last executing test programs: 8.468305325s ago: executing program 3 (id=3048): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e4d07c40501d89601dd00000000109021200010000000009046c9d73b4bb8fb2697920685f4784c6ab6226ffdd754fc4272e13e8f260e54bb03530afffaee5d6546dab18b460844d9ad02dd90ce5c119353e3879dc55d0ff6b0b4aaa74163f57bb989f3b"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e4d07c40501d89601dd00000000109021200010000000009046c9d73b4bb8fb2697920685f4784c6ab6226ffdd754fc4272e13e8f260e54bb03530afffaee5d6546dab18b460844d9ad02dd90ce5c119353e3879dc55d0ff6b0b4aaa74163f57bb989f3b"], 0x0) (async) 7.288470177s ago: executing program 2 (id=3056): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r1, 0x0, &(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x4}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r0, &(0x7f0000000140)={@void, @void, @llc={@snap={0x0, 0x1, "967d", "bff893", 0x22eb}}}, 0x9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0xbab48f5ff0785706, 0x8, 0x6, 0x1, 0x18, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x4, 0x1, 0x1, 0x0, 0x6, 0xfffffffffffffff0}], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x78, &(0x7f0000000240)=""/120, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x4, 0x3, 0xb, 0x9}, {0x3, 0x4, 0x1, 0x7}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x0, 0x1, 0x1, @mcast1, @private0, 0x40, 0x8, 0x7f, 0x1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0x1e, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0xd, &(0x7f00000006c0)=@raw=[@ldst={0x2, 0x1, 0x0, 0x8, 0x5, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000740)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x10, r0, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xa, 0x6, 0x20000000}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f0000000800)=[r0, r0, r0, r0], &(0x7f0000000840)=[{0x1, 0x1, 0x3, 0xb}, {0x2, 0x4, 0x1, 0xc}, {0x3, 0x4, 0x3, 0x5}, {0x0, 0x4, 0x8, 0x3}, {0x0, 0x1, 0xc, 0xc}, {0x5, 0x5, 0xf, 0x6}, {0x4, 0x2, 0x2, 0xc}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r5, 0x25, 0x4, @val=@tcx={@void, @value=r7, @void, @void, r6}}, 0x1c) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000980)={0x317, 0x20000000000000}) ioctl$XFS_IOC_SWAPEXT(r8, 0xc0c0586d, &(0x7f00000009c0)={0x0, r2, r3, 0x1000, 0xf1fa, '\x00', {0x2, 0x9, 0xff, 0x80000000, 0x3, 0xe, 0x0, 0xc724, {0x4, 0xfffffffe}, {0xfffffffffffffff8, 0x9}, {0x5, 0x1}, 0x7, 0x3, 0x9, 0xffff, 0x10, 0x5, 0x4, 0x5, 0x9, 0x5, '\x00', 0x0, 0x6, 0x5, 0x3}}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000a80)=0x9) r9 = syz_open_dev$radio(&(0x7f0000000ac0), 0x3, 0x2) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000b00)=0xc000c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r0) sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r11, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15f9695}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x81, @private1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xada}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x4000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000d40)={{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}, 0x0, {[0x4, 0x4, 0xc5a, 0x0, 0x7f, 0x9, 0x1ff, 0xc]}}, 0x5c) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000dc0)) bind$tipc(r0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, r12, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0xf}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2040010}, 0x8000) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000f80), &(0x7f0000000fc0)=0x30) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r12, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r14}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c880}, 0x1) 7.223515303s ago: executing program 2 (id=3058): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x3, 0x1000}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x9, &(0x7f0000000080)=0x1) 7.130025099s ago: executing program 3 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYRES32, @ANYBLOB="080002000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x58}}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x27}], 0x2, 0x0, 0x0, 0x11000000}, 0x20000000) 6.455270241s ago: executing program 4 (id=3060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x2d4, 0x9}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xd, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a32000000004c000000060a010400000000000000000500000008000b4000000000240004802000018007000100637411fc00000000000001400000001508000240000000070900010073797a3000000000140000001100010000000000000000000300000a"], 0xc0}}, 0x0) (async) get_mempolicy(0x0, 0xfffffffffffffffe, 0x2f9, &(0x7f00005e2000/0x1000)=nil, 0x2) syz_emit_ethernet(0x1b9, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1ac, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x9, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f80889"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000482f00fe880000000000000000000000000101ff020000000000000000000000000001242088a80000000000000800000086dd0001000608008873"], 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004300), 0x20402, 0x0) pwritev(r4, &(0x7f0000005280)=[{&(0x7f0000004b40)="bb", 0x1}], 0x1, 0xfffffe00, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d401020301090212010c019006090400"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00030200007c11b0000203"]}, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) r6 = timerfd_create(0x7, 0x0) timerfd_settime(r6, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000d51593f7dfccfa4700faffffff1811", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb08000100000000000800010002000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) (async, rerun: 32) brk(0x200000ffc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000180)=0xffffffffffffffa3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) sysfs$1(0x1, &(0x7f0000000440)='^%^!%\\!\x00') (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x11e, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000200000008410e613040000102030109020c010301004001080b0100012630400904000000010130000a24010d4900e70400000b240d0f08ffffff7f07000c240b0600ed536349ed34050000018a9911240a04020000000003000000020000001124070102080000000d0000000e0000000624050600310904010000010230000904010101010230000924020209000600f80c2402020200ffff0cd564580c24020201000100072788850a2402020500b30406ff76ee2798d8f705a3ff0a25e805d95d2562070000095c0a0904020000010230000904020101010230000a2402020600000010090624020104070b2402010103070b64bcf90624020102030a24020104040ef958660924020105020607bd090582090800b944070a25250200000003800022c5a8118fd07e6bf8388b8e4f727eef2dd392a539d327dbd588c418b8403ece6bf139d775685662b656a6761ec6a27b4d401e8e58dc35c2ebb318c35fee92417a9a8856daf071f730cae693a80d5e2d339a406f02bee68399c30624649adaffce627b5187ffff1e3a1fff0c8b9605202c9f5efb0c755b14b77d7c22c4fba8024e0004ffbac49910b90f7ff4dbee7a97d425c8c81c080338c02e37738b9680119f031e1eb7dfa62c4e5b2ba6"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x10, 0x7, 0x8, 0xff}, 0xc9, &(0x7f00000001c0)=ANY=[@ANYBLOB="050fc900050a1003020200017c2ecd271003dee053097f829cdf42e4636010a1f8f672cae2402fc025a03483f679bcb2d43d1224750a17e7a58c30c7a26158e5680e0d5d8bd0a027832432dc47092a1f003f7e5b98baa4a2a9fec8185caa4841dd13959b327af84a4200e9c8cc0c80b726cf62ff8392c045046282cea8b7d7cdf7debacb5ea17fef88b8d0eb28ca4d3621afcb4f76461ad1796f79972535c07160aec0601901eebd874b915b75449603100b10100a0861be030000f00d0000c0ff00071002004b0300"], 0x2, [{0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "704ba47352fa87c4088f6dc2fd4d1c233bb090a846c8e84ee38c7e1ea4d3fe8e872654e7f58996ce2cd7319bc638a2c52ff82f3139c7bc08e3aae7a2f687210100f6d568cc7924b35ebc3c7a41f85c347bcdc19353be391c91aa6851e99289288ac14ef0b5dc0ff11cee8d27f924e434d97cb09ade85d8ca4c2ae027fb8a0273ae5f94fcd8bc99b38ff206aa1ff15123d315bbcaefc1c207274c990b229c418d3408c38270cc3d2b520bf244c17573f03a605279802148716fd5ac9f4f7d713f74c0"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) 6.362802148s ago: executing program 4 (id=3061): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000006000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.772828308s ago: executing program 0 (id=3066): socket(0x1e, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) (async) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) (async) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) getpid() (async) getpid() ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 5.741279809s ago: executing program 4 (id=3067): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r1, 0x3000000}}, 0x18) 5.620741826s ago: executing program 3 (id=3068): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={@empty, @empty}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x459, 0x10, r4, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$netlink(0x10, 0x3, 0x0) 5.46018741s ago: executing program 4 (id=3069): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x97bb01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2d) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000c00)={0x18, r7}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x20, 0x0, 0x6, 0x401, 0x6, 0x1, 0x0, 0x7fff}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb0220000202050905e6", @ANYBLOB="fe"], 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 5.036173548s ago: executing program 1 (id=3070): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000007800000079a000fe000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 4.812666479s ago: executing program 0 (id=3071): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e02c0, 0x0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x16, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x3}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff41, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 4.648072359s ago: executing program 1 (id=3072): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250", 0x1f}, {&(0x7f00000003c0)="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", 0x57a}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x2f, 0x3, 0xc, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@loopback, 0x585}, {@loopback, 0x1}]}]}}}], 0x58}, 0x200000e0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, 0x0, 0x49) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) unshare(0x26020480) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x7}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x80000000, 0x6, 0x7, 0xffffff4c, 0x1ff, 0x3, 0x25}, {0xd, 0x493d, 0x1, 0x5e9dd040, 0x4, 0x127, 0x100}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x24, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0x7fffffff, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x48902) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000040)=0xc000c) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0x11, 0x148, 0x340, 0x0, 0x498, 0x2a8, 0x2a8, 0x498, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x8000006, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x40000}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x3, 0x2, 0x1, 0x6, 0x3], 0xf, 0x5}, {0x1, [0x2, 0x5, 0x0, 0x0, 0x4, 0x4], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 4.647727634s ago: executing program 0 (id=3073): openat$nullb(0xffffffffffffff9c, 0x0, 0x400000045c880, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x80001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@deltfilter={0x44, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x4cded8c1577d90e0, 0xd}, {0x0, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300070008001100ff070000080010000700020008000f"], 0x54}}, 0x0) 4.009275604s ago: executing program 1 (id=3074): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x13}) 4.000862625s ago: executing program 2 (id=3075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x20, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xffffffff, 0x1ff000100, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x12, 0x5, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'lo\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x100, 0x9, [0x1, 0xfe49, 0x3, 0x4, 0x101, 0x3ff, 0x5, 0x0, 0x6231]}, &(0x7f00000000c0)=0x1a) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x3, @mcast2, 0x8}}}, &(0x7f00000001c0)=0x84) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x401, 0x7f, 0x84080}) 3.802762618s ago: executing program 3 (id=3076): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x55, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110380000000000ae000700000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) write$binfmt_script(r6, 0x0, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 3.642788903s ago: executing program 0 (id=3077): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x55, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110380000000000ae000900000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) write$binfmt_script(r6, 0x0, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 3.589013991s ago: executing program 2 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYRES32, @ANYBLOB="080002000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x27}], 0x2, 0x0, 0x0, 0x11000000}, 0x20000000) 2.445349591s ago: executing program 0 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0xaf01, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x4008af21, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc3}) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x2000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r4, 0xcc8c8000) write$binfmt_elf32(r4, 0x0, 0x4cd) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001"], 0x84}}, 0x200088c2) 2.342171676s ago: executing program 3 (id=3080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r3, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r10, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 2.159146117s ago: executing program 4 (id=3081): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2ac}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x34, r10, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x3}}, './bus/file0\x00'}) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x35, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x1, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 2.157875221s ago: executing program 2 (id=3082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0xfffffffffffffffc, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x3500, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000ffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.004695237s ago: executing program 0 (id=3083): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x2, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000000)={0x0, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000080)={0x3, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x2, r6, 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\a\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000aa644ecfedb8bdaf2a7cb2b56648be37b288bf330daa5af7d633a6584377703cf1c86a9d2fc33fad7385908fa3d54d44a3a90bf3e4408f01b67a8f5a6164fd542c341a7b5d6d93fedede8688ef3f1146ebcfeefa0e3fa9c5b648acdaed105105b2a0a009639bbb9d885ceaa4fd3d67e12e6"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x6, 0x2}) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ftruncate(r8, 0x2) execveat(r0, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.92846158s ago: executing program 2 (id=3084): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500220bec1ca2371c173abe96f273c1e64b3121b101e044140254001020301090209000001074007"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x94, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x10, 0xa0, 0xfa, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "25c67cad"}, {0x5, 0x24, 0x0, 0x30ca}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x9, 0xa4}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x100, [0x7, 0x6, 0xc632, 0x3, 0x3]}, @dmm={0x7, 0x24, 0x14, 0xec7, 0xfff}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x7f, 0x9, 0x18, 0x10, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x40, 0xd, [0x1, 0x80, 0x6]}, @acm={0x4, 0x24, 0x2, 0x15}, @dmm={0x7, 0x24, 0x14, 0x9, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdf, 0xe, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x5cf, 0x6a, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x3, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x35, 0x1, 0x8, 0x10}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x4e, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x1000}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) (async) syz_usb_connect$cdc_ecm(0x0, 0x94, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x10, 0xa0, 0xfa, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "25c67cad"}, {0x5, 0x24, 0x0, 0x30ca}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x9, 0xa4}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x100, [0x7, 0x6, 0xc632, 0x3, 0x3]}, @dmm={0x7, 0x24, 0x14, 0xec7, 0xfff}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x7f, 0x9, 0x18, 0x10, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x40, 0xd, [0x1, 0x80, 0x6]}, @acm={0x4, 0x24, 0x2, 0x15}, @dmm={0x7, 0x24, 0x14, 0x9, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdf, 0xe, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x5cf, 0x6a, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x3, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x35, 0x1, 0x8, 0x10}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x4e, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x1000}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) 1.190400872s ago: executing program 3 (id=3085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa300090503"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r5, 