last executing test programs: 9.139782297s ago: executing program 2 (id=2784): set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x38}}, 0x20000844) (fail_nth: 18) 8.353757754s ago: executing program 2 (id=2786): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0xa4aff47201bf5c0d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001002abd7008000000000a00000008000000ffffffff"], 0x1c}}, 0xd0) io_submit(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x4, 0x0, 0xf7fe, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) 8.320358842s ago: executing program 0 (id=2787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 8.131776456s ago: executing program 0 (id=2788): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0xa4aff47201bf5c0d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001002abd7008000000000a00000008000000ffffffff"], 0x1c}}, 0xd0) io_submit(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x4, 0x0, 0xf7fe, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) 7.897948859s ago: executing program 3 (id=2790): syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000640)={0xb0000004}) ftruncate(r4, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.312261825s ago: executing program 2 (id=2794): r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r3, 0x108000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x401064d0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x8080000, 0x200009fc, 0x0, 0x2, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xd, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x8}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x7b}, {0x5, 0xa, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xff, 0xb, 0x1, '\x00', 0x44}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x6, 0x0, 0x2, '\x00', 0x3}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0xc, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001000)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) sendmsg$inet6(r0, &(0x7f0000000bc0)={&(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000740)="d3", 0x1}], 0x1}, 0x44890) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x571001, 0x0) 6.19570986s ago: executing program 3 (id=2795): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000002aa30000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000b640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x30, 0x24040040}}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0xfffffff9, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000980)=[{&(0x7f00000004c0)="18e41dbb2ed7b8c3f09c9f04a4d383dc4f19f21d34bf79ab962e9e70bd4f14bacc0726cfd4be1811d4026e544c6724b37fa1923b3c02f9f5e7a6e865c7060b0d9f7c241603fc82c9d2ae66b8ec07d11c1db3205c31597ed6089354a6c17987edece5730c65f312e5ca4e91be2553b88e202b7a65c6d2385d8849289c8e2e08a1157860f193afc69748bc4921a728c65cb6544e1b2abdb01cd63d79b90d9d2a07565ec23235c81de634b6e471fbe8dd59309c4a21f28cbb", 0xb7}, {&(0x7f0000000080)="846c95fcac70ccdc625119eece", 0xd}, {&(0x7f00000002c0)="de895d62ec8e", 0x6}], 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) listen(r6, 0xfffffffc) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f0000000880)={0x2, 0x4e19, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x28}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6.111486197s ago: executing program 1 (id=2796): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) 5.995345746s ago: executing program 0 (id=2797): syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000640)={0xb0000004}) ftruncate(r4, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.912515463s ago: executing program 3 (id=2798): syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000080)) r4 = memfd_create(0x0, 0x3) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000640)={0xb0000004}) ftruncate(r4, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.600804732s ago: executing program 4 (id=2799): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c20102030112b43d5801000010000904430002317d55000905020200020200000905820200026b49f166808995e7e580743db4d39ca4d74d7c9a958bacf87af6aa2de10395b724b4d066df2125304607ee95628c3263f9290aafc2ec10d849ac6c7d61094720beab4f38a296b7ddb7c1e3fa444981e3664a37736f2d23df3209828cb05371158ab4aad434e61109481468250e632098fa7c2b38e52a8c3a9a6ffb02c360ad2987c66ac70162f6010431b8b321729205461c79dfdcd1a784fe45d6ab8f4424c589e75bba9b4e6309904700a8c1bbd80658efc0060000"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r2, r3], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x1000}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x0, 0xffff}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xfa00000, 0x8, 0xc31, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5b3fe0ed, 0x9, 0x1, 0x10, 0xaf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) syz_emit_ethernet(0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500001d0000000000019078ac1414bbac1414aa08006c0315d0caebaa"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 4.572228874s ago: executing program 1 (id=2800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={0x0}) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_open_dev$loop(0x0, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) 4.20279183s ago: executing program 2 (id=2801): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="017200000000000020001280080001006774700014000280080003003a320000050005000000000008000a00", @ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x151040, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000002c0)={0x1, 0x1, 0x7, 0x3, 0x4, 0x0, 0x1, 0x6, 0x800, 0x8, 0x3, 0x4}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c}]}]}}]}, 0x7c}}, 0x0) 4.18487082s ago: executing program 0 (id=2802): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x8000000007, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x410}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getdents64(r3, &(0x7f0000000380)=""/52, 0x34) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r6, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0xfff9, 0x26, 0x7, 0x2}, {0x0, 0x9, 0x7d, 0x4}, {0xffff, 0x7f, 0xfe, 0xffff}, {0x6, 0xf7, 0x0, 0xb1}, {0x2, 0xa, 0x0, 0x2}, {0x800, 0xc, 0x5}]}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000009f0000000000000100004a9d3209e6e8588316f30000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d00010000"], 0x30}}, 0x0) syz_emit_ethernet(0xcd, &(0x7f0000000440)=ANY=[@ANYBLOB="5aea4f8cf78efffffffffbff88a80f008100290088470000000000000100000f0b00000f0f000000000001002f5048fb809bedea7dd559498ef2558ef7aa23ac7441f48fa7b474f3057c020d3b838559b32296f493ab8f591fb0f80dd590ddfe11a7564f18a1a2592fd06c414e9b3862770b032c214f2ceb67be42d638a4378b89fe89bbeabddd1869c264bb98dd1d591c42d3294f4f59de35d68348d8c4da808f734db878c735f0235b39203c2a52a1d411b714711ec3c50abe9559b22f5d32b02df23c5ab66b40f4988c93dc"], &(0x7f0000000180)={0x0, 0x4, [0x33f, 0x1cd, 0xe09, 0x27f]}) 3.919212084s ago: executing program 2 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000089c33f40f70a0101622d000000010902120001000000000904"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0xae49, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f906, 0x0, '\x00', @p_u8=0x0}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ppoll(&(0x7f0000000040)=[{r4, 0x2001}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfffffffa}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x3}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x34, "a10124f51800000000000000000000000002a39b85d82e5cec068ce8989dea0a3f81e9ed4a8b7479a35177a1147c6877533f6f84"}, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3.774022609s ago: executing program 3 (id=2804): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0xa4aff47201bf5c0d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001002abd7008000000000a00000008000000ffffffff"], 0x1c}}, 0xd0) io_submit(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x4, 0x0, 0xf7fe, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) 3.400160518s ago: executing program 1 (id=2805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000034c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8}}, 0xf57, 0xffff, 0x5, 0xe05, 0x21, 0x7, 0xfe}, &(0x7f0000003580)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003940)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x6}}, 0x5, 0x2, 0x9, 0xc, 0xeb5}, &(0x7f0000003a00)=0x98) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="9c", 0x1}, {&(0x7f0000005600)="2941f1dab3ec3a8a1cfd58e48bf7584e44dd587c9a664a1d157a10ec2fcfddafa9850a365a65cfe598d101292abeee86420009e4b5f917ea279082b614dcdaec47cd5b6342ee5682e91b00c5905fbbb0ccde214891869c0aacb38341daf5ef7e9aa80b3c732796eeddfc2ac7aaa0affec3ebd5445166297005a4988a5f7d19ff9fdbf9eecfbda73d1bc9c65134f8e92d6ed0bb569d8c0c4db23ae5226fc04b21950cfa", 0xa3}], 0x2}}], 0x1, 0x8080) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000540)={r7, 0x2, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0x5, 0x7}, &(0x7f0000000200)=0x8) 3.328865007s ago: executing program 1 (id=2806): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, 0x0) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x2000, 0x1, 0x2ed}) listen(r3, 0x6) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.47231031s ago: executing program 4 (id=2807): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32, @ANYRES32=r1], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) (async) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, r1, &(0x7f0000000000)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)={0x1210, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xde}, @nested={0x11f8, 0x1, 0x0, 0x1, [@nested={0x10c1, 0xd2, 0x0, 0x1, [@generic="80f1292b4baabb53e336c927d66e7a5cd43c519737429792539bfad01db4255fe576d8accff159c4c0766fcc0cdb428e8a7395681cd8bd87ff0082ad8706d0ae19135a491a66edabd946927a79822213fcc99dcadda4eaca16997b1e19c8ca8386b7069d5aab7441b3b872d653550c22528f3cd870f1a548eb83ee8d4d3bf3", @typed={0x4, 0x146}, @generic="06f7b93e4e2da0a483180f51dcf6ca51b5ac73754a4e1f1784684093cdb608a06dcddb16a603a0691cb3", @nested={0x1010, 0xd5, 0x0, 0x1, [@nested={0x1001, 0x3c, 0x0, 0x1, [@generic="3e4cfb7d9476fd1d017eb9078f952d3a75d9075aee263002bc6c280818617f6dcc2d78d250345c4fd77cbd992708c4f49d3fb9c2fb76c51fc58553fd98e8482cfde2b5a608bedea16547c8d27bcc78e686def41941c14b305fcde542427c2fb93c1ac6a6669be34ff484f55767bff599f60d37a7cd78d95ebf7a4098b10c18690c0cefc2a9a1efa5051da49af7331acc405a32475211ebb9ac0e2d01bf4e4eb37365d885e3d042043a3a6a4f3b97f59be5453c761e04050788576d7ff57b6b1622fad2e28de53938dcf5b7888aca7d960eb7a907d99ef298f51ddd8a34d1a04f07af254fcaa3aa6cf97264846af78e7ed0cd5d2dd8f21fe0cebe2a41353574ef247b8360d7dcc2a017ed347ed4feea7ccad5810a61ee02f4a7c8e3c79e53ace72f04baf226922f0959eb64b10d85b5724a5ebe64c72de9618db7c302d6eee5b6639601a89ce629445f379c2ab3c0070225b0574e53b12f82fd0aa201b30d820e7cd329be88ddc820c2aaaacda2b8b0e2a8cd5385d0f204008272a705955d01857cc235656635b7e017c1450b4d8c76174b2af9ee1d57c6e662dd847e9ffe3977e201650c9167e072386fae38e715617093734bb6b8306b17fe0640e7671187e21b20af0bfd3fb81aa588060a960aafc6d401a20895238342f4376aebb044758ac0de70c58ffd4d2cded2cb27f15a52105da8a4bcb7bb12fe135c2ee8371098eb567a65eca228df5e984c63f36521919918c7af690f4175c9bec13186c650466f4594d0abdf9eebbcce1010165cf38ee361521367911cb907561a79d449d60cf1b973c4829afdbd372a0d0208d115155a41b1a3dedde92af0ed3085e9b5d750464f212decc550cf3101b7123297e147f7e7832e18e4b9df848ceab3c22e22257d0f20a0a4b92d42dc7c3f0bcf0d59519fc4358431db2c547c666bbfddf496b874fa01d001adfbf82b2d2aaf004a17e4c055d61ba7cedc98403f1eb1f0b517cf9e8a5919b1529c805f9cf35da7a75cab7ef053c87d83d79d7895e521b717af74bcd2c4c34caa85c9886099d2621fcb10b5e4f225c2d77ab7fa3b0cd48a763f0ec676352e888cfac04d397eab697f2dac7e3092f183f0a72f68b506cc596ed037b493eaa93c4f497a52bf764abb5143e75426ef9ca949d137e1daab9b45e8fc43959286a2dd0a3c89b279bb9fe3ccd854ddbf17a19c74b9dd8bf5544e373d460439d6c5117aba9f8a41dd21af5ae8a0541a1cd02b8fdac74576fae47fb08543c877fca17654aa14c33970f19cc048e49470dbce8567d2a38ecf944042e1bdf310b536c5de21180570b4b40395729efb99de24514f23b3dd7ef636cf2c630dcc2561937f94a48496fd5aeaeaeb54a965f9776cdedfeaa4579c02d143f9f304a9e1274026b82eb23bb7b539dbf06f448dc6bfe6ccb2e1a3706b2c66e51771605942f2b74affb72ab8edef6ae945bb9fd7afa139c1ece6b9f712be537966137b0710c79ee09eefc3a8c2d4f1bb1062631e970cb536f33f60d28c6f892a61fb00c6cea73396b52ba797fe16b3a5d38c9f3a0da03e374259991d3b9d0ea7a3d6f465c3ab58250343c4541775d85947b358cedf1d00852e21bc306948030fa876aa2e0f9aafec7b0b2dc68413870bfbdba4142729ca0f080871631b1954e9c6e59755d54ee49f501f658fdab8dd964814f7d24e5166d9a3bb0b42f65ee539ec4b4aee42e8ff523e1574830f7fad4802c34455c40de4c297795d641a8a459eac1a76cfe209980c829917e6341942dd12064d5648a55cc458945b07b71e20f9b8e506fc01c0c1b7cd60dd9b9b985615e66189441997c9d2f1cd94c2f82d0d1bdafad36e763afa53733f833956aeb2b0210d6f2785001a665d22c6612058b912732711d7db69d078829ec42a5bed085b8c81c6107cb29a59598ca65e923a22873049ccae0083d66cc0cf54596a751bba112303a0e3f33d49a8f4eaf4bccd7ca5b2b6848f837308aac27d6b368229be4dcbf9b9928236894b96c5dc65a75ebf2350e3d8e7a9b9b06ced1345fa1594d5f3cd93beec329565853cc4d9431bcf0c2bce865afb0b241778535e5b9584d4809594d5eb9f095eb92be118dcb9f909642df988070dcdc0ae5b16428d209e8b7be25ef4fe0b3fbed71d74543ca5b6c85a84bfd0f95d0c7e6b3be57099ccbc6c21b66b57e09fda251211da803d5b92d2688279f32eafa5ad175e767663911de317f970845fcde5e218da3d1896203b28f2aba426b7504ec527d295105d7e175a33aa82b7b5d897c2368359260e2f56c2d21fcdecda080333fd99108344934efc246743cf217b4f3945c25379c76717bdee82cd8d2a136782d3dc386c9dadc9ad898c0715d41b9c38aafbe92350f7a60c532048cbc08839b5cd3f773d5ddb7b5a0492aff01de588e7f1f2c686318197243c78cac1f881978aba69c80119f1b9f32954df26553a180caa46990f8fc4dd88e3280b3f03fb39b84a35360fde61cd81145f099d9c2e3697d0b76487a5a93af27442c8f649d459245e273ddae3165e935fa398b6a248af72570ff6f0b3902aa2a60e02b6452288da7750264f034cdb401a6a46bd49f3bc8a6faed8d4db7e1b6381c313e75342d67def9a7354feca397d0505b2f17cfff6ab8a7f66f118159c3853eb8f89b4b699587903e336c2aac7add8b9815731f4a0cd05ef66a5463dc05c18ff62163e97b54a8db901d6b31e16ca6e10903cb4b01382e931feffcebd0583c0fdb419edb0856cb12d99ad4dace4ae68e0a10fdc3c3bd30e26cb1d9cf0159ee234dc7b9e1e695e54b1c11bdf9bf6b3de4e9bcd61db75d5d4635eb3f5d5bf3599db0a63b6d8ad20b66cc3054612ed9cd5ae22c5d18632c303e1fb137486c08ca46542e18546e8e604bdcba982bb3d0fe641d586e27c69bea99aec171dffe66abf2d2af3b2ad6cc6ebab6e51863864aa383ae3ee554f81410659690309fd563f6d14f34dca16b46ae686f066f579099746e0b812f29300ae9b64efaffab5939402c5d5ac4e897d62e670ef00bdd481beeebf4370288fdcab6954842192547c303051acb006d7a1b72c7c66c9366420d7558883c1e3247ace24cad198f6ee4608761236478d03763a557f415c7de518382d42b569f18472bbef0a53a8dda46eb7ce35cd7c17e06f386c1faa10b1eaec3a052503fdf7ee58ae20a72b8982f758e535acdbc6e0c95d49b10dcffb60be8248c2a0f1df7e5211581ca08f14fced1e41bd1e7ae34d0a3bff027a1f58efefe1c41e545560c60d2ed9d9cb43fc2b1adf7a88b003ce0879072428729b0508d6f310bf9e547f2dcab9170c85bbfd1663c047d34379e7e98f07cc773d684864d67f6a9f76b28f7c01ae84224a0e960f2f6c7eda0fd602e64bb75ed5d93ed3c65848f3379a7b77f4fefbd571dc61a390e77727ccf1758993b16a54fc8fa3886d6d94979b760ff6a3c26211660450414852c8a29b696fd604baa16968971fcf62306c4c0d2803b34684ae00babc7059711a1d6c24bdcb69208addebbed3411653a45146704f8dff70b7ad7527d3c4f04d71460539673c4295ad39e567227ddea798c1c7f5c5e89077f44c477ab00c9eb96542434676badf8f03bfc285b64eddc1e19b87215f2e561f88de4a26ce98bb49058dc3f8fbcff47e306b828b9be7229721cdbec8247e65a97d4fdb87862591dbc70b8cebc9020a58dbeb7084d08a020f040096f6f6094a6d1b520bad7251dcce246223d0e15737d665e8b341eef490524d3f53c0b096b87e500a61f8c2f05bd2adc30820628d2d2561c4e781df2ee7dbf592af62b0dfcbd814f370ad6593ac86c3ad02ab8ec4da0c572d4898576b45ba51e90e82537b616a04683dcd58471985f6c46e11e3d4523cc4e69470aabd2d2ef2d80c2b672ef4f8fc36463f43f4d46ad0d582981dff93d6126fdaf18d9dfb546e499b8dbc2920660f7b5daf38bb73cdeda138d92b0c7693ed2fa2c6bc0c8a83d19e6f85fbdfac6402beaecdd95f2b82309969bdeedb45368fc14b6ad0df49a5353f93e9fcf8c7e3d6de8c29b6246a1af006036aa3eb5f2f07c600e9578285505e10cd2cdda9805d6933081114e587ef2e45bdb571d95755a91b5586cccb41ccafe9817726411e45043ec17f85ea1fab31c7c704c37e9e32867432d494c8f832c5bd82a675e2baf8de78d16c3cdc444a9c3d66f3db97c85adfe16aae15aef782052e4c785d1e41dbbbdc4f93a6ed7b7527d0c41d585662ad22623e160c2b0e72cde9fc098d5ac950389a5871d14d4e15a61aa5fda1f1c1a6635032d6e2cb6242ff6770f8a714a3553924d5df42cfe54d1c10e505fd932ddb0879e4f5cf081da3393aaf60dddf53fb41edea5e36167da4a03dc22d5164003641ed7d820fefb2d0d4760ab94aed4bfde404e91e2ec12cbbec3b78fb253e8e741cbc46afa694cb03dbb7fbc9533362537b4e41b1f5f53beb92a15644e7bc39841c2bb8be5ff1a6698ab5661ce3c7f8df33f441241e8814465a72e17c471ac04eb086ca5d66a7824178f08fec8228281b8162fbb9f925a3c03d51a94ca97f3a96e44ffca1f73eec484b32345cfc2605e4adea8edc00f17c1ce529fe2ed095f4a6c46e1d3e883740c8b47a9074b411d4b2b7835a000668fdbb36d50a5e96ba7f2a141f1b37a0b82943a8567c55dc6cc9d699d4fd98698f5226f00113febd8120fb8382bc2c4a888a37372b9239805ffd324345463c3de98d1468a84c92352f1b17e2d65e941c6445707cad692a5b465dfc6d882dc176e35982a5560f28b8ddc45e6cbef676bc2a159b0487c8352546a59df07a6c7f6a1a62b9a4149127d5cac74f831d14fdbe7f780d8a0227522393203b43cbf8911d8b73d603f47255f829fe87a17f5e1203672d4a85ee5bde750ffe972d3daf8081d0c273477c5a33d7e2582fe2824b533b7f7501d10b7e87f62adda4c9ec6010867e2d1a8e08e8a535537bae0002705ba841be2c0567a12470efdaf8e486eda229a8e272907c7f53f252435a27e957efc8ff9ac379b97c7f4051b35ea2e68c5814e403c5800e4957eda5c7a8b704821346611257543d7a711cfe5ddcd7d315631ac5fdb107fb49eb8fe30c1f94815c53684b5b5bfd65b1d9ecff7f54b23a4730e16a79eb8b21aa0a1b1decc04da05e108cd82659ea154fb63c5c33fd82419d3846a17832abea8dc6c85321ad16d5703b8888be9bf353756e0629c5083d6d7c4b133b24194b4d2f78b724ca6229c14d0781d05b484d0eadbc434426e28c8a9e8dd330221985fee9811d03841a5373ec56154dd39e2b4345ae673936d37e23334148766b07a2284f65432faef9d082aabf022de8b8d0f425cb6c2e33afa241278fe3bc87189fe7e4e93f303e8b7eafe3544aabe95b621f69027c1a6ec4bc22a251146cc0d714220626ff7be897ad9f878496012d4ff8b56a467ef289749346e18205c37ef781536b4b0711a4224bf5119e9b5a8eb22c9770fdfd6395c3a3ef8263bb6507923108c448936c299373cd72e7e90bae224107778677e5f386944b39c89fdffe165bfe140c385d57b67f3f6ee7c1d0d9b05e3e230d25c68564f25d11ad24169c264440e6aa9d2140a7df9c0298af58aca0c6b4778bbe142037ea5682c4ebdb52019e5c36669a07a292a082015ab7e9cb27a14e330fc7c2a17495bff25670770778b2bd6a1b782e89b9f19321f1c1c183f509c97a73f9646af2c5c814c84a7603ebad424a1df46ab6d42e00542af611070d06fbc659f83ec86bc82e2f65250c1f30d7bd5340e4d44a50"]}, @typed={0x8, 