.178253][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.178285][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.178306][ T10] usb 4-1: Product: syz [ 145.178320][ T10] usb 4-1: Manufacturer: syz [ 145.178352][ T10] usb 4-1: SerialNumber: syz [ 145.371916][ T10] usb 4-1: 0:2 : does not exist [ 145.456931][ T6661] netlink: 212 bytes leftover after parsing attributes in process `syz.4.185'. [ 146.314713][ T10] usb 4-1: USB disconnect, device number 8 [ 146.396745][ T5892] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 146.595705][ T5892] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 146.595739][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.595760][ T5892] usb 1-1: Product: syz [ 146.595774][ T5892] usb 1-1: Manufacturer: syz [ 146.595788][ T5892] usb 1-1: SerialNumber: syz [ 146.646824][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.686465][ T5892] usb 1-1: config 0 descriptor?? [ 146.721153][ T5892] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 146.968206][ T5892] gspca_stk1135: reg_w 0x2 err -71 [ 146.969256][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969271][ T5892] gspca_stk1135: Sensor write failed [ 146.969303][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969312][ T5892] gspca_stk1135: Sensor write failed [ 146.969358][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969368][ T5892] gspca_stk1135: Sensor read failed [ 146.969396][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969405][ T5892] gspca_stk1135: Sensor read failed [ 146.969412][ T5892] gspca_stk1135: Detected sensor type unknown (0x0) [ 146.969446][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969455][ T5892] gspca_stk1135: Sensor read failed [ 146.969481][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969490][ T5892] gspca_stk1135: Sensor read failed [ 146.969517][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969526][ T5892] gspca_stk1135: Sensor write failed [ 146.969558][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 146.969568][ T5892] gspca_stk1135: Sensor write failed [ 146.969660][ T5892] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 147.007386][ T5892] usb 1-1: USB disconnect, device number 7 [ 148.836235][ T5892] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.004090][ T5892] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 149.004123][ T5892] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 149.004142][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.004160][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 149.004179][ T5892] usb 4-1: config 1 has no interface number 0 [ 149.004229][ T5892] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 149.004252][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.080910][ T5892] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 149.281277][ T5892] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 149.286203][ T5892] snd_usb_pod 4-1:1.1: invalid control EP [ 149.286225][ T5892] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 149.286903][ T5892] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 149.287482][ T5892] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 149.446296][ T5210] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 149.480590][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.481375][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.602736][ T5210] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 149.602769][ T5210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.602789][ T5210] usb 1-1: Product: syz [ 149.602804][ T5210] usb 1-1: Manufacturer: syz [ 149.602817][ T5210] usb 1-1: SerialNumber: syz [ 149.642102][ T5210] usb 1-1: config 0 descriptor?? [ 149.651727][ T5210] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 149.846254][ T5210] gspca_stk1135: reg_w 0x2 err -71 [ 149.847303][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847315][ T5210] gspca_stk1135: Sensor write failed [ 149.847347][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847357][ T5210] gspca_stk1135: Sensor write failed [ 149.847389][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847399][ T5210] gspca_stk1135: Sensor read failed [ 149.847429][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847438][ T5210] gspca_stk1135: Sensor read failed [ 149.847444][ T5210] gspca_stk1135: Detected sensor type unknown (0x0) [ 149.847476][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847485][ T5210] gspca_stk1135: Sensor read failed [ 149.847510][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847519][ T5210] gspca_stk1135: Sensor read failed [ 149.847547][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847555][ T5210] gspca_stk1135: Sensor write failed [ 149.847582][ T5210] gspca_stk1135: serial bus timeout: status=0x00 [ 149.847591][ T5210] gspca_stk1135: Sensor write failed [ 149.847683][ T5210] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 149.974725][ T5210] usb 1-1: USB disconnect, device number 8 [ 150.794820][ T6759] usb usb8: usbfs: process 6759 (syz.4.211) did not claim interface 0 before use [ 150.841137][ T6765] binder: BINDER_SET_CONTEXT_MGR already set [ 150.841153][ T6765] binder: 6756:6765 ioctl 4018620d 200000000080 returned -16 [ 151.552350][ T10] usb 4-1: USB disconnect, device number 9 [ 151.667929][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.827060][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 151.832382][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.835156][ T5890] usb 5-1: config 1 has an invalid interface number: 170 but max is 0 [ 151.835180][ T5890] usb 5-1: config 1 has no interface number 0 [ 151.835209][ T5890] usb 5-1: config 1 interface 170 has no altsetting 0 [ 151.843236][ T5890] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 151.843263][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.843281][ T5890] usb 5-1: Product: syz [ 151.843294][ T5890] usb 5-1: Manufacturer: syz [ 151.843307][ T5890] usb 5-1: SerialNumber: syz [ 152.319296][ T5870] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 152.570867][ T5870] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 152.571131][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.571154][ T5870] usb 4-1: Product: syz [ 152.571168][ T5870] usb 4-1: Manufacturer: syz [ 152.571183][ T5870] usb 4-1: SerialNumber: syz [ 152.615780][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 152.662514][ T5870] usb 4-1: config 0 descriptor?? [ 152.669402][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 152.669428][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 152.777644][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 153.081663][ T6813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.302296][ T5870] gspca_stk1135: reg_w 0x2 err -110 [ 153.303406][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.303421][ T5870] gspca_stk1135: Sensor write failed [ 153.303453][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.303462][ T5870] gspca_stk1135: Sensor write failed [ 153.303729][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.303741][ T5870] gspca_stk1135: Sensor read failed [ 153.303771][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.303779][ T5870] gspca_stk1135: Sensor read failed [ 153.303787][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 153.303824][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.304067][ T5870] gspca_stk1135: Sensor read failed [ 153.304099][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.304108][ T5870] gspca_stk1135: Sensor read failed [ 153.304136][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.304146][ T5870] gspca_stk1135: Sensor write failed [ 153.304236][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 153.304247][ T5870] gspca_stk1135: Sensor write failed [ 153.304578][ T5870] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 153.730459][ T6825] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 153.783047][ T6825] dummy0: entered allmulticast mode [ 153.792186][ T6824] dummy0: left allmulticast mode [ 155.017513][ T6845] netlink: 140 bytes leftover after parsing attributes in process `syz.4.235'. [ 155.030823][ T10] usb 4-1: USB disconnect, device number 10 [ 155.196694][ T6848] 9pnet_fd: p9_fd_create_unix (6848): problem connecting socket: ./file0: -111 [ 156.810902][ T5912] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 156.892387][ T5890] usbsevseg 5-1:1.170: USB 7 Segment device now attached [ 156.971173][ T6883] FAULT_INJECTION: forcing a failure. [ 156.971173][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.971201][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.4.247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.971222][ T6883] Tainted: [L]=SOFTLOCKUP [ 156.971228][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.971239][ T6883] Call Trace: [ 156.971247][ T6883] [ 156.971255][ T6883] dump_stack_lvl+0xe8/0x150 [ 156.971286][ T6883] should_fail_ex+0x46b/0x600 [ 156.971321][ T6883] _copy_from_user+0x2d/0xb0 [ 156.971349][ T6883] ___sys_sendmsg+0x1c6/0x360 [ 156.971379][ T6883] ? __lock_acquire+0x6b5/0x2cf0 [ 156.971410][ T6883] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.971474][ T6883] ? __fget_files+0x2a/0x420 [ 156.971499][ T6883] ? __fget_files+0x3a6/0x420 [ 156.971534][ T6883] __x64_sys_sendmsg+0x1c3/0x2a0 [ 156.971565][ T6883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.971601][ T6883] ? __pfx_ksys_write+0x10/0x10 [ 156.971636][ T6883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.971669][ T6883] do_syscall_64+0x15f/0xf80 [ 156.971696][ T6883] ? trace_irq_disable+0x3b/0x140 [ 156.971719][ T6883] ? clear_bhb_loop+0x40/0x90 [ 156.971746][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.971765][ T6883] RIP: 0033:0x7fb0f37ccdd9 [ 156.971785][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.971802][ T6883] RSP: 002b:00007fb0f1a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.971823][ T6883] RAX: ffffffffffffffda RBX: 00007fb0f3a45fa0 RCX: 00007fb0f37ccdd9 [ 156.971838][ T6883] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 156.971851][ T6883] RBP: 00007fb0f1a26090 R08: 0000000000000000 R09: 0000000000000000 [ 156.971863][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.971875][ T6883] R13: 00007fb0f3a46038 R14: 00007fb0f3a45fa0 R15: 00007fffc6abd6b8 [ 156.971908][ T6883] [ 156.974223][ T5912] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 156.974254][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.974267][ T5912] usb 1-1: Product: syz [ 156.974275][ T5912] usb 1-1: Manufacturer: syz [ 156.974282][ T5912] usb 1-1: SerialNumber: syz [ 157.232402][ T5912] usb 1-1: config 0 descriptor?? [ 157.244371][ T5912] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 157.314599][ T6890] Bluetooth: MGMT ver 1.23 [ 157.544091][ T6894] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 157.544147][ T6894] overlayfs: missing 'lowerdir' [ 157.621060][ T6894] [U]  [ 157.621079][ T6894] [U] + [ 157.621089][ T6894] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 157.621946][ T6894] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 157.621978][ T6894] [U] Zph5Laӝ8H [ 157.622038][ T6894] [U] V)*Gr [ 157.623484][ T6894] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 157.623497][ T6894] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 157.623504][ T6894] [U] UXBH,~nmIM/a [ 157.623510][ T6894] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 157.623515][ T6894] [U] [ 157.623546][ T6894] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 157.623562][ T6894] [U] p~ [ 157.623575][ T6894] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 157.623697][ T6894] [U] _mֱ9KU""^s6rP [ 157.623736][ T6894] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 157.623944][ T6894] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 157.623956][ T6894] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 157.623980][ T6894] [U] I\xezW80ܚPfzqi^@O [ 157.623989][ T6894] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 157.624323][ T6894] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 157.624340][ T6894] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 157.624345][ T6894] [U] ;JO6P [ 157.648968][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.649600][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.651636][ T6893] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 157.787736][ T5912] gspca_stk1135: reg_w 0x2 err -110 [ 157.788788][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.788800][ T5912] gspca_stk1135: Sensor write failed [ 157.788832][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.788842][ T5912] gspca_stk1135: Sensor write failed [ 157.788874][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.788884][ T5912] gspca_stk1135: Sensor read failed [ 157.788916][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.788926][ T5912] gspca_stk1135: Sensor read failed [ 157.788933][ T5912] gspca_stk1135: Detected sensor type unknown (0x0) [ 157.788970][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.788980][ T5912] gspca_stk1135: Sensor read failed [ 157.789012][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.789021][ T5912] gspca_stk1135: Sensor read failed [ 157.789053][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.789063][ T5912] gspca_stk1135: Sensor write failed [ 157.789092][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 157.789101][ T5912] gspca_stk1135: Sensor write failed [ 157.926208][ T5912] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 159.067977][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.068650][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.105565][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 159.428924][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.436149][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.551711][ T6404] usb 1-1: USB disconnect, device number 9 [ 159.614631][ T6935] capability: warning: `syz.3.263' uses 32-bit capabilities (legacy support in use) [ 159.877411][ T6916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.877437][ T6916] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 160.295677][ T6916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.295703][ T6916] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 160.457782][ T6404] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 160.459945][ T6916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.459968][ T6916] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 160.586713][ T6404] usb 1-1: device descriptor read/64, error -71 [ 160.886247][ T6404] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 161.026240][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 161.060777][ T6404] usb 1-1: device descriptor read/64, error -71 [ 161.179327][ T6404] usb usb1-port1: attempt power cycle [ 161.478518][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 161.537833][ T6404] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 161.562949][ T6404] usb 1-1: device descriptor read/8, error -71 [ 161.796202][ T6404] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 161.816932][ T6404] usb 1-1: device descriptor read/8, error -71 [ 161.929800][ T6404] usb usb1-port1: unable to enumerate USB device [ 162.405475][ T6916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.405500][ T6916] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 162.928936][ T5943] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 163.105526][ T5943] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 163.105558][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.105578][ T5943] usb 4-1: Product: syz [ 163.105593][ T5943] usb 4-1: Manufacturer: syz [ 163.105607][ T5943] usb 4-1: SerialNumber: syz [ 163.166596][ T5943] usb 4-1: config 0 descriptor?? [ 163.175136][ T5943] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 163.680270][ T5943] gspca_stk1135: reg_w 0x2 err -110 [ 163.681318][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.681332][ T5943] gspca_stk1135: Sensor write failed [ 163.681361][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706478][ T5943] gspca_stk1135: Sensor write failed [ 163.706533][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706545][ T5943] gspca_stk1135: Sensor read failed [ 163.706576][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706586][ T5943] gspca_stk1135: Sensor read failed [ 163.706602][ T5943] gspca_stk1135: Detected sensor type unknown (0x0) [ 163.706636][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706645][ T5943] gspca_stk1135: Sensor read failed [ 163.706673][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706683][ T5943] gspca_stk1135: Sensor read failed [ 163.706710][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706720][ T5943] gspca_stk1135: Sensor write failed [ 163.706751][ T5943] gspca_stk1135: serial bus timeout: status=0x00 [ 163.706760][ T5943] gspca_stk1135: Sensor write failed [ 163.708493][ T5943] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 163.815987][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 163.946567][ T5890] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 164.031122][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.032980][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.038778][ T7041] i2c i2c-0: dtv_property_process_set: SET cmd 0xa806c213 undefined [ 164.109724][ T5890] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 164.109754][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.109774][ T5890] usb 1-1: config 0 has no interface number 0 [ 164.113791][ T5890] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 164.113823][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.113938][ T5890] usb 1-1: Product: syz [ 164.113955][ T5890] usb 1-1: Manufacturer: syz [ 164.113969][ T5890] usb 1-1: SerialNumber: syz [ 164.129795][ T5890] usb 1-1: config 0 descriptor?? [ 164.166523][ T5890] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 164.202904][ T5890] nokiaca42v2 ttyUSB0: required endpoint is missing [ 