0x2f, 0x76, 0x9, 0x2, 0x20, @mcast2, @remote, 0x8, 0x1, 0x9, 0x1}}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000500)={@rand_addr, 0x0}, &(0x7f0000000740)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x2944, 0x30, 0x200, 0x70bd26, 0x25dfdbff, {}, [{0x20fc, 0x1, [@m_ct={0x130, 0xe, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "79c407ff902bd2065d4fc2117f4a5c8f"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0xa8, 0x2, 0x1, 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0xad, 0x6, "eeb781708a367a435688b05c969344695ab98f4e056946976d401cca4925904145236b019948a8b03acc2d7ebd86c5aad6b4488865791e6c96d6f117988d3bfb17c7cfc5985315f5cff6130ed451cd83130f08f722cb09232af7a864ad3df5b49b59705b564544893a990cdfa9cae1496ee8fd5c2a8004cc57d5c57a9ff2a57f59d35a496033d142bf779bc3d0d48a95631b5ea12275e636b7ba36bce31bb66d1b99e39dbe0cf28077"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xc0, 0x19, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x82000000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x3, 0x3, 0x7}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff0001, 0x1, 0x10000000, 0x3, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x2a, 0x6, "c3b0a87a3ec48fbc98f03aff4d1fe37e29f4c5ecd6e60e5758dc7e127cf788bfa8865151229c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x138, 0xd, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa7f, 0x9, 0x3, 0x3, 0x2}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5be}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc42}]}, @TCA_IFE_DMAC={0xa}]}, {0xcf, 0x6, "01bc644f58a01d7bf91004ddad45a5f8ef07f9e55452d963977498474a2a4c29abf0b8be848fe6654e3dabbdfe4af080a848be2ba141ee10dd3e8db4ad3bcf9322c77e7fc61b1449f7d9ec949a27175eb4079e9e38e9fb5d58a31f23db9c609be34d39b45a22b7ceccf26837f54e94dbf6e7b3473d097b717991756c2f858a59313f41c7e6a6e2e7591364c8dc72d076e163e1eb23dc425d0816c8fe0cc4ba1d9d61d5d41f25c85b63103d3db0ab8099b7cce6cf47ca74157240d0476052c90bcb7b4457685587434073d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xd4, 0xb, 0x0, 0x0, {{0xd}, {0x4}, {0xa1, 0x6, "c6a6ad6749d5a02e982944826fd8fd32f65f296d798725e484a31f5065796ab98049222483d2b8040d52d67902cf725028b3c3a19848aed4982351ade5e1549cb285a1090a3c21fa9b6f86c7bae85417b1a55057fd81083a2ce0b4c5adb900c6a39a89135ab7dfc78703e47a243f18ca46abed7af8c4df2119a71a88a23f98a5a35ae8112ff5bdccd3f5216597aa7832c929ee45c654ac2c44de2405c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x124, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x201}]}, {0xdf, 0x6, "d2685ae8bb41e9e4954d109c56df3859f149790566576d4a51b3db65a48a917eda14fcf758af33b190283eb8f581d5bf77c3bd574259759a69f9aca2efd7ee33834d55a91bfbffebe4994193d0ba2fa3cc825e910986f7634b7350bf0e072405d8d43399bfef021867236671432b0a40f4342c9e615cda2e4de024d0bbbf920e52a00731feaca2020a13b1afd432e2c3a8b0abfa2a25b6c329119a506247cee0da94b338269ee3a2f89c6618e9e3177094461221c7325befd443a3932ba367588482745dc0fc06bf7746f639b670a56e0117af25b733672c508234"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1faf, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19f8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xe, 0x3, 0x1, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xf, 0xffffffffffffffff, 0x10000, 0x8000}}]}, {0x57, 0x6, "5e9918e981beb3f0ff753535294c8e9cc22bb5d064a60f5dea2ab2a3a533eb5b734c9273d48a5b4d634836449b6a926035bc4263c0dd3d68232ed2d1382e2139976a1f483a961cb4f76840e5a42efc1f0b88b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1954, 0xf, 0x0, 0x0, {{0xb}, {0x928, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xfffffff8, 0xffffffd6, 0x4, 0x3, 0x9, 0x5, 0x0, 0x753d, 0xfffffffb, 0x1, 0x9fbf, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x8001, 0x3, 0x7ff, 0x1, 0x8, 0x6, 0x81, 0x80ba, 0x81b, 0x7, 0xfffff05c, 0x5, 0xfffff000, 0x6, 0x26d0e380, 0x19fa5322, 0x9, 0x7, 0x8, 0x0, 0x2, 0x3, 0x7075, 0x3, 0x800, 0x8, 0x6, 0xffffffff, 0x7fff, 0x1, 0xb6dd, 0x4, 0x401, 0xb287, 0x9, 0x11d, 0x401, 0xff, 0xfffffffc, 0x3, 0x1, 0x0, 0x9, 0x3d1, 0x7, 0x10001, 0x10, 0xc, 0x8, 0x7, 0x2, 0x80000000, 0xb99639d3, 0x1, 0xde8f, 0x5, 0xc7b, 0x5, 0x6, 0x4, 0xcad3, 0xff, 0xfffffff7, 0xfffffffc, 0x5, 0x100, 0xffff0001, 0x3, 0x401, 0x0, 0x6, 0x2, 0x9, 0x1000, 0x8, 0x0, 0x1, 0x2, 0x2, 0x5, 0x4, 0x79, 0xffff, 0x9, 0x5, 0x4, 0xe, 0x7, 0xff, 0x8, 0x5, 0xc, 0x1, 0x3, 0xa6, 0x1, 0x2, 0x3ff, 0x9, 0x539e, 0xfffff09c, 0x101, 0x1, 0x200, 0x7, 0x7, 0x8, 0x8000, 0xfffffac6, 0xfffffffa, 0x9, 0x5, 0x21, 0x88, 0x4, 0x531f5013, 0x1c0000, 0x401, 0xfa1, 0x10, 0x7, 0x7ff, 0x9, 0x89, 0x1, 0x3, 0xfffffff7, 0x3, 0x0, 0x3, 0x0, 0x1, 0x3, 0x592, 0x0, 0x3, 0x6, 0xc3, 0x8, 0xfffffffb, 0x5, 0x28b, 0x100, 0x80000000, 0xdf3, 0xffffffff, 0xfffffff0, 0x7, 0x6, 0x63, 0x2, 0x7, 0x4, 0x6, 0x7, 0xffffffff, 0x58, 0x0, 0x4e9a, 0x0, 0x6, 0x6, 0xd90, 0x5, 0x0, 0x2, 0x7, 0x7, 0x7, 0x5000000, 0x996, 0xfff, 0x800, 0x0, 0xa95d, 0xfff, 0xa4, 0x9, 0xff, 0x4, 0x6, 0xc, 0x8, 0x7, 0x100, 0x0, 0x6, 0x7, 0x0, 0x3, 0xf, 0x9, 0x3, 0x2, 0x99, 0xffff, 0x7fffffff, 0x80000000, 0x7, 0x6, 0x3, 0x1, 0x7fffffff, 0x800, 0x0, 0xfff, 0x1, 0x6, 0x7f, 0x9c19, 0x539c, 0x0, 0x780, 0x4, 0x9, 0x4, 0x97, 0x4, 0x8, 0x0, 0x8, 0x2, 0x7fffffff, 0x7ff, 0x6a16, 0x7, 0x6, 0x0, 0x10000, 0x40934bb5, 0xb, 0x2, 0x1000, 0x9, 0x7, 0x7ff, 0x4, 0x6, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x89}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2e0f784d, 0x10000000, 0x6, 0x6, 0xb, {0x7f, 0x2, 0x400, 0x8, 0xb0d, 0x3}, {0x7, 0x2, 0x3, 0xb0a, 0xe, 0x81}, 0x200, 0x2, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x34000000, 0x4, 0x5, 0xfffffff9, 0x9, {0x9, 0x3, 0x9, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x7, 0x7, 0x5, 0x2}, 0x9e, 0xe6f2, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x41}, @TCA_POLICE_RATE64={0xc, 0x8, 0x27e}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x80000000, 0x2, 0xf3ad, 0x3, 0x7, 0x9, 0x101, 0xa8f, 0x7, 0x200, 0x48cf0ebb, 0x8, 0x6, 0x8, 0x387, 0x3, 0x6, 0x10, 0x1, 0x3ff, 0x80000001, 0x8001, 0xfffffffe, 0x7, 0x2, 0x6, 0x2, 0x0, 0x8, 0x4, 0x5, 0x9, 0x40, 0x6, 0x0, 0xf0dc, 0x81, 0x1, 0x5, 0x2, 0xc, 0x2, 0x2, 0x3, 0x80000001, 0x0, 0x7, 0xfffffffa, 0x80000001, 0x3d, 0x86, 0x8001, 0x6, 0x2, 0x1, 0x81, 0x0, 0x8, 0x9, 0x679, 0x8, 0x8, 0x3, 0x8, 0x1, 0x1800, 0x1000, 0x9, 0xb75d, 0x9, 0xe, 0x1, 0x5, 0x1, 0x787, 0x9, 0x9, 0x1, 0x7fffffff, 0x3dc, 0x5, 0x1, 0xfffffeff, 0x3c0, 0x7, 0x9, 0x7, 0x6, 0x100, 0x9, 0x5, 0x36bd, 0x6, 0x81, 0x7fff, 0xb2, 0x9, 0x9, 0x8ea, 0x58, 0x3, 0x85a, 0x2, 0x8, 0x276, 0x7, 0xe79, 0xd, 0xffff, 0x11, 0x7a, 0x8001, 0x7, 0x3, 0x5, 0x8, 0x0, 0x0, 0xd, 0x9, 0x101, 0x200, 0x7, 0x455b, 0x1, 0x5e7a, 0x3, 0x1, 0x0, 0x4, 0x1, 0x35a3, 0x3, 0x101, 0x3ff, 0x6, 0x6, 0x8, 0x0, 0x7, 0x9, 0x9, 0x4, 0x0, 0xdab, 0x200, 0x1, 0x10001, 0x6, 0x367, 0xc274, 0x400, 0x5, 0x620, 0x0, 0x5, 0x1, 0x9, 0x5e8, 0x8, 0x800, 0xfff, 0x5, 0x7fff, 0x5, 0x783a, 0x4, 0x8, 0x6, 0xffffffff, 0x800, 0x8001, 0xfffffffb, 0x3, 0xca, 0xffffffff, 0x7, 0xfffffffa, 0x7, 0x5, 0xe800, 0xee6, 0x2, 0x5, 0x80000000, 0xa1, 0x80, 0x7, 0x3, 0x8, 0x8, 0x6, 0x7ff0000, 0x20, 0xfdfe, 0x7, 0x1, 0x1, 0x5, 0x7fffffff, 0xe6, 0x4, 0xcc97, 0x8, 0x9, 0x8, 0x8, 0x6, 0xe89c, 0x10000, 0x4, 0x3, 0xd, 0x42d, 0x8, 0x9, 0xf, 0x7, 0x2, 0x0, 0x9, 0x80000000, 0x7fff, 0x9, 0x2, 0x6, 0x9a12, 0x5, 0x0, 0x5, 0x81, 0x401, 0x7f, 0x5, 0xffff7fff, 0x79, 0x9c7, 0x6, 0x9, 0x4, 0xde4a, 0x3, 0x80000001, 0x74e, 0x0, 0x5, 0x64c, 0x6, 0x400, 0x7, 0x9, 0xfffffffb, 0x4, 0xfffffc01, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x68}]]}, {0x1004, 0x6, "7b7e430f941124002fd8898764b73771c98d9115832e86c3decba78e6085cf55497b585a1e8895fea8ab3305a5ab593444ed8fd2a84b5549987c4785cd88529893390661dce6bbb80d4e2876b50accfc1def6a24cbf572bbdac7fc301fed080460d9359170dbfb1445844137ba3231b1830f18c86fe16ca7fa5d89ce5f1c00e9fc3445b08804d95dae4a600860be01eebbe4ac2d34f7fdf1e7349447f816c8bcfda5a6bdac1e6c1df800af380996d68bd84a7af220389a8dbb2c8647ff273985d382444704751cee6be68c38bc3069a15ea348719d81c3677754cf8ded368608520217ccb190f9a3491f49a8c5e33414e3103a4ed378d3019084a62486c43da9caef2ce40fa3b51342630aa44edd31bdebcbc8ec502ee0a76a85580629e3107346b62770d625e061b836d20f0059f002fa7167208dc7f277c5ad61df9678c35f6518189308711d768e66734c3fc08870f0c999b24f05abd46eaa461cdf558b64812bcfc770a60ca81c58ec30aaa5f619c475f8eb28d23ce5c45e73ebf4425dc0a18ebad6628681fcadc1976e555e0d9ac487ee7c53618b810bd056c87e9cf7a2b91f3f5c5056b47e46b3a4621c49c2aef0436d2b7c503f4726406ddc41f9192c3355bc3d9116d7f890e45b348a8af1f7f31639e6f5700efd449b2aa4da2121dec8d7247d5f8a306fc8fed3a0b21dbac4cc6d0bdc6364c5c73ec53c303e33f0c24c58e6d0b7741d35e970352785c6492d47eeb726fe669f44dc30d77f4376d80dd5d226a97bf3749ea5333416b4f277b35d2286d7368d60b49cd2141833f7410a3bc307f878f2de580d06e18d873ef722901ed6b02871a1705a8f6d9378176503ef34d82dc37306daacf832aad417c754f2124053f5f769eb74c4e64db57afa40941dd01673bdd0e591f76418974d76a1ad30616321b7cf1a78f44765f6a8f7a0d4cbe8ca630f1999d033460cd34a98149123430a51c2118e4642e4c34f244e228825d5de07786484cc6777280f72ab9d3c4b1e2c1efdbdd15519b3bb518b73ee2c38c6c2ebcecdbc48a4a38a62dc0fddc3740458745d7b17a45c46ccb77ad9b769732ab7facf81bec8edfd45c715bfc80cc74a07085101d9626fb7354ebf4c1db08c36bb9b1a550a2b696894b0ac1836b11d43c32a3f5aecf375c1224c3afbc9b674ef38682f31a9d4e57adafb680c251b7612da704cf36edcb42a6752c4e8c211bd02e553de84e4d46533bb71a9d450ceb720295ca41b705f04fe5b8ee58a0d0b19831778d658222146d3e6a6a67df4b2fc3d5dde66359592f2d7fa905aaddcbac6c46ad53f2e5e80eb4087257e19e7696d7d38d00ee38843175025615faf193f61ebb3b05e6b2ee633728e68463d12988010fdb1435d29e33f536b6a6c324d2bf72181b3a0f96b93ed8709195e2538751ab51a237650d88c9e6d21275a7ec9fc02d155ae29dbc1ca48be62157a29c9fbd79fa7073916a7fe35ca3e3fe142f21ec904dc1de04a92bebea441bf40b63f34ea722b2ca91899a5550e43b6d18be10dd59ba24d5aaf22eac616734006ffc736c151529c2df76f6f1016b90dec2b587d0146c94e8d82dcde12dbb02e9cf22fb1c8e3014cf2236114abe4773249b7aa22f5609c1cd042c0a4941ab24e0598e73092f1b9a5d88af5f5365e07dee8b0b8b8b9f4b64fbcbe439c74805e39887c3efa9076eddb77af89eded7fb99e8a82081b429b40abd7e98f8075c1243c28b3a12b80b4e0aa1a49dff2cd8028096387d22f689783bb8129ee214757eab9e00ee07e8d5a433982ba725fda527eb110fff9035ee5192a3d0f210cd3aa406cbf6f10ed3f0c2317c0b72204ae0c0e87639cb1efd1b6a6206cbee30f755ddab1ea7e7e3e3df523d9dbb2a0ac7179f5cd332ee277fbac5dfaf966603d49e0711fc5ae4e55122e10ffc972537f3193cded19bd693b61794b211eebbf5d6c56dececdb53720c8084e1b5067e44c95472a6f7ab9a2bbe7847e1ca1fd4eca7d4095244a8068c766b88bdb77bd353665b766ed49ce4e5c1fcb59e9d6815fda6f105a70eb0dcb2eca946403432b9bf7c7dcd222214b8efbfd76c9cb5f5b84ee21a9f16373db51c03b6cf8e5c74849947ed15009c736bfbbaf982cb6033d6a26c6b426ce865839ce6dc576e9f017bce1f841e84566bcc9a642f72f8267e13b5ea06177fdcaf869678096b5280dc553385cf80ca01bd8af72d8f3bd8283ee9e55773d7555c576353200cf67ea7e95a12262e1c747e437aa7560bea8c3d346458d347a9353f26ba4fc2d15d0d44bd2f2feab6b07cb9e8fab512767dc39db8b3c9c3e93a84816e3b941da09818538c6eaf427ab95bf11bfd40025a4252f66e225a2f1d7066b25b9ed8c2e13b028343aa3a4d8c0f667af2b8e3e630906e58a9aa8fc4cd9f76cec110510ad716787e046f16ff1281e479b448acd7494e3f2852009add2770a6e1450fc57deffc2bcefc06f2fd398dc3b1a1dfe4621d888c92887ecdeae312056a2af6652ad693d0441f832a085ce930e7f3e11f3c2241533a833b43062567a70c1a4b75a1d30d2a632f1ce29de5900027fd313ab02c1428d119d46c9fa80353554bd042f26b89ed7cb63e16cd59f46d9dc97a69dc9848ae9136db6e97a4c9ba855c5b637d0a3f72b7e45a620e0b22ca453ec6e02e1463f0de46cdec5a8ecd7c73baf7cea5d4b7f9cf1fd90eba94d1b0ce5c8d38bf78029ee431bd56052015d7f3e90fd11f6487e01e1068e971be6a5399a0831e8398b0daa8e9478ed8549e0bb16fe81a06c7308cf57dd19d9901ac7112a564d668af99385739fa35dc5cff7ebfcd26453d5c3b03459696d9ff4fde78528b70ce3db5d1b63ba3d8bec6f69bc26bb83e564feacb400865ebe5295151e6924f10b861d07521486a0d3a1b0df3e7e1c4b6ddc872627595e432a7b0d34789cbb4fa0b4d0e6fc3202b6e0f0d2cfbc74ddd0934f18faa609d55b31c59a4a8afd6b1378b3c8526fa1153689a821fc6ecc3115661363406e7a01cf4fae2b629201651e6bf92f00265f0cb9a4468257aff79cbc53ef98976e4dd337a43bbeb58cf39fea2154de1bcd038b8f5207291ea2e1831afad45a5e6ba883e53e3842194841b7e8065dd09f0c51472794c211af3a97a53e045ffe0960597c819323588d157e4bc14fa90848ace45b947a586d3862def5e49728700c7ecc4c5d94cb095b8f09abd1d389f8fbf216177f0c5e77fb680d3e15433af78b86509e5de263ad65d06c5249c1486d05913e9a2e5b0a2c8d810b7b2a02b9f8848e325b7710c4cace26d9c2a718e2716b19ac7a68f0fdf218a38decb8a77eb393a2ebf372e6b488ae0ad791db16b528a0c3ce91c239e0f6baa02dacd265261d0557b19a47d60e76b50bee0b42082838797316adb5ffb104a6d353a61c79882902a75951dbe282a0825a2ecab06756b0db2480ea19009fbcf4eae0b0a31a480d7cf398666cfc28a770f77e7929b7c458e4487e153acfb885ddc29e076e20d601c8ca8a97ed4774753e538d841340e6a53d1644c55b473c0f3054502ec7acadf488e59de1eb8023a5884547a6c96f8ea89afac2e721bee6cc67dbcd99a9e2c9d276fdd41da61728451c34021570fe7cc6043515e5164b67ad8d21e66ad4ea2dbb76d5e91cb407eb25f39fac62c8918db38b0a01d2fed5d694c2ba23ac27faeea5219f7316e808e5fbda9dcb44f99c82dccff75d297e5f561d45d5c65a77401561dca14a2d4f15cff51524c51eb859832d6f1ade526de987edb5332739791e904f5fd2d15ad8310de67d428fa346d14a6f2634a90f31cbb5525df637ff5eff805157e4fadc1cde9be946f256f42957e29a7d1e08cfef141d24163c2994df3d1a04c65e494d65e8fa1b17df27bd72674fd72828d7433b34c9cb2535ef49d803d97d148ae97c6a9606f19c23f33b501c8ac8c18b702d34f2a9414769c862a19dc9ed14427ea82659000015a993b59f07b368dec744fbb16929d77fb4da401acffd85265eb296793aa3f4c30c6da7b97df275685a307d960c742488d29490f9f001993257565f67cadf3123cb65f480b0f2ea9838b6f2234780e063e7dce18833930d622095ba0be20cbcedb1280f1bbfad1bf21a3b78885a425c7721a0ef20715107bba275566332b356148ff6ce525b8ffb680c4d3a4bd62425890b2f474ac584dd1212271cf5e554645c34881316132721152676bd15fdd5568a749e285a4f74e7f22eb84fa5fe8bd22f04486c9c07759377dd0cff4d16eda0ee6a864436fb90517e8179b226bed44c2554ff9fb12eb4b4a29575037d0952fbdb7cd49655982906bb5af1dc295c9a1939c5e2f21965f5ae359258b877dededdc3b4b001d676087b33695e324325de672a0d39ee8100753a9c6a230edeb549d348133b345367727a5a063c1cfebab1fc69d0785d0088999b94f43f781d4e97470cf1650ed7498268e76c555c094b8c9d1566fc4de005fa98437805ac06738f9aded31bfcf9487b23f0dc37ef7f738035fb24836981ae24dd12bd75742c39c67611373b1dc94000b19adb22364230d1fec3554f28e4cca254d56f3ca57b4c029939238eff532c7404c25f53c5d2e4f3ea7b50925682dd7de302d18125392dec4006573ec18b2d57d5664937e5305afc6be37d0ecc15806bb7862890ab7edb1031425d535e9f317f0b989c7192e218f399ed3170feee3733a624c429e1f14781b0566259c2303469bc0d7fdfbda171f9f5bdea712368254d31a40aad9a660df1039c1a5611f15a7e8ac586e78ea5e5a6e5f73c4e8b50dd303306ca33710ea8fcf866323219fbc976adde129d65d21d4fadf0a0a704158ab261302c6807c533230c51efa7161cdd8b20f6f60f7ee6a96753a64b7ad579ecbee37e215acefbf397080790b57d5a82475634691cdc3e0c6bea41762cbbcebb2b99ea51ce467dc31035e5a037d85c77da04746b2a48888708f04a6232aabf0147671efdd7db2014416b0c1b40b3c8d3e438867727e458ed8400cffc25901d1a28bfe1b48383bc5480867612c559929a5e7dcaae448691d23f6d65cb716a72c75294320e5a878fb76f7e0d8b5aca4d621f25d5dc14cfdf7c19b1b49fcef6c9a6c7e1991a7e2dd48f12e760432fa81ff977ccb21dbdd3593a5917579cb9083fa50e20203b896497f8e08162cbd3a4237ae3eb8ef8a75dcea8c135bd49254b7ef078ac4036cb1444b1fb1261a0a17d7a1e06e5ca8f5eac2ca49a4d198add28179218278b1a04ed34307db067e17fce3ceb6719eaba3d5888acf001d980eeb505f41edb4b74e23a2bd55378dba68503055024120640aed8920960269be1ed17dd56101e7d7a1730bb1821e6c3655e2cf33a25384356ed564fa04a3d8f8f84c161edb0f7f6fbeb541e1e6395380b1aefd11dccc39b04eac6b38e5243dbc63aaa2534ee33ed0653bfd2946c7990f4cac596e6cb14f386d42c6b82a2eacfa0e2dca8cb4621f756024dfdccbd2008f2615923207b2e2ad1ffaf88d0faf5656f1045288ab0fdf543c93bae696c9c74abfb5939bfb1a7bd91ce6c7d8b91cdb3d3c9c1db562108b0b8d999a44f591898170b557fe8ac852b20f46c863da7b8fdd2c409a3c84faaf07729c4b91da83768709cce83951ddeae72a8aad2da1575ecb66dd0ac6c1f6ee41d2b4c0084a557330b99e97f7ba2fceee9dab4587a82431882ab9b8db7b2543e6e47740bb516b11543f80af5687706158cf9feda236bc8313e3bd819b11ea3599e24e94ae6a952ce440cdf44a944e56013d82a608909a50c64c7e8abfc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x118, 0x13, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x7, 0x0, 0x7, 0x6}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3c4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3343}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x3e, 0x6, "f092c4eb169240ff21b1968cea7d3e8bd1b6986084fac8847359799e170598371d549c410f7b60cd75084a554c333743d5eed7cebbf581fff99c"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_simple={0xa0, 0x19, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfffffff0, 0x3, 0x347, 0x1000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x3, 0x0, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xb, 0x6, 0x1ff, 0x1aa}}]}, {0x2a, 0x6, "8ae2f6323b921b8e6ca6798e755e747834f7a57e83f61a66f72df685eb244e2b3e374d91889b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x834, 0x1, [@m_tunnel_key={0x70, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x36, 0x6, "ce74dde895e79ad3e737b69388424d075260fb378398367dd7d359a36d5b5cddf06797b73fad512a752ec4c30fedf7e8c23d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xd8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfe00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xaf64}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x23d63049, 0x8642, 0x322ee9758344f414, 0x5, 0x10001}}]}, {0x64, 0x6, "10efe82787a7e8b76da6017151c8290ec70e1055dad0aa3abc4d7d19f8815da03517b3357d16121d4bb269b94b7ffb57e1ff3b06e2bbeb1e58f93255d734778c5234261875a5b229239eda8d2d851fe56ab0c4bdacdc714f29044a3b6c9087e0"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_sample={0x120, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0xc2, 0x6, "1277e91d45b9399c521d1b34ebb2d659e5d51f0123337dffcd86e4c8b245bdae3c2d2074192f84b70fb8dc91362d61430ae5c577072fdc2d43a48f233d65ed10657d9ca21556f0d60dfdd3ceab5c413cefa0ead9c43e2e42c25a521d288770b138df5c1742b33f596a74b4841c95513f7781a0fe2551a293536a07acf7335e944c3ffc56a0f501f696a9fea202ec47056b39a62c7bd26fb68bdf45b13650f4ef635416b402787f44c5ccc079fe6ea79ad062871b22400ab1ff2cbca30a41"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x2ec, 0xe, 0x0, 