last executing test programs: 10.23106374s ago: executing program 0 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000500)={0xa8, 0x0, 0x3}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000580)=0x82, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000003c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"01000080fc9927ad4b82ada116982648", r5, r6, {0x5, 0x1ff}, {0x7fffffff, 0x1600000}, 0xaf89, [0x9, 0x20000000008001, 0x6, 0x8, 0x0, 0xe714, 0x7, 0x8, 0x7ff, 0x7, 0x6, 0x5, 0x8, 0x0, 0x0, 0x2]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2e41026}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="680000006a7c4d14c15168f783cc5775dfdee3193ff94af188568a98092d8b0235cf260a72d599d7f5fd9b175e5ae01d731210364018eb415d649b173742e6e995637a7f31c520acc5e67016d189b9794c979a9b1e2ca3a4e1c96ec073e844ca", @ANYRESOCT=r6, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900030000005200000005001e000d00000005006000050000000500a2007e00000005001d000900000005001c000000000005001c000300000005006000050000000500a20002000000"], 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) r9 = gettid() r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r10, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r9, 0x7) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, &(0x7f00000000c0)=""/177, &(0x7f00000001c0)=""/212, &(0x7f00000002c0)=""/122, 0x7000}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058, 0xec000000, 0xcd}]}) 8.209745214s ago: executing program 1 (id=266): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r5, &(0x7f0000000210)="01000000", 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c, 0x0}}], 0x1, 0x20000000) read(r4, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r3, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x14) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) bind(r6, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}}, 0x80) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xb27}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r10, &(0x7f0000000240), &(0x7f0000000300)=""/234}, 0x20) 7.111280961s ago: executing program 0 (id=270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) setpriority(0x1, r3, 0xfffffffffffffa6f) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0x2000, 0x4800, &(0x7f0000ffe000/0x2000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') lseek(r5, 0x400, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x48, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) dup3(r6, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x400000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x1002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(r5, &(0x7f0000000500)="5601a5ccf92c11cac9eaae98860d31d9bad9629d4cd08083dba2a8a8512c22ebffc453b4da975230e104502e185363f0e8811f932cbc434d0521aba04a9692b1df54867ff5d4ac1bad963fecccc880ff2869cf7e1d5657d6a351df57071298d0e6ce1f3ea921701e17acec1dc49db9c10d249020456a842b7726eb85512edb736a8e77ec8b83852ad1931a6f5bb483644dc1985461e0ffb7ff8ebf2af69a40ad1f", 0xa1) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6.091761819s ago: executing program 2 (id=273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x410941, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x1000) 5.724422545s ago: executing program 1 (id=274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x40041) dup(r3) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000002100), 0x0, 0x8000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002140)=ANY=[@ANYBLOB="1201500205000020c016e175400001020301090224000101005003090400040156e60a050921049a3c01221a09090581030002040175fa687ded0d0b13092b9ddbeef5726d3fb8c577f156c881690ee0ffff93f055c73f5b77a2671e91494e2a09a40639a59fa2e2acfc11"], &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x80a}}, {0x53, &(0x7f0000004240)=@string={0x53, 0x3, "15bf448d4e541a8b4d2d3519b4446c44b9d1c724ae1b3d31173c687b15d6ab9b50e2378a722da3fedd8a339ce28633e4ca8f859b6a6446adcc54979915a4963f6896ef81afe486a742088ff0419a5b251b"}}]}) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 5.339390656s ago: executing program 2 (id=277): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 5.060705573s ago: executing program 2 (id=279): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x103040, 0x114) sendfile(r0, r1, 0x0, 0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200f32415000000000000109022400259700e80b09040010010300000009218100801122e30109058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000300)="e849aafd30f80d17700773bb419ca94c122f9a06632e6072660e9b2e953328fdf34ed70f3bb9b8ce54a49f963755ec52a7bd2339ecc2dd32c8c83b1b23", 0x3d) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x0, 0x9, 0x5, 0x7fff, 0x7, 0x6}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x15, "4c850ad6f44f9ef96e287844a34e2f29906eadf2e5"}, &(0x7f00000002c0)=0x1d) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000400)={r4, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x7f, 0x4}, &(0x7f00000004c0)=0x90) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0xbe, 0x1ef, 0x1000, 0x19, "4ee0f56d1f56ca8e"}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x1, 0x800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000100)={0x1, 'veth1_to_team\x00', {}, 0x401}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.786136811s ago: executing program 0 (id=280): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x585, 0x5}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x585, 0x5}, &(0x7f00000002c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22", 0xae}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a88d4c6347a1f45610e3602fc776a53b1204588e2b9830970", 0xbd}, {&(0x7f0000000380)="0efb18e617048dae506fb6119eb0536e7984081783e7584cd5d8d27033ed437c6246b2b94a22bd62d589a8e3886d9977523fd3e8fd174d51cd86a159d2ef88ab0632d7eb46c792f365df9d56fdd2299f44da364e2ef035705a084bbf2d3fdbeea8f05b35502c909a69f9be0405607e6eed6bcfb3acbf182ba4a2016e207bdacb6f240adf181a764f79d7dd3c93fc3e74f5c0985587deb47eec917dab82f4a194a186cb5515e0133dbdea3633abe499b978e798c2a5a64913d677d3b99927638735b214566ae0f4ca2ec80d1dd27f3249f9f6dd0b7a5ba70c0e7ad0be90ef56c6dc2ef3f445cae39675ff73fffb3aaccbb5f823bd80d94e112b970b266f9e380432314c39fe589e3174bc10b87f3e8f221d46ee42a2544e4b0c26e947fe2667555001e5beefe950450ee8d41080e6fbba3effec8484de4a6f1314e5aaf19d40296a986bc0500f0d731d8bd1f6fa147ba791d1eff8a5d68ece936cc6336ede0e8686c34d3e9f8d12249ef52a61171be50635d5aaf7bc6140128b65220f88aac07fce9ce944f875b7255cbfd1e401a32217573adf2304c47e7c8c9bacfdc2b3ba7b9450c8bb8b44c4b39292f09240d6d3d47f7d421286c1e0e78cde078f74f3c2b53544ca683aa1a8ef31342d09a85e09687dd043df25f595c6a4b941c6f7166654c013be7b347702e2a27d50b2ef78212defab03bb82e1260063a39551f72eab61477f3e8bc673abdd41b5692066dec8d26a4cc6a6f821bcb2f2239972e753fb526e7f33ee49d6cbfcd2b669afbe099cf50d2798f1dd6e8104d05cc4357d742daaa9e333060c59a47fe9335a46b9289f3da0d5ec1ce19597f02ca09442714e2989a3a9b707fc3284de3d4a7d65e3c24c880b8fdad025f7dae7fd70655e4f5b98484de78ff51a7ac3159c3449aa7d222113bea285e75c46c784abfd19a4d4894f284a2e2625eb97b8e35b2af2a9d0eb53fe55ca9ef7acc1b51fbcdd521ed21bc57bc4dbb3923e175c49e04ae30df0f361af2105f7772753cd4d9233a24e858229798d88af5bfa9b450e9d81f5d4c2358a5c1559684659e8f6ef741f29d2a7910cc2b3ba01189c951ee3eb9ad7403590e82448e041e4310f878255156e0247c966fd857fa23086ecebeb7bff416bf21a9df5494c8bae4af0e3da77a274f99e15d07924011cddbbc004f704445cbf6f2940e2a2cca1b3e05b6bcf16f459cae5f12cd26eed0eea757fc60bac3d591380017046d091ec5a5b4b7d910527927b8b4b179c89f04ecab9753de8d0d280e5444b15d647396c13d365e9d72a81df3a48bd4c8bab2a62d6f669b9e40f7df414b84f30e1fa3a27cbfc79664c4f225e6087de72d9c2a2093e84bee55314e73f6a3ab722fa516ed370f47e2ae7ae025a6cb7b072304c0a4af0ecdf782a0c6318a4f2a79a81b36cabb4207817d2aa497fb7887db11facdd14f38a1e9c898264b26aa97a658c40f5cc88d97c7cabc2f2294c34f8461e6913487c86d9ffb8b6821e16615131e4cec85ec7261bb390a4bcc63982596e5e0908c8bf264dd38557c7556372c042bf2427bd9fbee1c1689a9a9553ed1b8b8861e15767278b39ac858014bfa9aec3961e3493070c3232b92f45b040677c54dfc6047f353027474f476fd75085274125c421e12b393a790e449407fd5a72f6beba7a40786c77e4d20a85c89863e8faec609747436c8e5ae585a4bf6662e1d9d38ab24123fd8058a497cd874122d4677d689d732e365ea6e3c479458fc5d20070e2e064edeab794c61bf8add78ed8c331d2d1f2a636b36324282607ec2d41cfe5b0da91974cd85c73fd9cf34fa3db7b06ea4bd4c1b43f3e5967d48384866ef62a67f4880a9f35c55df6a5ff1a3f95a76723618a70cf532691ec59d1a3998bcabe6c7e2359636c2a50129a90896f0cb584b7714e22a81d3c47a4819afdf57e83f579263f5935ddc5ac0372dbcbe4d63fd468a3c68977ae0d8ec1f3835c890fab4916c16419f4f81dadb871b1a25a05729d2c51b2ca261401bef2bc69756555a16527e1ff9cec3d327e52a15377279b54988b5b2e20d3d747fbc7634fad898fba69da6f82bcc333990623deb84067d328aa65760c9d6e7b125dcc2948128c3a70f06db6672ca3734676b5455f89dbdba947aa4ef33753d48fbf47fb32f594da646f5b34a7e910ef9873a11c3ac03c5e22ca1fd7a58d10b224ac955bfd7b2e16b43da9f38958809a935240a63ebd3ca96847993a647d89c91d745f5012b6cab1c6f4726d51774f477e33f504fdc34b340c7e2a183243d17a3ed59a91521806202b6261cc65d94145a6bfac56ec43775b0bc3eb46ae19d6b188879e2cbe0fc32bf4a9e7b11f4c627667c411e00ae4adbaf37a1175898b35a788c26a7faa33fcc9637ba5f411d917f99959864820db36a815c58de480be7dada6cc18e8f54192b323b67ae2c355ac0d84cc7bdc23f85b4d26d99d6d778eeff5ecc94cd31f1fbdbbb2eeaee5ac3dc4b6ca5acda37ace3acd6034124fe1a0671d828b0abd42bafbd19a64c2eac660af37a699440f9396de8fc7c507a27814776ad51d1761839ca21532ad7c61fba30e6957bb791c9d204f95931cdb1d21c0b7267d57cc853604903c1a4a28fd284f351d90396c0d27a08f8ee298c56513882bb36ba659fdf02b051b19", 0x75f}], 0x3}, 0x8841) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22", 0xae}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a88d4c6347a1f45610e3602fc776a53b1204588e2b9830970", 0xbd}, {&(0x7f0000000380)="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", 0x75f}], 0x3}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) (async) listen(r8, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r11, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x1100000000000000, 0x6, 0x10000109e93, 0xffffffffffffffff, 0x400000, 0x3, 0xfffffffffffffffc, 0x2, 0x7fffffffffffffff, 0xc1, 0x2, 0x6, 0x5, 0x8000000000000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x1100000000000000, 0x6, 0x10000109e93, 0xffffffffffffffff, 0x400000, 0x3, 0xfffffffffffffffc, 0x2, 0x7fffffffffffffff, 0xc1, 0x2, 0x6, 0x5, 0x8000000000000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_RUN(r11, 0xae80, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000058008000825b0c0c1"], 0x4a) 4.367562805s ago: executing program 0 (id=281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0100000905810300028c00fd0904010000020d00000904010102020d00000905820000020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0xcf66, 0xd, 0xeb8, 0x3, 0x6, 0x6, 0xd, 0x1, 0xfc00, 0xc, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) bind$tipc(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 3.971080638s ago: executing program 2 (id=282): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="070183002000"/17], 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x2, 0x4, 0x50, @remote, @local, 0x1, 0x20, 0x5, 0x95}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x8000, 0xcb109f778785e23b, 0xb8, 0xdef, {{0x39, 0x4, 0x3, 0x3a, 0xe4, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x23, 0x62, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x11, "48326943a22ef13916a1a0301230ed"}, {0x7, 0x4, 'CR'}]}, @rr={0x7, 0x1b, 0x15, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @broadcast, @loopback]}, @timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x64, 0x3, [{0x6, 0x7, "522fe0fa8a"}, {0xca33f4dbeb16ebf6, 0x4, "1a01"}, {0x6, 0xc, "0a0af21817bd7af9782a"}, {0x6, 0xf, "82388d6ae2a969ed0e35ef5691"}, {0x0, 0xd, "46cff71726cec26d8b2cab"}, {0x6, 0xf, "6e4b4f46ed220c5af664a1ff9d"}, {0x1, 0x12, "c8c2ac118e3a6365d11f00d5227e6869"}, {0x5, 0xa, "e4be4a0346d49e03"}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)={0x0, @dev, @initdev}, &(0x7f0000000e80)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x81, 0x9, 0x15, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x10, 0x10000, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000fc0)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x2, 0xbeb, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@rr={0x7, 0x13, 0xe0, [@private=0xa010100, @multicast2, @remote, @multicast1]}, @ssrr={0x89, 0x7, 0x12, [@rand_addr=0x64010101]}]}}}}}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0xe, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e389}]}}]}, 0x44}}, 0x86) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x1ffe5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}]}}]}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'tunl0\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x8, 0x1, 0x1800000, 0x5, {{0x42, 0x4, 0x0, 0x9, 0x108, 0x65, 0x0, 0xc8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x4, [{@empty, 0x80}, {@rand_addr=0x64010101, 0x200}]}, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x91}, {@multicast1, 0x8}, {@private=0xa010101, 0x9}]}, @end, @generic={0x88, 0x6, "1a75d751"}, @end, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x0, [{@private=0xa010101, 0xfff}, {@loopback, 0x800}, {@broadcast, 0x2}, {@local}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x6, "47baa746"}, {0x1, 0xa, "662a0168dbd0c13c"}]}, @cipso={0x86, 0x49, 0x2, [{0x5, 0x12, "10811107628887f65974b94a8ab757b3"}, {0x1, 0x2}, {0x7, 0xe, "833f390fbeb149cb5466cd5f"}, {0x1, 0xb, "706f32338d4e2e10f0"}, {0x1, 0x6, "10b21a69"}, {0x7, 0x7, "a8c68e0f37"}, {0x2, 0x5, "15ac44"}, {0x2, 0x4, "23b4"}]}, @lsrr={0x83, 0x1b, 0x29, [@loopback, @empty, @multicast2, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x16, 0x2, [{0x0, 0xd, "7daabfe7975281c3a6f984"}, {0x6, 0x3, "fc"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001240)={@multicast2, @empty, 0x0}, &(0x7f0000001280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001340)={'ip6_vti0\x00', &(0x7f00000012c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0xe, 0x5, 0x11, @empty, @remote, 0x1, 0x72e629af95db8d3d, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001380)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x6, 0x1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x28, 0x400, 0x1}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001f00)=ANY=[@ANYBLOB="1c0a0000", @ANYRES16=0x0, @ANYBLOB="130b26bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2402028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400feffffff38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000b00000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fdffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004004164000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000010008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100010008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f002000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=r6, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f470000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="b800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3800afe5680701006d636173745f7265436f696e5f696e7465a1090005000300030000000800050005000000080001009351b5b504811886bf7c3650d8a65d6386ee63d340f8000080692b219c6943ccbada2bacf03b18e960c7fb14", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f7ffffff"], 0xa1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) 3.769329262s ago: executing program 2 (id=283): syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="42000040106d0e0055fd00563ab0b96a"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000040000000a00963700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESDEC=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) getpeername$netlink(r3, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000002180)=ANY=[@ANYBLOB="3c8716328241845dd71d05b52954f96c8fb828dc61f6c53be6f70e93e8eb61fbffffffef1375db7d381c8ed5e6e9f42d5c682df513c23e3dd71203572eae40dcf3e52269386c73184577b2b1de7da933bbda07118b9dc186676ac3a03a4bc6aaf2793ae409fa6934aafe09f87d5ab508e13847d5628cd05aea810ff9b33f2f06db67d637a8c1b61b90c7e1dfb37fc1056e2070c8fed1fca85e8df702771a2ea1b397c6ccdd564ece89", @ANYRES16=r4, @ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES16, @ANYBLOB="4ba78da8fe9e028c4b5964b5745cd2f9f2ee5e5e6746cb838675d24bd0aacf8def0cd9106170342c2a43d2ebf8c1edab979e11453d9292667efb6ede63163cb4b8cbdde0ffd1a7c3677b2bcc1bb3bbadeea9940844fcd9916344c4bc2c74f30a5a760af612ca6ec1400e2b021beea15cb783539a8a147d72ad0401407cb573efc9ad85623060a379c92e9d07adbf23da662c61bb69a56877b84bc8438c6f35478276c10de1c63161c4a13279a055b8f17665e30df07b2875332b7b444284bd3bca697360e245f339b65255da62a98a6548448ba28c42d69c284b116537e71a5fa8054c75c0172d1a6f9f292357295cfa"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ebffffffffffffff0007000000530000000000"], 0x48) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002140)={&(0x7f0000000380)="9a8add10e3bd8cfcdf3267aee181a5ba550af552c7cc9d3ccb5e07e35968c411c0a42904d6697ca0b6d0431866b4473e630b81a10685dd05d259b32425b12540e8f1ae7b5abfb6dcedc98e3bd79bee8ebef86bf4140065eb53d73df8debf954525107f68", &(0x7f0000000400)=""/154, &(0x7f0000000580)="ffb3d3a00571f82381ec45da59813862f689721c6709d7224771d4c5f070b18b8eac7511dad9c934e5b26b4dc72a6d32843b54b1f85a27f46c07cbd3c1a0690ab810208f8f205862bd5a2dd87ce696487be238d8b04ddb329341", &(0x7f0000001140)="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", 0x9, r1}, 0x38) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) unshare(0x2040400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x569, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x106, 0x8001, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0xa, 0x3, 0x100000e, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xc, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x10001, 0xc8, 0xffffffff, 0xe, 0x2bf, 