164.343054][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.343748][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.442191][ T5870] usb 1-1: USB disconnect, device number 14 [ 164.456521][ T5870] cypress_m8 1-1:0.35: device disconnected [ 165.606306][ T10] usb 4-1: USB disconnect, device number 11 [ 165.656248][ T5943] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 165.781903][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 165.795168][ T5943] usb 1-1: device descriptor read/64, error -71 [ 166.026284][ T5943] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.157605][ T5943] usb 1-1: device descriptor read/64, error -71 [ 166.267091][ T5943] usb usb1-port1: attempt power cycle [ 166.638781][ T5943] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.658360][ T5943] usb 1-1: device descriptor read/8, error -71 [ 166.896386][ T5943] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 166.896485][ T5870] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 166.917967][ T5943] usb 1-1: device descriptor read/8, error -71 [ 167.025892][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 167.038427][ T5943] usb usb1-port1: unable to enumerate USB device [ 167.063761][ T5870] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 167.063795][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.063815][ T5870] usb 4-1: Product: syz [ 167.063830][ T5870] usb 4-1: Manufacturer: syz [ 167.063845][ T5870] usb 4-1: SerialNumber: syz [ 167.123605][ T5870] usb 4-1: config 0 descriptor?? [ 167.155296][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 167.348497][ T5870] gspca_stk1135: reg_w 0x2 err -71 [ 167.349546][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349557][ T5870] gspca_stk1135: Sensor write failed [ 167.349588][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349597][ T5870] gspca_stk1135: Sensor write failed [ 167.349635][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349657][ T5870] gspca_stk1135: Sensor read failed [ 167.349686][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349694][ T5870] gspca_stk1135: Sensor read failed [ 167.349701][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 167.349735][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349745][ T5870] gspca_stk1135: Sensor read failed [ 167.349776][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349785][ T5870] gspca_stk1135: Sensor read failed [ 167.349813][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349822][ T5870] gspca_stk1135: Sensor write failed [ 167.349847][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 167.349856][ T5870] gspca_stk1135: Sensor write failed [ 167.349951][ T5870] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 167.383886][ T5870] usb 4-1: USB disconnect, device number 12 [ 167.634350][ T7105] netlink: 'syz.4.301': attribute type 30 has an invalid length. [ 167.733956][ T7109] input: syz1 as /devices/virtual/input/input6 [ 168.346345][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 168.467615][ T7123] netlink: 'syz.3.306': attribute type 28 has an invalid length. [ 168.567515][ T5143] block nbd0: Receive control failed (result -32) [ 168.568676][ T5824] block nbd0: Receive control failed (result -32) [ 169.063522][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 169.329283][ T7143] mmap: syz.4.315 (7143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.456552][ T7144] vlan0: entered allmulticast mode [ 169.456574][ T7144] veth0_vlan: entered allmulticast mode [ 170.346285][ T5870] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 170.528288][ T5870] usb 1-1: config 0 has no interfaces? [ 170.528377][ T5870] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 170.528392][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.532556][ T5870] usb 1-1: config 0 descriptor?? [ 170.533308][ T7152] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 171.163113][ T7161] virtiofs: Unknown parameter 'always 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 18 nlmon0 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 20 batadv0 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 21 vxcan0 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 22 vxcan1 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 23 veth0 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 24 veth1 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 25 wg0 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 26 wg1 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 27 wg2 : 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 28 veth0_to_bridge: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 29 bridge_slave_0: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 30 veth1_to_bridge: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 31 bridge_slave_1: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 32 veth0_to_bond: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:00000000 0 [ 171.163113][ T7161] 33 bond_slave_0: 1 V3 [ 171.163113][ T7161] 010000E0 1 0:0 [ 171.214394][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.215073][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.460691][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 172.757524][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.328'. [ 173.043096][ T6404] usb 1-1: USB disconnect, device number 19 [ 173.113518][ T7191] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.114773][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.774625][ T7205] netlink: 'syz.3.336': attribute type 6 has an invalid length. [ 174.120880][ T7214] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 174.150613][ T7214] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 174.176358][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.338537][ T10] usb 4-1: config 2 has an invalid interface number: 20 but max is 0 [ 174.338575][ T10] usb 4-1: config 2 has no interface number 0 [ 174.338597][ T10] usb 4-1: config 2 interface 20 has no altsetting 0 [ 