0x0, {{0x8}, {0x228, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0x102, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_NAME={0x108, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}]}, {0x9e, 0x6, "58d333a4cc53d5aec69a83df7167aee85daa1ed954beab95bb92c8e9a8f20961b9d3d77366ad4c51da178c901b499519a14bc85a114690c8e1654a449a5fa9a4bef89588abb688975f995f660400fa21e65bdbc67cad2a5c6050cd5b70a85f0def106d63890a9868754782bc1368bd41b45f50f47e9d5ace4641711c6217992a69e8e0b77929c3a329157bc9bc662c9c1e1e52f94599e4d9575e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x174, 0x1e, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80000001, 0x7, 0x4, 0x6}, @multicast1, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x20000005, 0x6, 0x58a}, @remote, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x4, 0xffffffffffffffff, 0x0, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0xbf, 0x1, 0x8000, 0xfffffffd}, @remote, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0xffffffffffffffff, 0x0, 0xe}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x81, 0x20000000, 0x68, 0xf0eb}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x80, 0x0, 0x2, 0x10000}, @empty, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x8, 0x5, 0x2, 0x1ad6a0d3}, @local, @multicast2, 0xffffff00}}]}, {0xc, 0x6, "073eed3fd2c05a83"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xf058cdfc6042ee76}}}}, @m_mirred={0x168, 0x17, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x400000, 0x9, 0x20000000, 0x5, 0x5}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x800, 0x8, 0x10000, 0x6}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x300000, 0x3, 0x6, 0x200}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x2, 0x7}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0xffffffffffffffff, 0x5, 0x5}, 0x4, r5}}]}, {0x9c, 0x6, "10b92014b3b6bb7c7bead2b6f1aa6ea6a2460eded6845ebfccba13bb2d0df6846c7d4cfa4831d55596e8c8ac15ea85e80621844bc0fd30eafd6e29a3ad9485f60ce7748c0d4f9d9589edaf399f31037ce70499f030d3531c1fa8392ba0045a62e8b77644068204fbb9d3a9054a3926aea1f442535604694b6b17d447c24dac810d9a9121ff760a332641b80a4541f016b1b758c777b0436c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}]}, 0x2944}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x30, 0x86, 0x1}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r9 = syz_io_uring_setup(0x4b43, &(0x7f0000000080)={0x0, 0xffffffff, 0x1000, 0x6, 0x145}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r9, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r13 = getpgid(0x0) setpriority(0x1, r13, 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0x3, 0x0, 0x0, 0x1000, 0xfff, r13, 0x0, 0x106}}}, &(0x7f0000000340)) 860.266751ms ago: executing program 1 (id=3086): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000002c0)={0x10, {{0x29, 0x0, 0x37000000, @local, 0x1020000}}}, 0x88) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = gettid() (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000040)='\x00', 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(r4, &(0x7f00000002c0)='attr/sockcreate\x00') (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0x1c, {0x1c, 0x3a, "d10d4c0bfd9eacc234ba4321783397febd513d4db408f4ac5fd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 649.901054ms ago: executing program 1 (id=3087): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r0, 0x7, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc}}, './file0\x00'}) r2 = syz_io_uring_setup(0x491a, &(0x7f0000000100)={0x0, 0xb5fb, 0x8000, 0x2, 0x225, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffff307, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x7a, "a337a243db5ecb7bb9340b8425ec08d594e6bed0b67678cb2473998615a75bf801df73a0cc62fb93a989fa8fe3473422ac9178a76fda09c559422b0dc1f7689563be9e5c5760096459afcbcc173435c96c44a9152512a4b6509b697d354a172b37e1c6f6da4ed29da2710a05e10623a9c027db8aeee4f926ce83"}, &(0x7f0000000340)=0x82) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r4, 0xcf53}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) io_uring_enter(r2, 0x1236, 0x576d, 0x2, &(0x7f00000007c0)={[0x3]}, 0x8) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000880)={&(0x7f0000000800)='\x00', &(0x7f0000000840)='$(,&\x00', 0x9000000000000}) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = geteuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000a00)=@nullb, r7, &(0x7f0000000a40)={0x1, 0xaa03}) sendto$inet(r5, &(0x7f0000000a80)="699b5bf8b87be6b9af255d3fb975136769b6283fc4d399cf76a2a7d8b933da6a1b8434053d7222fb384a10a9c289229e470d47051a25224a12efae0cd24c23e60017c92333613e7d552abaaaf0f2ab3e229c2c1f5f2435d3d62a85516ca575d5d94e421b9bde74e958489fa362390c8d4f96bb443b9ca072ea9a574721b96dd0252a697d97cd41b79be86f9235cde0675108df70edb3d6a72e22606d16156b27b493986c4cdc5c280050277c0bef1ce06edda897b4eb4c1a909271db37d1dd494369ae5237", 0xc5, 0x8050, &(0x7f0000000b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000c00)={r4, 0x7}, 0x8) ioctl$RNDZAPENTCNT(r8, 0x5204, &(0x7f0000000c40)=0x5) syz_open_dev$sndpcmc(&(0x7f0000000c80), 0x1, 0x105040) rt_sigprocmask(0x1, &(0x7f0000000cc0)={[0x5]}, &(0x7f0000000d00), 0x8) getsockname$packet(r6, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000dc0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@ipv4_newroute={0x48, 0x18, 0x100, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x3, 0x0, 0x8, 0x1c00}, [@RTA_MULTIPATH={0xc, 0x9, {0x34f, 0x12, 0xb}}, @RTA_FLOW={0x8, 0xb, 0x9}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_IIF={0x8, 0x3, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0xb, 0x200, 0x5f4, 0xd00, r6, 0x0, '\x00', r9, r6, 0x4, 0x1, 0x4, 0x5}, 0x50) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000f80)={0x2, [0xeeaa, 0x9]}, &(0x7f0000000fc0)=0x8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001000)={r8, 0x81, {0x0, 0x0, 0x0, 0x2, 0x5bc, 0x0, 0x5, 0x1e, 0x18, "a9a4703e60a0c4696662ca5462dc505f842ab916116c159dafbf57ae12905e0e152b0b74d10f4293d0bda0f7a6e75f786c98899ac3fde26d53f17b5aff938485", "6859cdcb28941f7f034e6ebbf5aa26e97b298bfb7319160f51690df6eeb3062f5b1c9e212342694052aff02ebeba5be891595daedb4374156738bebc3a50e1bc", "e8dd08a5616e3f5bbc3ba6c59fd611c9793d011bfeadf8985e6520b74b8bb063", [0xfff, 0x7]}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)=@getpolicy={0xf0, 0x15, 0x800, 0x70bd29, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 0x4e20, 0xf6, 0xa, 0x80, 0x0, 0x3a, 0x0, r7}, 0x6e6bbb, 0x2}, [@algo_comp={0x71, 0x3, {{'lzs\x00'}, 0x148, "c2cf2d9999e31a70c4c6ca2726f9306c78a24809db09d6b611306ace7294af7d208c742ea329179669"}}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xa}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x801) 405.313416ms ago: executing program 1 (id=3088): epoll_create1(0x80000) (async) epoll_create1(0x80000) socket$l2tp6(0xa, 0x2, 0x73) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 4 (id=3089): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x10001, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x8402) ioctl$CEC_ADAP_G_PHYS_ADDR(r4, 0x80026101, &(0x7f0000000300)) dup3(r3, r2, 0x0) r5 = fsopen(&(0x7f0000000100)='overlay\x00', 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x9, 0x21, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_key={0xb, 0x8, 0x280, 0x0, "222592d43e11cb554678770dcaea159fbb3c04b6a3703a8cb2eff2532b6041f1cb91a4f52116667e3caa28fef5f2dee82afdc7ddc399cbfd0eed2ff91ed94e0b804a49f3fb3a878af8530cf7c9efe7fd"}, @sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, @sadb_x_sec_ctx={0x2, 0x18, 0xe, 0x40, 0x5, "3ff87e4cc9"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x1, 0x80, 0x2f, 0x1, 0x1}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0xa1, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}]}, 0x108}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) unshare(0x20400) r8 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x90) epoll_create1(0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000080), 0x0}, 0x20) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) inotify_rm_watch(r10, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r8, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x2}) syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x600) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd706f5f1d0f71171e9b000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800b8"], 0x60}, 0x1, 0x0, 0x0, 0x4000c010}, 0xc084) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000000c0)) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000200)) kernel console output (not intermixed with test programs): sbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 693.472991][T12630] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 693.494252][T12630] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 693.549112][T12630] safe_serial 1-1:189.127: safe_serial converter detected [ 693.572627][T12630] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 693.628068][T12630] usb 1-1: USB disconnect, device number 39 [ 693.639859][T10707] IPVS: stop unused estimator thread 0... [ 693.720027][T15225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 693.795734][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.820862][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.861040][T15225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 693.903504][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.917725][ T5710] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 693.939153][ T5710] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 693.989167][T15225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 693.995979][ T5710] usbhid 3-1:0.0: can't add hid device: -71 [ 693.996240][ T5710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 694.102983][ T5710] usb 3-1: USB disconnect, device number 22 [ 694.198397][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.229975][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.266420][T15225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 694.313035][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.328557][T15487] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 694.413322][T15487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.553502][T15492] vlan3: entered allmulticast mode [ 694.569837][T15492] bond2: entered allmulticast mode [ 694.625427][T12649] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 694.640949][T15487] bond2: (slave geneve3): making interface the new active one [ 694.667398][T15487] geneve3: entered allmulticast mode [ 694.695111][T15487] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 694.805453][T12649] usb 2-1: Using ep0 maxpacket: 16 [ 694.830281][T12649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.846124][T12654] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 694.868180][T12649] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 694.883955][T12649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.910642][T12649] usb 2-1: config 0 descriptor?? [ 695.016550][T12654] usb 3-1: Using ep0 maxpacket: 16 [ 695.040854][T12654] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 695.067656][T12654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.095212][T12654] usb 3-1: Product: syz [ 695.112686][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.120632][T12654] usb 3-1: Manufacturer: syz [ 695.134885][T12654] usb 3-1: SerialNumber: syz [ 695.183803][T12654] usb 3-1: config 0 descriptor?? [ 695.210688][T12654] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 695.221708][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.237385][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.259737][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.266987][ T9163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.291616][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.298913][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.353478][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.377415][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.417938][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.449269][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.466734][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.497303][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.515359][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.530494][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.549910][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.556971][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.565064][T12649] zeroplus 0003:0C12:0030.001A: unknown main item tag 0x0 [ 695.585037][T12649] zeroplus 0003:0C12:0030.001A: item fetching failed at offset 12/41 [ 695.617858][T12649] zeroplus 0003:0C12:0030.001A: parse failed [ 695.656109][T12649] zeroplus 0003:0C12:0030.001A: probe with driver zeroplus failed with error -22 [ 695.705710][T12649] usb 2-1: USB disconnect, device number 104 [ 695.732439][T15225] veth0_vlan: entered promiscuous mode [ 695.760570][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 695.780651][T15225] veth1_vlan: entered promiscuous mode [ 695.864557][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.894243][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.903363][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 695.916432][T12654] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 695.974944][T15225] veth0_macvtap: entered promiscuous mode [ 695.999378][T15521] bridge1: port 1(gretap1) entered blocking state [ 696.012135][T15521] bridge1: port 1(gretap1) entered disabled state [ 696.028053][T15521] gretap1: entered allmulticast mode [ 696.043321][T15521] gretap1: entered promiscuous mode [ 696.068205][T15225] veth1_macvtap: entered promiscuous mode [ 696.109519][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.148962][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.177937][T10710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.206200][T10710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.221985][T10710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.239541][T10710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.278194][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.485656][T12630] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 696.530751][T10707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.543419][T10707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.638186][T15074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.657125][T12630] usb 2-1: Using ep0 maxpacket: 32 [ 696.667933][T12630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.685665][T15074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.700600][T12630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.715991][T12630] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 696.730200][T12630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.764898][T12630] usb 2-1: config 0 descriptor?? [ 696.783640][T12630] hub 2-1:0.0: USB hub found [ 696.842430][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.975823][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 696.985583][T12617] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 697.006996][T12630] hub 2-1:0.0: 26 ports detected [ 697.013797][T12630] hub 2-1:0.0: insufficient power available to use all downstream ports [ 697.035552][T15532] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2737'. [ 697.161877][T12617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 697.189114][T12617] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 697.198205][T12617] usb 1-1: config 189 has no interface number 0 [ 697.211310][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.223241][T12617] usb 1-1: config 189 interface 127 has no altsetting 0 [ 697.231603][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.245153][T12617] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 697.259653][T12617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.271090][T15535] fuse: fd is not a fuse device [ 697.276434][T12617] usb 1-1: Product: syz [ 697.287444][T12617] usb 1-1: Manufacturer: syz [ 697.296056][T12617] usb 1-1: SerialNumber: syz [ 697.319734][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.458222][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 697.525078][T12617] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 697.544733][T12617] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 697.560398][T12617] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 697.572919][T12617] safe_serial 1-1:189.127: safe_serial converter detected [ 697.599515][T12617] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 697.643263][T12617] usb 1-1: USB disconnect, device number 40 [ 697.669095][ T9] usb 3-1: USB disconnect, device number 23 [ 697.939962][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 697.959055][T12630] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 697.980016][T12630] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 697.988356][T15548] netlink: 'syz.3.2806': attribute type 10 has an invalid length. [ 698.019491][T12630] usbhid 2-1:0.0: can't add hid device: -71 [ 698.031431][T12630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 698.060734][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 698.074444][T12636] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 698.097914][T12630] usb 2-1: USB disconnect, device number 105 [ 698.112982][T15548] geneve2: entered promiscuous mode [ 698.119234][T15548] geneve2: entered allmulticast mode [ 698.248702][T12636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.309282][T12636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.346578][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 698.365909][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.374963][T12636] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 698.401550][T15560] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2810'. [ 