0x14c, 0x0, 0x0, @pid}]}]}, @nested={0x130, 0xd6, 0x0, 0x1, [@nested={0x12c, 0xa1, 0x0, 0x1, [@nested={0x127, 0xbd, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x8c}, @generic="490b1ef2fdf447069ebadd7552c021747f1763d151fa1dd93114a452e2b71ae2e4f4505ff9c6b0d48ae0e69c60c07ca28345542dd17d3ff5f15ca80a4747a77f36510dd243cf59161bb8ad7225f6c34053d251bac6762724de29fc6aacf2ac4ead35f95037657e2e75ed8893fa0c6f3c94e69c10a963769efb3c86fd50932aa089ff5ef0ad04ffc60773af4dbc8b3f3b8489252ff2f8315db60c", @generic="8274cbec08b0962e5e26549856b2883eedf6a9891ffbf0e0c46a5eb9436b1e21b02fe455764d424ef9c10e8ace06850d3b1a9058e8d0546b57bd1f75c741418653e646035d5f420c435acc8c4e17fdec4e41ef993c9ece7ff45ebd8b7d5b", @nested={0x4, 0x141}, @nested={0x4, 0x4e}, @typed={0x8, 0xa4, 0x0, 0x0, @fd}, @generic="87baed52ba4268803ccb4b44d488e76653e0af"]}]}]}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 2.377623697s ago: executing program 3 (id=2808): setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x101, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) 2.19634843s ago: executing program 4 (id=2809): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc540900", 0x2c}], 0x1}, 0x0) 2.128823706s ago: executing program 4 (id=2810): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1) 1.750996214s ago: executing program 1 (id=2811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, 0x0) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x2000, 0x1, 0x2ed}) listen(r3, 0x6) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 867.185227ms ago: executing program 0 (id=2812): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000002180)=0x100000000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x101, 0x420203) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0xca0) socket$netlink(0x10, 0x3, 0x1a) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x210000, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f0000000140)={0x0, 0x8004, 0x1, '\x00', &(0x7f0000000080)=0x5}) 752.580375ms ago: executing program 2 (id=2813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x448c4) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x0, 0x2, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x6e6bb2, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@broadcast, 0x34ff, 0x1, 0x0, 0xfd, 0x0, 0x1}}, 0xe8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x3, &(0x7f0000000180)=""/17, 0x11}, 0x8}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/68, 0x44}, {&(0x7f0000004100)=""/209, 0xd1}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/207, 0xcf}], 0x5, &(0x7f0000001880)=""/207, 0xcf}, 0x6}, {{&(0x7f0000001980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/170, 0xaa}, {&(0x7f0000002ac0)=""/254, 0xfe}, {&(0x7f0000002bc0)=""/120, 0x78}, {&(0x7f0000002c40)=""/191, 0xbf}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/22, 0x16}, {&(0x7f0000003d80)=""/245, 0xf5}], 0x9, &(0x7f0000003f40)=""/239, 0xef}, 0x7}], 0x3, 0x40010011, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000000006, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x25000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @multicast1, 0x4e24, 0x12, 'sed\x00', 0x2, 0x8, 0x2e}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4e22, 0x1, 0xa, 0x7ffffffe, 0x1000fb}}, 0x44) 615.595912ms ago: executing program 4 (id=2814): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) syz_emit_ethernet(0x19, &(0x7f000001f700)={@broadcast, @remote, @val={@val, {0x88a8}}, {@mpls_uc={0x88a8, {[], @llc={@llc={0x0, 0x0, "0e"}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x1, 0x10, 0xfffffff9, 0x4, {{0x21, 0x4, 0x3, 0x26, 0x84, 0x64, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xf, [{@local, 0x4}, {@rand_addr=0x64010102, 0xfffffffb}, {@local, 0xb89}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}, {@private=0xa010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x12, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x2}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001a00010035bd700003dcdf2502832001000000000020000005001b003a00000008001900", @ANYBLOB="8332b1"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40400c0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@deltclass={0xe8, 0x29, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xb}, {0x4, 0x4}, {0x3, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_atm={{0x8}, {0xa4, 0x2, [@TCA_ATM_HDR={0x30, 0x3, "19f66a5dddf7bf181ea00baf512df1fc4da4512a9aede72bc027d6c1a888c96732b89641fc41a9380162ab4b"}, @TCA_ATM_HDR={0x19, 0x3, "7eeffeca8e5a30ce0eb385d8e9ba9d13e430d73f53"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x7}}, @TCA_ATM_HDR={0x39, 0x3, "d220e7d9a5362e7378106c3c614f31dd9b3a84e309bdddd9ce08b2fa556a1eef48e2852eb4e3ac820c21cc0a89b6f4d8fd06c74685"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x7}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4088}, 0x20004000) write$cgroup_int(r1, &(0x7f0000000040)=0x80000002, 0x12) 585.556617ms ago: executing program 0 (id=2815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x8000000007, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x410}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getdents64(r3, &(0x7f0000000380)=""/52, 0x34) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r6, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0xfff9, 0x26, 0x7, 0x2}, {0x0, 0x9, 0x7d, 0x4}, {0xffff, 0x7f, 0xfe, 0xffff}, {0x6, 0xf7, 0x0, 0xb1}, {0x2, 0xa, 0x0, 0x2}, {0x800, 0xc, 0x5}]}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000009f0000000000000100004a9d3209e6e8588316f30000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001"], 0x30}}, 0x0) syz_emit_ethernet(0xcd, &(0x7f0000000440)=ANY=[@ANYBLOB="5aea4f8cf78efffffffffbff88a80f008100290088470000000000000100000f0b00000f0f000000000001002f5048fb809bedea7dd559498ef2558ef7aa23ac7441f48fa7b474f3057c020d3b838559b32296f493ab8f591fb0f80dd590ddfe11a7564f18a1a2592fd06c414e9b3862770b032c214f2ceb67be42d638a4378b89fe89bbeabddd1869c264bb98dd1d591c42d3294f4f59de35d68348d8c4da808f734db878c735f0235b39203c2a52a1d411b714711ec3c50abe9559b22f5d32b02df23c5ab66b40f4988c93dc"], &(0x7f0000000180)={0x0, 0x4, [0x33f, 0x1cd, 0xe09, 0x27f]}) 484.270244ms ago: executing program 3 (id=2816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) setrlimit(0x1, &(0x7f0000000000)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) syz_usbip_server_init(0x3) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000a80)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast1, 0xb}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000400)="00498d1898c4921deb2dcd7a3544dc4ee11ce2a477c2aca71f4de681883b10bbef9effe65632d54f1a5be4a984481595e1b91a6f944b01c0ddbfbc8abaa9af0d8f74333fec6d5de003e0e8726276e111aee8a48a", 0x54}, {&(0x7f0000000480)="dbbc74a89a2a2a63cb5a757566e5fa75737bbce65a3c743db2967a26ab5472", 0xff1d}, {&(0x7f00000004c0)="26d461596ceb8ccc6449b83fb751cf0a44f2aec69a0864a3d2a43768c0027e49e4e8a710ba3d3dff26fbc550f51bb24c3cd0f64ccf2b22d95c7a4a9795e8d5551494e0886b7560f692f6f152361c71ab6a2cd6f0427ca3ab5c8a5b2737279a9a7dec1e54172c42c9428a4264394f941d06589715ad59a31fe8e1a84b3c7eba167714fc882c5210cca83f46de812e83003f30138752ff0593cb0737291ea3af6275ab0e8d392edb42b6dff88a3a", 0xad}, {&(0x7f0000000700)="d80116a10666ed0ccb7bbb2a2d4e64a689617a7c1f2be096a6e007ce0356e754b8cd638dccb78d7e8e2c1587843c8ed4e66a66611e90dd7dc439a12c2ac8d2cbb2c32ec908e88e7f93c93ea182d2b0e45c305e29be0d8abb9e63a6aba03e72eec9b8d4f9974e33e0486e64ea370b2d1ac3b982fd9d524b9e5a56290c1a637a717304115bc90c38c1043482ba43ff23aea49c6342af16acc99089e487673d7c521abdc465dab8501ca518f04da23495d6d5", 0xb1}, {&(0x7f00000007c0)="f08430f18d081b053d88d7da726273087cfeb39d757267fe685d0839c2556a74709b26dc8444c36fec5220a66d8e0c0d347491b6329c268c838ae9184d70f2060533092d3f1e0dac86940fb987cb17eb874ce867e79c625c1f608831ff36df057eade552c85a7a1db3ae4a56d4994d6ae496d0ded6243f877389c36725ece51be621b8d70ca6c4da1aa227bca2609f", 0x8f}, {&(0x7f0000000880)="72fa6068b163d9d1e81fb2344b6ad9c3d82c7e791f7176d1ed0cc805b4a73e54ee43d60ef8f2ad611b31aa53727da9a4dea813875bd147170f0e03361bf9dfaf013342e5e50a2bf520ef190d2f3bbe9567ae376b1a7c2fb77adf95ffd9d87f62ad27ef3bde5747d6eaa2277c", 0x6c}], 0x6, &(0x7f00000009c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x0, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xffffff2a}, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x6, [0x9, 0xf203, 0x9, 0x1cdd, 0x7, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @private2}]}}}], 0xa8}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000140)={@private1, r5}, 0x14) 412.287426ms ago: executing program 4 (id=2817): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000180)={0xd8b, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x110) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x19) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2818): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0xa4aff47201bf5c0d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2f64, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001002abd7008000000000a00000008000000ffffffff"], 0x1c}}, 0xd0) io_submit(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x4, 0x0, 0xf7fe, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) kernel console output (not intermixed with test programs): link_rcv_msg+0x10/0x10 [ 597.088438][T14241] ? ref_tracker_free+0x693/0x840 [ 597.088467][T14241] ? __pfx_ref_tracker_free+0x10/0x10 [ 597.088504][T14241] netlink_rcv_skb+0x232/0x4b0 [ 597.088527][T14241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.088549][T14241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.088584][T14241] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.088604][T14241] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.088632][T14241] netlink_unicast+0x75c/0x8e0 [ 597.088663][T14241] netlink_sendmsg+0x813/0xb40 [ 597.088693][T14241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.088717][T14241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.088745][T14241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.088770][T14241] ____sys_sendmsg+0x972/0x9f0 [ 597.088791][T14241] ? __might_fault+0xaf/0x130 [ 597.088815][T14241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.088846][T14241] ? import_iovec+0x73/0xa0 [ 597.088868][T14241] ___sys_sendmsg+0x2a5/0x360 [ 597.088890][T14241] ? __lock_acquire+0x6b5/0x2cf0 [ 597.088919][T14241] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.088978][T14241] ? __fget_files+0x2a/0x420 [ 597.088996][T14241] ? __fget_files+0x3a0/0x420 [ 597.089023][T14241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.089050][T14241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.089084][T14241] ? __pfx_ksys_write+0x10/0x10 [ 597.089101][T14241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.089117][T14241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.089128][T14241] do_syscall_64+0x15f/0xf80 [ 597.089150][T14241] ? trace_irq_disable+0x3b/0x140 [ 597.089174][T14241] ? clear_bhb_loop+0x40/0x90 [ 597.089211][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.089230][T14241] RIP: 0033:0x7f682e59c819 [ 597.089244][T14241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.089253][T14241] RSP: 002b:00007f682f511028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.089270][T14241] RAX: ffffffffffffffda RBX: 00007f682e815fa0 RCX: 00007f682e59c819 [ 597.089278][T14241] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 597.089284][T14241] RBP: 00007f682f511090 R08: 0000000000000000 R09: 0000000000000000 [ 597.089293][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.089304][T14241] R13: 00007f682e816038 R14: 00007f682e815fa0 R15: 00007f682e93fa48 [ 597.089335][T14241] [ 597.495031][ T5944] gspca_ov534_9: reg_w failed -110 [ 597.538916][ T5916] hub 2-1:4.0: activate --> -90 [ 597.545113][ T1106] net_ratelimit: 37 callbacks suppressed [ 597.545126][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 597.580058][ T992] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.637529][ T992] usb 3-1: MIDIStreaming interface descriptor not found [ 597.666106][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 597.776921][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 597.823802][ T992] usb 3-1: USB disconnect, device number 80 [ 597.895831][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 597.921280][ T5944] gspca_ov534_9: Unknown sensor 0000 [ 597.921376][ T5944] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 597.942204][ T24] usb 2-1: USB disconnect, device number 84 [ 598.016356][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.144904][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.155010][ T5916] usb 2-1-port2: config error [ 598.274925][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.428274][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.545960][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.659355][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 598.914819][ T992] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 598.924049][ T5916] usb 5-1: USB disconnect, device number 112 [ 599.007151][T14260] syzkaller0: entered promiscuous mode [ 599.014480][T14260] syzkaller0: entered allmulticast mode [ 599.085111][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 599.095553][ T992] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 599.109343][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 599.151513][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 599.168243][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 599.192764][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 599.213379][ T992] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.232883][ T992] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.280813][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.518646][ T992] usb 2-1: usb_control_msg returned -71 [ 599.534951][ T992] usbtmc 2-1:16.0: can't read capabilities [ 599.559043][ T992] usb 2-1: USB disconnect, device number 85 [ 599.791439][T14272] syzkaller1: entered promiscuous mode [ 599.804284][T14272] syzkaller1: entered allmulticast mode [ 599.810348][ T5916] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 599.966265][ T5916] usb 4-1: not running at top speed; connect to a high speed hub [ 599.975178][ T5916] usb 4-1: config 14 has an invalid interface number: 53 but max is 0 [ 599.983452][ T5916] usb 4-1: config 14 has no interface number 0 [ 599.989857][ T5916] usb 4-1: config 14 interface 53 has no altsetting 0 [ 599.999874][ T5916] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=56.23 [ 600.009170][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.017375][ T5916] usb 4-1: Product: syz [ 600.021614][ T5916] usb 4-1: Manufacturer: syz [ 600.026453][ T5916] usb 4-1: SerialNumber: syz [ 600.154883][ T992] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 600.293257][ T5916] iowarrior 4-1:14.53: no interrupt-in endpoint found [ 600.321345][ T5916] usb 4-1: USB disconnect, device number 93 [ 600.335490][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 600.346707][ T992] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 600.356949][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.365448][ T992] usb 3-1: Product: syz [ 600.369879][ T992] usb 3-1: Manufacturer: syz [ 600.374560][ T992] usb 3-1: SerialNumber: syz [ 600.389180][ T992] usb 3-1: config 0 descriptor?? [ 600.396720][ T992] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 600.599590][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.608751][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.620664][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 600.656756][T14274] bond4: Invalid ad_actor_system MAC address. [ 600.663859][T14274] bond4: option ad_actor_system: invalid value (3303287) [ 600.674140][T14274] bond4 (unregistering): Released all slaves [ 600.692094][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.710514][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.776781][T14290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2427'. [ 600.945492][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.965513][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.075241][T10698] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 601.103206][T14298] fuse: Bad value for 'fd' [ 601.195059][ T992] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 601.244792][T10698] usb 5-1: Using ep0 maxpacket: 16 [ 601.255891][T10698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.267354][T10698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.286380][T10698] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 601.317134][T10698] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 601.346718][T10698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.371008][T10698] usb 5-1: config 0 descriptor?? [ 601.402165][ T5916] usb 3-1: USB disconnect, device number 81 [ 601.424491][ T5916] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 601.440052][ T5916] visor 3-1:0.0: device disconnected [ 601.821547][T14292] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 602.010840][T10698] usbhid 5-1:0.0: can't add hid device: -71 [ 602.033331][T10698] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 602.058152][T10698] usb 5-1: USB disconnect, device number 113 [ 602.115754][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 602.354989][T14310] syzkaller1: entered promiscuous mode [ 602.364281][T14310] syzkaller1: entered allmulticast mode [ 602.621849][T14318] xt_time: unknown flags 0x4 [ 602.625475][ T3527] net_ratelimit: 33 callbacks suppressed [ 602.625491][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 602.665154][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 602.691047][ T29] audit: type=1326 audit(1776714093.034:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.2.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0f99c819 code=0x7ffc0000 [ 602.720278][ T29] audit: type=1326 audit(1776714093.054:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.2.