174.342832][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=20a0, bcdDevice=3f.ec [ 174.342853][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.342865][ T10] usb 4-1: Product: syz [ 174.342873][ T10] usb 4-1: Manufacturer: syz [ 174.342881][ T10] usb 4-1: SerialNumber: syz [ 174.516252][ T7218] FAULT_INJECTION: forcing a failure. [ 174.516252][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.516298][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.4.341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.516327][ T7218] Tainted: [L]=SOFTLOCKUP [ 174.516335][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.516346][ T7218] Call Trace: [ 174.516354][ T7218] [ 174.516363][ T7218] dump_stack_lvl+0xe8/0x150 [ 174.516392][ T7218] should_fail_ex+0x46b/0x600 [ 174.516421][ T7218] _copy_to_user+0x31/0xb0 [ 174.516435][ T7218] simple_read_from_buffer+0xe1/0x170 [ 174.516453][ T7218] proc_fail_nth_read+0x1be/0x230 [ 174.516482][ T7218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.516511][ T7218] ? rw_verify_area+0x2ac/0x4e0 [ 174.516538][ T7218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.516564][ T7218] vfs_read+0x212/0xa80 [ 174.516598][ T7218] ? __pfx_vfs_read+0x10/0x10 [ 174.516615][ T7218] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 174.516631][ T7218] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.516655][ T7218] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 174.516682][ T7218] ? mutex_lock_nested+0x152/0x1d0 [ 174.516702][ T7218] ? fdget_pos+0x252/0x320 [ 174.516735][ T7218] ksys_read+0x156/0x270 [ 174.516764][ T7218] ? __pfx_ksys_read+0x10/0x10 [ 174.516785][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.516798][ T7218] do_syscall_64+0x15f/0xf80 [ 174.516816][ T7218] ? trace_irq_disable+0x3b/0x140 [ 174.516838][ T7218] ? clear_bhb_loop+0x40/0x90 [ 174.516864][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.516885][ T7218] RIP: 0033:0x7fb0f378d60e [ 174.516904][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.516919][ T7218] RSP: 002b:00007fb0f1a25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.516940][ T7218] RAX: ffffffffffffffda RBX: 00007fb0f1a266c0 RCX: 00007fb0f378d60e [ 174.516949][ T7218] RDX: 000000000000000f RSI: 00007fb0f1a260a0 RDI: 0000000000000005 [ 174.516956][ T7218] RBP: 00007fb0f1a26090 R08: 0000000000000000 R09: 0000000000000000 [ 174.516963][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.516970][ T7218] R13: 00007fb0f3a46038 R14: 00007fb0f3a45fa0 R15: 00007fffc6abd6b8 [ 174.516996][ T7218] [ 174.615297][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.615927][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.812336][ T10] ldusb 4-1:2.20: Interrupt in endpoint not found [ 174.830422][ T10] usb 4-1: USB disconnect, device number 13 [ 174.992055][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.992790][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.069861][ T7227] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 175.069884][ T7227] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 175.626791][ T5890] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.776257][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 175.779071][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.780282][ T5890] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 175.783121][ T5890] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 175.783148][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.783168][ T5890] usb 4-1: Product: syz [ 175.783181][ T5890] usb 4-1: Manufacturer: syz [ 175.783193][ T5890] usb 4-1: SerialNumber: syz [ 176.095325][ T5943] IPVS: starting estimator thread 0... [ 176.265297][ T7249] IPVS: using max 8 ests per chain, 19200 per kthread [ 176.277881][ T5890] usb 4-1: Limiting number of CPorts to U8_MAX [ 176.284250][ T5890] usb 4-1: Not enough endpoints found in device, aborting! [ 176.495757][ T10] usb 4-1: USB disconnect, device number 14 [ 176.502388][ T5943] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 176.656180][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 176.660500][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.661631][ T5943] usb 1-1: config 3 has an invalid interface number: 193 but max is 0 [ 176.661656][ T5943] usb 1-1: config 3 has no interface number 0 [ 176.661703][ T5943] usb 1-1: config 3 interface 193 has no altsetting 0 [ 176.663891][ T5943] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=14.30 [ 176.663916][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.663929][ T5943] usb 1-1: Product: syz [ 176.663937][ T5943] usb 1-1: Manufacturer: syz [ 176.663945][ T5943] usb 1-1: SerialNumber: syz [ 177.422123][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.358'. [ 177.685706][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.741773][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.746943][ T7269] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 177.774001][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.797254][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.980976][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.981550][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.550945][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.363'. [ 178.554256][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 179.007564][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.166261][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 179.184269][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.184328][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.184429][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.184451][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.184483][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.207818][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.207848][ T5892] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.207865][ T5892] usb 4-1: Manufacturer: syz [ 179.214428][ T5892] usb 4-1: config 0 descriptor?? [ 179.351214][ T5943] usbtest 1-1:3.193: couldn't get endpoints, -71 [ 