698.415830][T12636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.439894][T12636] usb 5-1: config 0 descriptor?? [ 698.595904][T12630] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 698.636715][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 698.739520][T15567] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 698.763661][T15567] syzkaller1: linktype set to 0 [ 698.766152][T12630] usb 2-1: Using ep0 maxpacket: 16 [ 698.801419][T12630] usb 2-1: config 4 has an invalid interface number: 104 but max is 0 [ 698.828056][T12630] usb 2-1: config 4 has no interface number 0 [ 698.858399][T12630] usb 2-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 698.903805][T12630] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 698.940242][T12630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.979311][T12636] uclogic 0003:5543:0042.001B: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 698.979336][T12630] usb 2-1: Product: syz [ 698.979356][T12630] usb 2-1: Manufacturer: syz [ 699.058438][T12630] usb 2-1: SerialNumber: syz [ 699.111172][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.154904][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.185979][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.201233][T12654] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 699.219231][T15571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.233490][T15571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.251872][T15571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.271180][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.316056][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.375047][T12654] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 699.408322][T12654] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 699.427236][T12630] rtsx_usb 2-1:4.104: probe with driver rtsx_usb failed with error -71 [ 699.444392][T12654] usb 1-1: Product: syz [ 699.459508][T12654] usb 1-1: Manufacturer: syz [ 699.473168][T12654] usb 1-1: SerialNumber: syz [ 699.487550][T12630] usb 2-1: USB disconnect, device number 106 [ 699.566212][T12654] usb 1-1: config 0 descriptor?? [ 699.808847][T12636] usb 1-1: USB disconnect, device number 41 [ 700.215772][T12654] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 700.225936][T15580] fuse: Bad value for 'rootmode' [ 700.356525][T12654] usb 3-1: device descriptor read/64, error -71 [ 700.514051][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 700.526334][T15595] netlink: 'syz.1.2821': attribute type 10 has an invalid length. [ 700.534251][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 700.552155][T15595] geneve10: entered promiscuous mode [ 700.557758][T15595] geneve10: entered allmulticast mode [ 700.591551][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 700.606965][T12654] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 700.636615][T15597] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2822'. [ 700.675690][T12636] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 700.755974][T12654] usb 3-1: device descriptor read/64, error -71 [ 700.854411][T12636] usb 4-1: unable to get BOS descriptor or descriptor too short [ 700.920973][T12654] usb usb3-port1: attempt power cycle [ 700.931845][T12636] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 700.936620][T15605] binder: 15598:15605 ioctl 4018620d 0 returned -22 [ 701.015992][T12636] usb 4-1: config 189 has no interface number 0 [ 701.041795][T12636] usb 4-1: config 189 interface 127 has no altsetting 0 [ 701.051678][ T809] usb 5-1: USB disconnect, device number 23 [ 701.064949][T12636] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 701.086630][T12636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.101130][T12636] usb 4-1: Product: syz [ 701.111968][T12636] usb 4-1: Manufacturer: syz [ 701.119743][T12636] usb 4-1: SerialNumber: syz [ 701.194525][T15605] No such timeout policy "syz1" [ 701.325448][T12654] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 701.356244][T12654] usb 3-1: device descriptor read/8, error -71 [ 701.415470][ T809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 701.607217][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 701.628307][ T809] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 701.637334][T12654] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 701.650484][ T809] usb 5-1: config 254 has no interface number 0 [ 701.666743][ T809] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 701.683417][T12654] usb 3-1: device descriptor read/8, error -71 [ 701.700320][ T809] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 701.741629][ T809] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 701.777481][ T809] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 701.799203][T12654] usb usb3-port1: unable to enumerate USB device [ 701.806222][ T809] usb 5-1: config 254 interface 235 has no altsetting 0 [ 701.838156][ T809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 701.849716][ T809] usb 5-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 701.877084][ T809] usb 5-1: Product: syz [ 701.889171][ T809] usb 5-1: Manufacturer: syz [ 701.903789][ T809] usb 5-1: SerialNumber: syz [ 701.940382][T15609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 702.160714][T15609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 702.190222][ T809] usbtest 5-1:254.235: Linux gadget zero [ 702.210918][ T809] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 702.217681][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 702.469555][T15608] process '/newroot/497/file0' started with executable stack [ 702.531956][T12617] usb 5-1: USB disconnect, device number 24 [ 702.632234][T12652] net_ratelimit: 20 callbacks suppressed [ 702.632257][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.716030][ T809] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 702.895229][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 702.911824][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.923792][ T809] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 702.934424][T12630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.934422][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 702.946620][ T809] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 702.959657][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.968426][ T809] usb 1-1: Product: syz [ 702.973079][ T809] usb 1-1: Manufacturer: syz [ 702.978456][ T809] usb 1-1: SerialNumber: syz [ 703.026919][ T809] usb 1-1: config 0 descriptor?? [ 703.083873][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 703.095412][T12617] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 703.113629][T15623] netlink: 'syz.2.2833': attribute type 10 has an invalid length. [ 703.123150][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 703.156569][T15623] geneve12: entered promiscuous mode [ 703.162110][T15623] geneve12: entered allmulticast mode [ 703.236149][T12617] usb 5-1: device descriptor read/64, error -71 [ 703.295129][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 703.343709][T15627] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2834'. [ 703.485740][T12617] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 703.498994][ T809] gs_usb 1-1:0.0: Configuring for 154 interfaces [ 703.556761][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2835'. [ 703.635678][T12617] usb 5-1: device descriptor read/64, error -71 [ 703.649596][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 703.675691][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.701376][ T809] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 703.731063][ T809] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 703.782291][T12636] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 703.787005][T12617] usb usb5-port1: attempt power cycle [ 703.831187][T12636] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 703.871681][T12636] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 703.896344][T12636] safe_serial 4-1:189.127: safe_serial converter detected [ 703.921074][T12636] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 703.947033][T12636] usb 4-1: USB disconnect, device number 10 [ 704.112392][T12630] usb 1-1: USB disconnect, device number 42 [ 704.164725][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 704.185528][T12617] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 704.216337][T12617] usb 5-1: device descriptor read/8, error -71 [ 704.344288][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 704.353862][T15654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.430985][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'. [ 704.454180][T15658] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2845'. [ 704.465707][T12617] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 704.496201][T12617] usb 5-1: device descriptor read/8, error -71 [ 704.606653][T12617] usb usb5-port1: unable to enumerate USB device [ 704.611467][T12636] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 704.734900][T15665] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 704.741387][T15665] syzkaller1: linktype set to 0 [ 704.756135][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.775467][T12636] usb 4-1: Using ep0 maxpacket: 8 [ 704.785709][T12636] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 704.799905][T12636] usb 4-1: config 179 has no interface number 0 [ 704.806718][T12636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 704.820895][T12636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 704.834272][T12636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 704.858162][T12636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 704.870048][T12636] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 704.884712][T12636] usb 4-1: config 179 interface 65 has no altsetting 0 [ 704.893476][T12636] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 704.903237][T12636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.945383][T12652] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 705.001127][T12636] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input71 [ 705.085943][ T4978] input input71: unable to receive magic message: -110 [ 705.110509][T12652] usb 1-1: unable to get BOS descriptor or descriptor too short [ 705.125112][T12652] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 705.150699][T12652] usb 1-1: config 189 has no interface number 0 [ 705.158186][T12652] usb 1-1: config 189 interface 127 has no altsetting 0 [ 705.167568][ T4978] input input71: unable to receive magic message: -32 [ 705.178959][T12652] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 705.213143][T12652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.245205][T12652] usb 1-1: Product: syz [ 705.253367][ T4978] input input71: unable to receive magic message: -32 [ 705.264129][T12652] usb 1-1: Manufacturer: syz [ 705.270233][T12652] usb 1-1: SerialNumber: syz [ 705.277745][ T4978] input input71: unable to receive magic message: -32 [ 705.291493][ T4978] input input71: unable to receive magic message: -32 [ 705.342136][T10918] input input71: unable to receive magic message: -32 [ 705.358167][T12636] usb 4-1: USB disconnect, device number 11 [ 705.358231][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 705.372544][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 705.443116][T15668] loop3: detected capacity change from 0 to 7 [ 705.472125][T15668] Dev loop3: unable to read RDB block 7 [ 705.489575][T15668] loop3: AHDI p3 p4 [ 705.500485][T15668] loop3: partition table partially beyond EOD, truncated [ 705.513393][T15668] loop3: p3 start 1702000233 is beyond EOD, truncated [ 705.534106][T12652] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 705.550753][T12652] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 705.564079][T12652] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 705.584551][T12652] safe_serial 1-1:189.127: safe_serial converter detected [ 705.615343][T12652] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 705.666483][T12652] usb 1-1: USB disconnect, device number 43 [ 705.810446][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.958242][T12617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.575700][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 706.736277][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 706.746132][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 706.759560][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.787188][ T9] usb 5-1: config 0 descriptor?? [ 706.838381][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.955496][T12617] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 707.006446][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 707.022984][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 707.034064][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 707.047467][ T9] usb 5-1: media controller created [ 707.073074][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.144154][T12617] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.268552][T12617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 707.310725][T12617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 707.350989][T12617] usb 2-1: Product: syz [ 707.381206][T12617] usb 2-1: Manufacturer: syz [ 707.408683][T12617] usb 2-1: SerialNumber: syz [ 707.525130][T15708] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 707.865172][T12617] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 707.890618][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.958681][ T5711] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 708.050147][ T9] az6027: usb out operation failed. (-71) [ 708.097942][ T9] az6027: usb out operation failed. (-71) [ 708.133552][T12630] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 708.141712][ T9] stb0899_attach: Driver disabled by Kconfig [ 708.152598][ T5711] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 708.164066][ T9] az6027: no front-end attached [ 708.164066][ T9] [ 708.176996][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.191302][T15714] __nla_validate_parse: 1 callbacks suppressed [ 708.191318][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 708.207484][ T9] az6027: usb out operation failed. (-71) [ 708.217225][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 708.228584][ T5711] usb 1-1: config 0 descriptor?? [ 708.239100][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 708.259571][ T5711] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 708.282116][ T5710] usb 2-1: USB disconnect, device number 107 [ 708.322985][T12630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 708.353526][T12630] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 708.365852][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 708.394024][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 708.411064][T12630] usb 4-1: config 189 has no interface number 0 [ 708.443023][T12630] usb 4-1: config 189 interface 127 has no altsetting 0 [ 708.481428][ T9] usb 5-1: USB disconnect, device number 29 [ 708.497298][T12630] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 708.541399][T12630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.583904][T12630] usb 4-1: Product: syz [ 708.598488][T12630] usb 4-1: Manufacturer: syz [ 708.617069][T12630] usb 4-1: SerialNumber: syz [ 708.674691][ T5711] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 708.711639][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 708.784645][T15717] Invalid option length (973181) for dns_resolver key [ 708.880452][T12630] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 708.917691][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.925957][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.961982][T12630] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 708.985196][T12630] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 708.995953][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.006409][T12630] safe_serial 4-1:189.127: safe_serial converter detected [ 709.013896][T12630] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 709.033026][T12630] usb 4-1: USB disconnect, device number 12 [ 709.156939][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 709.277145][T15710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2865'. [ 709.293899][ T5711] gspca_cpia1: usb_control_msg 05, error -71 [ 709.310906][ T5711] cpia1 1-1:0.0: unexpected systemstate: 00 [ 709.327973][ T5711] usb 1-1: USB disconnect, device number 44 [ 709.339061][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 709.356170][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.383855][ T9] usb 5-1: config 0 descriptor?? [ 709.505394][T12636] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 709.644784][ T9] ath6kl: Failed to submit usb control message: -71 [ 709.667308][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 709.695530][T12636] usb 3-1: Using ep0 maxpacket: 16 [ 709.699062][ T9] ath6kl: Unable to send get target info: -71 [ 709.724169][T12636] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 709.760207][ T9] ath6kl: Failed to init ath6kl core: -71 [ 709.785044][T12636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.802953][T12636] usb 3-1: config 0 has no interface number 0 [ 709.806391][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 709.837712][T12636] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 709.849766][T12636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.879331][T12636] usb 3-1: Product: syz [ 709.884861][T12636] usb 3-1: Manufacturer: syz [ 709.889894][T12636] usb 3-1: SerialNumber: syz [ 709.912907][T12636] usb 3-1: config 0 descriptor?? [ 709.921037][ T9] usb 5-1: USB disconnect, device number 30 [ 709.947777][T12636] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 