0x6c8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0xb, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfdbfffff, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x3, 0x6d01, 0x6, 0x3a, 0x200, 0x97c1, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0xbdd, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xb, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x5, 0x2000002, 0x155, 0x60a7, 0x6, 0x12, 0x3, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x3, 0x5, 0x7ff, 0xd4, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="120100032f5b372043195522179d010203010902340001070920490904"], &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) 2.925059276s ago: executing program 3 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001400)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0x3, 0x5, 0x0, 0x96}, 0x20) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) (async, rerun: 64) r3 = dup(r2) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x39) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x17}]}) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000080)) lchown(0x0, 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) unshare(0x22020600) (async) flock(0xffffffffffffffff, 0x1) (async) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x4000}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.867143458s ago: executing program 3 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) unshare(0x20000400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r1, 0x11, 0x0, 0x74000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xc, 0x9, 0x9, 0xc, 0x2, 0x4, 0x4}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0xffffffffffffffff}]}) r7 = fsopen(&(0x7f0000000080)='fuse\x00', 0x1) fsmount(r7, 0x1, 0x80) 2.723844198s ago: executing program 3 (id=287): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, r4, 0x0, r3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) 2.679849283s ago: executing program 3 (id=288): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) unlinkat(r3, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) sendmsg$inet(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x14048891) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) 2.394576841s ago: executing program 4 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r8) shmdt(r8) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r9, 0x7af, &(0x7f0000001100)={@hyper, 0x8001}) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, &(0x7f0000000080)=0xd8eb) 2.214255548s ago: executing program 2 (id=290): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000500)={0xa8, 0x2, 0x0, [{0xf2, 0x10d2, 0x7, 0x1, 0x7, 0x9, 0x4, '\x00', 0x2}, {0x6, 0x39, 0xfffffffffffff88c, 0xb, 0x1, 0x4, 0xf3}]}) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) unshare(0x44040200) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4000000}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0202040008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = accept4$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000140)=0x8500, 0x8) 1.995541623s ago: executing program 4 (id=291): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 1.883749161s ago: executing program 1 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x212480, 0x0) (rerun: 64) write$vga_arbiter(r3, &(0x7f0000000200), 0xf) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) unshare(0x400) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xfff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x100, 0x80, 0x8, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xb, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x41], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f4, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x4, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x24], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x9d2, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xfffff7ff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) (async, rerun: 32) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x24044880) (async, rerun: 64) timer_create(0x1, 0x0, &(0x7f0000000000)) (rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 1.824142134s ago: executing program 4 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 1.619982252s ago: executing program 4 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003280), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f00000032c0)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0xab, 0x8d}}]}, 0x3c}}, 0x0) 1.619727954s ago: executing program 1 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002bc0)={0x30, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x10) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) 1.539601337s ago: executing program 1 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) (async) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020100e000000108000200e00000010c0002800500010000000000240002801440007f080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a080000008000240000000020800034000000002240001801400018008000100"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) (async) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0xfe}, 0x2) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8001, 0x9}, &(0x7f00000001c0)=0xc) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) (async) get_mempolicy(0x0, &(0x7f0000000100), 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4) (async) syz_io_uring_setup(0x4b2, &(0x7f0000000180)={0x0, 0x383a, 0x0, 0x80005, 0x91}, 0x0, &(0x7f0000000000), &(0x7f0000000200)) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x200401, 0x6, 0x7, 0x5, 0xfffffffd, 0x7}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.516438977s ago: executing program 4 (id=297): syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000180000000000899078ac141400ac14145613e79800"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4102, 0x1006}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/35, 0x23}], 0x4}, 0x400000}], 0x3, 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48050}, 0x2000c010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073790900000000000800054000000021480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003801800008008000340000000020c00044000000000000003ff140000001000010000000000000000000084000a"], 0xcc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf25740000000c0099001500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001094) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000180000000000899078ac141400ac14145613e79800"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4102, 0x1006}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/35, 0x23}], 0x4}, 0x400000}], 0x3, 0x20000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48050}, 0x2000c010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073790900000000000800054000000021480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003801800008008000340000000020c00044000000000000003ff140000001000010000000000000000000084000a"], 0xcc}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf25740000000c0099001500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001094) (async) 1.283364307s ago: executing program 0 (id=298): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) readv(r2, &(0x7f0000000a80)=[{0x0}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 1.272726126s ago: executing program 4 (id=299): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[], 0x0, 0x160, 0x0, 0x1, 0xfffffff7}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfbfffff9, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x9, 0x1, 0x1, 0x5, 0x9}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc848) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbdd1}], 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r11, 0x0, 0x0) r12 = dup(r10) write$UHID_INPUT(r12, &(0x7f0000001a00)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be8afb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27c9a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e218eb4035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f06f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378fd4dd891e937c2ea5410e05130050000f1000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca503705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102b0c7829389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d8224fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d784cfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000f400", 0x1000}}, 0x1006) ioctl$KVM_RUN(r7, 0xae80, 0x0) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r13, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r14, 0x0, &(0x7f0000000600)="a03efb55a0fbaa930e089cca7d6c82ea79ef447031970029ef603fea6ea54d84b469d58d7254ad727946a387ef22196427081d38e6a697bbf2efe8945cc0033ad229afa81e48df5f1d4641d8ab889eb9e081623f7674", 0x811dde53575526b0, 0x41f2e}) 1.197445973s ago: executing program 1 (id=300): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x10, 0x700, 0xe2, 0x4, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8f1ffff18000100000000000000003676178e4bc6aae300000000000000000000000000000600000000ffff0000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000fbfffffffeffffff000000000000000000000000000000000000000000000002000000000000000000000000c06b6e000000000000000000"], 0xb8}}, 0x2c000010) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace(0x10, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000120001"], 0x4c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0xc9, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x30}) 148.251149ms ago: executing program 3 (id=301): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0xbe0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300001200", [0x10, 0x4]}}) 146.557324ms ago: executing program 0 (id=302): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'gretap0\x00', 0x1000}) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x4000, 0x3, 0x6}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed") r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r6, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x244, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x214, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x108, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x30000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7b}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @loopback, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r10], 0x18}, 0x40c0) 0s ago: executing program 3 (id=303): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64], 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0xffffffffffffff15, 0x239c1317) (async) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000000830144b47000000000301090212000106075037090400000001032009"], &(0x7f0000000480)={0x0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f410005141004046eb456019374598fa80cc99925c6e5b00a10030001000015"], 0x1, [{0x0, 0x0}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000240)={@loopback, @remote, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtclass={0x44, 0x28, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0, 0x1}, {0x8, 0x8}, {0x9, 0xb}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xffffff81, 0x1, 0xe}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000001000071102800000000001f1a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) kernel console output (not intermixed with test programs): [ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.852772][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.872992][ T5619] team0: Port device team_slave_0 added [ 73.888310][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.895347][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.921443][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.942748][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.949791][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.976719][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.990205][ T5619] team0: Port device team_slave_1 added [ 73.997587][ T5624] team0: Port device team_slave_0 added [ 74.004278][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.011280][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.037530][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.057395][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.064672][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.090674][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.117301][ T5624] team0: Port device team_slave_1 added [ 74.123504][ T5611] Bluetooth: hci0: command tx timeout [ 74.135943][ T5623] team0: Port device team_slave_0 added [ 74.145001][ T5623] team0: Port device team_slave_1 added [ 74.194585][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.200896][ T5610] Bluetooth: hci1: command tx timeout [ 74.201748][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.201813][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.203680][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.207610][ T5611] Bluetooth: hci2: command tx timeout [ 74.233152][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.233176][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.290325][ T5610] Bluetooth: hci3: command tx timeout [ 74.300986][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.307959][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.334249][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.359770][ T5610] Bluetooth: hci4: command tx timeout [ 74.373994][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.381155][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.407372][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.427198][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.434350][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.460489][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.496445][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.503518][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.529946][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.546074][ T5620] hsr_slave_0: entered promiscuous mode [ 74.552746][ T5620] hsr_slave_1: entered promiscuous mode [ 74.566336][ T5621] hsr_slave_0: entered promiscuous mode [ 74.572731][ T5621] hsr_slave_1: entered promiscuous mode [ 74.579261][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 74.585476][ T5621] Cannot create hsr debugfs directory [ 74.595840][ T5619] hsr_slave_0: entered promiscuous mode [ 74.602435][ T5619] hsr_slave_1: entered promiscuous mode [ 74.608412][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 74.614252][ T5619] Cannot create hsr debugfs directory [ 74.648875][ T5624] hsr_slave_0: entered promiscuous mode [ 74.655450][ T5624] hsr_slave_1: entered promiscuous mode [ 74.661498][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 74.667223][ T5624] Cannot create hsr debugfs directory [ 74.790354][ T5623] hsr_slave_0: entered promiscuous mode [ 74.796552][ T5623] hsr_slave_1: entered promiscuous mode [ 74.802895][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 74.808616][ T5623] Cannot create hsr debugfs directory [ 75.214100][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.226840][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.234635][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.244823][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.253745][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.263271][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.271102][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.280761][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.342841][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.355068][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.363218][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.373134][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.381312][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.390922][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.404425][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.414084][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.504718][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.514286][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.522751][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.532940][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.541505][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.552207][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.560034][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.569895][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.654648][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.663768][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.676922][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.687181][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.695121][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.704248][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.719426][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.730331][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.777823][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.841746][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.851243][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.859110][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.869145][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.880562][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.893068][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.902690][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.910762][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.920015][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.935579][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.942993][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.978899][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.986029][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.029460][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.089292][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.126733][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.133863][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.165014][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.172154][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.188667][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.200136][ T5610] Bluetooth: hci0: command tx timeout [ 76.214920][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.262513][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.274120][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.290564][ T5610] Bluetooth: hci1: command tx timeout [ 76.302653][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.309777][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.321923][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.341236][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.348331][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.361445][ T5610] Bluetooth: hci2: command tx timeout [ 76.361457][ T5611] Bluetooth: hci3: command tx timeout [ 76.376651][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.391605][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.398759][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.418468][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.426882][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.434036][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.443385][ T5610] Bluetooth: hci4: command tx timeout [ 76.519456][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.532536][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.558266][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.565376][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.580757][ T5620] veth0_vlan: entered promiscuous mode [ 76.602481][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.609843][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.626856][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.644546][ T5620] veth1_vlan: entered promiscuous mode [ 76.724836][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.741538][ T5620] veth0_macvtap: entered promiscuous mode [ 76.780476][ T5620] veth1_macvtap: entered promiscuous mode [ 76.795845][ T5621] veth0_vlan: entered promiscuous mode [ 76.807748][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.840704][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.853355][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.863365][ T5621] veth1_vlan: entered promiscuous mode [ 76.903739][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.946016][ T5619] veth0_vlan: entered promiscuous mode [ 76.962053][ T3337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.034633][ T5619] veth1_vlan: entered promiscuous mode [ 77.052345][ T5621] veth0_macvtap: entered promiscuous mode [ 77.064017][ T5621] veth1_macvtap: entered promiscuous mode [ 77.115365][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.124175][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.132914][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.140561][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153331][ T5624] veth0_vlan: entered promiscuous mode [ 77.182340][ T5623] veth0_vlan: entered promiscuous mode [ 77.208323][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.225368][ T5624] veth1_vlan: entered promiscuous mode [ 77.243159][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.253897][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.265789][ T5623] veth1_vlan: entered promiscuous mode [ 77.277265][ T5619] veth0_macvtap: entered promiscuous mode [ 77.299782][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312892][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.339507][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.354194][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354675][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354918][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.383065][ T5619] veth1_macvtap: entered promiscuous mode [ 77.424269][ T5623] veth0_macvtap: entered promiscuous mode [ 77.440403][ T3344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.461797][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.496804][ T5623] veth1_macvtap: entered promiscuous mode [ 77.523459][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.551022][ T5624] veth0_macvtap: entered promiscuous mode [ 77.571343][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.589229][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.612093][ T5624] veth1_macvtap: entered promiscuous mode [ 77.654049][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.683589][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.694762][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.705305][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.712625][ T5705] netlink: 'syz.0.6': attribute type 5 has an invalid length. [ 77.714332][ T5705] netlink: 'syz.0.6': attribute type 63 has an invalid length. [ 77.780750][ T3337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.851685][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.873166][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.896429][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.899902][ T5707] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 77.905973][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.940965][ T3344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.954795][ T3344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.040564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.065227][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.077439][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.086746][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.103003][ T3344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119912][ T3337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.165453][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.179520][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.266609][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.278482][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290601][ T5610] Bluetooth: hci0: command tx timeout [ 78.301267][ T5699] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.305735][ T5710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.314840][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.318198][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.359951][ T3344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368788][ T5610] Bluetooth: hci1: command tx timeout [ 78.404805][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.431330][ T5710] vivid-001: ================= START STATUS ================= [ 78.438892][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.449950][ T5610] Bluetooth: hci3: command tx timeout [ 78.452236][ T5611] Bluetooth: hci2: command tx timeout [ 78.456703][ T5710] vivid-001: Radio HW Seek Mode: Bounded [ 78.467568][ T5710] vivid-001: Radio Programmable HW Seek: false [ 78.480898][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 78.490453][ T5710] vivid-001: RDS Rx I/O Mode: Block I/O [ 78.498087][ T5710] vivid-001: Generate RBDS Instead of RDS: false [ 78.505346][ T5710] vivid-001: RDS Reception: true [ 78.511979][ T5699] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 78.517305][ T5710] vivid-001: RDS Program Type: 0 inactive [ 78.527426][ T5710] vivid-001: RDS PS Name: inactive [ 78.533116][ T5611] Bluetooth: hci4: command tx timeout [ 78.535516][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.554008][ T5699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.562731][ T5710] vivid-001: RDS Radio Text: inactive [ 78.574401][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.586388][ T5699] usb 3-1: config 0 has no interface number 0 [ 78.590356][ T5710] vivid-001: RDS Traffic Announcement: false inactive [ 78.599543][ T5699] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.611735][ T5710] vivid-001: RDS Traffic Program: [ 78.621722][ T5699] usb 3-1: config 0 interface 52 has no altsetting 0 [ 78.634829][ T5699] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 78.644390][ T5710] false [ 78.657096][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.664408][ T3344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697786][ T5710] inactive [ 78.719464][ T5699] usb 3-1: config 0 descriptor?? [ 78.720073][ T3344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734952][ T5710] vivid-001: RDS Music: false inactive [ 78.752960][ T5710] vivid-001: ================== END STATUS ================== [ 78.885449][ T5720] syzkaller0: entered promiscuous mode [ 78.906468][ T5720] syzkaller0: entered allmulticast mode [ 79.284827][ T5699] usb 3-1: Can not set alternate setting to 1, error: -71 [ 79.312221][ T5699] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 79.361605][ T5689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.362685][ T5699] usb 3-1: USB disconnect, device number 2 [ 79.552099][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 79.581219][ T5689] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 79.617529][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.688694][ T5689] usb 4-1: config 0 descriptor?? [ 79.706648][ T5726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.137109][ T5739] syz_tun: entered promiscuous mode [ 80.168874][ T5739] syz_tun: left promiscuous mode [ 80.308578][ T5730] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.369964][ T5611] Bluetooth: hci0: command tx timeout [ 80.408871][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.440085][ T5611] Bluetooth: hci1: command tx timeout [ 80.467963][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.519943][ T5611] Bluetooth: hci2: command tx timeout [ 80.529978][ T5611] Bluetooth: hci3: command tx timeout [ 80.599772][ T5611] Bluetooth: hci4: command tx timeout [ 80.631176][ T5660] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.740099][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.795899][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.830335][ T5660] usb 2-1: Using ep0 maxpacket: 16 [ 80.855955][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.895940][ T5660] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.932402][ T5660] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.958249][ T5660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.979309][ T5660] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 81.015938][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.064063][ T5660] usb 2-1: config 0 descriptor?? [ 81.179702][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.309851][ T5699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.350461][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 81.370902][ T42] usb 3-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config [ 81.396882][ T42] usb 3-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.438850][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.459479][ T42] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 81.496048][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 81.501390][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.537313][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.559300][ T42] usb 3-1: config 0 descriptor?? [ 81.586893][ T5699] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.615661][ T42] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 81.639511][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.652908][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.684501][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.703575][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x2 [ 81.725007][ T5699] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 81.742516][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.757167][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.764040][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.789099][ T5699] usb 1-1: Product: syz [ 81.799159][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.813965][ T5699] usb 1-1: Manufacturer: 뼕资呎謚ⵍᤵ䒴䑬톹Ⓡᮮㄽ㰗筨형鮫訷⵲ﺣ諝鰳蛢迊鮅摪굆哌馗ꐕ㾖陨臯Ꞇࡂ驁╛ [ 81.829056][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.874761][ T5660] glorious 0003:258A:0033.0001: unknown main item tag 0x0 [ 81.907837][ T5699] usb 1-1: SerialNumber: syz [ 81.931175][ T5660] glorious 0003:258A:0033.0001: item fetching failed at offset 10/40 [ 81.985737][ T5660] glorious 0003:258A:0033.0001: probe with driver glorious failed with error -22 [ 82.155285][ T5762] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 82.313132][ T5689] usbhid 4-1:0.0: can't add hid device: -71 [ 82.332858][ T5764] gretap1: entered promiscuous mode [ 82.342372][ T5689] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.410945][ T5764] bridge0: port 3(gretap1) entered blocking state [ 82.435822][ T5689] usb 4-1: USB disconnect, device number 2 [ 82.496892][ T5764] bridge0: port 3(gretap1) entered disabled state [ 82.524883][ T5764] gretap1: entered allmulticast mode [ 82.682153][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.779635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.802119][ T5762] bridge0: port 4(bond1) entered blocking state [ 82.808604][ T5762] bridge0: port 4(bond1) entered disabled state [ 82.817642][ T5762] bond1: entered allmulticast mode [ 82.832900][ T5762] bond1: entered promiscuous mode [ 82.841758][ T5660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.843481][ T35] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 82.850272][ T5660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.911441][ T5767] bond1: left allmulticast mode [ 82.918173][ T5767] bond1: left promiscuous mode [ 82.929581][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.951612][ T5767] bridge0: port 4(bond1) entered disabled state [ 82.979665][ T5767] gretap1: left allmulticast mode [ 82.989096][ T5768] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 83.023098][ T5767] bridge0: port 3(gretap1) entered disabled state [ 83.065248][ T5767] bridge_slave_1: left allmulticast mode [ 83.082516][ T5767] bridge_slave_1: left promiscuous mode [ 83.096110][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.140984][ T5767] bridge_slave_0: left allmulticast mode [ 83.152371][ T5767] bridge_slave_0: left promiscuous mode [ 83.167968][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.209693][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.401383][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 83.431347][ T10] usb 4-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 83.466098][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.506253][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 83.537411][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.588167][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 83.616344][ T5696] usb 3-1: USB disconnect, device number 3 [ 83.617977][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.690356][ T10] usb 4-1: Product: syz [ 83.713596][ T10] usb 4-1: Manufacturer: syz [ 83.729128][ T10] usb 4-1: SerialNumber: syz [ 84.496445][ T5660] usb 2-1: USB disconnect, device number 2 [ 84.811932][ T5699] usb 1-1: USB disconnect, device number 2 [ 84.953046][ T5793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21'. [ 85.050840][ T5793] warning: `syz.4.