179.351305][ T5943] usbtest 1-1:3.193: probe with driver usbtest failed with error -71 [ 179.385322][ T5943] usb 1-1: USB disconnect, device number 20 [ 179.565946][ T5892] rc_core: IR keymap rc-hauppauge not found [ 179.565970][ T5892] Registered IR keymap rc-empty [ 179.567385][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.587775][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.647828][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 179.671874][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 179.680796][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.696489][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.716477][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.736329][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.756400][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.776442][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.796436][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.817197][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.846331][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.866581][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.043181][ T5892] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.043209][ T5892] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.232188][ T7305] warning: `syz.4.372' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.252267][ T7305] Invalid argument reading file caps for ./file0 [ 180.494261][ T7310] capability: warning: `syz.4.374' uses deprecated v2 capabilities in a way that may be insecure [ 180.876223][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 181.076049][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.076110][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 181.076133][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.135610][ T10] usb 1-1: config 0 descriptor?? [ 181.545282][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.545764][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.572031][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.572922][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.609880][ T10] ath6kl: Failed to read usb control message: -71 [ 181.609999][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 181.610016][ T10] ath6kl: Unable to recv target info: -71 [ 181.650199][ T10] ath6kl: Failed to init ath6kl core: -71 [ 181.651293][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 181.697678][ T10] usb 1-1: USB disconnect, device number 21 [ 182.096472][ T10] usb 4-1: USB disconnect, device number 15 [ 182.331079][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 182.503888][ T7336] FAULT_INJECTION: forcing a failure. [ 182.503888][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.503913][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.0.383 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.503930][ T7336] Tainted: [L]=SOFTLOCKUP [ 182.503934][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.503941][ T7336] Call Trace: [ 182.503946][ T7336] [ 182.503951][ T7336] dump_stack_lvl+0xe8/0x150 [ 182.503970][ T7336] should_fail_ex+0x46b/0x600 [ 182.503991][ T7336] _copy_to_user+0x31/0xb0 [ 182.504005][ T7336] simple_read_from_buffer+0xe1/0x170 [ 182.504023][ T7336] proc_fail_nth_read+0x1be/0x230 [ 182.504040][ T7336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.504056][ T7336] ? rw_verify_area+0x2ac/0x4e0 [ 182.504072][ T7336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.504087][ T7336] vfs_read+0x212/0xa80 [ 182.504108][ T7336] ? __pfx_vfs_read+0x10/0x10 [ 182.504124][ T7336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.504141][ T7336] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.504156][ T7336] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.504171][ T7336] ? mutex_lock_nested+0x152/0x1d0 [ 182.504185][ T7336] ? fdget_pos+0x252/0x320 [ 182.504205][ T7336] ksys_read+0x156/0x270 [ 182.504222][ T7336] ? __pfx_ksys_read+0x10/0x10 [ 182.504242][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.504256][ T7336] do_syscall_64+0x15f/0xf80 [ 182.504271][ T7336] ? trace_irq_disable+0x3b/0x140 [ 182.504284][ T7336] ? clear_bhb_loop+0x40/0x90 [ 182.504299][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.504311][ T7336] RIP: 0033:0x7fb6165dd60e [ 182.504322][ T7336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.504332][ T7336] RSP: 002b:00007fb61486dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.504347][ T7336] RAX: ffffffffffffffda RBX: 00007fb61486e6c0 RCX: 00007fb6165dd60e [ 182.504355][ T7336] RDX: 000000000000000f RSI: 00007fb61486e0a0 RDI: 0000000000000003 [ 182.504362][ T7336] RBP: 00007fb61486e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.504369][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.504376][ T7336] R13: 00007fb616896038 R14: 00007fb616895fa0 R15: 00007ffc1cd05cf8 [ 182.504394][ T7336] [ 183.006240][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 183.136867][ T10] usb 1-1: device descriptor read/64, error -71 [ 183.225890][ T7355] tun0: tun_chr_ioctl cmd 1074025675 [ 183.225914][ T7355] tun0: persist enabled [ 183.237159][ T7355] tun0: tun_chr_ioctl cmd 1074025675 [ 183.237179][ T7355] tun0: persist disabled [ 183.376251][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 183.507155][ T10] usb 1-1: device descriptor read/64, error -71 [ 183.616796][ T10] usb usb1-port1: attempt power cycle [ 183.940024][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 183.976205][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 183.998154][ T10] usb 1-1: device descriptor read/8, error -71 [ 184.248843][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 184.269509][ T10] usb 1-1: device descriptor read/8, error -71 [ 184.339090][ T32] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 184.339206][ T32] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 184.343546][ T32] usb 2-1: USB disconnect, device number 6 [ 184.377722][ T10] usb usb1-port1: unable to enumerate USB device [ 