709.981578][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.992714][T12636] uvcvideo 3-1:0.105: No valid video chain found. [ 710.154460][T12636] usb 3-1: USB disconnect, device number 28 [ 710.181358][T15732] fuse: Unknown parameter 'ÎáNjR•ÀãXä‘+' [ 710.248453][T15696] usblp0: removed [ 710.697330][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 710.855686][T12636] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 710.900567][T15763] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 710.926975][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 711.020464][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.037152][T12652] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 711.059491][T12636] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 711.072666][T12636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 711.085603][T12636] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 711.097742][T12636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.105993][T12636] usb 4-1: Product: syz [ 711.110340][T12636] usb 4-1: Manufacturer: syz [ 711.115001][T12636] usb 4-1: SerialNumber: syz [ 711.123501][ T9] usb 5-1: device descriptor read/64, error -71 [ 711.158390][T12636] usb 4-1: config 0 descriptor?? [ 711.215457][ T5711] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 711.235677][T12652] usb 1-1: Using ep0 maxpacket: 16 [ 711.244295][T12652] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 711.253250][T12652] usb 1-1: config 0 has no interface number 0 [ 711.259679][T12652] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 711.272141][T12652] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 711.290133][T12652] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 711.302721][T12652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.314902][T12652] usb 1-1: Product: syz [ 711.321619][T12652] usb 1-1: Manufacturer: syz [ 711.326687][T12652] usb 1-1: SerialNumber: syz [ 711.342904][T12652] usb 1-1: config 0 descriptor?? [ 711.351562][T15759] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.359863][T15759] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.368284][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 711.377995][ T5711] usb 2-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 711.395481][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 711.406312][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.469400][ T5711] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.535444][ T9] usb 5-1: device descriptor read/64, error -71 [ 711.569134][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.583370][ T5711] usb 2-1: Product: syz [ 711.590097][ T5711] usb 2-1: Manufacturer: syz [ 711.600720][ T5711] usb 2-1: SerialNumber: syz [ 711.628505][ T5711] usb 2-1: 0:2 : does not exist [ 711.630428][T15759] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.660234][T12630] usb 4-1: USB disconnect, device number 13 [ 711.686880][ T9] usb usb5-port1: attempt power cycle [ 711.706050][T12649] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 711.706401][T15759] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.825080][ T5711] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 711.879157][T12649] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.928938][ T5711] usb 2-1: USB disconnect, device number 108 [ 711.938024][T12652] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 711.955030][T12649] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 711.966491][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 712.011139][T12649] usb 3-1: Product: syz [ 712.029583][T12649] usb 3-1: Manufacturer: syz [ 712.034436][T12649] usb 3-1: SerialNumber: syz [ 712.036082][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 712.040357][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.054980][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.092621][ T9] usb 5-1: device descriptor read/8, error -71 [ 712.178696][T12652] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 712.200494][T11228] udevd[11228]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 712.239992][T12652] asix 1-1:0.34: probe with driver asix failed with error -71 [ 712.284623][T12652] usb 1-1: USB disconnect, device number 45 [ 712.366576][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 712.400503][ T9] usb 5-1: device descriptor read/8, error -71 [ 712.480594][T12649] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 712.526543][ T9] usb usb5-port1: unable to enumerate USB device [ 712.660352][T15779] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 712.667420][T15779] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 712.738470][T15779] vhci_hcd vhci_hcd.0: Device attached [ 712.814809][T12644] usb 3-1: USB disconnect, device number 29 [ 713.022621][T15767] usblp0: removed [ 713.035907][ T9] usb 36-1: SetAddress Request (2) to port 0 [ 713.054713][ T9] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 713.088767][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.422946][T15782] vhci_hcd: connection reset by peer [ 713.464384][ T9163] vhci_hcd vhci_hcd.1: stop threads [ 713.493670][ T9163] vhci_hcd vhci_hcd.1: release socket [ 713.524002][ T9163] vhci_hcd vhci_hcd.1: disconnect device [ 713.572933][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 714.115642][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.235521][ T5711] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 714.324873][T15816] xt_hashlimit: size too large, truncated to 1048576 [ 714.416356][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 714.444497][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 714.473557][ T5711] usb 1-1: string descriptor 0 read error: -22 [ 714.486463][ T5711] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 714.513286][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.589488][ T5711] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 714.751413][ T5711] usb 1-1: unit 4 not found! [ 715.030429][ T5711] usb 1-1: USB disconnect, device number 46 [ 715.075633][T12630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.167940][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.397542][T15825] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 715.474414][T15825] vlan2: entered allmulticast mode [ 715.522154][T15825] geneve1: entered allmulticast mode [ 715.743987][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 715.775112][T15838] fuse: Bad value for 'fd' [ 716.207300][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.256080][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2905'. [ 716.333406][T15854] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 716.452497][T15857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2905'. [ 716.658100][T15847] bond15: entered allmulticast mode [ 716.885496][ T29] audit: type=1326 audit(1782846935.519:9727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c3479ce59 code=0x80000000 [ 717.077791][T15875] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 717.236443][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.301267][T15875] 8021q: adding VLAN 0 to HW filter on device bond18 [ 717.457578][T15879] vlan0: entered allmulticast mode [ 717.479238][T15879] bond18: entered allmulticast mode [ 717.527672][T12630] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 717.569186][T15881] bond18: (slave geneve12): making interface the new active one [ 717.591474][T15881] geneve12: entered allmulticast mode [ 717.617104][T15881] bond18: (slave geneve12): Enslaving as an active interface with an up link [ 717.724123][T12630] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 717.762813][T12630] usb 1-1: can't read configurations, error -71 [ 717.955032][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 718.039882][T15895] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 718.115862][ T9] usb 36-1: device descriptor read/8, error -110 [ 718.124217][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.152434][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'. [ 718.278139][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.312739][T15897] 8021q: adding VLAN 0 to HW filter on device bond16 [ 718.518468][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.537532][ T9] usb usb36-port1: attempt power cycle [ 719.171091][ T9] usb usb36-port1: unable to enumerate USB device [ 719.321442][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.423568][T15930] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 719.448198][T15930] syzkaller1: linktype set to 0 [ 720.109469][T15934] loop6: detected capacity change from 0 to 524288000 [ 720.173175][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 720.295876][T15935] Invalid logical block size (255) [ 720.357595][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.531260][T15941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2929'. [ 720.579130][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 720.639894][T15943] loop9: detected capacity change from 0 to 2640 [ 720.640561][T15943] buffer_io_error: 328 callbacks suppressed [ 720.640607][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643199][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643330][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643432][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643543][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643665][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643778][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643879][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.643898][T15943] ldm_validate_partition_table(): Disk read failed. [ 720.643996][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.644097][T15943] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.651433][T15943] Dev loop9: unable to read RDB block 0 [ 720.702209][T15943] loop9: unable to read partition table [ 720.702480][T15943] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 720.715458][T12652] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 720.876375][T12652] usb 2-1: Using ep0 maxpacket: 8 [ 720.880442][T12652] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.882680][T12652] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 720.882717][T12652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.882742][T12652] usb 2-1: Product: syz [ 720.882760][T12652] usb 2-1: Manufacturer: syz [ 720.882778][T12652] usb 2-1: SerialNumber: syz [ 720.901922][T12652] usb 2-1: config 0 descriptor?? [ 721.010573][T12652] kalmia 2-1:0.0: probe with driver kalmia failed with error -22 [ 721.109650][T12652] usb 2-1: USB disconnect, device number 109 [ 721.155906][T12630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.408021][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.549238][T15951] input: syz1 as /devices/virtual/input/input75 [ 721.880475][T15961] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 721.981614][T12652] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 721.990308][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2934'. [ 722.067714][T15965] 8021q: adding VLAN 0 to HW filter on device bond17 [ 722.180161][T15967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2936'. [ 722.201510][T12652] usb 1-1: unable to get BOS descriptor or descriptor too short [ 722.220400][T12652] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 722.234485][T12652] usb 1-1: config 189 has no interface number 0 [ 722.249229][T12652] usb 1-1: config 189 interface 127 has no altsetting 0 [ 722.273058][T12652] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 722.288858][T12652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.304365][T12652] usb 1-1: Product: syz [ 722.319708][T12652] usb 1-1: Manufacturer: syz [ 722.331768][T12652] usb 1-1: SerialNumber: syz [ 722.403099][T15974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2937'. [ 722.445643][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.840769][T12652] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 722.942411][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 722.969818][T12652] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 723.051774][T12652] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 723.079025][T12652] safe_serial 1-1:189.127: safe_serial converter detected [ 723.106044][T12652] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 723.128130][T12652] usb 1-1: USB disconnect, device number 49 [ 723.170055][T15984] netlink: 'syz.2.2940': attribute type 9 has an invalid length. [ 723.255432][T12654] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 723.431004][T12654] usb 4-1: config 0 has no interfaces? [ 723.451149][T12654] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 723.477623][T12654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.485801][ T5711] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 723.500537][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.525439][T12654] usb 4-1: Product: syz [ 723.537801][T12654] usb 4-1: Manufacturer: syz [ 723.555562][T12654] usb 4-1: SerialNumber: syz [ 723.569152][T12654] usb 4-1: config 0 descriptor?? [ 723.640892][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 723.655098][ T5711] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 723.669488][T15990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2942'. [ 723.682383][ T5711] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 723.707216][ T5711] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 723.721712][ T5711] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 723.737237][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.747089][ T5711] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 723.757183][ T5711] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 723.766512][ T5711] usb 3-1: Product: syz [ 723.771018][ T5711] usb 3-1: Manufacturer: syz [ 723.776533][ T5711] usb 3-1: SerialNumber: syz [ 723.793314][ T5711] usb 3-1: config 0 descriptor?? [ 723.825216][ T5711] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 723.881318][ T5711] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 724.016511][T15996] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 724.055459][T12654] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 724.101963][ T5711] usb 3-1: USB disconnect, device number 30 [ 724.122011][ T5711] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 724.197957][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.217382][T12654] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 724.227794][T12654] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 724.237502][T12654] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.248157][T12654] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 724.257405][T12654] usb 1-1: config 1 has no interface number 0 [ 724.263813][T12654] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 724.274356][T12654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.298954][T12654] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 724.325526][T12652] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 724.395607][T12630] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 724.488506][T12652] usb 2-1: unable to get BOS descriptor or descriptor too short [ 724.498924][T12654] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 724.508617][T12652] usb 2-1: config 189 has an invalid interface number: 127 but max is 0 [ 724.518087][T12654] snd_usb_pod 1-1:1.1: invalid control EP [ 724.524667][T12652] usb 2-1: config 189 has no interface number 0 [ 724.531578][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.541436][T12654] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 724.548303][T12652] usb 2-1: config 189 interface 127 has no altsetting 0 [ 724.556479][T12654] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 724.565813][T12630] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 724.568290][T12652] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 724.584293][T12630] usb 5-1: config 5 has no interface number 0 [ 724.585084][T12654] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 724.600781][T12652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.609794][T12630] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 724.623394][T12652] usb 2-1: Product: syz [ 724.637491][T12630] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 724.647366][T12652] usb 2-1: Manufacturer: syz [ 724.654129][T12630] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 724.664222][T12652] usb 2-1: SerialNumber: syz [ 724.671529][T12630] usb 5-1: config 5 interface 123 has no altsetting 0 [ 724.697242][T12630] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 724.722001][T12630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.744288][T12630] usb 5-1: Product: syz [ 724.753093][T12630] usb 5-1: Manufacturer: syz [ 724.767578][T12630] usb 5-1: SerialNumber: syz [ 725.447721][T12644] usb 4-1: USB disconnect, device number 14 [ 725.557615][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.574183][T12630] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 725.622412][T12630] usb 5-1: USB disconnect, device number 35 [ 725.988279][T16007] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 726.105706][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2949'. [ 726.228253][ T29] audit: type=1326 audit(1782846944.859:9728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.0.2943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac97f9ce59 code=0x0 [ 726.369745][T16011] 8021q: adding VLAN 0 to HW filter on device bond17 [ 726.560407][T16013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 726.567024][T16013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 726.597056][T12636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.833670][T16013] vhci_hcd vhci_hcd.0: Device attached [ 