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fae0f99c819 code=0x7ffc0000 [ 602.743929][ T29] audit: type=1326 audit(1776714093.064:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.2.2439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae0f99c819 code=0x0 [ 602.746378][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 602.844834][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 602.851515][ T24] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 602.859940][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 602.871411][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 602.881566][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 602.881869][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 602.900502][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 602.910985][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.924305][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 602.933647][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.994940][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.105581][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.148017][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 603.156422][ T24] usbtmc 2-1:16.0: can't read capabilities [ 603.214938][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.324824][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.352954][T14308] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 603.365313][ T9] usb 2-1: USB disconnect, device number 86 [ 603.436116][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.545478][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 603.664897][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 604.244153][T14346] tipc: Failed to remove unknown binding: 66,0,0/0:3589368213/3589368214 [ 604.264883][ T24] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 604.279384][T14346] tipc: Failed to remove unknown binding: 66,0,0/0:3589368213/3589368214 [ 604.427715][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 604.440369][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 604.457781][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.481384][T14354] trusted_key: encrypted_key: insufficient parameters specified [ 604.514819][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.544103][ T24] usb 2-1: Product: syz [ 604.553331][ T24] usb 2-1: Manufacturer: syz [ 604.570064][ T24] usb 2-1: SerialNumber: syz [ 604.598608][ T24] usb 2-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 604.610882][ T24] usb 2-1: found format II with max.bitrate = 256, frame size=6 [ 604.623660][ T24] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 604.794820][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 604.825053][T14342] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2445'. [ 604.867801][ T24] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 604.887215][ T24] usb 2-1: found format II with max.bitrate = 0, frame size=2 [ 604.904405][ T24] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 604.956074][ T24] usb 2-1: USB disconnect, device number 87 [ 604.964850][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 604.986926][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.997660][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.009536][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.029735][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 605.039749][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 605.050144][ T9] usb 4-1: Product: syz [ 605.054310][ T9] usb 4-1: Manufacturer: syz [ 605.067887][ T9] hub 4-1:4.0: USB hub found [ 605.268337][ T9] hub 4-1:4.0: 2 ports detected [ 605.805824][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 605.965066][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 605.972152][ T24] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 605.980945][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 605.994129][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 606.012703][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 606.020201][T14377] netlink: 'syz.2.2459': attribute type 10 has an invalid length. [ 606.024561][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 606.035370][T14376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.042267][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.069923][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.079492][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.085590][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.098517][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.221578][T14379] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 606.231996][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.299900][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 606.306044][ T24] usbtmc 2-1:16.0: can't read capabilities [ 606.320879][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.331749][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.341622][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.350426][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.513327][T14369] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 606.526196][ T5944] usb 2-1: USB disconnect, device number 88 [ 606.559994][ T9] hub 4-1:4.0: activate --> -90 [ 606.954855][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 606.969271][T10698] usb 4-1: USB disconnect, device number 94 [ 607.114839][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 607.124194][T14389] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2464'. [ 607.136358][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 607.145348][ T24] usb 3-1: config 0 has no interface number 0 [ 607.162425][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 607.175889][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.194956][ T9] usb 4-1-port2: config error [ 607.200749][ T24] usb 3-1: Product: syz [ 607.205290][ T24] usb 3-1: Manufacturer: syz [ 607.214102][ T24] usb 3-1: SerialNumber: syz [ 607.223179][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2465'. [ 607.237881][ T24] usb 3-1: config 0 descriptor?? [ 607.449790][T14381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2461'. [ 607.470536][T14395] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2466'. [ 607.487325][ T24] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 607.514306][ T24] usb 3-1: USB disconnect, device number 82 [ 607.664820][ T1106] net_ratelimit: 36 callbacks suppressed [ 607.664839][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 607.804881][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 607.844851][ T5933] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 607.924838][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.004797][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 608.039290][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.056912][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.099706][ T5933] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 608.129375][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.149337][ T5933] usb 2-1: Product: syz [ 608.162200][ T5933] usb 2-1: Manufacturer: syz [ 608.169149][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 608.185243][ T5933] usb 2-1: SerialNumber: syz [ 608.185310][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.200342][ T5933] usb 2-1: config 0 descriptor?? [ 608.253366][ T5933] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 608.524836][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.647150][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.784829][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 608.875686][T14416] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 608.924873][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 609.265029][ T1106] usb 2-1: Failed to submit usb control message: -110 [ 609.275407][ T1106] usb 2-1: unable to send the bmi data to the device: -110 [ 609.283977][ T1106] usb 2-1: unable to get target info from device [ 609.295424][ T1106] usb 2-1: could not get target info (-110) [ 609.306044][ T1106] usb 2-1: could not probe fw (-110) [ 609.874925][ T5933] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 610.034784][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 610.048862][ T5933] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 610.073035][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 610.092528][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 610.106435][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 610.120563][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 610.130785][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.147695][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.162413][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.383134][ T5933] usb 3-1: GET_CAPABILITIES returned 0 [ 610.391937][ T5933] usbtmc 3-1:16.0: can't read capabilities [ 610.570681][ T5933] usb 2-1: USB disconnect, device number 89 [ 610.591329][T14419] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 610.655470][ T9] usb 3-1: USB disconnect, device number 83 [ 610.965672][T14435] libceph: secret too big 289 [ 610.994184][T14435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 611.174837][ T5933] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 611.315087][ T5933] usb 2-1: device descriptor read/64, error -71 [ 611.346768][ T5916] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 611.504805][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 611.524913][ T5916] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 611.542495][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 611.554870][ T5933] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 611.576358][ T5916] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 611.596214][ T5916] usb 4-1: config 0 interface 0 has no altsetting 1 [ 611.622084][ T5916] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 611.639485][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 611.652224][ T5916] usb 4-1: SerialNumber: syz [ 611.667015][ T5916] usb 4-1: config 0 descriptor?? [ 611.679467][ T5916] usb-storage 4-1:0.0: USB Mass Storage device detected [ 611.709337][ T5916] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 611.717329][ T5933] usb 2-1: device descriptor read/64, error -71 [ 611.825066][ T5933] usb usb2-port1: attempt power cycle [ 611.880915][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 611.969457][ T5916] usb 4-1: USB disconnect, device number 95 [ 612.164811][ T5933] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 612.195300][ T5933] usb 2-1: device descriptor read/8, error -71 [ 612.445856][ T5933] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 612.465213][ T5933] usb 2-1: device descriptor read/8, error -71 [ 612.579265][ T5933] usb usb2-port1: unable to enumerate USB device [ 612.735507][ T35] net_ratelimit: 35 callbacks suppressed [ 612.735522][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 612.864972][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 612.984841][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.116211][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.224909][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.284854][ T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 613.346931][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.464840][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 613.464849][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.501488][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.524580][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.548838][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.563945][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.581692][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.594169][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.630515][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.695104][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.804859][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 613.859847][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 613.866554][ T9] usbtmc 5-1:16.0: can't read capabilities [ 613.959490][T14468] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2490'. [ 614.079649][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.089079][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.098189][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.102973][T14470] syzkaller0: entered promiscuous mode [ 614.110537][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.116458][T14470] syzkaller0: entered allmulticast mode [ 614.123049][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.136568][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.145665][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.154754][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.170255][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.179355][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.188438][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.197511][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.206976][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.216054][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.227027][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.236133][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 614.245226][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 614.273471][T14476] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 614.792149][ T5930] usb 5-1: USB disconnect, device number 114 [ 615.280001][T14491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.604954][T10698] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 615.768157][T10698] usb 3-1: Using ep0 maxpacket: 8 [ 615.776282][T10698] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 615.801546][T10698] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.825149][T10698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.835890][T10698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.856026][T10698] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.892700][T10698] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.903757][T10698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.170815][T10698] usb 3-1: usb_control_msg returned -32 [ 616.204635][T10698] usbtmc 3-1:16.0: can't read capabilities [ 617.420961][ T5930] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 617.588630][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 617.607481][ T5930] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.619030][ T5930] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.631092][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 617.640294][ T5930] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 617.648827][ T5930] usb 4-1: Product: syz [ 617.653038][ T5930] usb 4-1: Manufacturer: syz [ 617.679332][ T5930] hub 4-1:4.0: USB hub found [ 617.745047][ T1106] net_ratelimit: 2 callbacks suppressed [ 617.745069][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 617.766987][T10698] usb 3-1: USB disconnect, device number 84 [ 617.896474][T14510] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 617.900928][ T5930] hub 4-1:4.0: 2 ports detected [ 618.046859][T14510] bond4: entered promiscuous mode [ 618.052445][T14510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.104003][T14515] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 618.138601][T14515] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 618.168103][T14515] bond4: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 618.244828][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.355134][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.467482][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.585004][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.704903][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.714860][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.740071][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.794956][T10698] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 618.825354][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.947216][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 618.954758][T10698] usb 3-1: device descriptor read/64, error -71 [ 618.984924][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.015438][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.041120][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.065055][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 619.081399][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.175135][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 619.224848][T10698] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 619.328388][ T5930] hub 4-1:4.0: activate --> -90 [ 619.364826][T10698] usb 3-1: device descriptor read/64, error -71 [ 619.502934][T10698] usb usb3-port1: attempt power cycle [ 619.738584][ T5930] usb 4-1: USB disconnect, device number 96 [ 619.864906][T10698] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 619.913697][T10698] usb 3-1: device descriptor read/8, error -71 [ 619.954878][ T807] usb 4-1-port2: config error [ 620.164845][T10698] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 620.213723][T10698] usb 3-1: device descriptor read/8, error -71 [ 620.337792][T10698] usb usb3-port1: unable to enumerate USB device [ 620.512776][T14549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.874864][T14550] overlayfs: missing 'lowerdir' [ 621.094855][ T992] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 621.267837][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 621.290775][ T992] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 621.315826][ T992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.339022][ T992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.369205][ T992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.389519][ T992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.418161][ T992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 621.442116][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.704338][ T992] usb 5-1: usb_control_msg returned -32 [ 621.720420][ T992] usbtmc 5-1:16.0: can't read capabilities [ 621.767904][ T992] usb 5-1: USB disconnect, device number 