184.398947][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.399612][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.106419][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.263609][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.263634][ T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 185.263648][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 23945, setting to 1024 [ 185.263666][ T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 185.265143][ T32] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 185.265171][ T32] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 185.265191][ T32] usb 2-1: Manufacturer: syz [ 185.333905][ T32] usb 2-1: config 0 descriptor?? [ 185.335418][ T7391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.353518][ T32] smsusb:smsusb_probe: board id=9, interface number 0 [ 185.363992][ T32] smsusb:siano_media_device_register: media controller created [ 185.375118][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375174][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375231][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375266][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375300][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375650][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375723][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375758][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 185.375861][ T32] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 185.375887][ T32] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 185.375894][ T32] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 185.375900][ T32] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 185.485866][ T32] ------------[ cut here ]------------ [ 185.485876][ T32] !PageLargeKmalloc(page) [ 185.485881][ T32] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:0/32 [ 185.485912][ T32] Modules linked in: [ 185.485926][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.485943][ T32] Tainted: [L]=SOFTLOCKUP [ 185.485948][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.485957][ T32] Workqueue: usb_hub_wq hub_event [ 185.485971][ T32] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 185.485988][ T32] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 96 c8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 a2 68 9b 8d 5b 41 5e 5d e9 af 79 04 ff [ 185.485998][ T32] RSP: 0018:ffffc90000a6eb80 EFLAGS: 00010206 [ 185.486076][ T32] RAX: 00000000ff000000 RBX: ffffea00015b1880 RCX: 0000000000000001 [ 185.486093][ T32] RDX: ffffc900192fc000 RSI: ffff888056c62000 RDI: ffffea00015b1880 [ 185.486108][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.486122][ T32] R10: dffffc0000000000 R11: ffffed10063622e1 R12: 1ffff1100684e882 [ 185.486137][ T32] R13: ffff888025f46480 R14: ffff888031b11760 R15: dffffc0000000000 [ 185.486149][ T32] FS: 0000000000000000(0000) GS:ffff888125b5b000(0000) knlGS:0000000000000000 [ 185.486159][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.486167][ T32] CR2: 00007ff6c44d4ff8 CR3: 0000000035fd6000 CR4: 00000000003526f0 [ 185.486180][ T32] Call Trace: [ 185.486186][ T32] [ 185.486193][ T32] usb_free_urb+0xd0/0x120 [ 185.486212][ T32] smsusb_term_device+0x1d7/0x3e0 [ 185.486239][ T32] smsusb_probe+0x1aba/0x2280 [ 185.486265][ T32] ? __pfx_smsusb_probe+0x10/0x10 [ 185.486280][ T32] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 185.486297][ T32] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 185.486314][ T32] ? rt_spin_unlock+0x14f/0x200 [ 185.486329][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.486343][ T32] ? __pm_runtime_set_status+0x99c/0xc70 [ 185.486361][ T32] usb_probe_interface+0x659/0xc70 [ 185.486381][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 185.486393][ T32] really_probe+0x267/0xaf0 [ 185.486411][ T32] __driver_probe_device+0x1ef/0x380 [ 185.486426][ T32] driver_probe_device+0x4f/0x240 [ 185.486441][ T32] __device_attach_driver+0x279/0x430 [ 185.486457][ T32] bus_for_each_drv+0x25b/0x2f0 [ 185.486474][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 185.486490][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 185.486505][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.486522][ T32] __device_attach+0x2c8/0x450 [ 185.486536][ T32] ? __pfx___device_attach+0x10/0x10 [ 185.486549][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.486565][ T32] device_initial_probe+0xa1/0xd0 [ 185.486579][ T32] bus_probe_device+0x12d/0x220 [ 185.486597][ T32] device_add+0x7e9/0xbb0 [ 185.486637][ T32] usb_set_configuration+0x1a87/0x2110 [ 185.486665][ T32] usb_generic_driver_probe+0x8d/0x150 [ 185.486685][ T32] usb_probe_device+0x1c4/0x3b0 [ 185.486700][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 185.486711][ T32] really_probe+0x267/0xaf0 [ 185.486728][ T32] __driver_probe_device+0x1ef/0x380 [ 185.486743][ T32] driver_probe_device+0x4f/0x240 [ 185.486758][ T32] __device_attach_driver+0x279/0x430 [ 185.486774][ T32] bus_for_each_drv+0x25b/0x2f0 [ 185.486792][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 185.486815][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 185.486844][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.486876][ T32] __device_attach+0x2c8/0x450 [ 185.486901][ T32] ? __pfx___device_attach+0x10/0x10 [ 185.486924][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.486955][ T32] device_initial_probe+0xa1/0xd0 [ 185.486979][ T32] bus_probe_device+0x12d/0x220 [ 185.486997][ T32] device_add+0x7e9/0xbb0 [ 185.487017][ T32] usb_new_device+0x9f8/0x16e0 [ 185.487040][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 185.487061][ T32] hub_event+0x2a49/0x4f60 [ 185.487099][ T32] ? __pfx_hub_event+0x10/0x10 [ 185.487110][ T32] ? process_one_work+0x8b7/0x1710 [ 185.487130][ T32] ? process_one_work+0x8b7/0x1710 [ 185.487142][ T32] process_one_work+0x9a3/0x1710 [ 185.487167][ T32] ? __pfx_process_one_work+0x10/0x10 [ 185.487178][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.487201][ T32] worker_thread+0xba8/0x11e0 [ 185.487234][ T32] kthread+0x388/0x470 [ 185.487250][ T32] ? __pfx_worker_thread+0x10/0x10 [ 185.487261][ T32] ? __pfx_kthread+0x10/0x10 [ 185.487277][ T32] ret_from_fork+0x514/0xb70 [ 185.487292][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 185.487304][ T32] ? __switch_to+0xc79/0x1410 [ 185.487322][ T32] ? __pfx_kthread+0x10/0x10 [ 185.487337][ T32] ret_from_fork_asm+0x1a/0x30 [ 185.487362][ T32] [ 185.487369][ T32] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.487381][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.487397][ T32] Tainted: [L]=SOFTLOCKUP [ 185.487401][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.487408][ T32] Workqueue: usb_hub_wq hub_event [ 185.487421][ T32] Call Trace: [ 185.487426][ T32] [ 185.487430][ T32] vpanic+0x56c/0xa60 [ 185.487447][ T32] ? __pfx__printk+0x10/0x10 [ 185.487464][ T32] ? __pfx_vpanic+0x10/0x10 [ 185.487478][ T32] ? is_bpf_text_address+0x292/0x2b0 [ 185.487495][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 185.487516][ T32] panic+0xc5/0xd0 [ 185.487530][ T32] ? __pfx_panic+0x10/0x10 [ 185.487549][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 185.487566][ T32] __warn+0x315/0x4c0 [ 185.487580][ T32] ? free_large_kmalloc+0x9b/0x110 [ 185.487598][ T32] ? free_large_kmalloc+0x9b/0x110 [ 185.487615][ T32] __report_bug+0x29a/0x540 [ 185.487629][ T32] ? device_initial_probe+0xa1/0xd0 [ 185.487641][ T32] ? bus_probe_device+0x12d/0x220 [ 185.487655][ T32] ? device_add+0x7e9/0xbb0 [ 185.487673][ T32] ? free_large_kmalloc+0x9b/0x110 [ 185.487690][ T32] ? __pfx___report_bug+0x10/0x10 [ 185.487703][ T32] ? usb_new_device+0x9f8/0x16e0 [ 185.487720][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.487739][ T32] ? free_large_kmalloc+0x9b/0x110 [ 185.487755][ T32] report_bug+0x16a/0x220 [ 185.487770][ T32] ? free_large_kmalloc+0x9b/0x110 [ 185.487785][ T32] ? free_large_kmalloc+0x9d/0x110 [ 185.487800][ T32] handle_bug+0x9c/0x200 [ 185.487818][ T32] exc_invalid_op+0x1a/0x50 [ 185.487835][ T32] asm_exc_invalid_op+0x1a/0x20 [ 185.487847][ T32] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 185.487864][ T32] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 96 c8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 a2 68 9b 8d 5b 41 5e 5d e9 af 79 04 ff [ 185.487873][ T32] RSP: 0018:ffffc90000a6eb80 EFLAGS: 00010206 [ 185.487883][ T32] RAX: 00000000ff000000 RBX: ffffea00015b1880 RCX: 0000000000000001 [ 185.487891][ T32] RDX: ffffc900192fc000 RSI: ffff888056c62000 RDI: ffffea00015b1880 [ 185.487899][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.487906][ T32] R10: dffffc0000000000 R11: ffffed10063622e1 R12: 1ffff1100684e882 [ 185.487914][ T32] R13: ffff888025f46480 R14: ffff888031b11760 R15: dffffc0000000000 [ 185.487933][ T32] usb_free_urb+0xd0/0x120 [ 185.487949][ T32] smsusb_term_device+0x1d7/0x3e0 [ 185.487980][ T32] smsusb_probe+0x1aba/0x2280 [ 185.488043][ T32] ? __pfx_smsusb_probe+0x10/0x10 [ 185.488068][ T32] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 185.488097][ T32] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 185.488128][ T32] ? rt_spin_unlock+0x14f/0x200 [ 185.488146][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.488160][ T32] ? __pm_runtime_set_status+0x99c/0xc70 [ 185.488177][ T32] usb_probe_interface+0x659/0xc70 [ 185.488197][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 185.488208][ T32] really_probe+0x267/0xaf0 [ 185.488225][ T32] __driver_probe_device+0x1ef/0x380 [ 185.488247][ T32] driver_probe_device+0x4f/0x240 [ 185.488262][ T32] __device_attach_driver+0x279/0x430 [ 185.488277][ T32] bus_for_each_drv+0x25b/0x2f0 [ 185.488293][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 185.488306][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 185.488322][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.488338][ T32] __device_attach+0x2c8/0x450 [ 185.488352][ T32] ? __pfx___device_attach+0x10/0x10 [ 185.488365][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.488381][ T32] device_initial_probe+0xa1/0xd0 [ 185.488394][ T32] bus_probe_device+0x12d/0x220 [ 185.488412][ T32] device_add+0x7e9/0xbb0 [ 185.488432][ T32] usb_set_configuration+0x1a87/0x2110 [ 185.488459][ T32] usb_generic_driver_probe+0x8d/0x150 [ 185.488481][ T32] usb_probe_device+0x1c4/0x3b0 [ 185.488497][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 185.488508][ T32] really_probe+0x267/0xaf0 [ 185.488525][ T32] __driver_probe_device+0x1ef/0x380 [ 185.488539][ T32] driver_probe_device+0x4f/0x240 [ 185.488554][ T32] __device_attach_driver+0x279/0x430 [ 185.488569][ T32] bus_for_each_drv+0x25b/0x2f0 [ 185.488586][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 185.488599][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 185.488614][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.488630][ T32] __device_attach+0x2c8/0x450 [ 185.488644][ T32] ? __pfx___device_attach+0x10/0x10 [ 185.488656][ T32] ? rt_spin_unlock+0x160/0x200 [ 185.488672][ T32] device_initial_probe+0xa1/0xd0 [ 185.488686][ T32] bus_probe_device+0x12d/0x220 [ 185.488703][ T32] device_add+0x7e9/0xbb0 [ 185.488723][ T32] usb_new_device+0x9f8/0x16e0 [ 185.488746][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 185.488767][ T32] hub_event+0x2a49/0x4f60 [ 185.488804][ T32] ? __pfx_hub_event+0x10/0x10 [ 185.488816][ T32] ? process_one_work+0x8b7/0x1710 [ 185.488835][ T32] ? process_one_work+0x8b7/0x1710 [ 185.488845][ T32] process_one_work+0x9a3/0x1710 [ 185.488869][ T32] ? __pfx_process_one_work+0x10/0x10 [ 185.488880][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.488914][ T32] worker_thread+0xba8/0x11e0 [ 185.488940][ T32] kthread+0x388/0x470 [ 185.488956][ T32] ? __pfx_worker_thread+0x10/0x10 [ 185.488967][ T32] ? __pfx_kthread+0x10/0x10 [ 185.488982][ T32] ret_from_fork+0x514/0xb70 [ 185.488998][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 185.489019][ T32] ? __switch_to+0xc79/0x1410 [ 185.489053][ T32] ? __pfx_kthread+0x10/0x10 [ 185.489081][ T32] ret_from_fork_asm+0x1a/0x30 [ 185.489122][ T32] [ 185.489754][ T32] Kernel Offset: disabled