727.037962][T12652] usbserial_generic 2-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 727.121195][T12652] usbserial_generic 2-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 727.140334][T12652] usbserial_generic 2-1:189.127: device has no bulk endpoints [ 727.151439][T12652] safe_serial 2-1:189.127: safe_serial converter detected [ 727.175552][T12649] usb 38-1: SetAddress Request (2) to port 0 [ 727.247340][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.260956][T12649] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 727.302070][T12652] safe_serial 2-1:189.127: probe with driver safe_serial failed with error -22 [ 727.365031][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 727.518096][T12630] usb 1-1: USB disconnect, device number 50 [ 727.530107][T12652] usb 2-1: USB disconnect, device number 110 [ 727.709635][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.139064][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.281238][T16019] vhci_hcd: connection reset by peer [ 728.294277][ T1170] vhci_hcd vhci_hcd.2: stop threads [ 728.308578][ T1170] vhci_hcd vhci_hcd.2: release socket [ 728.335554][ T1170] vhci_hcd vhci_hcd.2: disconnect device [ 728.391045][ T29] audit: type=1326 audit(1782846947.029:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16031 comm="syz.1.2953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f959ce59 code=0x0 [ 728.425553][T12652] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 728.598270][T12652] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.608598][T12652] usb 1-1: config 0 has no interface number 0 [ 728.619379][T12652] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 728.628898][T12652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.652123][T12652] usb 1-1: Product: syz [ 728.656826][T12652] usb 1-1: Manufacturer: syz [ 728.662895][T12652] usb 1-1: SerialNumber: syz [ 728.672964][T12652] usb 1-1: config 0 descriptor?? [ 728.693259][T12652] usb 1-1: selecting invalid altsetting 1 [ 728.742932][T12652] dvb_ttusb_budget: ttusb_init_controller: error [ 728.749811][ T809] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 728.760817][T12652] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 728.770268][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.881598][T12652] DVB: Unable to find symbol stv0299_attach() [ 728.948025][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 728.967387][T12652] DVB: Unable to find symbol tda8083_attach() [ 728.973970][ T809] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 728.983491][T12652] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 728.994319][ T809] usb 4-1: config 189 has no interface number 0 [ 729.003126][T12652] usb 1-1: USB disconnect, device number 51 [ 729.009780][ T809] usb 4-1: config 189 interface 127 has no altsetting 0 [ 729.030326][ T809] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 729.050370][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.071604][ T809] usb 4-1: Product: syz [ 729.087810][ T809] usb 4-1: Manufacturer: syz [ 729.093034][ T809] usb 4-1: SerialNumber: syz [ 729.338721][T16035] FAULT_INJECTION: forcing a failure. [ 729.338721][T16035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.353547][T16035] CPU: 1 UID: 0 PID: 16035 Comm: syz.3.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.353585][T16035] Tainted: [L]=SOFTLOCKUP [ 729.353594][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 729.353608][T16035] Call Trace: [ 729.353617][T16035] [ 729.353626][T16035] dump_stack_lvl+0xe8/0x150 [ 729.353672][T16035] should_fail_ex+0x40c/0x560 [ 729.353715][T16035] _copy_from_iter+0x1d3/0x1660 [ 729.353741][T16035] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 729.353778][T16035] ? rcu_is_watching+0x15/0xb0 [ 729.353807][T16035] ? trace_kmem_cache_alloc+0x29/0xe0 [ 729.353844][T16035] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 729.353880][T16035] ? __pfx__copy_from_iter+0x10/0x10 [ 729.353906][T16035] ? __alloc_skb+0x276/0x7a0 [ 729.353932][T16035] ? __alloc_skb+0x276/0x7a0 [ 729.353965][T16035] ? netlink_sendmsg+0x650/0xb40 [ 729.353997][T16035] ? skb_put+0x112/0x210 [ 729.354030][T16035] netlink_sendmsg+0x6c0/0xb40 [ 729.354072][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.354110][T16035] ? aa_sock_msg_perm+0xf1/0x1b0 [ 729.354151][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.354183][T16035] sock_sendmsg_nosec+0x13a/0x180 [ 729.354224][T16035] ____sys_sendmsg+0x54e/0x850 [ 729.354261][T16035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.354303][T16035] ? import_iovec+0x73/0xa0 [ 729.354336][T16035] ___sys_sendmsg+0x2a5/0x360 [ 729.354366][T16035] ? __lock_acquire+0x683/0x2cf0 [ 729.354395][T16035] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.354465][T16035] ? __fget_files+0x2a/0x420 [ 729.354488][T16035] ? __fget_files+0x3a2/0x420 [ 729.354523][T16035] __x64_sys_sendmsg+0x1b1/0x290 [ 729.354560][T16035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.354611][T16035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.354638][T16035] do_syscall_64+0x174/0x580 [ 729.354674][T16035] ? trace_irq_disable+0x3b/0x140 [ 729.354712][T16035] ? clear_bhb_loop+0x40/0x90 [ 729.354867][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.354892][T16035] RIP: 0033:0x7f6c3479ce59 [ 729.354915][T16035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.354934][T16035] RSP: 002b:00007f6c329ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.354960][T16035] RAX: ffffffffffffffda RBX: 00007f6c34a15fa0 RCX: 00007f6c3479ce59 [ 729.354976][T16035] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 729.354990][T16035] RBP: 00007f6c329ee090 R08: 0000000000000000 R09: 0000000000000000 [ 729.355005][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.355018][T16035] R13: 00007f6c34a16038 R14: 00007f6c34a15fa0 R15: 00007f6c34b3fa48 [ 729.355052][T16035] [ 729.909754][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.935513][ T809] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 729.966311][ T809] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 730.007850][ T809] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 730.041187][ T809] safe_serial 4-1:189.127: safe_serial converter detected [ 730.076155][ T809] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 730.127311][ T809] usb 4-1: USB disconnect, device number 15 [ 730.275740][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.435882][T12630] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 730.562326][T16061] netlink: 'syz.2.2960': attribute type 1 has an invalid length. [ 730.605490][T12630] usb 5-1: Using ep0 maxpacket: 16 [ 730.615047][T12630] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 730.627673][T12630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 730.643528][T12630] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 730.654922][T12630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.663896][T12630] usb 5-1: Product: syz [ 730.669521][T12630] usb 5-1: Manufacturer: syz [ 730.676075][T12630] usb 5-1: SerialNumber: syz [ 730.688388][T12630] usb 5-1: config 0 descriptor?? [ 730.719624][T12630] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 730.729887][T12630] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 730.750363][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 730.852001][T16065] 8021q: adding VLAN 0 to HW filter on device bond19 [ 730.936314][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.961232][T16067] ip6t_srh: unknown srh invflags 4000 [ 731.335927][T12630] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 731.343370][T12630] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 731.370824][T12630] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 731.399316][T12630] em28xx 5-1:0.0: No AC97 audio processor [ 731.474684][T12630] usb 5-1: USB disconnect, device number 36 [ 731.521854][T12630] em28xx 5-1:0.0: Disconnecting em28xx [ 731.617339][T12630] em28xx 5-1:0.0: Freeing device [ 731.701063][T16082] netlink: 'syz.4.2964': attribute type 12 has an invalid length. [ 731.726283][T16082] netlink: 'syz.4.2964': attribute type 29 has an invalid length. [ 731.775513][T16082] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2964'. [ 731.827716][T16083] binder: 16081:16083 ioctl ae04 0 returned -22 [ 731.868035][T16082] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2964'. [ 731.879619][T16083] binder: 16081:16083 ioctl c0306201 2000000004c0 returned -22 [ 731.976129][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'. [ 731.991233][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.178623][T16086] bridge0: port 4(vlan4) entered blocking state [ 732.196427][T12644] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 732.223245][T16086] bridge0: port 4(vlan4) entered disabled state [ 732.252262][T16086] vlan4: entered allmulticast mode [ 732.271024][T16086] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 732.315465][T16086] vlan4: entered promiscuous mode [ 732.335531][T16086] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 732.377833][T12644] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 732.411285][T12644] usb 5-1: config 0 has no interface number 0 [ 732.435616][T12649] usb 38-1: device descriptor read/8, error -110 [ 732.442219][T12644] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 732.540321][T12644] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 732.584348][T12644] usb 5-1: config 0 interface 200 has no altsetting 0 [ 732.609027][T12644] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 732.657092][T12644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.676770][T12644] usb 5-1: Product: syz [ 732.696016][T12644] usb 5-1: Manufacturer: syz [ 732.701473][T12644] usb 5-1: SerialNumber: syz [ 732.741672][T12644] usb 5-1: config 0 descriptor?? [ 732.847502][T12649] usb usb38-port1: attempt power cycle [ 732.905455][ T9] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 732.995942][T12644] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input76 [ 733.022198][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.040493][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.047989][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.055463][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.063049][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.070556][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.079137][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.087137][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 733.087500][T12644] usb 5-1: USB disconnect, device number 37 [ 733.094325][ C1] usb 5-1: hanwang_irq - usb_submit_urb failed with result -19 [ 733.116589][ T5711] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 733.124851][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 733.150828][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 733.186022][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 733.202062][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.267385][ T9] usb 2-1: config 0 descriptor?? [ 733.297937][ T5711] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.315809][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.345577][ T5711] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.361211][ T5711] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.374564][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.415504][T16097] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 733.448910][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.482133][T12649] usb usb38-port1: unable to enumerate USB device [ 733.776440][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x3 [ 733.806354][ T5711] usb 1-1: USB disconnect, device number 52 [ 733.817722][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.838159][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.862054][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.891905][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.922061][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.947698][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 733.962090][ T9] magicmouse 0003:05AC:0269.001C: unknown main item tag 0x0 [ 734.022355][ T9] magicmouse 0003:05AC:0269.001C: hidraw0: USB HID v0.08 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 734.062974][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.075498][ T5710] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 734.104183][ T9] usb 2-1: USB disconnect, device number 111 [ 734.175474][T12644] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 734.269481][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.297260][ T5710] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 734.316276][T16097] sctp: [Deprecated]: syz.0.2969 (pid 16097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.316276][T16097] Use struct sctp_sack_info instead [ 734.337548][ T5710] usb 5-1: config 189 has no interface number 0 [ 734.355557][T12644] usb 4-1: Using ep0 maxpacket: 32 [ 734.363552][ T5710] usb 5-1: config 189 interface 127 has no altsetting 0 [ 734.377943][T16105] fido_id[16105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 734.406895][T12644] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 734.416368][ T5710] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 734.435527][T12644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.449325][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.494750][ T5710] usb 5-1: Product: syz [ 734.497334][T16109] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2969'. [ 734.515164][T12644] usb 4-1: config 0 descriptor?? [ 734.526969][ T5710] usb 5-1: Manufacturer: syz [ 734.540812][ T5710] usb 5-1: SerialNumber: syz [ 734.561838][T12644] as10x_usb: device has been detected [ 734.563889][T16097] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2969'. [ 734.610917][T12644] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 734.701413][T12644] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 734.807580][T16102] FAULT_INJECTION: forcing a failure. [ 734.807580][T16102] name failslab, interval 1, probability 0, space 0, times 0 [ 734.848261][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.4.2971 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.848298][T16102] Tainted: [L]=SOFTLOCKUP [ 734.848307][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.848321][T16102] Call Trace: [ 734.848331][T16102] [ 734.848342][T16102] dump_stack_lvl+0xe8/0x150 [ 734.848378][T16102] should_fail_ex+0x40c/0x560 [ 734.848427][T16102] should_failslab+0xa8/0x100 [ 734.848455][T16102] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 734.848487][T16102] ? skb_clone+0x212/0x3a0 [ 734.848514][T16102] ? skb_clone+0x212/0x3a0 [ 734.848550][T16102] skb_clone+0x212/0x3a0 [ 734.848583][T16102] __netlink_deliver_tap+0x413/0x860 [ 734.848620][T16102] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.848648][T16102] netlink_deliver_tap+0x19c/0x1b0 [ 734.848689][T16102] netlink_unicast+0x77f/0x940 [ 734.848725][T16102] netlink_sendmsg+0x813/0xb40 [ 734.848766][T16102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.848797][T16102] ? aa_sock_msg_perm+0xf1/0x1b0 [ 734.848829][T16102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.848855][T16102] sock_sendmsg_nosec+0x13a/0x180 [ 734.848889][T16102] ____sys_sendmsg+0x54e/0x850 [ 734.848918][T16102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.848951][T16102] ? import_iovec+0x73/0xa0 [ 734.848979][T16102] ___sys_sendmsg+0x2a5/0x360 [ 734.849004][T16102] ? __lock_acquire+0x683/0x2cf0 [ 734.849028][T16102] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.849093][T16102] ? __fget_files+0x2a/0x420 [ 734.849116][T16102] ? __fget_files+0x3a2/0x420 [ 734.849150][T16102] __x64_sys_sendmsg+0x1b1/0x290 [ 734.849179][T16102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.849232][T16102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.849258][T16102] do_syscall_64+0x174/0x580 [ 734.849284][T16102] ? trace_irq_disable+0x3b/0x140 [ 734.849321][T16102] ? clear_bhb_loop+0x40/0x90 [ 734.849351][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.849375][T16102] RIP: 0033:0x7fe166d9ce59 [ 734.849398][T16102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.849419][T16102] RSP: 002b:00007fe167ca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.849440][T16102] RAX: ffffffffffffffda RBX: 00007fe167015fa0 RCX: 00007fe166d9ce59 [ 734.849454][T16102] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 734.849468][T16102] RBP: 00007fe167ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 734.849481][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.849495][T16102] R13: 00007fe167016038 R14: 00007fe167015fa0 R15: 00007fe16713fa48 [ 734.849527][T16102] [ 735.180295][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.334595][ T5710] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 735.401876][T12644] as10x_usb: error during firmware upload part1 [ 735.412596][ T5710] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 735.443631][T12644] Registered device nBox DVB-T Dongle [ 735.460541][ T5710] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 735.489753][ T5710] safe_serial 5-1:189.127: safe_serial converter detected [ 735.499469][ T5710] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 735.515989][ T5710] usb 5-1: USB disconnect, device number 38 [ 735.891315][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.907215][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.923768][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.942057][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.954684][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 736.073328][ T5710] usb 4-1: USB disconnect, device number 16 [ 736.206358][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.359423][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.423578][ T5710] Unregistered device nBox DVB-T Dongle [ 736.480552][ T5710] as10x_usb: device has been disconnected [ 736.923071][ T7241] syz_tun (unregistering): left allmulticast mode [ 736.965374][T12649] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 737.086072][ T809] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 737.139417][T12649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 737.147643][T12649] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 737.162589][T12649] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 250 [ 737.173439][T12649] usb 2-1: can't read configurations, error -22 [ 737.190567][ T1170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.242324][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.254349][ T809] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 737.267450][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.306142][ T809] usb 5-1: config 0 descriptor?? [ 737.315848][T12649] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 737.353300][ T809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 737.504238][T12649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 737.513825][T12649] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 737.550285][T12649] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 250 [ 737.579899][T12649] usb 2-1: can't read configurations, error -22 [ 737.602036][T12649] usb usb2-port1: attempt power cycle [ 737.625908][ T29] audit: type=1326 audit(1782846956.259:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.671514][ T1170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.697197][ T29] audit: type=1326 audit(1782846956.259:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.727590][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.783321][ T29] audit: type=1326 audit(1782846956.259:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.819509][ T29] audit: type=1326 audit(1782846956.259:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.844542][ T29] audit: type=1326 audit(1782846956.269:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.869187][ T29] audit: type=1326 audit(1782846956.269:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.923089][ T29] audit: type=1326 audit(1782846956.269:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.959031][ T29] audit: type=1326 audit(1782846956.269:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 737.986964][ T29] audit: type=1326 audit(1782846956.269:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 738.015418][T12649] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 738.035826][ T5636] Bluetooth: hci4: command tx timeout [ 738.051400][T12649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 738.054488][ T29] audit: type=1326 audit(1782846956.269:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.0.2986" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac97f9ce59 code=0x7ffc0000 [ 738.059546][T12649] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 738.064224][T12649] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 250 [ 738.101152][T12649] usb 2-1: can't read configurations, error -22 [ 738.122846][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 738.132017][T16162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2989'. [ 738.151254][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.160904][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.171356][ T809] gspca_stv06xx: I2C: Read error writing address: -71 [ 738.194991][ T809] usb 5-1: USB disconnect, device number 39 [ 738.223151][ T1170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.238469][T12649] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 738.281205][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.299803][T12649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 738.311843][T12649] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 738.323740][T16162] geneve4: entered promiscuous mode [ 738.329626][T16162] geneve4: entered allmulticast mode [ 738.336488][T12649] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 250 [ 738.345786][T12649] usb 2-1: can't read configurations, error -22 [ 738.360848][T12649] usb usb2-port1: unable to enumerate USB device [ 738.440706][ T1170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.557739][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.565882][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.573337][T16126] bridge_slave_0: entered allmulticast mode [ 738.582805][T16126] bridge_slave_0: entered promiscuous mode [ 738.592906][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.600766][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.608514][T16126] bridge_slave_1: entered allmulticast mode [ 738.616749][T16126] bridge_slave_1: entered promiscuous mode [ 738.675921][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.694481][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.936556][T16126] team0: Port device team_slave_0 added [ 738.963714][T16126] team0: Port device team_slave_1 added [ 739.144316][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.153398][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.184790][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.273139][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.292798][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.349177][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.371490][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.395963][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.558037][ T1170] bridge_slave_1: left allmulticast mode [ 739.564157][ T1170] bridge_slave_1: left promiscuous mode [ 739.578735][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.602684][ T1170] bridge_slave_0: left allmulticast mode [ 739.608939][ T1170] bridge_slave_0: left promiscuous mode [ 739.614976][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.128489][ T5636] Bluetooth: hci4: command tx timeout [ 740.204147][ T809] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 740.366019][ T809] usb 1-1: device descriptor read/64, error -71 [ 740.386829][ T1170] bond2 (unregistering): (slave gretap1): Releasing active interface [ 740.397772][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.431844][ T1170] bond18 (unregistering): (slave geneve12): Releasing active interface [ 740.441418][ T1170] geneve12 (unregistering): left allmulticast mode [ 740.459122][ T1170] bond15 (unregistering): (slave geneve11): Releasing active interface [ 740.483883][ T1170] bond14 (unregistering): (slave geneve10): Releasing active interface [ 740.501428][ T1170] bond12 (unregistering): (slave geneve9): Releasing active interface [ 740.517645][ T1170] bond11 (unregistering): (slave geneve8): Releasing active interface [ 740.541047][ T1170] bond8 (unregistering): (slave geneve7): Releasing active interface [ 740.549447][ T1170] geneve7 (unregistering): left allmulticast mode [ 740.562718][ T1170] bond7 (unregistering): (slave geneve6): Releasing active interface [ 740.582520][ T1170] bond5 (unregistering): (slave geneve5): Releasing active interface [ 740.591003][ T1170] geneve5 (unregistering): left allmulticast mode [ 740.603966][ T1170] bond3 (unregistering): (slave geneve4): Releasing active interface [ 740.618033][ T1170] bond1 (unregistering): (slave geneve3): Releasing active interface [ 740.626409][ T809] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 740.786770][ T809] usb 1-1: device descriptor read/64, error -71 [ 740.908419][ T809] usb usb1-port1: attempt power cycle [ 741.025532][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.041848][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.052313][ T1170] bond0 (unregistering): (slave bond4): Releasing backup interface [ 741.061502][ T1170] bond0 (unregistering): Released all slaves [ 741.074045][ T1170] bond1 (unregistering): Released all slaves [ 741.091832][ T1170] bond2 (unregistering): Released all slaves [ 741.108366][ T1170] bond3 (unregistering): Released all slaves [ 741.124525][ T1170] bond4 (unregistering): Released all slaves [ 741.154791][ T1170] bond5 (unregistering): Released all slaves [ 741.179939][ T1170] bond6 (unregistering): Released all slaves [ 741.197593][ T1170] bond7 (unregistering): Released all slaves [ 741.221924][ T1170] bond8 (unregistering): Released all slaves [ 741.250584][ T1170] bond9 (unregistering): Released all slaves [ 741.265479][ T809] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 741.274489][ T1170] bond10 (unregistering): Released all slaves [ 741.286263][ T809] usb 1-1: device descriptor read/8, error -71 [ 741.302563][ T1170] bond11 (unregistering): Released all slaves [ 741.320043][ T1170] bond12 (unregistering): Released all slaves [ 741.337667][ T1170] bond13 (unregistering): Released all slaves [ 741.355001][ T1170] bond14 (unregistering): Released all slaves [ 741.374862][ T1170] bond15 (unregistering): Released all slaves [ 741.427505][ T1170] bond16 (unregistering): Released all slaves [ 741.446570][ T1170] bond17 (unregistering): Released all slaves [ 741.476653][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.494479][ T1170] bond18 (unregistering): Released all slaves [ 741.533235][ T1170] bond19 (unregistering): Released all slaves [ 741.541026][ T809] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 741.577795][ T809] usb 1-1: device descriptor read/8, error -71 [ 741.609502][T16126] hsr_slave_0: entered promiscuous mode [ 741.617101][T16126] hsr_slave_1: entered promiscuous mode [ 741.623647][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 741.635920][T16126] Cannot create hsr debugfs directory [ 741.718658][ T809] usb usb1-port1: unable to enumerate USB device [ 741.734167][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 742.044026][ T1170] : left promiscuous mode [ 742.097508][T16216] loop2: detected capacity change from 0 to 7 [ 742.171937][T16216] Dev loop2: unable to read RDB block 7 [ 742.193014][T16216] loop2: unable to read partition table [ 742.202862][ T5636] Bluetooth: hci4: command tx timeout [ 742.256250][T16216] loop2: partition table beyond EOD, truncated [ 742.264949][T16216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 742.276663][T16220] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 742.326626][T16220] syzkaller1: linktype set to 0 [ 742.437717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.536665][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.980041][T12644] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 743.152975][T12644] usb 4-1: Using ep0 maxpacket: 32 [ 743.228172][T12644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 743.262033][T12644] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 743.340062][T12644] usb 4-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 743.425562][T12644] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 743.541416][T12644] usb 4-1: config 128 has no interface number 0 [ 743.560819][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.590510][T16231] SET target dimension over the limit! [ 743.605639][T12644] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.690888][T12644] usb 4-1: config 128 interface 127 has no altsetting 0 [ 743.768965][T12644] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 743.861989][T16234] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 743.884666][T12644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.941737][T12644] usb 4-1: Product: syz [ 743.981736][T12644] usb 4-1: Manufacturer: syz [ 744.002299][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3002'. [ 744.033699][T12644] usb 4-1: SerialNumber: syz [ 744.124604][T16237] netlink: 'syz.1.3003': attribute type 2 has an invalid length. [ 744.134014][T16237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.194452][T16240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.303082][ T5636] Bluetooth: hci4: command tx timeout [ 744.318950][ T809] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 744.455606][T12644] usb 4-1: USB disconnect, device number 17 [ 744.496718][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 744.522300][T11228] udevd[11228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.563738][ T809] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 744.576171][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.588505][ T809] usb 2-1: config 0 has no interface number 0 [ 744.600624][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.612859][ T809] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 744.622870][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.648308][ T809] usb 2-1: Product: syz [ 744.662332][ T809] usb 2-1: Manufacturer: syz [ 744.685783][ T809] usb 2-1: SerialNumber: syz [ 744.736899][ T809] usb 2-1: config 0 descriptor?? [ 744.775886][ T809] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 744.795523][ T809] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 744.809080][ T809] uvcvideo 2-1:0.105: No valid video chain found. [ 744.992786][ T809] usb 2-1: USB disconnect, device number 116 [ 745.004212][ T1170] hsr_slave_0: left promiscuous mode [ 745.028383][ T1170] hsr_slave_1: left promiscuous mode [ 745.048120][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.063490][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.088721][ T1170] veth0_virt_wifi: left allmulticast mode [ 745.099989][ T1170] veth0_virt_wifi: left promiscuous mode [ 745.256496][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 745.273055][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 745.295588][T12644] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 745.467778][T12644] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 745.487067][T12644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.499861][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.518543][T12644] usb 1-1: config 0 descriptor?? [ 745.557920][T12644] cp210x 1-1:0.0: cp210x converter detected [ 745.662285][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.812173][T16263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 745.974791][T12644] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 746.148477][T12644] usb 1-1: cp210x converter now attached to ttyUSB0 [ 746.248713][ T5711] usb 1-1: USB disconnect, device number 57 [ 746.349535][T16271] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 746.434113][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 746.511613][ T5711] cp210x 1-1:0.0: device disconnected [ 746.680745][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.975027][T16290] SET target dimension over the limit! [ 747.106595][ T1170] IPVS: stop unused estimator thread 0... [ 747.174025][T16271] 8021q: adding VLAN 0 to HW filter on device bond18 [ 747.213155][T16274] vlan7: entered allmulticast mode [ 747.224669][T16274] bond18: entered allmulticast mode [ 747.247097][ T809] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 747.273582][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3013'. [ 747.307258][T16277] bond18: (slave geneve12): making interface the new active one [ 747.316440][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.322972][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.329287][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.338377][T16277] geneve12: entered allmulticast mode [ 747.344456][T16299] FAULT_INJECTION: forcing a failure. [ 747.344456][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 747.378952][T16277] bond18: (slave geneve12): Enslaving as an active interface with an up link [ 747.395521][ T809] usb 1-1: device descriptor read/64, error -71 [ 747.414978][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.1.3013 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.415004][T16299] Tainted: [L]=SOFTLOCKUP [ 747.415010][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.415019][T16299] Call Trace: [ 747.415026][T16299] [ 747.415033][T16299] dump_stack_lvl+0xe8/0x150 [ 747.415059][T16299] should_fail_ex+0x40c/0x560 [ 747.415090][T16299] should_failslab+0xa8/0x100 [ 747.415109][T16299] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 747.415135][T16299] ? local_lock_release+0x9c/0x160 [ 747.415155][T16299] ? __alloc_skb+0x1d7/0x7a0 [ 747.415172][T16299] ? __alloc_skb+0x1d7/0x7a0 [ 747.415197][T16299] __alloc_skb+0x1d7/0x7a0 [ 747.415218][T16299] netlink_sendmsg+0x5d4/0xb40 [ 747.415273][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.415308][T16299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 747.415347][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.415378][T16299] sock_sendmsg_nosec+0x13a/0x180 [ 747.415419][T16299] ____sys_sendmsg+0x54e/0x850 [ 747.415456][T16299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.415496][T16299] ? import_iovec+0x73/0xa0 [ 747.415525][T16299] ___sys_sendmsg+0x2a5/0x360 [ 747.415552][T16299] ? __lock_acquire+0x683/0x2cf0 [ 747.415579][T16299] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.415656][T16299] ? __fget_files+0x2a/0x420 [ 747.415679][T16299] ? __fget_files+0x3a2/0x420 [ 747.415713][T16299] __x64_sys_sendmsg+0x1b1/0x290 [ 747.415747][T16299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.415797][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.415822][T16299] do_syscall_64+0x174/0x580 [ 747.415849][T16299] ? trace_irq_disable+0x3b/0x140 [ 747.415886][T16299] ? clear_bhb_loop+0x40/0x90 [ 747.415916][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.415939][T16299] RIP: 0033:0x7f57f959ce59 [ 747.415960][T16299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.415980][T16299] RSP: 002b:00007f57f77d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.416004][T16299] RAX: ffffffffffffffda RBX: 00007f57f9816090 RCX: 00007f57f959ce59 [ 747.416020][T16299] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000007 [ 747.416034][T16299] RBP: 