115 [ 622.044813][ T807] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 622.183554][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2519'. [ 622.222365][T14573] veth1: entered promiscuous mode [ 622.233413][ T807] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 622.248470][T14573] veth1: left promiscuous mode [ 622.259715][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.284070][ T807] usb 3-1: config 0 descriptor?? [ 622.300205][ T807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 622.443669][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 622.816788][T12386] net_ratelimit: 30 callbacks suppressed [ 622.816915][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 622.872855][T14584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.975236][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.102070][ T807] gp8psk: usb in 128 operation failed. [ 623.114911][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.191424][ T807] gp8psk: usb in 137 operation failed. [ 623.215503][ T807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 623.238285][T14584] overlayfs: missing 'lowerdir' [ 623.254641][ T807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 623.274948][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.339945][ T807] usb 3-1: USB disconnect, device number 89 [ 623.444835][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.527463][T14589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.589348][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.716657][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.842873][T14592] overlayfs: missing 'lowerdir' [ 623.848035][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 623.975004][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 624.114893][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 624.228448][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.236374][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.265093][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 625.435281][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 625.451505][ T9] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 625.472780][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 625.488881][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.557498][T14626] QAT: Invalid ioctl 1075883590 [ 625.600072][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2535'. [ 625.609980][T14626] QAT: Invalid ioctl 1075883590 [ 625.615293][T14626] QAT: Invalid ioctl 1075883590 [ 625.620287][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2535'. [ 625.629691][T14626] QAT: Invalid ioctl 1075883590 [ 625.651378][T14626] QAT: Invalid ioctl 1075883590 [ 625.661522][T14626] QAT: Invalid ioctl 1075883590 [ 625.684473][T14626] QAT: Invalid ioctl 1075883590 [ 625.689956][T14626] QAT: Invalid ioctl 1075883590 [ 625.706476][T14626] QAT: Invalid ioctl 1075883590 [ 625.714481][T14626] QAT: Invalid ioctl 1075883590 [ 626.572422][T14642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.666748][T14643] overlayfs: missing 'lowerdir' [ 627.845100][ T3527] net_ratelimit: 32 callbacks suppressed [ 627.845119][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 627.934815][ T5933] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 627.976181][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 628.062376][ T807] usb 4-1: USB disconnect, device number 97 [ 628.095719][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 628.107618][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 628.129596][ T5933] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 628.156740][ T5933] usb 2-1: config 0 has no interface number 0 [ 628.181773][ T5933] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 628.206404][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.234940][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 628.251508][ T5933] usb 2-1: Product: syz [ 628.266336][ T5933] usb 2-1: Manufacturer: syz [ 628.279228][ T5933] usb 2-1: SerialNumber: syz [ 628.308631][ T5933] usb 2-1: config 0 descriptor?? [ 628.569282][T14655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2544'. [ 628.602942][ T5933] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 628.624093][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031aac400: rx timeout, send abort [ 628.634880][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 628.645773][ T5933] usb 2-1: USB disconnect, device number 94 [ 628.787761][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 628.915303][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 629.054953][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 629.124224][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880359ca000: rx timeout, send abort [ 629.132794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031aac400: abort rx timeout. Force session deactivation [ 629.187678][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 629.263355][T14677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 629.274873][T14677] openvswitch: netlink: Flow key attr not present in new flow. [ 629.348110][ T807] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 629.389867][T14679] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2549'. [ 629.526358][ T807] usb 4-1: config 0 has no interfaces? [ 629.537279][ T807] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 629.551615][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.570529][ T807] usb 4-1: Product: syz [ 629.580735][ T807] usb 4-1: Manufacturer: syz [ 629.596285][ T807] usb 4-1: SerialNumber: syz [ 629.612385][ T807] usb 4-1: config 0 descriptor?? [ 629.632478][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880359ca000: abort rx timeout. Force session deactivation [ 629.661615][T14683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.705717][ T5933] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 629.858311][T14684] overlayfs: missing 'lowerdir' [ 629.864869][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 629.886003][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.962254][ T5933] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 630.001379][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.030404][ T5933] usb 3-1: Product: syz [ 630.044841][ T5933] usb 3-1: Manufacturer: syz [ 630.044891][T10698] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 630.060489][ T5933] usb 3-1: SerialNumber: syz [ 630.084980][ T5933] usb 3-1: config 0 descriptor?? [ 630.137691][ T5933] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 630.244822][T10698] usb 5-1: Using ep0 maxpacket: 32 [ 630.261469][T10698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 630.330390][T10698] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 630.380534][T10698] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 630.405158][T10698] usb 5-1: Product: syz [ 630.427272][T10698] usb 5-1: Manufacturer: syz [ 630.443247][T10698] usb 5-1: SerialNumber: syz [ 630.467910][T10698] usb 5-1: config 0 descriptor?? [ 630.483862][T14686] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 630.532786][T10698] hub 5-1:0.0: bad descriptor, ignoring hub [ 630.551925][T10698] hub 5-1:0.0: probe with driver hub failed with error -5 [ 631.292358][ T5933] usb 4-1: USB disconnect, device number 98 [ 631.306034][ T35] usb 3-1: Failed to submit usb control message: -110 [ 631.434073][ T35] usb 3-1: unable to send the bmi data to the device: -110 [ 631.469984][ T35] usb 3-1: unable to get target info from device [ 631.502895][ T35] usb 3-1: could not get target info (-110) [ 631.546996][T14686] usb 5-1: reset high-speed USB device number 116 using dummy_hcd [ 631.600640][ T35] usb 3-1: could not probe fw (-110) [ 631.629871][T14686] usb 5-1: device reset changed ep0 maxpacket size! [ 631.764806][ T5944] usb 5-1: USB disconnect, device number 116 [ 631.975048][ T5944] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 632.134945][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 632.188575][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.248729][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.316822][T14707] netlink: 'syz.0.2558': attribute type 9 has an invalid length. [ 632.387053][T14686] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2552'. [ 632.598850][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 632.632046][ T5944] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 632.655850][ T5944] usb 5-1: can't read configurations, error -71 [ 632.846089][T14716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2561'. [ 632.864373][T14716] net_ratelimit: 33 callbacks suppressed [ 632.864386][T14716] openvswitch: netlink: Flow key attr not present in new flow. [ 632.925080][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 632.965452][ T807] usb 3-1: USB disconnect, device number 90 [ 633.049226][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.113661][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 633.211605][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.335474][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.454956][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.532684][T14734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.545269][T14733] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2566'. [ 633.564876][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.684936][ T807] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 633.695117][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.804875][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 633.856702][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.867251][ T807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.880316][ T807] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 633.908338][ T807] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 633.944012][T14736] overlayfs: missing 'lowerdir' [ 633.949246][ T807] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 633.991053][ T807] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.029338][ T807] usb 3-1: config 1 interface 1 has no altsetting 0 [ 634.051248][ T807] usb 3-1: string descriptor 0 read error: -22 [ 634.061050][ T807] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 634.093733][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.385165][ T5933] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 634.565012][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 634.641526][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.765890][ T5933] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 634.817484][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.848057][ T5933] usb 2-1: Product: syz [ 634.863630][ T807] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 634.881688][ T5933] usb 2-1: Manufacturer: syz [ 634.904109][ T5933] usb 2-1: SerialNumber: syz [ 634.931449][ T5933] usb 2-1: config 0 descriptor?? [ 635.013992][ T5933] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 636.066788][ T1106] usb 2-1: Failed to submit usb control message: -110 [ 636.076202][ T1106] usb 2-1: unable to send the bmi data to the device: -110 [ 636.100871][ T1106] usb 2-1: unable to get target info from device [ 636.141407][ T1106] usb 2-1: could not get target info (-110) [ 636.157027][ T1106] usb 2-1: could not probe fw (-110) [ 636.396006][ T5944] usb 3-1: USB disconnect, device number 91 [ 636.558423][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 636.912069][ T807] usb 2-1: USB disconnect, device number 95 [ 637.013918][T14769] mac80211_hwsim hwsim24 wlan1: Caught tx_queue_len zero misconfig [ 637.050425][T14773] syzkaller1: entered promiscuous mode [ 637.056461][T14773] syzkaller1: entered allmulticast mode [ 637.094821][ T5933] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 637.198417][T14778] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 637.218476][T14778] netlink: 'syz.4.2581': attribute type 5 has an invalid length. [ 637.228236][T14778] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2581'. [ 637.286465][T14775] fuse: Bad value for 'fd' [ 637.294931][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 637.310266][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.324955][ T5933] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.343686][ T5933] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 637.353520][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 637.363596][ T5933] usb 4-1: Product: syz [ 637.368957][ T5933] usb 4-1: Manufacturer: syz [ 637.373704][ T5933] usb 4-1: SerialNumber: syz [ 637.413598][T14784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2582'. [ 637.432461][ T5933] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input52 [ 637.480526][ T29] audit: type=1400 audit(1776714127.824:1397): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=14783 comm="syz.4.2582" [ 637.501131][T14784] netlink: 'syz.4.2582': attribute type 1 has an invalid length. [ 637.733885][ T5933] usb 4-1: USB disconnect, device number 99 [ 637.739930][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 637.776956][ T5933] appletouch 4-1:1.0: input: appletouch disconnected [ 637.906145][T12386] net_ratelimit: 41 callbacks suppressed [ 637.906168][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.044919][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.177686][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.315004][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.383982][T14798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2587'. [ 638.394843][T14798] openvswitch: netlink: Flow key attr not present in new flow. [ 638.445045][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.535000][ T992] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 638.547139][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 638.580929][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.706654][ T992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.715479][T12386] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.735909][ T992] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 638.758824][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.783301][ T992] usb 2-1: config 0 descriptor?? [ 638.872602][T14804] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 638.891001][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.906572][T14803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.004126][ T807] usb 2-1: USB disconnect, device number 96 [ 639.454900][ T807] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 639.627194][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.655109][ T807] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 639.683966][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.708961][ T807] usb 2-1: config 0 descriptor?? [ 639.937081][T14796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.946044][T14811] input: syz1 as /devices/virtual/input/input53 [ 639.957339][T14796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.983673][ T5933] usb 2-1: USB disconnect, device number 97 [ 640.155440][ T807] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 640.364874][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 640.393344][ T807] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.409497][ T807] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.423660][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.431091][ T807] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 640.446009][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.458882][ T807] usb 5-1: config 0 descriptor?? [ 640.534874][ T992] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 640.682656][ T807] mcp2200 0003:04D8:00DF.0016: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 640.697264][ T992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.710451][ T992] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.720018][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.738780][ T992] usb 4-1: config 0 descriptor?? [ 640.744872][T10698] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 640.824840][ T5944] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 640.873566][ T807] usb 5-1: USB disconnect, device number 119 [ 640.905377][T10698] usb 3-1: Using ep0 maxpacket: 16 [ 640.913228][T10698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.928736][T10698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.939243][T10698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.952538][T10698] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 640.958888][ T5933] usb 4-1: USB disconnect, device number 100 [ 640.963692][T10698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.992094][T10698] usb 3-1: config 0 descriptor?? [ 640.997245][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 641.004915][ T5944] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 641.008661][T10698] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 641.028463][ T5944] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.038808][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.054084][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.065725][ T5944] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.066914][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.080845][ T5944] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.096001][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.120479][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.133081][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.136397][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.154129][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.180304][ T5860] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.193867][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.208875][T14816] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.220566][ T5930] usb 3-1: USB disconnect, device number 92 [ 641.230100][ T5199] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 641.382635][ T5944] usb 2-1: usb_control_msg returned -32 [ 641.404494][ T5944] usbtmc 2-1:16.0: can't read capabilities [ 641.414986][ T5933] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 641.491176][ T5930] usb 2-1: USB disconnect, device