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.086383][ T5795] syz.0.20 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 85.116164][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 85.116188][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.116207][ T5795] Call Trace: [ 85.116215][ T5795] [ 85.116222][ T5795] dump_stack_lvl+0xe8/0x150 [ 85.116263][ T5795] dump_header+0xd3/0x4b0 [ 85.116285][ T5795] oom_kill_process+0x3ab/0x970 [ 85.116308][ T5795] out_of_memory+0x1064/0x1480 [ 85.116334][ T5795] ? try_charge_memcg+0xbca/0x1590 [ 85.116370][ T5795] ? preempt_schedule_common+0x82/0xd0 [ 85.116397][ T5795] ? __pfx_out_of_memory+0x10/0x10 [ 85.116441][ T5795] try_charge_memcg+0xc74/0x1590 [ 85.116481][ T5795] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.116512][ T5795] ? percpu_ref_tryget+0x15/0x180 [ 85.116542][ T5795] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 85.116573][ T5795] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 85.116596][ T5795] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 85.116620][ T5795] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 85.116664][ T5795] ? __kmalloc_cache_noprof+0x150/0x660 [ 85.116688][ T5795] __kmalloc_cache_noprof+0x372/0x660 [ 85.116711][ T5795] ? filename_lookup+0x3fa/0x5d0 [ 85.116734][ T5795] ? __kmalloc_cache_noprof+0x150/0x660 [ 85.116756][ T5795] ? alloc_mnt_ns+0xb3/0x2c0 [ 85.116777][ T5795] ? alloc_mnt_ns+0xb3/0x2c0 [ 85.116806][ T5795] alloc_mnt_ns+0xb3/0x2c0 [ 85.116842][ T5795] open_new_namespace+0x1ca/0xd90 [ 85.116885][ T5795] ? __pfx_open_new_namespace+0x10/0x10 [ 85.116915][ T5795] ? strncpy_from_user+0x150/0x2c0 [ 85.116941][ T5795] ? do_getname+0x151/0x250 [ 85.116967][ T5795] vfs_open_tree+0x32d/0x3d0 [ 85.117002][ T5795] ? __pfx_vfs_open_tree+0x10/0x10 [ 85.117038][ T5795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.117060][ T5795] __x64_sys_open_tree+0x96/0x110 [ 85.117085][ T5795] do_syscall_64+0x174/0x580 [ 85.117110][ T5795] ? trace_irq_disable+0x3b/0x140 [ 85.117133][ T5795] ? clear_bhb_loop+0x70/0xc0 [ 85.117157][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.117177][ T5795] RIP: 0033:0x7f280879e0d9 [ 85.117202][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.117216][ T5795] RSP: 002b:00007f2809624028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 85.117236][ T5795] RAX: ffffffffffffffda RBX: 00007f2808a25fa0 RCX: 00007f280879e0d9 [ 85.117247][ T5795] RDX: 0000000000001902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 85.117260][ T5795] RBP: 00007f2808835024 R08: 0000000000000000 R09: 0000000000000000 [ 85.117270][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.117282][ T5795] R13: 00007f2808a26038 R14: 00007f2808a25fa0 R15: 00007f2808b4fa48 [ 85.117317][ T5795] [ 85.118906][ T5795] memory: usage 0kB, limit 0kB, failcnt 22 [ 85.470121][ T5660] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.546631][ T5795] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 85.561225][ T5699] net_ratelimit: 8 callbacks suppressed [ 85.561239][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.601436][ T5795] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 85.627206][ T5795] Memory cgroup stats for /syz0/test: [ 85.627504][ T5795] cache 0 [ 85.647060][ T5660] usb 2-1: Using ep0 maxpacket: 8 [ 85.659557][ T5795] rss 0 [ 85.672255][ T5660] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 85.683118][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 85.695566][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.706327][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 85.716226][ T5795] rss_huge 0 [ 85.716524][ T10] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 85.726858][ T5660] usb 2-1: config 0 has no interface number 0 [ 85.733701][ T5660] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.750266][ T5795] shmem 0 [ 85.750601][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 85.764194][ T5660] usb 2-1: config 0 interface 52 has no altsetting 0 [ 85.776367][ T5795] mapped_file 0 [ 85.783062][ T5660] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 85.795552][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.812685][ T5795] dirty 0 [ 85.832687][ T5795] writeback 0 [ 85.863981][ T5795] workingset_refault_anon 0 [ 85.864060][ T5660] usb 2-1: config 0 descriptor?? [ 85.895840][ T5795] workingset_refault_file 0 [ 85.921176][ T5795] swap 0 [ 85.924099][ T5795] swapcached 0 [ 85.927487][ T5795] pgpgin 0 [ 85.930597][ T5795] pgpgout 0 [ 85.933713][ T5795] pgfault 1 [ 85.936836][ T5795] pgmajfault 0 [ 85.937399][ T10] usb 4-1: USB disconnect, device number 3 [ 85.989062][ T5795] inactive_anon 0 [ 86.011200][ T5795] active_anon 0 [ 86.029755][ T5795] inactive_file 0 [ 86.058209][ T5795] active_file 0 [ 86.070032][ T5795] unevictable 0 [ 86.073977][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.104689][ T5795] hierarchical_memory_limit 0 [ 86.116181][ T5795] hierarchical_memsw_limit 9223372036854771712 [ 86.126709][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.144824][ T5795] total_cache 0 [ 86.155395][ T5795] total_rss 0 [ 86.164821][ T5795] total_rss_huge 0 [ 86.169089][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.186429][ T5795] total_shmem 0 [ 86.207340][ T5795] total_mapped_file 0 [ 86.236918][ T5795] total_dirty 0 [ 86.258059][ T5795] total_writeback 0 [ 86.282542][ T5795] total_workingset_refault_anon 0 [ 86.300564][ T5795] total_workingset_refault_file 0 [ 86.318937][ T5795] total_swap 0 [ 86.333066][ T5795] total_swapcached 0 [ 86.339762][ T5795] total_pgpgin 0 [ 86.345739][ T5795] total_pgpgout 0 [ 86.368899][ T5795] total_pgfault 1 [ 86.373187][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.379042][ T5795] total_pgmajfault 0 [ 86.380901][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.409551][ T5795] total_inactive_anon 0 [ 86.418722][ T5660] usb 2-1: Can not set alternate setting to 1, error: -71 [ 86.431420][ T5795] total_active_anon 0 [ 86.435772][ T5660] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 86.448278][ T5795] total_inactive_file 0 [ 86.458936][ T5795] total_active_file 0 [ 86.468049][ T5660] usb 2-1: USB disconnect, device number 3 [ 86.474791][ T5795] total_unevictable 0 [ 86.484424][ T5795] anon_cost 0 [ 86.497429][ T5795] file_cost 0 [ 86.502808][ T5795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.20,pid=5790,uid=0 [ 86.521071][ T5795] Memory cgroup out of memory: Killed process 5790 (syz.0.20) total-vm:104360kB, anon-rss:1428kB, file-rss:22640kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 86.597049][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.617240][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.687405][ T1132] cfg80211: failed to load regulatory.db [ 86.891115][ T3337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.922399][ T3337] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.944322][ T3337] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.954689][ T3337] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.125739][ T5827] binder: 5825:5827 ioctl c018620c 200000000100 returned -22 [ 87.389921][ T5660] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.561028][ T5721] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.572632][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.600927][ T5660] usb 2-1: config 0 has no interfaces? [ 87.619992][ T5660] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 87.661607][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.670868][ T5660] usb 2-1: Product: syz [ 87.691420][ T5660] usb 2-1: Manufacturer: syz [ 87.700107][ T5660] usb 2-1: SerialNumber: syz [ 87.723481][ T5660] usb 2-1: config 0 descriptor?? [ 87.759758][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 87.776448][ T5721] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.799857][ T5721] usb 4-1: config 0 has no interface number 0 [ 87.820843][ T5721] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 87.852105][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.877741][ T5721] usb 4-1: Product: syz [ 87.898437][ T5721] usb 4-1: Manufacturer: syz [ 87.916672][ T5721] usb 4-1: SerialNumber: syz [ 87.933365][ T5721] usb 4-1: config 0 descriptor?? [ 87.959065][ T5721] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 87.973873][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 88.029434][ T5699] usb 2-1: USB disconnect, device number 4 [ 88.340439][ T5845] sg_write: process 34 (syz.2.33) changed security contexts after opening file descriptor, this is not allowed. [ 88.524621][ T5847] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 88.557969][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.580884][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.625422][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.640795][ T5699] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.653777][ T5847] team0: Port device netdevsim1 added [ 88.663223][ T5848] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 88.698074][ T5851] syzkaller1: entered promiscuous mode [ 88.711280][ T5851] syzkaller1: entered allmulticast mode [ 88.742019][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.770458][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.832059][ T5699] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 88.857893][ T5847] netlink: 100 bytes leftover after parsing attributes in process `syz.0.32'. [ 88.869741][ T5699] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 88.895664][ T5699] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.929533][ T5699] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.954202][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.963816][ T5848] team0: Port device netdevsim1 removed [ 89.021254][ T5699] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.046221][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.056564][ T5699] usb 3-1: invalid MIDI in EP 0 [ 89.321014][ T5848] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 89.332271][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.371209][ T5721] gspca_spca1528: reg_w err -110 [ 89.400800][ T5721] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 89.418492][ T5699] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 90.323516][ T5866] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 90.463181][ T5699] usb 4-1: USB disconnect, device number 4 [ 90.622840][ T5874] ALSA: mixer_oss: invalid OSS volume '' [ 90.629686][ T5874] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 90.650790][ T5874] ALSA: mixer_oss: invalid OSS volume '' [ 90.919883][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.050466][ T5883] syzkaller0: entered promiscuous mode [ 91.055968][ T5883] syzkaller0: entered allmulticast mode [ 91.060846][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.119829][ T5660] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.147539][ T5885] tipc: Started in network mode [ 91.153633][ T5885] tipc: Node identity d6a6f7eaea65, cluster identity 4711 [ 91.182817][ T5885] tipc: Enabled bearer , priority 0 [ 91.218132][ T5885] tipc: Resetting bearer [ 91.269209][ T5689] usb 3-1: USB disconnect, device number 4 [ 91.275210][ T5660] usb 2-1: Using ep0 maxpacket: 8 [ 91.288583][ T5660] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 91.298639][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.308817][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.316411][ T5660] usb 2-1: config 0 has no interface number 0 [ 91.323036][ T5660] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.338868][ T5660] usb 2-1: config 0 interface 52 has no altsetting 0 [ 91.345823][ T5660] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 91.360762][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.377019][ T5660] usb 2-1: config 0 descriptor?? [ 91.414817][ T5887] netlink: 208 bytes leftover after parsing attributes in process `syz.2.44'. [ 91.459815][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.580239][ T9] usb usb4-port1: attempt power cycle [ 91.618738][ T5890] netlink: 'syz.2.45': attribute type 8 has an invalid length. [ 91.879077][ T5882] tipc: Resetting bearer [ 91.918601][ T5882] tipc: Disabling bearer [ 91.923066][ T5660] usb 2-1: Can not set alternate setting to 1, error: -71 [ 91.934822][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.952648][ T5660] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 91.982305][ T9] usb 4-1: device descriptor read/8, error -71 [ 91.991685][ T5660] usb 2-1: USB disconnect, device number 5 [ 92.166185][ T5897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.186929][ T5897] netlink: 14 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.207946][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.221958][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.231255][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.242913][ T5897] bond0 (unregistering): Released all slaves [ 92.254182][ T9] usb 4-1: device descriptor read/8, error -71 [ 92.370754][ T9] usb usb4-port1: unable to enumerate USB device [ 92.640951][ T5906] netlink: 'syz.1.50': attribute type 5 has an invalid length. [ 92.691057][ T5906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.725221][ T5906] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 92.740682][ T5908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 92.842989][ T5911] netlink: 'syz.1.51': attribute type 10 has an invalid length. [ 92.852830][ T5911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51'. [ 92.881618][ T5911] dummy0: entered promiscuous mode [ 92.893363][ T5911] bridge0: port 3(dummy0) entered blocking state [ 92.918343][ T5911] bridge0: port 3(dummy0) entered disabled state [ 92.941926][ T5911] dummy0: entered allmulticast mode [ 92.962532][ T5911] bridge0: port 3(dummy0) entered blocking state [ 92.968983][ T5911] bridge0: port 3(dummy0) entered forwarding state [ 93.909786][ T1132] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.936579][ T5927] loop9: detected capacity change from 0 to 255852544 [ 94.001272][ T5929] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 94.112217][ T1132] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.145119][ T1132] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 94.184207][ T1132] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 94.194289][ T5936] fuse: Bad value for 'fd' [ 94.206538][ T1132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.219773][ T1132] usb 5-1: Product: syz [ 94.237175][ T1132] usb 5-1: Manufacturer: syz [ 94.253558][ T1132] usb 5-1: SerialNumber: syz [ 94.423028][ T5936] netlink: 180 bytes leftover after parsing attributes in process `syz.0.58'. [ 94.496644][ T5923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.577404][ T1132] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 94.588987][ T1132] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 94.611474][ T1132] usb 5-1: USB disconnect, device number 2 [ 94.639832][ T5699] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.711780][ T5660] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 94.799717][ T189] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 94.799744][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 94.815556][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 94.829155][ T5699] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 94.838510][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.851619][ T5699] usb 2-1: Product: syz [ 94.855865][ T5699] usb 2-1: Manufacturer: syz [ 94.860815][ T5699] usb 2-1: SerialNumber: syz [ 94.872801][ T5660] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 94.885282][ T5660] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 94.894788][ T5660] usb 4-1: config 150 has no interface number 0 [ 94.903869][ T5660] usb 4-1: config 150 interface 204 has no altsetting 0 [ 94.917344][ T5660] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 94.927844][ T5660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.935956][ T5660] usb 4-1: Product: syz [ 94.942750][ T5660] usb 4-1: Manufacturer: syz [ 94.951542][ T5660] usb 4-1: SerialNumber: syz [ 94.959700][ T189] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.078797][ T5699] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 95.101752][ T189] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 95.176561][ T5660] xr_serial 4-1:150.204: skipping garbage [ 95.189749][ T5660] xr_serial 4-1:150.204: xr_serial converter detected [ 95.220962][ T5660] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 95.230425][ T5660] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 95.256794][ T5660] usb 4-1: USB disconnect, device number 9 [ 95.274500][ T5699] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.279756][ T189] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.295620][ T5660] xr_serial 4-1:150.204: device disconnected [ 95.303398][ T5696] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.332879][ T189] usb usb1-port1: attempt power cycle [ 95.344312][ T5699] usb 2-1: USB disconnect, device number 6 [ 95.384419][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.500721][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 95.507983][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.518300][ T5696] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.529926][ T5696] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 95.539290][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.547517][ T5721] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 95.555378][ T5696] usb 3-1: Product: syz [ 95.560030][ T5696] usb 3-1: Manufacturer: 뼕资呎謚ⵍᤵ䒴䑬톹Ⓡᮮㄽ㰗筨형鮫訷⵲ﺣ諝鰳蛢迊鮅摪굆哌馗ꐕ㾖陨臯Ꞇࡂ驁╛ [ 95.575866][ T5696] usb 3-1: SerialNumber: syz [ 95.689742][ T189] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 95.712984][ T189] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.732764][ T5721] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 95.748185][ T5721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.777241][ T5963] ======================================================= [ 95.777241][ T5963] WARNING: The mand mount option has been deprecated and [ 95.777241][ T5963] and is ignored by this kernel. Remove the mand [ 95.777241][ T5963] option from the mount to silence this warning. [ 95.777241][ T5963] ======================================================= [ 95.844513][ T5721] usb 5-1: config 0 has no interface number 0 [ 95.856465][ T5721] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.869730][ T189] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 95.888945][ T5721] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.893462][ T189] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.900493][ T5721] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 95.928688][ T5721] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 95.928806][ T189] usb usb1-port1: unable to enumerate USB device [ 95.960909][ T5721] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 95.999982][ T5721] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 96.018454][ T5721] usb 5-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 96.048285][ T5721] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 96.087000][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.117778][ T5721] usb 5-1: config 0 descriptor?? [ 96.132987][ T5961] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 96.299740][ T1132] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 96.309848][ T189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.436045][ T5721] usb 5-1: string descriptor 0 read error: -71 [ 96.453647][ T5721] cypress_m8 5-1:0.244: DeLorme Earthmate USB converter detected [ 96.464184][ T1132] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.470895][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 96.476194][ T5721] earthmate ttyUSB0: required endpoint is missing [ 96.483609][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.486160][ T1132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.497850][ T189] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 96.518632][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.530218][ T5721] usb 5-1: USB disconnect, device number 3 [ 96.535935][ T189] usb 2-1: Product: syz [ 96.547423][ T1132] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.557004][ T5721] cypress_m8 5-1:0.244: device disconnected [ 96.560605][ T189] usb 2-1: Manufacturer: syz [ 96.567721][ T1132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.576193][ T189] usb 2-1: SerialNumber: syz [ 96.582129][ T1132] usb 4-1: SerialNumber: syz [ 96.595557][ T189] usb 2-1: config 0 descriptor?? [ 96.824727][ T1132] usb 4-1: 0:2 : does not exist [ 96.879669][ T5966] openvswitch: netlink: ct_state flags 0001010a unsupported [ 96.894014][ T1132] usb 4-1: USB disconnect, device number 10 [ 96.923914][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.379994][ T189] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.406905][ T5660] usb 2-1: USB disconnect, device number 7 [ 97.442665][ T5975] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 97.451999][ T5975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.561230][ T189] usb 5-1: Using ep0 maxpacket: 8 [ 97.578714][ T189] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 97.598997][ T189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.613380][ T189] usb 5-1: config 0 has no interface number 0 [ 97.623191][ T189] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.641744][ T189] usb 5-1: config 0 interface 52 has no altsetting 0 [ 97.648863][ T189] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 97.658746][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.670354][ T189] usb 5-1: config 0 descriptor?? [ 97.838209][ T5696] usb 3-1: USB disconnect, device number 5 [ 97.849849][ T5660] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.991439][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 98.000771][ T5682] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.010443][ T1132] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 98.021175][ T189] usb 5-1: Can not set alternate setting to 1, error: -71 [ 98.028428][ T189] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 98.038396][ T5660] usb 2-1: Using ep0 maxpacket: 16 [ 98.045531][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.057030][ T189] usb 5-1: USB disconnect, device number 4 [ 98.066084][ T5660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.079312][ T5660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.091161][ T5660] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.100866][ T5660] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.114884][ T5660] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.124262][ T5660] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.132302][ T5660] usb 2-1: Manufacturer: syz [ 98.140601][ T5660] usb 2-1: config 0 descriptor?? [ 98.172838][ T1132] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 98.183072][ T1132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.192216][ T5682] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 98.192924][ T1132] usb 4-1: Product: syz [ 98.203313][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.209762][ T1132] usb 4-1: Manufacturer: syz [ 98.221367][ T1132] usb 4-1: SerialNumber: syz [ 98.223821][ T5682] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 98.231299][ T1132] usb 4-1: config 0 descriptor?? [ 98.246375][ T1132] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 98.409759][ T5660] rc_core: IR keymap rc-hauppauge not found [ 98.415767][ T5660] Registered IR keymap rc-empty [ 98.422257][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.429563][ T5682] usb 1-1: mos7720: usb_control_msg() failed: 0 [ 98.441983][ T5682] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 98.451213][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.465332][ T5682] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 98.484538][ T5660] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 98.505899][ T5660] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 98.524248][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.550117][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.569837][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.610784][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.639962][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.660314][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.680623][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.721217][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.739785][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.769774][ T5660] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.796640][ T5660] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 98.805893][ T5660] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 98.959998][ T5721] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.109890][ T5696] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.133509][ T5995] dvmrp0: entered allmulticast mode [ 99.247009][ T1132] gspca_sunplus: reg_w_riv err -71 [ 99.260649][ T1132] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 99.277194][ T5696] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.292118][ T1132] usb 4-1: USB disconnect, device number 11 [ 99.309832][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.327064][ T5696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.336402][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.350611][ T5696] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.372264][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.382100][ T5696] usb 3-1: Product: syz [ 99.386353][ T5696] usb 3-1: Manufacturer: syz [ 99.404000][ T5696] cdc_wdm 3-1:1.0: skipping garbage [ 99.409377][ T5696] cdc_wdm 3-1:1.0: skipping garbage [ 99.422307][ T5696] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 99.428335][ T5696] cdc_wdm 3-1:1.0: Unknown control protocol [ 99.607688][ T5997] Zero length message leads to an empty skb [ 99.750637][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 99.750967][ T5696] usb 3-1: USB disconnect, device number 6 [ 99.757450][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 99.769240][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 100.104723][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 100.583169][ T42] usb 2-1: USB disconnect, device number 8 [ 100.672292][ T5696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.840921][ T5696] usb 3-1: device descriptor read/64, error -71 [ 101.109732][ T5696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.270422][ T5696] usb 3-1: device descriptor read/64, error -71 [ 101.390333][ T5696] usb usb3-port1: attempt power cycle [ 101.419823][ T189] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 101.539906][ T1132] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 101.582808][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.593222][ T189] usb 2-1: not running at top speed; connect to a high speed hub [ 101.604645][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.615988][ T189] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.628904][ T189] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 101.638882][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.658956][ T189] usb 2-1: Product: syz [ 101.669475][ T189] usb 2-1: Manufacturer: syz [ 101.683081][ T189] usb 2-1: SerialNumber: syz [ 101.696472][ T5660] usb 1-1: USB disconnect, device number 7 [ 101.702442][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 101.740491][ T5696] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.749228][ T1132] usb 4-1: Using ep0 maxpacket: 32 [ 101.767992][ T1132] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.774000][ T5660] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 101.790758][ T5696] usb 3-1: device descriptor read/8, error -71 [ 101.811447][ T1132] usb 4-1: config 1 interface 0 has no altsetting 0 [ 101.821869][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.861826][ T1132] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 101.875953][ T1132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.876357][ T5660] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 101.884648][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 101.909375][ T1132] usb 4-1: Product: syz [ 101.916968][ T1132] usb 4-1: Manufacturer: 뼕资呎謚ⵍᤵ䒴䑬톹Ⓡᮮㄽ㰗筨형鮫訷⵲ﺣ諝鰳蛢迊鮅摪굆哌馗ꐕ㾖陨臯Ꞇࡂ驁╛ [ 101.954788][ T189] usb 2-1: unit 0 not found! [ 101.961565][ T5721] usb 5-1: can't read configurations, error -71 [ 101.978573][ T5660] mos7720 1-1:1.0: device disconnected [ 102.000720][ T1132] usb 4-1: SerialNumber: syz [ 102.062777][ T189] usb 2-1: USB disconnect, device number 9 [ 102.069935][ T5696] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 102.124214][ T5696] usb 3-1: device descriptor read/8, error -71 [ 102.260219][ T5696] usb usb3-port1: unable to enumerate USB device [ 102.435297][ T6037] syzkaller0: entered promiscuous mode [ 102.451722][ T6037] syzkaller0: entered allmulticast mode [ 102.792625][ T5675] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 102.961777][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.973043][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.984829][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.996177][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.007251][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.024855][ T5675] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 103.035561][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.043787][ T5675] usb 2-1: Product: syz [ 103.048367][ T5675] usb 2-1: Manufacturer: syz [ 103.053195][ T5675] usb 2-1: SerialNumber: syz [ 103.066851][ T5675] usb 2-1: config 0 descriptor?? [ 103.087851][ T5675] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 103.283005][ T5675] usb 2-1: USB disconnect, device number 10 [ 103.655415][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.730692][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 103.743078][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 103.757895][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 103.767498][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 103.788650][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 103.798615][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 103.819044][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 103.859358][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 103.901371][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 103.950228][ T6065] kvm: kvm [6064]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 104.161388][ T6078] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.99'. [ 104.176901][ T1132] usb 4-1: USB disconnect, device number 12 [ 104.340395][ T5660] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.377791][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 104.523381][ T5660] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 104.531640][ T5660] usb 2-1: config 1 has no interface number 0 [ 104.541916][ T5660] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 104.553556][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.562978][ T5660] usb 2-1: Product: syz [ 104.568240][ T5660] usb 2-1: Manufacturer: syz [ 104.573703][ T5660] usb 2-1: SerialNumber: syz [ 104.588487][ T5660] usb 2-1: 3:1 : does not exist [ 104.597927][ T5660] usb 2-1: 3:2 : does not exist [ 104.609757][ T189] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.689735][ T5682] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 104.780186][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 104.791234][ T189] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 104.800880][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.815946][ T189] usb 5-1: config 0 descriptor?? [ 104.833002][ T189] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 104.851999][ T5682] usb 3-1: device descriptor read/64, error -71 [ 105.099720][ T5682] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 105.263104][ T5682] usb 3-1: device descriptor read/64, error -71 [ 105.382803][ T5682] usb usb3-port1: attempt power cycle [ 105.659753][ T1132] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 105.739956][ T5682] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 105.760256][ T5682] usb 3-1: device descriptor read/8, error -71 [ 105.789370][ T9] usb 2-1: USB disconnect, device number 11 [ 105.819957][ T1132] usb 4-1: Using ep0 maxpacket: 8 [ 105.827799][ T1132] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.829797][ T5660] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.840026][ T1132] usb 4-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 105.858150][ T189] gspca_vc032x: reg_w err -71 [ 105.883911][ T1132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.893523][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.911616][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.920420][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.926846][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.940602][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.946143][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.951545][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.951563][ T1132] usb 4-1: config 0 descriptor?? [ 105.957060][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.994035][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.006604][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.015883][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.026509][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.036006][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.043384][ T5682] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 106.051055][ T5660] usb 1-1: device descriptor read/64, error -71 [ 106.062493][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.072224][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.082290][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.091420][ T5682] usb 3-1: device descriptor read/8, error -71 [ 106.099219][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.110037][ T189] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.118720][ T189] gspca_vc032x: Unknown sensor... [ 106.129100][ T189] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 106.150234][ T189] usb 5-1: USB disconnect, device number 7 [ 106.211034][ T5682] usb usb3-port1: unable to enumerate USB device [ 106.300512][ T5660] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.363286][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.374845][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.450376][ T5660] usb 1-1: device descriptor read/64, error -71 [ 106.550197][ T6112] process 'syz.1.110' launched '/dev/fd/6' with NULL argv: empty string added [ 106.590247][ T5660] usb usb1-port1: attempt power cycle [ 106.613645][ T1132] usbhid 4-1:0.0: can't add hid device: -71 [ 106.630896][ T1132] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.665588][ T1132] usb 4-1: USB disconnect, device number 13 [ 106.955202][ T6112] nvme nvme0: failed to connect socket: -111 [ 107.019770][ T5660] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.060569][ T5660] usb 1-1: device descriptor read/8, error -71 [ 107.089716][ T5721] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 107.278515][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.296690][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.319076][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 107.329814][ T5660] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 107.338861][ T6126] syzkaller0: entered promiscuous mode [ 107.344456][ T5721] usb 5-1: can't read configurations, error -71 [ 107.353223][ T6126] syzkaller0: entered allmulticast mode [ 107.391885][ T5660] usb 1-1: device descriptor read/8, error -71 [ 107.510114][ T5660] usb usb1-port1: unable to enumerate USB device [ 107.554504][ T6128] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 107.567477][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 107.663378][ T29] audit: type=1326 audit(1786142039.673:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.2.115" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344e99e0d9 code=0x0 [ 107.894395][ T6141] IPVS: length: 86 != 24 [ 107.918293][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 107.992608][ T6143] loop2: detected capacity change from 0 to 7 [ 108.012696][ T6143] Dev loop2: unable to read RDB block 7 [ 108.019313][ T6143] loop2: unable to read partition table [ 108.028180][ T6143] loop2: partition table beyond EOD, truncated [ 108.050401][ T6143] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 108.679850][ T5660] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 108.863694][ T5660] usb 5-1: Invalid ep0 maxpacket: 64 [ 109.000809][ T5660] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 109.044720][ T6194] vlan2: entered allmulticast mode [ 109.051623][ T6194] bond0: entered allmulticast mode [ 109.063250][ T6194] bond_slave_0: entered allmulticast mode [ 109.074851][ T6194] bond_slave_1: entered allmulticast mode [ 109.088795][ T6194] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 109.105878][ T6192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.130388][ T6192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.160135][ T5660] usb 5-1: Invalid ep0 maxpacket: 64 [ 109.167359][ T5660] usb usb5-port1: attempt power cycle [ 109.174907][ T6192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.194916][ T6192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.210390][ T6192] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.222738][ T6192] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.234267][ T6192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.242504][ T6192] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.260489][ T6192] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.276317][ T6192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.283239][ T6192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.291870][ T6192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.305615][ T6192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.315408][ T6192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.333119][ T6192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.345377][ T6205] fuse: Unknown parameter 'ASΑ P*'' [ 109.473575][ T6210] ip_tables: iptables: counters copy to user failed while replacing table [ 109.521499][ T5660] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 109.550879][ T5660] usb 5-1: Invalid ep0 maxpacket: 64 [ 109.578262][ T6213] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.592636][ T6213] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.699892][ T5660] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 109.730692][ T5660] usb 5-1: Invalid ep0 maxpacket: 64 [ 109.736755][ T5660] usb usb5-port1: unable to enumerate USB device [ 109.840083][ T1132] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 109.983779][ T6221] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 110.001542][ T1132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 110.017175][ T1132] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 110.020875][ T6221] kvm: pic: level sensitive irq not supported [ 110.020963][ T1132] usb 2-1: config 1 interface 0 has no altsetting 0 [ 110.069374][ T1132] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 110.091385][ T1132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.119091][ T1132] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 110.310660][ T6236] kvm: apic: phys broadcast and lowest prio [ 110.322602][ T1132] scsi host1: usb-storage 2-1:1.0 [ 110.332559][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 110.369948][ T6237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.141'. [ 110.519911][ T5660] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 110.535523][ T5682] usb 2-1: USB disconnect, device number 12 [ 110.685078][ T5660] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.697963][ T5660] usb 1-1: config 0 has no interface number 0 [ 110.708457][ T5660] usb 1-1: config 0 interface 41 has no altsetting 0 [ 110.720690][ T189] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 110.728369][ T5660] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 110.743112][ T5660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.753238][ T5660] usb 1-1: Product: syz [ 110.757818][ T5660] usb 1-1: Manufacturer: syz [ 110.763222][ T5660] usb 1-1: SerialNumber: syz [ 110.771832][ T5660] usb 1-1: config 0 descriptor?? [ 110.889955][ T189] usb 4-1: Using ep0 maxpacket: 16 [ 110.899368][ T189] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.916863][ T189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.933425][ T189] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 110.944249][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.952364][ T189] usb 4-1: Product: syz [ 110.956659][ T189] usb 4-1: Manufacturer: syz [ 110.961339][ T189] usb 4-1: SerialNumber: syz [ 110.973622][ T189] usb 4-1: config 0 descriptor?? [ 111.020576][ T1132] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 111.160124][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.179828][ T1132] usb 3-1: Using ep0 maxpacket: 32 [ 111.198853][ T1132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.217352][ T1132] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.232829][ T189] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 111.245068][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.252113][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.267100][ T1132] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 111.301497][ T1132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.319783][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.325850][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.327815][ T1132] usb 3-1: Product: syz [ 111.359429][ T1132] usb 3-1: Manufacturer: 뼕资呎謚ⵍᤵ䒴䑬톹Ⓡᮮㄽ㰗筨형鮫訷⵲ﺣ諝鰳蛢迊鮅摪굆哌馗ꐕ㾖陨臯Ꞇࡂ驁╛ [ 111.409272][ T1132] usb 3-1: SerialNumber: syz [ 111.482751][ T189] rc_core: IR keymap rc-imon-pad not found [ 111.489789][ T189] Registered IR keymap rc-empty [ 111.494763][ T189] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 111.505013][ T189] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 111.594013][ T5660] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 111.630993][ T189] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 111.698062][ T189] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 111.751261][ T6257] loop8: detected capacity change from 0 to 5 [ 111.777506][ T189] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:14> initialized [ 111.789868][ T6257] Dev loop8: unable to read RDB block 5 [ 111.805723][ T6257] loop8: unable to read partition table [ 111.808968][ C0] imon 4-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 111.814898][ T6257] loop8: partition table beyond EOD, truncated [ 111.862930][ T6257] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 112.028911][ T5660] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 112.088503][ T5660] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 112.156556][ T5660] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 112.224395][ T5660] usb 1-1: USB disconnect, device number 12 [ 112.482149][ T6260] hub 8-0:1.0: USB hub found [ 112.495579][ T6260] hub 8-0:1.0: 1 port detected [ 112.826569][ T6255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.856883][ T6255] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 113.239920][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.286741][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 113.319845][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.327720][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.356498][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 113.381221][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 113.399865][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.406172][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.424122][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 113.727764][ T1132] usb 3-1: USB disconnect, device number 15 [ 113.902001][ T6285] netlink: 'syz.4.153': attribute type 12 has an invalid length. [ 113.950658][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 113.951159][ T5696] usb 4-1: USB disconnect, device number 14 [ 114.279779][ T1132] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 114.287732][ T6303] loop8: detected capacity change from 0 to 5 [ 114.304558][ T6303] Dev loop8: unable to read RDB block 5 [ 114.317657][ T6303] loop8: unable to read partition table [ 114.329885][ T6303] loop8: partition table beyond EOD, truncated [ 114.341760][ T6303] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 114.441339][ T1132] usb 3-1: device descriptor read/64, error -71 [ 114.527615][ T6308] netlink: 'syz.3.158': attribute type 5 has an invalid length. [ 114.690650][ T1132] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 114.832120][ T1132] usb 3-1: device descriptor read/64, error -71 [ 114.961904][ T1132] usb usb3-port1: attempt power cycle [ 115.319703][ T1132] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 115.319715][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.401309][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.407385][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.421879][ T1132] usb 3-1: device descriptor read/8, error -71 [ 115.479782][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.486956][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.690706][ T5696] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 115.711178][ T1132] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 115.760199][ T1132] usb 3-1: device descriptor read/8, error -71 [ 115.869699][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 115.889198][ T1132] usb usb3-port1: unable to enumerate USB device [ 115.903065][ T5696] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 115.930872][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.944886][ T5696] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 115.954830][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.964345][ T5696] usb 2-1: Product: syz [ 115.968870][ T5696] usb 2-1: Manufacturer: syz [ 115.974173][ T5696] usb 2-1: SerialNumber: syz [ 115.996664][ T5696] usb 2-1: config 0 descriptor?? [ 116.024536][ T5696] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 116.349736][ T1132] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.489687][ T1132] usb 5-1: device descriptor read/64, error -71 [ 116.729750][ T1132] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.840821][ T5696] gspca_sunplus: reg_r err -32 [ 116.850266][ T6324] fuse: Bad value for 'fd' [ 116.879831][ T1132] usb 5-1: device descriptor read/64, error -71 [ 116.999868][ T1132] usb usb5-port1: attempt power cycle [ 117.081268][ T189] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 117.265044][ T189] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 117.285324][ T189] usb 4-1: config 0 has no interface number 0 [ 117.308014][ T189] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 117.328826][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.341228][ T189] usb 4-1: Product: syz [ 117.351330][ T1132] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 117.370116][ T189] usb 4-1: Manufacturer: syz [ 117.380952][ T1132] usb 5-1: device descriptor read/8, error -71 [ 117.381853][ T189] usb 4-1: SerialNumber: syz [ 117.419466][ T189] usb 4-1: config 0 descriptor?? [ 117.440610][ T6348] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 117.641241][ T1132] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 117.690403][ T1132] usb 5-1: device descriptor read/8, error -71 [ 117.765604][ T189] asix 4-1:0.251: probe with driver asix failed with error -71 [ 117.779346][ T189] usb 4-1: USB disconnect, device number 15 [ 117.810645][ T1132] usb usb5-port1: unable to enumerate USB device [ 117.839793][ T5696] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 117.869858][ T5682] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 118.021480][ T5682] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 118.032517][ T5682] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 118.045901][ T5682] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 118.054964][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.063567][ T5682] usb 3-1: Product: syz [ 118.067730][ T5682] usb 3-1: Manufacturer: syz [ 118.072406][ T5682] usb 3-1: SerialNumber: syz [ 118.630620][ T5696] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 118.808435][ T5696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.818894][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.828397][ T5696] usb 4-1: Product: syz [ 118.833066][ T5696] usb 4-1: Manufacturer: syz [ 118.838516][ T5696] usb 4-1: SerialNumber: syz [ 118.891436][ T6373] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 118.898234][ T6373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.921448][ T6373] vhci_hcd vhci_hcd.0: Device attached [ 118.995403][ T5675] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.190738][ T5696] usb 34-1: SetAddress Request (2) to port 0 [ 119.198492][ T5696] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 119.330247][ T9] usb 2-1: USB disconnect, device number 13 [ 119.463558][ T6374] vhci_hcd: connection reset by peer [ 119.484006][ T47] vhci_hcd vhci_hcd.0: stop threads [ 119.490410][ T47] vhci_hcd vhci_hcd.0: release socket [ 119.500507][ T189] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 119.502412][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 119.692446][ T6384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.180'. [ 119.970409][ T5660] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 120.040821][ T5675] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 120.059071][ T5675] ath9k_htc: Failed to initialize the device [ 120.116424][ T5675] usb 4-1: ath9k_htc: USB layer deinitialized [ 120.132976][ T5660] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.152800][ T5660] usb 2-1: not running at top speed; connect to a high speed hub [ 120.196635][ T5660] usb 2-1: config 1 has an invalid interface number: 37 but max is 0 [ 120.214953][ T5682] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.233580][ T5660] usb 2-1: config 1 has no interface number 0 [ 120.253669][ T10] usb 4-1: USB disconnect, device number 16 [ 120.282078][ T5660] usb 2-1: config 1 interface 37 has no altsetting 0 [ 120.328768][ T5660] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=63.56 [ 120.361761][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.384518][ T5660] usb 2-1: Product: syz [ 120.396488][ T5660] usb 2-1: Manufacturer: syz [ 120.404943][ T5660] usb 2-1: SerialNumber: syz [ 120.433166][ T5611] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 120.522212][ T5682] usb 3-1: USB disconnect, device number 20 [ 120.617732][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.752970][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.770706][ T5660] kvaser_usb 2-1:1.37: error -ENODEV: Cannot get usb endpoint(s) [ 120.807418][ T5660] usb 2-1: USB disconnect, device number 14 [ 120.859285][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.087245][ T6410] loop8: detected capacity change from 0 to 7 [ 121.134295][ T6410] Dev loop8: unable to read RDB block 7 [ 121.152388][ T6410] loop8: unable to read partition table [ 121.175699][ T6410] loop8: partition table beyond EOD, truncated [ 121.197431][ T6410] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 121.220046][ T4978] Dev loop8: unable to read RDB block 7 [ 121.227145][ T4978] loop8: unable to read partition table [ 121.236281][ T4978] loop8: partition table beyond EOD, truncated [ 121.720393][ T189] usb 5-1: too many configurations: 73, using maximum allowed: 8 [ 121.738475][ T189] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 121.748753][ T189] usb 5-1: can't read configurations, error -61 [ 121.779766][ T5660] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 121.884622][ T189] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 121.888981][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 121.952251][ T5660] usb 2-1: Using ep0 maxpacket: 8 [ 121.972780][ T5660] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 121.993512][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.994314][ T6426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 122.036421][ T5660] usb 2-1: config 0 has no interface number 0 [ 122.062776][ T5660] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.094185][ T5660] usb 2-1: config 0 interface 52 has no altsetting 0 [ 122.111849][ T5660] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 122.137941][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.169962][ T5660] usb 2-1: config 0 descriptor?? [ 122.674285][ T5660] usb 2-1: Can not set alternate setting to 1, error: -71 [ 122.694407][ T5660] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 122.718299][ T6439] syzkaller0: entered promiscuous mode [ 122.728058][ T5660] usb 2-1: USB disconnect, device number 15 [ 122.744919][ T6439] syzkaller0: entered allmulticast mode [ 123.115348][ T6450] pimreg: entered allmulticast mode [ 123.126992][ T6450] pimreg: left allmulticast mode [ 123.151291][ T6411] netlink: 56 bytes leftover after parsing attributes in process `syz.3.184'. [ 123.484476][ T6460] netlink: 'syz.1.202': attribute type 21 has an invalid length. [ 123.495235][ T6460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.202'. [ 124.087976][ T6468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.119770][ T189] usb 5-1: too many configurations: 73, using maximum allowed: 8 [ 124.140211][ T189] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 124.183627][ T189] usb 5-1: can't read configurations, error -71 [ 124.200671][ T189] usb usb5-port1: attempt power cycle [ 124.287577][ T5696] usb 34-1: device descriptor read/8, error -110 [ 124.441810][ T5611] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.452825][ T5611] Bluetooth: hci2: Injecting HCI hardware error event [ 124.463192][ T5610] Bluetooth: hci2: hardware error 0x00 [ 124.494621][ T6482] loop8: detected capacity change from 0 to 5 [ 124.521978][ T6482] Dev loop8: unable to read RDB block 5 [ 124.544217][ T6482] loop8: unable to read partition table [ 124.564890][ T6482] loop8: partition table beyond EOD, truncated [ 124.582469][ T6482] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.639760][ T189] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 124.686479][ T189] usb 5-1: Using ep0 maxpacket: 8 [ 124.711186][ T189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.725363][ T5696] usb usb34-port1: attempt power cycle [ 124.738204][ T189] usb 5-1: config 4 interface 0 has no altsetting 0 [ 124.771191][ T189] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 124.797527][ T189] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 124.798719][ T6485] input: syz0 as /devices/virtual/input/input10 [ 124.821669][ T189] usb 5-1: Manufacturer: syz [ 124.845103][ T189] usb 5-1: SerialNumber: syz [ 124.893341][ T6494] mmap: syz.2.210 (6494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.994584][ T6495] tipc: Started in network mode [ 125.010967][ T6495] tipc: Node identity 4aa232ae8c45, cluster identity 4711 [ 125.042022][ T6497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 125.048578][ T6497] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 125.065751][ T6495] tipc: Enabled bearer , priority 0 [ 125.100042][ T6497] vhci_hcd vhci_hcd.0: Device attached [ 125.110943][ T6491] syzkaller0: entered promiscuous mode [ 125.132700][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.144422][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.161225][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.197148][ T6491] syzkaller0: entered allmulticast mode [ 125.206093][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.236143][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.258139][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.294707][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.308968][ T6493] tls_set_device_offload_rx: netdev not found [ 125.325818][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.336243][ T5696] usb usb34-port1: unable to enumerate USB device [ 125.351787][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.366504][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.385998][ T10] usb 36-1: SetAddress Request (2) to port 0 [ 125.407381][ T189] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 125.418014][ T10] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 125.456444][ T189] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.467313][ T6498] vhci_hcd: connection reset by peer [ 125.475985][ T189] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 125.476110][ T3344] vhci_hcd vhci_hcd.1: stop threads [ 125.489364][ T189] usb 5-1: media controller created [ 125.507138][ T6486] tipc: Resetting bearer [ 125.536344][ T3344] vhci_hcd vhci_hcd.1: release socket [ 125.540999][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.568594][ T3344] vhci_hcd vhci_hcd.1: disconnect device [ 125.598598][ T6486] tipc: Disabling bearer [ 125.637991][ T189] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.699995][ T189] usb 5-1: USB disconnect, device number 20 [ 125.882441][ T5682] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.050882][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 126.072591][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.090971][ T5682] usb 1-1: config 3 has an invalid interface number: 74 but max is 0 [ 126.106337][ T5682] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 126.122526][ T5682] usb 1-1: config 3 has no interface number 0 [ 126.132222][ T5682] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 126.149437][ T5682] usb 1-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 126.184937][ T5682] usb 1-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 126.208145][ T5682] usb 1-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 126.226382][ T5682] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 126.241031][ T5682] usb 1-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 126.241673][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 126.252980][ T5682] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 126.322172][ T5682] usb 1-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 126.343557][ T5682] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 126.372948][ T5682] usb 1-1: config 3 interface 74 has no altsetting 0 [ 126.395694][ T5682] usb 1-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 126.414796][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.426476][ T5682] usb 1-1: Product: syz [ 126.436636][ T5682] usb 1-1: Manufacturer: syz [ 126.446170][ T5682] usb 1-1: SerialNumber: syz [ 126.485322][ T5660] IPVS: starting estimator thread 0... [ 126.495751][ T6511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.510039][ T6511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.521978][ T5610] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 126.629865][ T6534] IPVS: using max 31 ests per chain, 74400 per kthread [ 126.810467][ T6541] loop8: detected capacity change from 0 to 5 [ 126.855243][ T6541] Dev loop8: unable to read RDB block 5 [ 126.887753][ T6541] loop8: unable to read partition table [ 126.907618][ T5682] ipaq 1-1:3.74: PocketPC PDA converter detected [ 126.914778][ T6541] loop8: partition table beyond EOD, truncated [ 126.937638][ T6541] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 126.968810][ T5682] usb 1-1: active config #3 != 1 ?? [ 127.073205][ T5682] usb 1-1: USB disconnect, device number 13 [ 127.196745][ T6546] sctp: [Deprecated]: syz.1.224 (pid 6546) Use of int in maxseg socket option. [ 127.196745][ T6546] Use struct sctp_assoc_value instead [ 127.287091][ T6545] ip6tnl1: entered allmulticast mode [ 127.557321][ T6565] netlink: 'syz.4.228': attribute type 5 has an invalid length. [ 127.839703][ T5721] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.999719][ T5675] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 128.017689][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 128.025187][ T5721] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 128.039017][ T5721] usb 1-1: config 0 has no interface number 0 [ 128.056957][ T5721] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.085427][ T5721] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.107206][ T5721] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 128.133992][ T5721] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 128.152001][ T5675] usb 5-1: device descriptor read/64, error -71 [ 128.168604][ T5721] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 128.189669][ T5721] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.204022][ T6582] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 128.204089][ T5696] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 128.241920][ T5721] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 128.259790][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.273478][ T6582] binder: 6581:6582 ioctl c0306201 2000000001c0 returned -14 [ 128.282157][ T5721] usb 1-1: Product: syz [ 128.289434][ T5721] usb 1-1: Manufacturer: syz [ 128.298237][ T5721] usb 1-1: SerialNumber: syz [ 128.315174][ T5721] usb 1-1: config 0 descriptor?? [ 128.391831][ T5696] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 128.402238][ T5675] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 128.424125][ T5696] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.455967][ T6584] loop8: detected capacity change from 0 to 5 [ 128.463939][ T5696] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.489471][ T6584] Dev loop8: unable to read RDB block 5 [ 128.496832][ T5696] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.505698][ T6584] loop8: unable to read partition table [ 128.512123][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.525229][ T6584] loop8: partition table beyond EOD, truncated [ 128.539901][ T5675] usb 5-1: device descriptor read/64, error -71 [ 128.559553][ T6584] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 128.569093][ T5696] usbtmc 4-1:16.0: bulk endpoints not found [ 128.650195][ T5675] usb usb5-port1: attempt power cycle [ 128.735748][ T5721] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 128.805375][ T5721] usb 1-1: USB disconnect, device number 14 [ 128.826743][ T6592] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 128.972683][ T5682] usb 4-1: USB disconnect, device number 17 [ 129.004648][ T5675] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 129.041980][ T5675] usb 5-1: device descriptor read/8, error -71 [ 129.299686][ T5675] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 129.319778][ T5721] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 129.328174][ T5675] usb 5-1: device descriptor read/8, error -71 [ 129.441721][ T5675] usb usb5-port1: unable to enumerate USB device [ 129.481159][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 129.489144][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.499325][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 129.512243][ T5721] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 129.521293][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.529728][ T5682] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.531664][ T5721] usb 3-1: config 0 descriptor?? [ 129.679656][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 129.686336][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.697550][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.707402][ T5682] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.716536][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.727311][ T5682] usb 4-1: config 0 descriptor?? [ 129.737547][ T5682] hub 4-1:0.0: USB hub found [ 129.934711][ T5682] hub 4-1:0.0: 1 port detected [ 130.003951][ T6611] netlink: 'syz.2.237': attribute type 14 has an invalid length. [ 130.015558][ T5721] betop 0003:11C2:2208.0003: unknown main item tag 0x2 [ 130.022774][ T5721] betop 0003:11C2:2208.0003: unknown main item tag 0x4 [ 130.030659][ T5721] betop 0003:11C2:2208.0003: reserved main item tag 0xd [ 130.037821][ T5721] betop 0003:11C2:2208.0003: unknown main item tag 0x1 [ 130.045471][ T5721] betop 0003:11C2:2208.0003: unknown main item tag 0x3 [ 130.052445][ T5721] betop 0003:11C2:2208.0003: unknown main item tag 0x1 [ 130.065551][ T5721] betop 0003:11C2:2208.0003: hidraw0: USB HID v80.09 Device [HID 11c2:2208] on usb-dummy_hcd.2-1/input0 [ 130.076815][ T5721] betop 0003:11C2:2208.0003: no inputs found [ 130.137271][ T6609] netlink: 'syz.3.239': attribute type 3 has an invalid length. [ 130.145032][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'. [ 130.159240][ T5682] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 130.161627][ T5675] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.166506][ T5682] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 130.185477][ T5682] usbhid 4-1:0.0: can't add hid device: -71 [ 130.192907][ T5682] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.222731][ T5682] usb 4-1: USB disconnect, device number 18 [ 130.319691][ T5675] usb 2-1: Using ep0 maxpacket: 8 [ 130.326379][ T5675] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 130.341399][ T5675] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 130.350505][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.358484][ T5675] usb 2-1: Product: syz [ 130.363453][ T5675] usb 2-1: Manufacturer: syz [ 130.368062][ T5675] usb 2-1: SerialNumber: syz [ 130.519740][ T10] usb 36-1: device descriptor read/8, error -110 [ 130.595824][ T5675] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.638144][ T5675] usb 2-1: USB disconnect, device number 16 [ 130.706222][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.793464][ T6618] netlink: 'syz.3.241': attribute type 5 has an invalid length. [ 130.911747][ T10] usb usb36-port1: attempt power cycle [ 131.283985][ T6632] bond1: (slave vlan2): making interface the new active one [ 131.293991][ T6632] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 131.494526][ T10] usb usb36-port1: unable to enumerate USB device [ 131.653067][ T6641] netlink: 64 bytes leftover after parsing attributes in process `syz.3.248'. [ 131.804665][ T6592] syz.0.236 (6592) used greatest stack depth: 19392 bytes left [ 131.814414][ T5682] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 131.984097][ T5682] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 132.021129][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 132.046990][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 132.081181][ T5682] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 132.102523][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.128363][ T5682] usb 2-1: config 0 descriptor?? [ 132.141774][ T6635] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.185283][ T5675] usb 3-1: USB disconnect, device number 21 [ 132.563768][ T5682] hid (null): global environment stack underflow [ 132.588197][ T5682] uclogic 0003:28BD:0075.0004: interface is invalid, ignoring [ 132.762549][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769315][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.787585][ T6664] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 132.787599][ T6664] kvm: kvm [6662]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 132.820581][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.831106][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.051762][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.059701][ T5675] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 133.081444][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.289708][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 133.296589][ T5675] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 133.299687][ T5682] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 133.305439][ T5675] usb 5-1: config 0 has no interface number 0 [ 133.318615][ T5675] usb 5-1: config 0 interface 12 has no altsetting 0 [ 133.327620][ T5675] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 133.337074][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.345722][ T5675] usb 5-1: Product: syz [ 133.357150][ T5675] usb 5-1: Manufacturer: syz [ 133.362160][ T5675] usb 5-1: SerialNumber: syz [ 133.371092][ T5675] usb 5-1: config 0 descriptor?? [ 133.499695][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 133.510739][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.529328][ T5682] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.541579][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.559138][ T5682] usb 4-1: config 0 descriptor?? [ 133.588285][ T5675] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 133.605338][ T5675] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 133.613624][ T5675] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 133.621715][ T5675] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 133.623036][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 133.636355][ T5675] usb 5-1: USB disconnect, device number 25 [ 133.720778][ T6693] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 133.731820][ T6693] fuse: Unknown parameter 'noot' [ 133.793318][ T5682] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.130940][ T6703] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 134.130940][ T6703] program syz.4.264 not setting count and/or reply_len properly [ 134.173782][ T6703] bond0: entered allmulticast mode [ 134.179352][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.186792][ T5675] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 134.197779][ T6703] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.242936][ T42] usb 4-1: USB disconnect, device number 19 [ 134.339656][ T5675] usb 3-1: Using ep0 maxpacket: 16 [ 134.346679][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.358276][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.371901][ T5675] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 134.382189][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.393620][ T5696] usb 2-1: USB disconnect, device number 17 [ 134.431415][ T5675] usb 3-1: config 0 descriptor?? [ 134.468107][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 134.830118][ T5696] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 134.859798][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.882526][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.989656][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 134.999397][ T5696] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 135.010004][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.018042][ T5696] usb 2-1: Product: syz [ 135.022520][ T5696] usb 2-1: Manufacturer: syz [ 135.027124][ T5696] usb 2-1: SerialNumber: syz [ 135.035027][ T5696] usb 2-1: config 0 descriptor?? [ 135.044165][ T5696] usb 2-1: selecting invalid altsetting 1 [ 135.050255][ T5696] technisat-usb2: could not set alternate setting to 0 [ 135.219677][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 135.243137][ T5696] technisat-usb2: firmware version: 0.0 [ 135.248820][ T5696] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 135.369876][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 135.376768][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.388203][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.398037][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.407313][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.419447][ T42] usb 4-1: config 0 descriptor?? [ 135.428590][ T42] hub 4-1:0.0: USB hub found [ 135.628919][ T42] hub 4-1:0.0: 1 port detected [ 135.654013][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.664907][ T5696] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 135.673852][ T5696] usb 2-1: media controller created [ 135.679558][ T5696] technisat-usb2: i2c-error: out failed 53 = -22 [ 135.688217][ T5696] dvb-usb: MAC address reading failed. [ 135.708648][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.793519][ T5696] DVB: Unable to find symbol stv090x_attach() [ 135.805912][ T6724] binder: 6721:6724 ioctl c0306201 0 returned -14 [ 135.832153][ T6716] fuse: Unknown parameter 'rootmnde' [ 135.852340][ T5696] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 135.872084][ T42] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 135.893807][ T42] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 135.919390][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 135.932755][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.969694][ T5696] rc_core: IR keymap rc-technisat-usb2 not found [ 135.976897][ T42] usb 4-1: USB disconnect, device number 20 [ 135.984982][ T5696] Registered IR keymap rc-empty [ 136.009389][ T5696] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 136.045161][ T5696] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11 [ 136.109872][ T5675] usbhid 3-1:0.0: can't add hid device: -71 [ 136.143569][ T5675] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.160879][ T5696] dvb-usb: schedule remote query interval to 100 msecs. [ 136.228500][ T5696] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 136.255151][ T5675] usb 3-1: USB disconnect, device number 22 [ 136.326869][ T5696] usb 2-1: USB disconnect, device number 18 [ 136.514459][ T5696] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 136.759747][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 136.931618][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 136.951078][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.974616][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.999340][ T42] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 137.011556][ T42] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 137.027656][ T42] usb 4-1: Product: syz [ 137.058395][ T42] usb 4-1: Manufacturer: syz [ 137.083670][ T42] usb 4-1: config 0 descriptor?? [ 137.396505][ T42] hid-generic 0003:25DD:F3D2.