number 98 [ 641.604820][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 641.614578][ T5933] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 641.624571][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.633288][ T5933] usb 4-1: Product: syz [ 641.637997][ T5933] usb 4-1: Manufacturer: syz [ 641.643447][ T5933] usb 4-1: SerialNumber: syz [ 641.652951][ T5933] usb 4-1: config 0 descriptor?? [ 641.663864][ T5933] asix 4-1:0.0: probe with driver asix failed with error -22 [ 641.795252][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2599'. [ 641.851396][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2598'. [ 641.923453][ T5944] usb 4-1: USB disconnect, device number 101 [ 642.067182][T14841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.385706][T14855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.547524][T14856] overlayfs: missing 'lowerdir' [ 642.596491][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2605'. [ 642.738590][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 642.956705][ T1106] net_ratelimit: 39 callbacks suppressed [ 642.956721][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.086545][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.178616][ T5933] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 643.204891][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.324866][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.354908][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 643.372517][ T5933] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 643.397453][ T5933] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 643.438125][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 643.444963][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.474060][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.489127][ T5933] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.504096][ T5933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 643.513791][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.594955][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.724850][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.747037][ T5933] usb 2-1: usb_control_msg returned -32 [ 643.771550][ T5933] usbtmc 2-1:16.0: can't read capabilities [ 643.865203][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 643.904964][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 643.946118][ T5933] usb 2-1: USB disconnect, device number 99 [ 644.024982][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.256359][T14890] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2614'. [ 644.353560][T14900] input: syz1 as /devices/virtual/input/input55 [ 644.615849][T10698] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 644.688854][T14910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.775904][T10698] usb 2-1: Using ep0 maxpacket: 8 [ 644.789219][T10698] usb 2-1: config index 0 descriptor too short (expected 60964, got 36) [ 644.808521][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.834549][T10698] usb 2-1: config 0 has no interfaces? [ 644.846434][T10698] usb 2-1: config index 1 descriptor too short (expected 60964, got 36) [ 644.864245][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.910529][T10698] usb 2-1: config 0 has no interfaces? [ 644.961672][T10698] usb 2-1: config index 2 descriptor too short (expected 60964, got 36) [ 644.990189][T14910] overlayfs: missing 'lowerdir' [ 645.027082][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.038873][T10698] usb 2-1: config 0 has no interfaces? [ 645.064419][T10698] usb 2-1: config index 3 descriptor too short (expected 60964, got 36) [ 645.080375][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.101055][T10698] usb 2-1: config 0 has no interfaces? [ 645.114416][T10698] usb 2-1: config index 4 descriptor too short (expected 60964, got 36) [ 645.133903][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.176971][T10698] usb 2-1: config 0 has no interfaces? [ 645.195978][T10698] usb 2-1: config index 5 descriptor too short (expected 60964, got 36) [ 645.221731][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.250897][T10698] usb 2-1: config 0 has no interfaces? [ 645.266933][T10698] usb 2-1: config index 6 descriptor too short (expected 60964, got 36) [ 645.293955][T10698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.318661][T10698] usb 2-1: config 0 has no interfaces? [ 645.342544][T10698] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 645.369776][T10698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.392450][T10698] usb 2-1: Product: syz [ 645.405982][T10698] usb 2-1: Manufacturer: syz [ 645.422647][T10698] usb 2-1: SerialNumber: syz [ 645.462148][T10698] usb 2-1: config 0 descriptor?? [ 645.762395][T10698] usb 2-1: USB disconnect, device number 100 [ 645.786427][ T5930] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 645.944809][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 645.959354][ T5930] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 645.973516][ T5930] usb 4-1: config 0 has no interface number 0 [ 645.993845][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 646.014590][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.030886][ T5930] usb 4-1: Product: syz [ 646.039913][ T5930] usb 4-1: Manufacturer: syz [ 646.051578][ T5930] usb 4-1: SerialNumber: syz [ 646.065725][ T5930] usb 4-1: config 0 descriptor?? [ 646.280822][T14921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2625'. [ 646.308066][ T5930] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 646.353312][ T5930] usb 4-1: USB disconnect, device number 102 [ 647.525625][T10698] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 647.706081][T10698] usb 4-1: Using ep0 maxpacket: 32 [ 647.726107][T10698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.766178][T10698] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.809682][T10698] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 647.826845][T10698] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 647.845851][T10698] usb 4-1: Product: syz [ 647.861356][T10698] usb 4-1: Manufacturer: syz [ 647.883423][T10698] usb 4-1: SerialNumber: syz [ 647.953764][T10698] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input56 [ 647.967955][ T1120] net_ratelimit: 35 callbacks suppressed [ 647.967970][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.146540][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.210393][T10698] usb 4-1: USB disconnect, device number 103 [ 648.284787][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.312469][T10698] appletouch 4-1:1.0: input: appletouch disconnected [ 648.414870][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.555104][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 648.562147][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.586972][ T29] audit: type=1804 audit(1776714138.924:1398): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2642" name="/newroot/534/file1" dev="tmpfs" ino=2777 res=1 errno=0 [ 648.686568][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.745067][ T5930] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 648.824911][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.917802][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 648.932275][ T5930] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 648.949063][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.968926][ T5930] usb 2-1: config 0 has no interface number 0 [ 648.983052][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 648.998352][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.009775][ T5930] usb 2-1: Product: syz [ 649.015192][ T5930] usb 2-1: Manufacturer: syz [ 649.020037][ T5930] usb 2-1: SerialNumber: syz [ 649.036864][ T5930] usb 2-1: config 0 descriptor?? [ 649.084863][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.141219][T14993] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2647'. [ 649.248868][T14975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2641'. [ 649.287225][ T5930] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 649.309031][ T29] audit: type=1800 audit(1776714139.654:1399): pid=15000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2647" name="bus" dev="tmpfs" ino=2497 res=0 errno=0 [ 649.339828][ T5930] usb 2-1: USB disconnect, device number 101 [ 649.864849][T10698] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 650.047859][T10698] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 650.064347][T10698] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 650.073834][T10698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.090329][T10698] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 650.135075][ T992] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 650.295232][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 650.303565][ T992] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 650.313514][ T992] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.341077][ T992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.373644][ T992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.387565][ T992] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.405377][ T992] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.419188][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 650.428386][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.716887][ T992] usb 3-1: usb_control_msg returned -32 [ 650.722717][ T992] usbtmc 3-1:16.0: can't read capabilities [ 650.937783][ T992] usb 3-1: USB disconnect, device number 93 [ 651.019708][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.049998][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.305047][ T5944] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 651.468398][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.490845][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 651.521506][ T5944] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 651.531133][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.548623][ T5944] usb 2-1: config 0 descriptor?? [ 651.566668][T15030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.705679][T10698] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 651.719615][T10698] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 651.726674][T10698] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 651.735511][T10698] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 651.770479][ T5944] ath6kl: Failed to submit usb control message: -71 [ 651.784472][ T5944] ath6kl: unable to send the bmi data to the device: -71 [ 651.792292][ T5944] ath6kl: Unable to send get target info: -71 [ 651.804829][ T5944] ath6kl: Failed to init ath6kl core: -71 [ 651.820354][ T5944] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 651.865512][ T5944] usb 2-1: USB disconnect, device number 102 [ 652.016006][T15039] syzkaller1: entered promiscuous mode [ 652.021599][T15039] syzkaller1: entered allmulticast mode [ 652.324812][ T5930] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 652.474863][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 652.497786][ T5930] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 652.519228][ T5930] usb 3-1: config 0 has no interface number 0 [ 652.541508][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 652.561674][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.586860][ T5930] usb 3-1: Product: syz [ 652.600542][ T5930] usb 3-1: Manufacturer: syz [ 652.612722][ T5930] usb 3-1: SerialNumber: syz [ 652.645491][ T5930] usb 3-1: config 0 descriptor?? [ 652.670201][ T807] usb 5-1: USB disconnect, device number 120 [ 652.869467][T15041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2663'. [ 652.900830][ T5930] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 652.947079][ T5930] usb 3-1: USB disconnect, device number 94 [ 652.989334][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 653.004934][ T35] net_ratelimit: 38 callbacks suppressed [ 653.004954][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.154866][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.264855][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.294853][ T5944] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 653.375270][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.465148][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 653.492960][ T5944] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 653.494890][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.538690][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.598168][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 653.646097][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.654915][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.694391][ T5944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.769680][ T5944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 653.790020][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 653.804475][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.822418][T15076] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.935759][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 654.064901][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 654.165065][ T5944] usb 5-1: usb_control_msg returned -32 [ 654.177156][ T5944] usbtmc 5-1:16.0: can't read capabilities [ 654.386579][ T5944] usb 5-1: USB disconnect, device number 121 [ 655.338581][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 655.415319][ T5944] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 655.586383][ T5944] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 655.638593][ T5944] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 655.671107][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.704559][ T5944] usb 3-1: Product: syz [ 655.724298][ T5944] usb 3-1: Manufacturer: syz [ 655.746841][ T5944] usb 3-1: SerialNumber: syz [ 656.111874][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 656.327707][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.427537][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 656.460894][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 656.508456][ T5944] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 656.608182][ T5944] usb 3-1: USB disconnect, device number 95 [ 656.875021][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'. [ 656.939801][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 656.953564][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 656.980386][T15114] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 656.994495][T15114] ip6gretap0: entered promiscuous mode [ 657.177501][ T1106] bond0 (unregistering): Released all slaves [ 657.195689][T15120] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 657.203669][T15120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2685'. [ 657.394866][ T5944] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 657.535127][ T5901] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 657.544867][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 657.552205][ T5944] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 657.561021][ T5944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.571247][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.581437][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.592003][ T5944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.607036][ T5944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 657.617532][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.624868][ T5916] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 657.687228][ T5901] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 657.696148][ T5901] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 657.705138][ T5901] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 657.716180][ T5901] usb 2-1: config 220 has no interface number 2 [ 657.722561][ T5901] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 657.736015][ T5901] usb 2-1: config 220 interface 0 has no altsetting 0 [ 657.742846][ T5901] usb 2-1: config 220 interface 76 has no altsetting 0 [ 657.751303][ T5901] usb 2-1: config 220 interface 1 has no altsetting 0 [ 657.761142][ T5901] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 657.770470][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.778643][ T5901] usb 2-1: Product: syz [ 657.782932][ T5901] usb 2-1: Manufacturer: syz [ 657.787818][ T5901] usb 2-1: SerialNumber: syz [ 657.794970][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 657.801895][ T5916] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 657.810670][ T5916] usb 5-1: config 0 has no interface number 0 [ 657.817743][ T5916] usb 5-1: config 0 interface 184 has no altsetting 0 [ 657.831790][ T5916] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 657.842215][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.851847][ T5916] usb 5-1: Product: syz [ 657.857020][ T5916] usb 5-1: Manufacturer: syz [ 657.862040][ T5916] usb 5-1: SerialNumber: syz [ 657.871226][ T5916] usb 5-1: config 0 descriptor?? [ 657.922245][ T5944] usb 3-1: usb_control_msg returned -32 [ 657.928278][ T5944] usbtmc 3-1:16.0: can't read capabilities [ 658.094956][ T3527] net_ratelimit: 33 callbacks suppressed [ 658.094977][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.131977][ T5944] usb 3-1: USB disconnect, device number 96 [ 658.214906][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.324822][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.444915][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.491069][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 658.514434][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 658.554877][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.588833][ T5901] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 658.598426][ T5901] uvcvideo 2-1:220.0: No valid video chain found. [ 658.605033][ T5901] usb 2-1: selecting invalid altsetting 0 [ 658.632737][ T5901] usb 2-1: selecting invalid altsetting 0 [ 658.639696][ T5901] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 658.664199][ T5901] usb 2-1: USB disconnect, device number 103 [ 658.670546][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.753293][T15144] FAULT_INJECTION: forcing a failure. [ 658.753293][T15144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.767796][ T992] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 658.775578][T15144] CPU: 0 UID: 0 PID: 15144 Comm: syz.1.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.775607][T15144] Tainted: [L]=SOFTLOCKUP [ 658.775614][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.775626][T15144] Call Trace: [ 658.775634][T15144] [ 658.775643][T15144] dump_stack_lvl+0xe8/0x150 [ 658.775674][T15144] should_fail_ex+0x412/0x560 [ 658.775693][T15144] _copy_from_iter+0x1d3/0x1670 [ 658.775710][T15144] ? rcu_is_watching+0x15/0xb0 [ 658.775724][T15144] ? __pfx__copy_from_iter+0x10/0x10 [ 658.775754][T15144] ? netlink_sendmsg+0x650/0xb40 [ 658.775776][T15144] ? skb_put+0x11b/0x210 [ 658.775801][T15144] netlink_sendmsg+0x6c0/0xb40 [ 658.775827][T15144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.775841][T15144] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.775857][T15144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.775872][T15144] ____sys_sendmsg+0x972/0x9f0 [ 658.775889][T15144] ? __might_fault+0xaf/0x130 [ 658.775916][T15144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.775949][T15144] ? import_iovec+0x73/0xa0 [ 658.775971][T15144] ___sys_sendmsg+0x2a5/0x360 [ 658.775985][T15144] ? __lock_acquire+0x6b5/0x2cf0 [ 658.776003][T15144] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.776032][T15144] ? __fget_files+0x2a/0x420 [ 658.776049][T15144] ? __fget_files+0x3a0/0x420 [ 658.776078][T15144] __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.776104][T15144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.776133][T15144] ? __pfx_ksys_write+0x10/0x10 [ 658.776150][T15144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.776161][T15144] do_syscall_64+0x15f/0xf80 [ 658.776177][T15144] ? trace_irq_disable+0x3b/0x140 [ 658.776195][T15144] ? clear_bhb_loop+0x40/0x90 [ 658.776217][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.776237][T15144] RIP: 0033:0x7fd8cbb9c819 [ 658.776256][T15144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.776273][T15144] RSP: 002b:00007fd8cc9aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.776289][T15144] RAX: ffffffffffffffda RBX: 00007fd8cbe15fa0 RCX: 00007fd8cbb9c819 [ 658.776296][T15144] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 658.776303][T15144] RBP: 00007fd8cc9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 658.776310][T15144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.776316][T15144] R13: 00007fd8cbe16038 R14: 00007fd8cbe15fa0 R15: 00007fd8cbf3fa48 [ 658.776332][T15144] [ 658.805048][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.925785][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 658.937010][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.937048][ T992] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 658.939589][ T992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.939618][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.939638][ T992] usb 4-1: Product: syz [ 658.939653][ T992] usb 4-1: Manufacturer: syz [ 658.939668][ T992] usb 4-1: SerialNumber: syz [ 659.048456][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 659.152251][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.152680][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.156098][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 659.156891][ T992] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 659.172031][ T992] usb 4-1: USB disconnect, device number 104 [ 659.496579][T15157] FAULT_INJECTION: forcing a failure. [ 659.496579][T15157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.522480][T15157] CPU: 1 UID: 0 PID: 15157 Comm: syz.0.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.522501][T15157] Tainted: [L]=SOFTLOCKUP [ 659.522505][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 659.522514][T15157] Call Trace: [ 659.522519][T15157] [ 659.522524][T15157] dump_stack_lvl+0xe8/0x150 [ 659.522549][T15157] should_fail_ex+0x412/0x560 [ 659.522567][T15157] _copy_to_user+0x31/0xb0 [ 659.522579][T15157] simple_read_from_buffer+0xe1/0x170 [ 659.522593][T15157] proc_fail_nth_read+0x1bb/0x230 [ 659.522606][T15157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.522618][T15157] ? rw_verify_area+0x2a6/0x4d0 [ 659.522631][T15157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.522642][T15157] vfs_read+0x20c/0xa70 [ 659.522657][T15157] ? __pfx___mutex_lock+0x10/0x10 [ 659.522668][T15157] ? __pfx_vfs_read+0x10/0x10 [ 659.522681][T15157] ? __fget_files+0x2a/0x420 [ 659.522695][T15157] ? __fget_files+0x3a0/0x420 [ 659.522706][T15157] ? __fget_files+0x2a/0x420 [ 659.522720][T15157] ksys_read+0x150/0x270 [ 659.522733][T15157] ? __pfx_ksys_read+0x10/0x10 [ 659.522749][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.522766][T15157] do_syscall_64+0x15f/0xf80 [ 659.522782][T15157] ? clear_bhb_loop+0x40/0x90 [ 659.522795][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.522805][T15157] RIP: 0033:0x7f37eab5d04e [ 659.522816][T15157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 659.522825][T15157] RSP: 002b:00007f37e8df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.522838][T15157] RAX: ffffffffffffffda RBX: 00007f37e8df66c0 RCX: 00007f37eab5d04e [ 659.522846][T15157] RDX: 000000000000000f RSI: 00007f37e8df60a0 RDI: 0000000000000005 [ 659.522853][T15157] RBP: 00007f37e8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 659.522859][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.522866][T15157] R13: 00007f37eae16038 R14: 00007f37eae15fa0 R15: 00007f37eaf3fa48 [ 659.522882][T15157] [ 659.797314][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 659.807177][T15161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.832959][T15161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.108343][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 660.123820][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 660.135729][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 660.146174][ T5916] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 660.158394][ T5916] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 660.174141][ T5916] usb 5-1: USB disconnect, device number 122 [ 660.736692][ T5916] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 660.889318][T15171] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 660.896117][T15171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.905141][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 660.914392][ T5916] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 660.923756][T15171] vhci_hcd vhci_hcd.0: Device attached [ 660.931369][ T5916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.941516][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.953480][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.968014][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.981230][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.990331][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.136199][T15176] x_tables: duplicate underflow at hook 4 [ 661.165125][ T992] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 661.165261][ T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 661.193213][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 661.270763][ T5916] usb 2-1: usb_control_msg returned -32 [ 661.276792][ T5916] usbtmc 2-1:16.0: can't read capabilities [ 661.336263][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 661.345853][ T992] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 661.364820][ T992] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 661.376793][ T992] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 661.388110][ T992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 661.404046][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.490295][ T992] usb 2-1: USB disconnect, device number 104 [ 661.645952][ T807] usb 5-1: USB disconnect, device number 123 [ 661.652070][T15172] usb 41-1: recv xbuf, 0 [ 661.675810][T12386] vhci_hcd vhci_hcd.4: stop threads [ 661.682213][T12386] vhci_hcd vhci_hcd.4: release socket [ 661.691349][T12386] vhci_hcd vhci_hcd.4: disconnect device [ 661.724875][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 661.747184][T15192] bridge_slave_0: left allmulticast mode [ 661.752960][T15192] bridge_slave_0: left promiscuous mode [ 661.761095][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.765004][ T5916] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 661.779503][T15192] bridge_slave_1: left allmulticast mode [ 661.785937][T15192] bridge_slave_1: left promiscuous mode [ 661.791738][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.804420][T15192] bond0: (slave 70): Releasing backup interface [ 661.815547][T15192] bond0: (slave bond_slave_1): Releasing backup interface [ 661.825830][T15192] team_slave_0: left promiscuous mode [ 661.833428][T15192] team0: Failed to send options change via netlink (err -105) [ 661.841386][T15192] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 661.852257][T15192] team0: Port device team_slave_0 removed [ 661.859445][T15192] team_slave_1: left promiscuous mode [ 661.869977][T15192] team0: Failed to send options change via netlink (err -105) [ 661.878048][T15192] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 661.888253][T15192] team0: Port device team_slave_1 removed [ 661.926957][ T5916] usb 3-1: config index 0 descriptor too short (expected 65535, got 18) [ 661.936492][ T5916] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 661.945575][ T5916] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 661.956258][ T5916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 661.968356][ T5916] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 661.977835][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.991724][ T5916] usb 3-1: Product: syz [ 661.996052][ T5916] usb 3-1: Manufacturer: syz [ 662.016552][ T5916] usb 3-1: SerialNumber: syz [ 662.243624][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 662.261107][ T5944] usb 3-1: USB disconnect, device number 97 [ 663.105878][ T1106] net_ratelimit: 35 callbacks suppressed [ 663.105900][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.245039][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.372430][T15222] trusted_key: encrypted_key: insufficient parameters specified [ 663.380351][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.494935][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.618120][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.737120][ T35] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.824899][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 663.834844][ T5944] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 663.847384][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 663.964870][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 664.004799][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 664.013309][ T5944] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 664.021852][ T5944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 664.033263][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.043266][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.053857][ T5944] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.070552][ T5944] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 664.084858][ T1120] bond2: (slave macvlan2): failed to get link speed/duplex [ 664.106484][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.394234][ T5944] usb 4-1: usb_control_msg returned -32 [ 664.404638][ T5944] usbtmc 4-1:16.0: can't read capabilities [ 664.605415][ T5933] usb 4-1: USB disconnect, device number 105 [ 665.252886][T15250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2730'. [ 665.375397][T10698] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 665.420407][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2731'. [ 665.514799][T10698] usb 3-1: device descriptor read/64, error -71 [ 665.754982][T10698] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 665.895064][T10698] usb 3-1: device descriptor read/64, error -71 [ 666.006481][T10698] usb usb3-port1: attempt power cycle [ 666.354803][T10698] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 666.395435][T10698] usb 3-1: device descriptor read/8, error -71 [ 666.456303][ T29] audit: type=1326 audit(1776714156.804:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.0.2734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37eab9c819 code=0x0 [ 666.650171][T10698] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 666.681698][T15271] usb usb7: usbfs: process 15271 (syz.1.2736) did not claim interface 0 before use [ 666.696345][T10698] usb 3-1: device descriptor read/8, error -71 [ 666.806062][T10698] usb usb3-port1: unable to enumerate USB device [ 667.185146][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 667.356609][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.370766][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.402743][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 667.414209][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.441165][ T24] usb 2-1: config 0 descriptor?? [ 667.860470][ T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 667.900906][ T24] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 668.070920][ T24] cp2112 0003:10C4:EA90.0017: Part Number: 0xE1 Device Version: 0x47 [ 668.084496][T15290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 668.135272][ T1106] net_ratelimit: 34 callbacks suppressed [ 668.135292][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.326977][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.336132][T15300] cp2112 0003:10C4:EA90.0017: pid 15300 passed too short report [ 668.390484][ T24] cp2112 0003:10C4:EA90.0017: error requesting SMBus config [ 668.455015][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.585581][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.724894][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.863321][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.875126][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 668.891284][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.901365][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.910983][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.919944][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.035712][ T1106] bond2: (slave macvlan2): failed to get link speed/duplex [ 669.415998][ T3527] bond2: (slave macvlan2): failed to get link speed/duplex [ 669.788843][T12386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.904852][ T5916] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 670.017894][ T1095] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.049582][T15316] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 670.116923][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 670.125485][ T5916] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 670.143517][ T5916] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 670.161992][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.170348][T12386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.181527][ T5916] usb 5-1: Product: syz [ 670.189714][ T5916] usb 5-1: Manufacturer: syz [ 670.197966][ T5916] usb 5-1: SerialNumber: syz [ 670.215584][T15305] chnl_net:caif_netlink_parms(): no params data found [ 670.232401][ T5916] usb 5-1: config 0 descriptor?? [ 670.254615][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 670.263519][ T5916] usb 5-1: setting power ON [ 670.269178][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 670.281095][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 670.320496][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 670.341076][ T5916] usb 5-1: media controller created [ 670.357604][T12386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.377171][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.435650][ T5916] usb 5-1: selecting invalid altsetting 6 [ 670.459377][ T5916] usb 5-1: digital interface selection failed (-22) [ 670.480482][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 670.521411][ T5916] usb 5-1: setting power OFF [ 670.529418][T12386] team0: Port device netdevsim0 removed [ 670.540802][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 670.542627][T12386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.588598][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 670.614201][ T5916] (NULL device *): no alternate interface [ 670.650229][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 670.757202][T15305] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.775836][T15305] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.790551][T15305] bridge_slave_0: entered allmulticast mode [ 670.799228][T15305] bridge_slave_0: entered promiscuous mode [ 670.819375][T15305] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.828072][T15305] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.836281][T15305] bridge_slave_1: entered allmulticast mode [ 670.845190][T15305] bridge_slave_1: entered promiscuous mode [ 671.030856][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.034909][ T50] Bluetooth: hci5: command tx timeout [ 671.060746][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.441733][T15305] team0: Port device team_slave_0 added [ 671.509258][T15305] team0: Port device team_slave_1 added [ 671.600929][T15339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.616186][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.642377][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.675055][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.714126][T12386] dummy0: left allmulticast mode [ 671.723257][T12386] bridge0: port 1(dummy0) entered disabled state [ 671.804341][T12386] lo: left allmulticast mode [ 671.943565][T15344] overlayfs: missing 'lowerdir' [ 672.725118][T12386] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 672.782606][T12386] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 672.823961][T12386] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 672.835572][T12386] bond0 (unregistering): Released all slaves [ 