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 137.416037][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.448046][ T6724] syz.0.270 (6724): drop_caches: 2 [ 137.469255][ T5721] usb 4-1: USB disconnect, device number 21 [ 137.502849][ T6752] bridge2: entered promiscuous mode [ 137.569879][ T6752] bridge2: entered allmulticast mode [ 137.619910][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 137.639854][ T189] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 137.658990][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.736185][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 137.781999][ T10] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 137.793713][ T6757] netlink: 'syz.2.279': attribute type 13 has an invalid length. [ 137.824821][ T6757] netlink: 'syz.2.279': attribute type 17 has an invalid length. [ 137.825295][ T6753] fido_id[6753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 137.846850][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 137.852053][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.869905][ T10] usb 2-1: Product: syz [ 137.877169][ T189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.886383][ T10] usb 2-1: Manufacturer: 뼕资呎謚ⵍᤵ䒴䑬톹Ⓡᮮㄽ㰗筨형鮫訷⵲ﺣ諝鰳蛢迊鮅摪굆哌馗ꐕ㾖陨臯Ꞇࡂ驁╛ [ 137.906811][ T189] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 137.935504][ T189] usb 5-1: config 1 has no interface number 0 [ 137.954367][ T10] usb 2-1: SerialNumber: syz [ 137.980121][ T189] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 138.030896][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.071868][ T189] usb 5-1: Product: ߌ컫쪩⒡혲╕䞲ᆙ䒣ጏ㳄덪ဋᓆ찭阧쓫⯙棨결⨉띯鑡膙Ԛ흢㦘귡軙提輪抠垥鳘꜈졳䊓퍆⁨村렆խṥ謨촯࠾拤⣭൰촦躛ᅖ퉷狃㋳踨밻罝ꞁ꾮ᅦ稵耢昐Ṟ庮룱ꊶ쇠ञ셇㝴歍䠝冯텷㪨苚ꋔ䦷츎὜徨줷䮄剴볃☬ᔲ镚፬酼읲㦗뚹 [ 138.121619][ T5721] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 138.202996][ T189] usb 5-1: Manufacturer: Ј [ 138.220590][ T189] usb 5-1: SerialNumber: syz [ 138.281360][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 138.295929][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.306457][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.324264][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.344412][ T5721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.364384][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.384058][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.393426][ T5721] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.402051][ T5721] usb 4-1: Manufacturer: syz [ 138.418863][ T5721] usb 4-1: config 0 descriptor?? [ 138.702583][ T5721] rc_core: IR keymap rc-hauppauge not found [ 138.708554][ T5721] Registered IR keymap rc-empty [ 138.717953][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.750451][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.794671][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 138.849289][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 138.891666][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.930130][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.959738][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.991624][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.040529][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.070062][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.083501][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 139.104903][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 139.114583][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.139754][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.168987][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 139.179539][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.200785][ T5721] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.209604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 139.270158][ T5721] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 139.280861][ T5721] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.315649][ T5721] usb 4-1: USB disconnect, device number 22 [ 139.350312][ T5616] udevd[5616]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 139.459735][ T42] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 139.619651][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 139.627095][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.636550][ T42] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 139.649232][ T42] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9d.17 [ 139.658689][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.666767][ T42] usb 3-1: Product: syz [ 139.671075][ T42] usb 3-1: Manufacturer: syz [ 139.676907][ T42] usb 3-1: SerialNumber: syz [ 139.757105][ T6777] ip6tnl2: entered promiscuous mode [ 140.038103][ T6786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.369475][ T189] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.514609][ T42] s2255 3-1:7.0: Could not find bulk-in endpoint [ 140.542755][ T42] Sensoray 2255 driver load failed: 0xfffffff4 [ 140.578236][ T42] s2255 3-1:7.0: probe with driver s2255 failed with error -12 [ 140.618629][ T42] usb 3-1: USB disconnect, device number 23 [ 140.647716][ T189] usb 5-1: USB disconnect, device number 27 [ 140.851203][ T10] usb 2-1: USB disconnect, device number 19 [ 140.883950][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.069942][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 141.283003][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 141.308756][ T42] usb 3-1: config index 0 descriptor too short (expected 8192, got 56) [ 141.320379][ T6817] netlink: 88 bytes leftover after parsing attributes in process `syz.1.296'. [ 141.330304][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.349735][ T42] usb 3-1: config 0 has no interfaces? [ 141.360102][ T6821] misc userio: No port type given on /dev/userio [ 141.380780][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.392407][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.419055][ T42] usb 3-1: Manufacturer: syz [ 141.447633][ T42] usb 3-1: config 0 descriptor?? [ 141.606058][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 141.741705][ T6834] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 141.877920][ T6834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.887667][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.939683][ T189] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 142.071876][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.085262][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.095579][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.106279][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 142.119981][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 142.133121][ T189] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 142.157607][ T10] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 142.171327][ T189] usb 5-1: config 0 has no interface number 0 [ 142.177923][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 142.189054][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 142.197432][ T189] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 142.207420][ T189] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 142.217085][ T189] usb 5-1: Product: syz [ 142.221489][ T10] usb 2-1: string descriptor 0 read error: -22 [ 142.227755][ T10] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 142.237642][ T189] usb 5-1: SerialNumber: syz [ 142.242397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.254000][ T189] usb 5-1: config 0 descriptor?? [ 142.281302][ T189] cm109 5-1:0.8: invalid payload size 28, expected 4 [ 142.297903][ T189] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input13 [ 142.329983][ T42] usb 3-1: USB disconnect, device number 24 [ 142.642360][ T6841] loop8: detected capacity change from 0 to 5 [ 142.651665][ T6841] Dev loop8: unable to read RDB block 5 [ 142.659848][ T6841] loop8: unable to read partition table [ 142.665689][ T6841] loop8: partition table beyond EOD, truncated [ 142.672385][ T6841] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 142.757317][ T6829] kvm: pic: non byte write [ 142.772565][ T6846] dlm: plock device version mismatch: kernel (1.2.0), user (3.808464432.808464432) [ 142.772627][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 142.788840][ C0] ------------[ cut here ]------------ [ 142.794667][ C0] URB ffff888034939700 submitted while active [ 142.800761][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: ksoftirqd/0/15 [ 142.810786][ C0] Modules linked in: [ 142.814897][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.825674][ C0] Tainted: [L]=SOFTLOCKUP [ 142.829991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.840037][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 142.845505][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 f0 d4 fa 49 83 3e 00 74 40 e8 ae 55 67 fa 48 8d 3d 47 8e 05 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 55 67 fa eb 05 e8 8c 55 [ 142.865101][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010046 [ 142.871166][ C0] RAX: ffffffff875face2 RBX: ffff888034939700 RCX: 0000000000040000 [ 142.879133][ C0] RDX: ffffc90002091000 RSI: ffff888034939700 RDI: ffffffff90653b30 [ 142.887097][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 142.895074][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff88802a07a848 [ 142.903042][ C0] R13: ffff88802a07a830 R14: ffff888034939708 R15: 0000000000000820 [ 142.911008][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 142.919926][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.926496][ C0] CR2: 0000000000000000 CR3: 00000000765aa000 CR4: 00000000003526f0 [ 142.934458][ C0] Call Trace: [ 142.937723][ C0] [ 142.940562][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.946367][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 142.951745][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 142.957111][ C0] dummy_timer+0xa91/0x4cf0 [ 142.961619][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 142.967331][ C0] ? __lock_acquire+0x683/0x2cf0 [ 142.972275][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.977642][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 142.982571][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.988370][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 142.993300][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 142.998510][ C0] hrtimer_run_softirq+0x17a/0x240 [ 143.003619][ C0] handle_softirqs+0x225/0x840 [ 143.008380][ C0] ? __irq_exit_rcu+0xca/0x220 [ 143.013139][ C0] __irq_exit_rcu+0xca/0x220 [ 143.017720][ C0] irq_exit_rcu+0x9/0x30 [ 143.021961][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 143.027609][ C0] [ 143.030534][ C0] [ 143.033456][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.039430][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 143.045228][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 53 cc 3d 0a e8 de aa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 143.064825][ C0] RSP: 0018:ffffc90000147ae0 EFLAGS: 00000202 [ 143.070889][ C0] RAX: 000000000014e5df RBX: ffff8880b863bf20 RCX: 0000000080000001 [ 143.078848][ C0] RDX: 0000000000000000 RSI: ffffffff8e2288d0 RDI: ffffffff8c4bbe80 [ 143.086804][ C0] RBP: ffffc90000147b30 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 143.094762][ C0] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: ffff88801dee9f00 [ 143.102728][ C0] R13: ffff8880b863bee8 R14: dffffc0000000000 R15: 1ffff110170c77e4 [ 143.110710][ C0] __schedule+0x17e1/0x56c0 [ 143.115222][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 143.120514][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 143.125798][ C0] ? __pfx___schedule+0x10/0x10 [ 143.130637][ C0] ? schedule+0x90/0x2b0 [ 143.134878][ C0] ? schedule+0x90/0x2b0 [ 143.139110][ C0] schedule+0x164/0x2b0 [ 143.143257][ C0] smpboot_thread_fn+0x5f9/0xa80 [ 143.148188][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 143.153211][ C0] kthread+0x388/0x470 [ 143.157284][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 143.162735][ C0] ? __pfx_kthread+0x10/0x10 [ 143.167323][ C0] ret_from_fork+0x514/0xb70 [ 143.171931][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 143.177037][ C0] ? __switch_to+0xc89/0x1420 [ 143.181740][ C0] ? __pfx_kthread+0x10/0x10 [ 143.186325][ C0] ret_from_fork_asm+0x1a/0x30 [ 143.191104][ C0] [ 143.194124][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.201398][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.212150][ C0] Tainted: [L]=SOFTLOCKUP [ 143.216459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.226500][ C0] Call Trace: [ 143.229777][ C0] [ 143.232624][ C0] vpanic+0x56c/0xa60 [ 143.236618][ C0] ? __pfx__printk+0x10/0x10 [ 143.241200][ C0] ? __pfx_vpanic+0x10/0x10 [ 143.245705][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 143.250992][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 143.256196][ C0] panic+0xc5/0xd0 [ 143.259916][ C0] ? __pfx_panic+0x10/0x10 [ 143.264331][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 143.269271][ C0] __warn+0x315/0x4c0 [ 143.273250][ C0] ? usb_submit_urb+0x79/0x18b0 [ 143.278100][ C0] ? usb_submit_urb+0x79/0x18b0 [ 143.282942][ C0] __report_bug+0x276/0x570 [ 143.287443][ C0] ? usb_submit_urb+0x79/0x18b0 [ 143.292289][ C0] ? __pfx___report_bug+0x10/0x10 [ 143.297322][ C0] ? __lock_acquire+0x683/0x2cf0 [ 143.302272][ C0] report_bug_entry+0x19a/0x290 [ 143.307146][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 143.311990][ C0] ? usb_submit_urb+0x81/0x18b0 [ 143.316832][ C0] handle_bug+0xce/0x200 [ 143.321073][ C0] exc_invalid_op+0x1a/0x50 [ 143.325571][ C0] asm_exc_invalid_op+0x1a/0x20 [ 143.330408][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 143.335860][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 f0 d4 fa 49 83 3e 00 74 40 e8 ae 55 67 fa 48 8d 3d 47 8e 05 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 55 67 fa eb 05 e8 8c 55 [ 143.355459][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010046 [ 143.361531][ C0] RAX: ffffffff875face2 RBX: ffff888034939700 RCX: 0000000000040000 [ 143.369491][ C0] RDX: ffffc90002091000 RSI: ffff888034939700 RDI: ffffffff90653b30 [ 143.377456][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 143.385413][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff88802a07a848 [ 143.393373][ C0] R13: ffff88802a07a830 R14: ffff888034939708 R15: 0000000000000820 [ 143.401340][ C0] ? usb_submit_urb+0x72/0x18b0 [ 143.406194][ C0] ? usb_submit_urb+0x72/0x18b0 [ 143.411036][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 143.416843][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 143.422214][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 143.427582][ C0] dummy_timer+0xa91/0x4cf0 [ 143.432091][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 143.437802][ C0] ? __lock_acquire+0x683/0x2cf0 [ 143.442742][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.448109][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 143.453040][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.458837][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 143.463763][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 143.468959][ C0] hrtimer_run_softirq+0x17a/0x240 [ 143.474085][ C0] handle_softirqs+0x225/0x840 [ 143.478843][ C0] ? __irq_exit_rcu+0xca/0x220 [ 143.483602][ C0] __irq_exit_rcu+0xca/0x220 [ 143.488181][ C0] irq_exit_rcu+0x9/0x30 [ 143.492413][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 143.498040][ C0] [ 143.500960][ C0] [ 143.503881][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.509858][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 143.515669][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 53 cc 3d 0a e8 de aa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 143.535263][ C0] RSP: 0018:ffffc90000147ae0 EFLAGS: 00000202 [ 143.541325][ C0] RAX: 000000000014e5df RBX: ffff8880b863bf20 RCX: 0000000080000001 [ 143.549283][ C0] RDX: 0000000000000000 RSI: ffffffff8e2288d0 RDI: ffffffff8c4bbe80 [ 143.557240][ C0] RBP: ffffc90000147b30 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 143.565218][ C0] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: ffff88801dee9f00 [ 143.573179][ C0] R13: ffff8880b863bee8 R14: dffffc0000000000 R15: 1ffff110170c77e4 [ 143.581160][ C0] __schedule+0x17e1/0x56c0 [ 143.585663][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 143.590861][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 143.596146][ C0] ? __pfx___schedule+0x10/0x10 [ 143.600985][ C0] ? schedule+0x90/0x2b0 [ 143.605225][ C0] ? schedule+0x90/0x2b0 [ 143.609465][ C0] schedule+0x164/0x2b0 [ 143.613613][ C0] smpboot_thread_fn+0x5f9/0xa80 [ 143.618546][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 143.623566][ C0] kthread+0x388/0x470 [ 143.627628][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 143.633101][ C0] ? __pfx_kthread+0x10/0x10 [ 143.637685][ C0] ret_from_fork+0x514/0xb70 [ 143.642271][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 143.647374][ C0] ? __switch_to+0xc89/0x1420 [ 143.652041][ C0] ? __pfx_kthread+0x10/0x10 [ 143.656623][ C0] ret_from_fork_asm+0x1a/0x30 [ 143.661400][ C0] [ 143.664659][ C0] Kernel Offset: disabled [ 143.668970][ C0] Rebooting in 86400 seconds..