672.860114][T12386] bond1 (unregistering): Released all slaves [ 672.892424][T12386] bond2 (unregistering): Released all slaves [ 672.987401][T12386] bond3 (unregistering): Released all slaves [ 673.040134][T12386] bond4 (unregistering): Released all slaves [ 673.059889][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.074949][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.117153][ T50] Bluetooth: hci5: command tx timeout [ 673.142479][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.215785][ T5509] 8021q: adding VLAN 0 to HW filter on device eth1 [ 673.339215][T10698] usb 5-1: USB disconnect, device number 124 [ 673.458478][ T24] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -32 [ 673.485746][T15305] hsr_slave_0: entered promiscuous mode [ 673.496965][T15305] hsr_slave_1: entered promiscuous mode [ 673.532666][T15305] debugfs: 'hsr0' already exists in 'hsr' [ 673.540727][T15305] Cannot create hsr debugfs directory [ 673.569276][ T24] usb 2-1: USB disconnect, device number 105 [ 673.901227][T15366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.054912][ T24] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 674.234908][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 674.261791][ T24] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 674.300018][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 674.338671][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 674.358444][T15373] overlayfs: missing 'lowerdir' [ 674.402984][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 674.431518][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 674.500899][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.565932][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 674.590122][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.067112][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 675.090971][ T24] usbtmc 5-1:16.0: can't read capabilities [ 675.195976][ T50] Bluetooth: hci5: command tx timeout [ 675.284877][T15355] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 675.328026][ T24] usb 5-1: USB disconnect, device number 125 [ 676.575120][ T807] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 676.657788][T15408] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 676.770901][ T807] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 676.797323][ T807] usb 2-1: config 0 has no interface number 0 [ 676.819261][ T807] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 676.853853][ T807] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 676.887769][ T807] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 676.931518][ T807] usb 2-1: config 0 interface 11 has no altsetting 0 [ 676.952047][ T807] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 676.982108][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.035521][T15305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.052028][ T807] usb 2-1: config 0 descriptor?? [ 677.079060][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.079897][T15401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.110435][T15401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.124652][T15305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.124859][ T807] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 677.150884][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 677.191805][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 677.200561][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.209547][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 677.239475][T15305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 677.248060][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 677.265223][ T50] Bluetooth: hci5: command tx timeout [ 677.284563][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 677.293123][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 677.302288][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.320534][ T807] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 677.329496][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.353845][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.363999][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 677.373209][T15305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.387004][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 677.424658][T15427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.436568][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 677.455742][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.473544][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 677.499540][T15427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.501552][T15426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.527351][T12386] hsr_slave_0: left promiscuous mode [ 677.556157][T12386] hsr_slave_1: left promiscuous mode [ 677.561352][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 677.573248][ T807] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 677.609368][ T807] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 677.621029][T15426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.687312][ T5944] usb 2-1: USB disconnect, device number 106 [ 677.725776][ T5944] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 677.756096][T12386] veth1_macvtap: left promiscuous mode [ 677.771836][T12386] veth0_macvtap: left promiscuous mode [ 677.779079][ T5944] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 677.811631][ T5944] keyspan 2-1:0.11: device disconnected [ 677.847548][T10698] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 677.900927][T15432] FAULT_INJECTION: forcing a failure. [ 677.900927][T15432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.955206][T15432] CPU: 0 UID: 0 PID: 15432 Comm: syz.0.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.955240][T15432] Tainted: [L]=SOFTLOCKUP [ 677.955248][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.955259][T15432] Call Trace: [ 677.955268][T15432] [ 677.955276][T15432] dump_stack_lvl+0xe8/0x150 [ 677.955311][T15432] should_fail_ex+0x412/0x560 [ 677.955349][T15432] _copy_from_user+0x2d/0xb0 [ 677.955370][T15432] ___sys_sendmsg+0x1c6/0x360 [ 677.955395][T15432] ? __lock_acquire+0x6b5/0x2cf0 [ 677.955426][T15432] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.955485][T15432] ? __fget_files+0x2a/0x420 [ 677.955504][T15432] ? __fget_files+0x3a0/0x420 [ 677.955533][T15432] __x64_sys_sendmsg+0x1bd/0x2a0 [ 677.955559][T15432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.955592][T15432] ? __pfx_ksys_write+0x10/0x10 [ 677.955623][T15432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.955644][T15432] do_syscall_64+0x15f/0xf80 [ 677.955670][T15432] ? trace_irq_disable+0x3b/0x140 [ 677.955695][T15432] ? clear_bhb_loop+0x40/0x90 [ 677.955717][T15432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.955737][T15432] RIP: 0033:0x7f37eab9c819 [ 677.955755][T15432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.955772][T15432] RSP: 002b:00007f37e8df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.955792][T15432] RAX: ffffffffffffffda RBX: 00007f37eae15fa0 RCX: 00007f37eab9c819 [ 677.955807][T15432] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 677.955819][T15432] RBP: 00007f37e8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.955831][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.955843][T15432] R13: 00007f37eae16038 R14: 00007f37eae15fa0 R15: 00007f37eaf3fa48 [ 677.955873][T15432] [ 678.168712][T10698] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.177441][T10698] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.187689][T10698] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.196672][T10698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.209962][T10698] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.219183][T10698] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.227757][T10698] usb 4-1: Product: syz [ 678.232144][T10698] usb 4-1: Manufacturer: syz [ 678.243624][T10698] cdc_wdm 4-1:1.0: skipping garbage [ 678.251897][T10698] cdc_wdm 4-1:1.0: skipping garbage [ 678.257797][T10698] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 678.668561][T15416] net_ratelimit: 2 callbacks suppressed [ 678.668586][T15416] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 678.691310][T15450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.222836][T15456] overlayfs: missing 'lowerdir' [ 679.915863][T15305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.043831][T15305] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.109880][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.117060][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.162766][T12386] IPVS: stop unused estimator thread 0... [ 680.185367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.192506][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.536109][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.653786][ T5901] usb 4-1: USB disconnect, device number 106 [ 680.729730][T15305] veth0_vlan: entered promiscuous mode [ 680.796074][T15305] veth1_vlan: entered promiscuous mode [ 680.866882][T15305] veth0_macvtap: entered promiscuous mode [ 680.890750][T15305] veth1_macvtap: entered promiscuous mode [ 680.919785][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.950910][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.014202][ T1095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.043622][ T1095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.070207][ T1095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.088366][ T1095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.134450][T15499] syzkaller1: entered promiscuous mode [ 681.152068][T15499] syzkaller1: entered allmulticast mode [ 681.375347][T15508] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2780'. [ 681.434647][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.474568][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.650963][T12386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.661104][T12386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.695574][ T5933] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 681.914953][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 681.929002][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.951765][T15516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.979861][ T5933] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 682.011450][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.056449][ T5933] usb 5-1: Product: syz [ 682.076787][ T5933] usb 5-1: Manufacturer: syz [ 682.081488][ T5933] usb 5-1: SerialNumber: syz [ 682.102941][ T5933] usb 5-1: config 0 descriptor?? [ 682.184667][ T5933] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 682.248873][T15521] overlayfs: missing 'lowerdir' [ 682.329452][T15525] bridge0: entered promiscuous mode [ 682.335017][T15525] bridge0: port 3(macvlan2) entered blocking state [ 682.335243][T15525] bridge0: port 3(macvlan2) entered disabled state [ 682.335426][T15525] macvlan2: entered allmulticast mode [ 682.335444][T15525] bridge0: entered allmulticast mode [ 682.352574][T15525] macvlan2: left allmulticast mode [ 682.352599][T15525] bridge0: left allmulticast mode [ 682.359254][T15525] bridge0: left promiscuous mode [ 682.951642][T15531] FAULT_INJECTION: forcing a failure. [ 682.951642][T15531] name failslab, interval 1, probability 0, space 0, times 0 [ 683.030144][T15531] CPU: 1 UID: 0 PID: 15531 Comm: syz.2.2784 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.030176][T15531] Tainted: [L]=SOFTLOCKUP [ 683.030183][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.030194][T15531] Call Trace: [ 683.030199][T15531] [ 683.030204][T15531] dump_stack_lvl+0xe8/0x150 [ 683.030226][T15531] should_fail_ex+0x412/0x560 [ 683.030245][T15531] should_failslab+0xa8/0x100 [ 683.030270][T15531] __kvmalloc_node_noprof+0x178/0x8a0 [ 683.030295][T15531] ? alloc_netdev_mqs+0xc89/0x11b0 [ 683.030323][T15531] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 683.030349][T15531] alloc_netdev_mqs+0xc89/0x11b0 [ 683.030371][T15531] rtnl_create_link+0x31f/0xd70 [ 683.030389][T15531] rtnl_newlink_create+0x277/0xb70 [ 683.030404][T15531] ? __pfx___nla_validate_parse+0x10/0x10 [ 683.030433][T15531] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 683.030461][T15531] ? __pfx___mutex_lock+0x10/0x10 [ 683.030490][T15531] ? ns_capable+0x89/0xe0 [ 683.030509][T15531] rtnl_newlink+0x166a/0x1bb0 [ 683.030528][T15531] ? __pfx_rtnl_newlink+0x10/0x10 [ 683.030538][T15531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.030579][T15531] ? kasan_quarantine_put+0xbb/0x1f0 [ 683.030601][T15531] ? lockdep_hardirqs_on+0x7a/0x110 [ 683.030632][T15531] ? nlmon_xmit+0xb0/0x100 [ 683.030650][T15531] ? kmem_cache_free+0x182/0x650 [ 683.030668][T15531] ? __lock_acquire+0x6b5/0x2cf0 [ 683.030686][T15531] ? __dev_queue_xmit+0x2b6/0x3950 [ 683.030702][T15531] ? __local_bh_enable_ip+0xd0/0x130 [ 683.030726][T15531] ? lockdep_hardirqs_on+0x7a/0x110 [ 683.030751][T15531] ? __dev_queue_xmit+0x2b6/0x3950 [ 683.030781][T15531] ? __local_bh_enable_ip+0xd0/0x130 [ 683.030802][T15531] ? __dev_queue_xmit+0x2b6/0x3950 [ 683.030819][T15531] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 683.030837][T15531] ? __pfx_rtnl_newlink+0x10/0x10 [ 683.030848][T15531] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 683.030865][T15531] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 683.030885][T15531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.030904][T15531] ? ref_tracker_free+0x693/0x840 [ 683.030935][T15531] ? __pfx_ref_tracker_free+0x10/0x10 [ 683.030960][T15531] netlink_rcv_skb+0x232/0x4b0 [ 683.030974][T15531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.030985][T15531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.031003][T15531] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.031022][T15531] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.031049][T15531] netlink_unicast+0x75c/0x8e0 [ 683.031081][T15531] netlink_sendmsg+0x813/0xb40 [ 683.031107][T15531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.031121][T15531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 683.031138][T15531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 683.031152][T15531] ____sys_sendmsg+0x972/0x9f0 [ 683.031169][T15531] ? __might_fault+0xaf/0x130 [ 683.031196][T15531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.031229][T15531] ? import_iovec+0x73/0xa0 [ 683.031251][T15531] ___sys_sendmsg+0x2a5/0x360 [ 683.031264][T15531] ? __lock_acquire+0x6b5/0x2cf0 [ 683.031281][T15531] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.031317][T15531] ? __fget_files+0x2a/0x420 [ 683.031336][T15531] ? __fget_files+0x3a0/0x420 [ 683.031366][T15531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 683.031393][T15531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.031415][T15531] ? __pfx_ksys_write+0x10/0x10 [ 683.031432][T15531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.031443][T15531] do_syscall_64+0x15f/0xf80 [ 683.031458][T15531] ? trace_irq_disable+0x3b/0x140 [ 683.031480][T15531] ? clear_bhb_loop+0x40/0x90 [ 683.031504][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.031524][T15531] RIP: 0033:0x7f5e7f19c819 [ 683.031542][T15531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.031555][T15531] RSP: 002b:00007f5e8013a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.031568][T15531] RAX: ffffffffffffffda RBX: 00007f5e7f415fa0 RCX: 00007f5e7f19c819 [ 683.031576][T15531] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 683.031583][T15531] RBP: 00007f5e8013a090 R08: 0000000000000000 R09: 0000000000000000 [ 683.031590][T15531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.031597][T15531] R13: 00007f5e7f416038 R14: 00007f5e7f415fa0 R15: 00007f5e7f53fa48 [ 683.031615][T15531] [ 683.578794][ T13] usb 5-1: Failed to submit usb control message: -110 [ 683.639134][ T13] usb 5-1: unable to send the bmi data to the device: -110 [ 683.669675][ T13] usb 5-1: unable to get target info from device [ 683.706816][ T13] usb 5-1: could not get target info (-110) [ 683.741891][ T13] usb 5-1: could not probe fw (-110) [ 684.221385][T15549] FAULT_INJECTION: forcing a failure. [ 684.221385][T15549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.261440][T15549] CPU: 0 UID: 0 PID: 15549 Comm: syz.1.2789 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.261469][T15549] Tainted: [L]=SOFTLOCKUP [ 684.261476][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.261488][T15549] Call Trace: [ 684.261497][T15549] [ 684.261505][T15549] dump_stack_lvl+0xe8/0x150 [ 684.261539][T15549] should_fail_ex+0x412/0x560 [ 684.261570][T15549] _copy_to_user+0x31/0xb0 [ 684.261592][T15549] rng_dev_read+0x3ef/0x7b0 [ 684.261621][T15549] ? __pfx_rng_dev_read+0x10/0x10 [ 684.261650][T15549] ? bpf_lsm_file_permission+0x9/0x20 [ 684.261672][T15549] ? security_file_permission+0x75/0x260 [ 684.261703][T15549] ? rw_verify_area+0x2a6/0x4d0 [ 684.261728][T15549] vfs_readv+0x587/0x840 [ 684.261756][T15549] ? __pfx_rng_dev_read+0x10/0x10 [ 684.261783][T15549] ? __pfx_vfs_readv+0x10/0x10 [ 684.261821][T15549] ? __fget_files+0x2a/0x420 [ 684.261845][T15549] ? __fget_files+0x3a0/0x420 [ 684.261863][T15549] ? __fget_files+0x2a/0x420 [ 684.261889][T15549] __x64_sys_preadv+0x19f/0x2a0 [ 684.261917][T15549] ? __pfx___x64_sys_preadv+0x10/0x10 [ 684.261948][T15549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.261973][T15549] do_syscall_64+0x15f/0xf80 [ 684.262001][T15549] ? clear_bhb_loop+0x40/0x90 [ 684.262024][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.262044][T15549] RIP: 0033:0x7fd8cbb9c819 [ 684.262062][T15549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.262078][T15549] RSP: 002b:00007fd8cc9aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 684.262099][T15549] RAX: ffffffffffffffda RBX: 00007fd8cbe15fa0 RCX: 00007fd8cbb9c819 [ 684.262112][T15549] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 684.262124][T15549] RBP: 00007fd8cc9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 684.262136][T15549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.262148][T15549] R13: 00007fd8cbe16038 R14: 00007fd8cbe15fa0 R15: 00007fd8cbf3fa48 [ 684.262178][T15549] [ 684.799115][T15557] syzkaller1: entered promiscuous mode [ 684.815113][T15557] syzkaller1: entered allmulticast mode [ 684.960225][ T24] usb 5-1: USB disconnect, device number 126 [ 685.337396][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 685.677760][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.685982][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.204866][ T992] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 686.357918][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 686.375812][ T992] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 686.402665][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.450118][ T992] pvrusb2: Hardware description: Terratec Grabster AV400 [ 686.479516][ T992] pvrusb2: ********** [ 686.499520][ T992] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 686.526810][ T992] pvrusb2: Important functionality might not be entirely working. [ 686.544591][ T992] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 686.603389][ T992] pvrusb2: ********** [ 686.680754][ T2365] pvrusb2: Invalid write control endpoint [ 686.873281][ T992] usb 2-1: USB disconnect, device number 107 [ 686.994165][ T2365] pvrusb2: Invalid write control endpoint [ 687.013378][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 687.048989][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 687.069805][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 687.096910][ T807] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 687.141234][ T2365] pvrusb2: Device being rendered inoperable [ 687.149500][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 687.160159][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 687.178688][ T2365] pvrusb2: Attached sub-driver cx25840 [ 687.207650][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 687.242796][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 687.295242][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 687.337826][ T807] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 687.352424][ T807] usb 5-1: can't read configurations, error -61 [ 687.515308][ T807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 687.706213][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 687.726818][ T807] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 687.734505][ T807] usb 5-1: can't read configurations, error -61 [ 687.771352][ T807] usb usb5-port1: attempt power cycle [ 687.905185][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 687.962032][T15597] gtp0: entered allmulticast mode [ 688.022613][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'. [ 688.156767][ T807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 688.198500][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 688.204424][T15599] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2802'. [ 688.222480][ T807] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 688.233590][ T807] usb 5-1: can't read configurations, error -61 [ 688.386826][ T807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 688.427988][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 688.435346][ T807] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 688.450002][ T807] usb 5-1: can't read configurations, error -61 [ 688.461382][ T807] usb usb5-port1: unable to enumerate USB device [ 688.484795][ T5916] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 688.636307][ T5916] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 688.655545][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.696631][ T5916] usb 3-1: config 0 descriptor?? [ 688.729321][ T5916] usb 3-1: selecting invalid altsetting 1 [ 688.746600][ T5916] flexcop_usb: set interface failed. [ 688.761842][ T5916] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 688.951530][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.973713][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.061005][T15613] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 689.077958][T15613] pim6reg1: linktype set to 823 [ 689.601265][T15615] netlink: zone id is out of range [ 689.625160][T15615] netlink: zone id is out of range [ 689.654930][T15615] netlink: zone id is out of range [ 689.664585][T15615] netlink: zone id is out of range [ 689.685491][T15615] netlink: zone id is out of range [ 689.691658][T15615] netlink: zone id is out of range [ 689.705474][T15615] netlink: zone id is out of range [ 689.718137][T15615] netlink: zone id is out of range [ 689.729920][T15615] netlink: zone id is out of range [ 689.743412][T15615] netlink: zone id is out of range [ 690.167630][ T992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 690.334829][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 690.347429][ T992] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 690.364429][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.416210][ T992] pvrusb2: Hardware description: Terratec Grabster AV400 [ 690.439529][ T992] pvrusb2: ********** [ 690.449506][ T992] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 690.478893][ T992] pvrusb2: Important functionality might not be entirely working. [ 690.493945][ T992] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 690.515192][ T992] pvrusb2: ********** [ 690.618284][ T2365] pvrusb2: Invalid write control endpoint [ 690.734671][ T2365] pvrusb2: Invalid write control endpoint [ 690.752231][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 690.787278][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 690.814978][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 690.830387][ T5916] usb 5-1: USB disconnect, device number 5 [ 690.864891][ T2365] pvrusb2: Device being rendered inoperable [ 690.878477][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 690.894204][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 690.917592][ T2365] pvrusb2: Attached sub-driver cx25840 [ 690.928221][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 690.943426][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 691.202086][ T9] usb 3-1: USB disconnect, device number 102 [ 691.713052][T15647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 691.719590][T15647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.739517][T15648] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2815'. [ 691.768111][T15652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.785591][T15647] vhci_hcd vhci_hcd.0: Device attached [ 691.857092][T15653] vlan1: entered promiscuous mode [ 691.877948][T15650] vhci_hcd: connection closed [ 691.881249][ T1106] vhci_hcd vhci_hcd.3: stop threads [ 691.898297][ T1106] vhci_hcd vhci_hcd.3: release socket [ 691.929490][ T1106] vhci_hcd vhci_hcd.3: disconnect device [ 691.954863][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 692.070166][T15652] overlayfs: missing 'lowerdir' [ 692.202942][T15659] ------------[ cut here ]------------ [ 692.208443][T15659] Voluntary context switch within RCU read-side critical section! [ 692.208468][T15659] WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xcac/0xf40, CPU#0: syz.1.2818/15659 [ 692.227392][T15659] Modules linked in: [ 692.231556][T15659] CPU: 0 UID: 0 PID: 15659 Comm: syz.1.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.242485][T15659] Tainted: [L]=SOFTLOCKUP [ 692.246798][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 692.256847][T15659] RIP: 0010:rcu_note_context_switch+0xcac/0xf40 [ 692.263094][T15659] Code: 00 41 c6 45 00 00 48 8b 3d 71 6b 87 0e 48 81 c4 b8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8b 60 ff ff 48 8d 3d 24 4f 8b 0e <67> 48 0f b9 3a e9 1b f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 ea f3 ff [ 692.282693][T15659] RSP: 0018:ffffc90003aa6cd0 EFLAGS: 00010002 [ 692.288758][T15659] RAX: 0000000000000000 RBX: ffff888032728000 RCX: 0000000080000002 [ 692.296724][T15659] RDX: 0000000000000000 RSI: ffffffff8c289440 RDI: ffffffff9036e520 [ 692.304692][T15659] RBP: dffffc0000000000 R08: ffffffff903353f7 R09: 1ffffffff2066a7e [ 692.312663][T15659] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: 0000000000000000 [ 692.320632][T15659] R13: ffff888032728000 R14: ffff8880b863be80 R15: ffff8880327284c4 [ 692.328602][T15659] FS: 00007fd8c9df66c0(0000) GS:ffff88812521e000(0000) knlGS:0000000000000000 [ 692.337523][T15659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.344102][T15659] CR2: 0000200000060000 CR3: 0000000050dda000 CR4: 00000000003526f0 [ 692.352066][T15659] DR0: 0000000000000000 DR1: 0000000000001000 DR2: 0000000000000000 [ 692.360031][T15659] DR3: 0000000000000400 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 692.368083][T15659] Call Trace: [ 692.371353][T15659] [ 692.374285][T15659] ? rcu_is_watching+0x15/0xb0 [ 692.379058][T15659] __schedule+0x2e6/0x5680 [ 692.383482][T15659] ? update_curr_dl_se+0x67d/0x1260 [ 692.388679][T15659] ? update_curr+0x1fa/0x4e0 [ 692.393273][T15659] ? __pfx___schedule+0x10/0x10 [ 692.398132][T15659] ? do_sched_yield+0x1e2/0x310 [ 692.402979][T15659] schedule+0x164/0x360 [ 692.407134][T15659] netlink_broadcast_filtered+0xe61/0xeb0 [ 692.412864][T15659] nlmsg_notify+0xf0/0x1a0 [ 692.417277][T15659] __ip6_del_rt_siblings+0x5fc/0x7d0 [ 692.422571][T15659] ip6_route_del+0x1047/0x1100 [ 692.427335][T15659] ? ip6_route_del+0xe2/0x1100 [ 692.432090][T15659] ? __pfx_ip6_route_del+0x10/0x10 [ 692.437199][T15659] inet6_rtm_delroute+0x5d7/0x6d0 [ 692.442232][T15659] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 692.447781][T15659] ? __lock_acquire+0x6b5/0x2cf0 [ 692.452721][T15659] ? __dev_queue_xmit+0x2b6/0x3950 [ 692.457920][T15659] ? __local_bh_enable_ip+0xd0/0x130 [ 692.463205][T15659] ? lockdep_hardirqs_on+0x7a/0x110 [ 692.468423][T15659] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 692.473966][T15659] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 692.478912][T15659] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 692.484022][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 692.489467][T15659] ? ref_tracker_free+0x693/0x840 [ 692.494489][T15659] ? __pfx_ref_tracker_free+0x10/0x10 [ 692.499862][T15659] netlink_rcv_skb+0x232/0x4b0 [ 692.504623][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 692.510079][T15659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.515367][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.520558][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.525749][T15659] netlink_unicast+0x75c/0x8e0 [ 692.530508][T15659] netlink_sendmsg+0x813/0xb40 [ 692.535261][T15659] ? irqentry_exit+0x218/0x730 [ 692.540027][T15659] ? rcu_is_watching+0x15/0xb0 [ 692.544791][T15659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.550074][T15659] ? ____sys_sendmsg+0x959/0x9f0 [ 692.555005][T15659] ____sys_sendmsg+0x972/0x9f0 [ 692.559759][T15659] ? __might_fault+0xaf/0x130 [ 692.564430][T15659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.569713][T15659] ? import_iovec+0x73/0xa0 [ 692.574207][T15659] ___sys_sendmsg+0x2a5/0x360 [ 692.578876][T15659] ? __lock_acquire+0x6b5/0x2cf0 [ 692.583895][T15659] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.589090][T15659] ? futex_wake+0x4ac/0x580 [ 692.593603][T15659] ? __fget_files+0x2a/0x420 [ 692.598188][T15659] ? __fget_files+0x3a0/0x420 [ 692.602859][T15659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 692.607791][T15659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.613250][T15659] ? rcu_is_watching+0x15/0xb0 [ 692.618019][T15659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.624076][T15659] do_syscall_64+0x15f/0xf80 [ 692.628667][T15659] ? trace_irq_disable+0x3b/0x140 [ 692.633769][T15659] ? clear_bhb_loop+0x40/0x90 [ 692.638437][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.644315][T15659] RIP: 0033:0x7fd8cbb9c819 [ 692.648721][T15659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.668315][T15659] RSP: 002b:00007fd8c9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.676718][T15659] RAX: ffffffffffffffda RBX: 00007fd8cbe16180 RCX: 00007fd8cbb9c819 [ 692.684677][T15659] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 000000000000000d [ 692.692637][T15659] RBP: 00007fd8cbc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 692.700597][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.708555][T15659] R13: 00007fd8cbe16218 R14: 00007fd8cbe16180 R15: 00007fd8cbf3fa48 [ 692.716530][T15659] [ 692.719550][T15659] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 692.726822][T15659] CPU: 0 UID: 0 PID: 15659 Comm: syz.1.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.737752][T15659] Tainted: [L]=SOFTLOCKUP [ 692.742061][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 692.752106][T15659] Call Trace: [ 692.755383][T15659] [ 692.758328][T15659] vpanic+0x56c/0xa60 [ 692.762311][T15659] ? __pfx__printk+0x10/0x10 [ 692.767249][T15659] ? __pfx_vpanic+0x10/0x10 [ 692.771756][T15659] ? is_bpf_text_address+0x292/0x2b0 [ 692.777045][T15659] ? is_bpf_text_address+0x26/0x2b0 [ 692.782242][T15659] panic+0xc5/0xd0 [ 692.785966][T15659] ? __pfx_panic+0x10/0x10 [ 692.790392][T15659] __warn+0x315/0x4c0 [ 692.794361][T15659] ? rcu_note_context_switch+0xcac/0xf40 [ 692.799993][T15659] ? rcu_note_context_switch+0xcac/0xf40 [ 692.805624][T15659] __report_bug+0x29a/0x540 [ 692.810128][T15659] ? rcu_note_context_switch+0xcac/0xf40 [ 692.815753][T15659] ? __pfx___report_bug+0x10/0x10 [ 692.820796][T15659] report_bug_entry+0x19a/0x290 [ 692.825646][T15659] ? rcu_note_context_switch+0xcac/0xf40 [ 692.831280][T15659] ? rcu_note_context_switch+0xcb1/0xf40 [ 692.836907][T15659] handle_bug+0xce/0x200 [ 692.841144][T15659] exc_invalid_op+0x1a/0x50 [ 692.845642][T15659] asm_exc_invalid_op+0x1a/0x20 [ 692.850490][T15659] RIP: 0010:rcu_note_context_switch+0xcac/0xf40 [ 692.856725][T15659] Code: 00 41 c6 45 00 00 48 8b 3d 71 6b 87 0e 48 81 c4 b8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8b 60 ff ff 48 8d 3d 24 4f 8b 0e <67> 48 0f b9 3a e9 1b f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 ea f3 ff [ 692.876317][T15659] RSP: 0018:ffffc90003aa6cd0 EFLAGS: 00010002 [ 692.882379][T15659] RAX: 0000000000000000 RBX: ffff888032728000 RCX: 0000000080000002 [ 692.890346][T15659] RDX: 0000000000000000 RSI: ffffffff8c289440 RDI: ffffffff9036e520 [ 692.898304][T15659] RBP: dffffc0000000000 R08: ffffffff903353f7 R09: 1ffffffff2066a7e [ 692.906269][T15659] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: 0000000000000000 [ 692.914326][T15659] R13: ffff888032728000 R14: ffff8880b863be80 R15: ffff8880327284c4 [ 692.922334][T15659] ? rcu_is_watching+0x15/0xb0 [ 692.927112][T15659] __schedule+0x2e6/0x5680 [ 692.931555][T15659] ? update_curr_dl_se+0x67d/0x1260 [ 692.936770][T15659] ? update_curr+0x1fa/0x4e0 [ 692.941362][T15659] ? __pfx___schedule+0x10/0x10 [ 692.946229][T15659] ? do_sched_yield+0x1e2/0x310 [ 692.951081][T15659] schedule+0x164/0x360 [ 692.955240][T15659] netlink_broadcast_filtered+0xe61/0xeb0 [ 692.961000][T15659] nlmsg_notify+0xf0/0x1a0 [ 692.965411][T15659] __ip6_del_rt_siblings+0x5fc/0x7d0 [ 692.970724][T15659] ip6_route_del+0x1047/0x1100 [ 692.975506][T15659] ? ip6_route_del+0xe2/0x1100 [ 692.980266][T15659] ? __pfx_ip6_route_del+0x10/0x10 [ 692.985391][T15659] inet6_rtm_delroute+0x5d7/0x6d0 [ 692.990416][T15659] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 692.996001][T15659] ? __lock_acquire+0x6b5/0x2cf0 [ 693.000943][T15659] ? __dev_queue_xmit+0x2b6/0x3950 [ 693.006053][T15659] ? __local_bh_enable_ip+0xd0/0x130 [ 693.011331][T15659] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.016545][T15659] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 693.022084][T15659] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 693.027016][T15659] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 693.032125][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 693.037571][T15659] ? ref_tracker_free+0x693/0x840 [ 693.042593][T15659] ? __pfx_ref_tracker_free+0x10/0x10 [ 693.047964][T15659] netlink_rcv_skb+0x232/0x4b0 [ 693.052722][T15659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 693.058171][T15659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.063465][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 693.068659][T15659] ? netlink_deliver_tap+0x2e/0x1b0 [ 693.073852][T15659] netlink_unicast+0x75c/0x8e0 [ 693.078612][T15659] netlink_sendmsg+0x813/0xb40 [ 693.083362][T15659] ? irqentry_exit+0x218/0x730 [ 693.088118][T15659] ? rcu_is_watching+0x15/0xb0 [ 693.092875][T15659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.098152][T15659] ? ____sys_sendmsg+0x959/0x9f0 [ 693.103085][T15659] ____sys_sendmsg+0x972/0x9f0 [ 693.107849][T15659] ? __might_fault+0xaf/0x130 [ 693.112532][T15659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.117834][T15659] ? import_iovec+0x73/0xa0 [ 693.122343][T15659] ___sys_sendmsg+0x2a5/0x360 [ 693.127022][T15659] ? __lock_acquire+0x6b5/0x2cf0 [ 693.131968][T15659] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.137169][T15659] ? futex_wake+0x4ac/0x580 [ 693.141693][T15659] ? __fget_files+0x2a/0x420 [ 693.146276][T15659] ? __fget_files+0x3a0/0x420 [ 693.150973][T15659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.155908][T15659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.161370][T15659] ? rcu_is_watching+0x15/0xb0 [ 693.166133][T15659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.172194][T15659] do_syscall_64+0x15f/0xf80 [ 693.176783][T15659] ? trace_irq_disable+0x3b/0x140 [ 693.181809][T15659] ? clear_bhb_loop+0x40/0x90 [ 693.186496][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.192388][T15659] RIP: 0033:0x7fd8cbb9c819 [ 693.196798][T15659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.216402][T15659] RSP: 002b:00007fd8c9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.224822][T15659] RAX: ffffffffffffffda RBX: 00007fd8cbe16180 RCX: 00007fd8cbb9c819 [ 693.232804][T15659] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 000000000000000d [ 693.240768][T15659] RBP: 00007fd8cbc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 693.248744][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.256706][T15659] R13: 00007fd8cbe16218 R14: 00007fd8cbe16180 R15: 00007fd8cbf3fa48 [ 693.264694][T15659] [ 693.268069][T15659] Kernel Offset: disabled [ 693.272413][T15659] Rebooting in 86400 seconds..