00007f57f77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 747.416047][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.416060][T16299] R13: 00007f57f9816128 R14: 00007f57f9816090 R15: 00007f57f993fa48 [ 747.416091][T16299] [ 747.750353][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.797735][ T809] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 747.965733][ T809] usb 1-1: device descriptor read/64, error -71 [ 748.119969][ T809] usb usb1-port1: attempt power cycle [ 748.200215][T16126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.283730][T16126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.365422][T16126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 748.409738][T16126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.447348][T16126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 748.505560][ T809] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 748.513585][T16126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.542521][T16312] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3015'. [ 748.556759][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.572158][T16126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.588146][ T809] usb 1-1: device descriptor read/8, error -71 [ 748.613728][T16126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.779905][T12634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.855630][ T809] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 748.874448][T16126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.903170][ T809] usb 1-1: device descriptor read/8, error -71 [ 748.922195][T16126] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.986948][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.994190][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.066316][ T809] usb usb1-port1: unable to enumerate USB device [ 749.199627][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.206846][T10707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.293818][T16328] netlink: 'syz.3.3016': attribute type 10 has an invalid length. [ 749.417646][T16126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.536820][T16126] veth0_vlan: entered promiscuous mode [ 749.574077][T16126] veth1_vlan: entered promiscuous mode [ 749.634120][T16126] veth0_macvtap: entered promiscuous mode [ 749.653472][T16126] veth1_macvtap: entered promiscuous mode [ 749.699667][T16126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.723272][T16126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.763390][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.801099][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.832944][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.886517][ T1170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.024771][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.204753][T16331] netlink: 'syz.1.3017': attribute type 2 has an invalid length. [ 750.234640][T16331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.411592][T10710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.440010][T10710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.505702][T16337] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3020'. [ 750.534712][T10710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.555579][T12654] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 750.580954][T10710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.746656][T12654] usb 2-1: Using ep0 maxpacket: 16 [ 750.774475][T12654] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 750.807478][T12654] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.841205][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.851469][T12654] usb 2-1: config 0 has no interface number 0 [ 750.865473][T12634] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 750.883905][T12654] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 750.908519][T12654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.940810][T12654] usb 2-1: Product: syz [ 750.958102][T12654] usb 2-1: Manufacturer: syz [ 750.969899][T16344] team0: entered promiscuous mode [ 750.993165][T16344] team_slave_0: entered promiscuous mode [ 750.993912][T12654] usb 2-1: SerialNumber: syz [ 751.003824][T16344] team_slave_1: entered promiscuous mode [ 751.019582][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3022'. [ 751.030417][T16344] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 751.060411][T12654] usb 2-1: config 0 descriptor?? [ 751.082563][T16347] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 751.090906][T16347] [U] J"—e:ÀÆ" [ 751.105192][T12634] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 751.124269][T12654] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 751.145582][T12634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.155754][T12654] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 751.163229][T12654] uvcvideo 2-1:0.105: No valid video chain found. [ 751.171231][T12634] usb 4-1: Product: syz [ 751.175781][T12634] usb 4-1: Manufacturer: syz [ 751.183030][T12634] usb 4-1: SerialNumber: syz [ 751.221380][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'. [ 751.233771][T12634] usb 4-1: config 0 descriptor?? [ 751.253691][T12634] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 751.332919][ T5711] usb 2-1: USB disconnect, device number 117 [ 751.356437][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 751.442881][T16355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.454557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.529106][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 751.557934][ T9] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 751.570017][ T9] usb 3-1: config 189 has no interface number 0 [ 751.584339][ T9] usb 3-1: config 189 interface 127 has no altsetting 0 [ 751.607708][ T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 751.617312][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.632769][ T9] usb 3-1: Product: syz [ 751.636693][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.659744][ T9] usb 3-1: Manufacturer: syz [ 751.669160][ T9] usb 3-1: SerialNumber: syz [ 751.776064][T12634] gspca_sunplus: reg_r err -110 [ 751.790406][T16361] loop2: detected capacity change from 0 to 7 [ 751.834109][T16361] Dev loop2: unable to read RDB block 7 [ 751.850003][T16361] loop2: unable to read partition table [ 751.867068][T16361] loop2: partition table beyond EOD, truncated [ 751.890376][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.901327][T16361] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 752.002028][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 752.034119][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 752.072356][T16363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3029'. [ 752.244206][T16371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3030'. [ 752.257731][T12634] usb 4-1: USB disconnect, device number 18 [ 752.579586][T16380] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 752.626327][ T5711] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 752.740845][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3035'. [ 752.787718][ T5711] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 752.797017][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.814512][ T5711] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 752.824819][ T5711] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 752.837419][ T5711] usb 5-1: Manufacturer: syz [ 752.855686][ T5711] usb 5-1: config 0 descriptor?? [ 752.872622][T16380] 8021q: adding VLAN 0 to HW filter on device bond18 [ 752.922056][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.005627][ T5711] rc_core: IR keymap rc-hauppauge not found [ 753.012003][ T5711] Registered IR keymap rc-empty [ 753.021542][ T5711] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 753.037971][ T5711] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 753.302827][ C0] igorplugusb 5-1:0.0: receive overflow, at least 21 lost [ 753.310100][T16392] rc rc0: two consecutive events of type space [ 753.358469][T16386] SET target dimension over the limit! [ 753.530411][ T5711] usb 5-1: USB disconnect, device number 40 [ 753.680524][ T9] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 753.709708][ T9] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 753.743895][ T9] usbserial_generic 3-1:189.127: device has no bulk endpoints [ 753.757504][T16404] netlink: 'syz.1.3041': attribute type 2 has an invalid length. [ 753.772397][T16404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.797251][ T9] safe_serial 3-1:189.127: safe_serial converter detected [ 753.819511][ T9] safe_serial 3-1:189.127: probe with driver safe_serial failed with error -22 [ 753.838535][ T9] usb 3-1: USB disconnect, device number 31 [ 753.905337][T16400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 753.914693][T16400] syzkaller1: linktype set to 0 [ 753.965508][ T5710] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 754.065375][T12654] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 754.128151][ T5710] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 754.141901][ T5710] usb 4-1: config 0 has no interface number 0 [ 754.148672][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.161103][ T5710] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 754.173666][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 754.188338][ T5710] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 754.201615][ T5710] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 754.232743][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.256892][T12654] usb 2-1: Using ep0 maxpacket: 16 [ 754.265002][T12654] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 754.274565][T12654] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.303923][ T5710] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 754.322030][T12654] usb 2-1: config 0 has no interface number 0 [ 754.342985][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.376653][ T5710] usb 4-1: config 0 descriptor?? [ 754.385785][T12634] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 754.397166][T16403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 754.405010][T16403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 754.412650][T12654] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 754.430744][T12654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.439245][T12654] usb 2-1: Product: syz [ 754.443578][T12654] usb 2-1: Manufacturer: syz [ 754.458634][T12654] usb 2-1: SerialNumber: syz [ 754.478672][ T5710] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 754.505858][T12654] usb 2-1: config 0 descriptor?? [ 754.541636][T12654] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 754.569159][T12654] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 754.579856][T12634] usb 5-1: Using ep0 maxpacket: 32 [ 754.592101][T12634] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 754.604569][T12634] usb 5-1: config 0 has no interface number 0 [ 754.611019][T12654] uvcvideo 2-1:0.105: No valid video chain found. [ 754.630406][T12634] usb 5-1: config 0 interface 12 has no altsetting 0 [ 754.642139][T12634] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 754.651869][T12634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.660342][T12634] usb 5-1: Product: syz [ 754.664662][T12634] usb 5-1: Manufacturer: syz [ 754.670965][T12634] usb 5-1: SerialNumber: syz [ 754.682792][T12634] usb 5-1: config 0 descriptor?? [ 754.705927][T16403] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3042'. [ 754.782663][ T9] usb 4-1: USB disconnect, device number 19 [ 754.803243][T12654] usb 2-1: USB disconnect, device number 118 [ 754.846415][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 755.009898][T12649] net_ratelimit: 2 callbacks suppressed [ 755.009922][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.237968][T16414] kvm: pic: non byte write [ 755.496808][T16426] netlink: 'syz.2.3050': attribute type 1 has an invalid length. [ 755.530590][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 755.599114][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 755.758302][ T9] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 755.768707][ T9] usb 4-1: config 0 has no interface number 0 [ 755.774941][ T9] usb 4-1: too many endpoints for config 0 interface 108 altsetting 157: 115, using maximum allowed: 30 [ 755.788880][ T9] usb 4-1: config 0 interface 108 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 755.811136][ T9] usb 4-1: config 0 interface 108 has no altsetting 0 [ 755.818234][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 755.827718][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.846426][ T9] usb 4-1: config 0 descriptor?? [ 756.051130][T12654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.065650][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.090433][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.114443][ T9] usb 4-1: string descriptor 0 read error: -71 [ 756.151021][ T9] hackrf 4-1:0.108: usb_control_msg() failed -71 request 0e [ 756.168261][ T9] hackrf 4-1:0.108: Could not detect board [ 756.179499][ T9] hackrf 4-1:0.108: probe with driver hackrf failed with error -71 [ 756.211557][ T9] usb 4-1: USB disconnect, device number 20 [ 756.268328][T16430] loop8: detected capacity change from 0 to 8 [ 756.290113][T16430] Dev loop8: unable to read RDB block 8 [ 756.306037][T16430] loop8: unable to read partition table [ 756.312283][T16430] loop8: partition table beyond EOD, truncated [ 756.320144][T16430] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 756.495564][T12644] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 756.657961][T12644] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 756.675790][T12644] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 756.703042][T12644] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 756.735004][T12644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.767239][T12634] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 756.791022][T12634] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 756.812950][T12634] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 756.824228][T16447] netlink: 'syz.3.3059': attribute type 2 has an invalid length. [ 756.833566][T12634] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 756.842199][T16447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.863478][T12634] usb 5-1: USB disconnect, device number 41 [ 756.917170][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.981307][T12644] usb 1-1: string descriptor 0 read error: -71 [ 757.060228][T12644] usb 1-1: USB disconnect, device number 62 [ 757.083094][T12649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.116112][ T5710] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 757.275382][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 757.283909][ T5710] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 757.293671][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.304945][ T5710] usb 4-1: config 0 has no interface number 0 [ 757.317814][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 757.328116][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.345414][ T5710] usb 4-1: Product: syz [ 757.354273][ T5710] usb 4-1: Manufacturer: syz [ 757.365824][ T5710] usb 4-1: SerialNumber: syz [ 757.382851][ T5710] usb 4-1: config 0 descriptor?? [ 757.389915][T16451] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 757.402089][ T5710] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 757.423294][ T5710] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 757.433121][ T5710] uvcvideo 4-1:0.105: No valid video chain found. [ 757.496101][T12649] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 757.534021][T16456] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 757.577455][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 757.586685][T16459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3062'. [ 757.613052][ T5710] usb 4-1: USB disconnect, device number 21 [ 757.648167][T12649] usb 3-1: Using ep0 maxpacket: 32 [ 757.658652][T12649] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 757.668804][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.677539][T12649] usb 3-1: Product: syz [ 757.681996][T12649] usb 3-1: Manufacturer: syz [ 757.687595][T12649] usb 3-1: SerialNumber: syz [ 757.700628][T12649] usb 3-1: config 0 descriptor?? [ 757.729561][T16456] 8021q: adding VLAN 0 to HW filter on device bond19 [ 757.790528][T16460] vlan8: entered allmulticast mode [ 757.824125][T16460] bond19: entered allmulticast mode [ 757.847676][T16468] loop8: detected capacity change from 0 to 8 [ 757.860790][T16468] Dev loop8: unable to read RDB block 8 [ 757.872215][T16468] loop8: unable to read partition table [ 757.882730][T16456] bond19: (slave geneve13): making interface the new active one [ 757.891142][T16468] loop8: partition table beyond EOD, truncated [ 757.898088][T16456] geneve13: entered allmulticast mode [ 757.903721][T16468] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 757.930834][T16456] bond19: (slave geneve13): Enslaving as an active interface with an up link [ 758.064894][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 758.119481][T12649] airspy 3-1:0.0: Board ID: 00 [ 758.137441][T12649] airspy 3-1:0.0: Firmware version: [ 758.636005][T12644] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 758.705477][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 758.798605][T12644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 758.817037][T12644] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 758.842573][T12644] usb 4-1: config 189 has no interface number 0 [ 758.865142][T12644] usb 4-1: config 189 interface 127 has no altsetting 0 [ 758.876362][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 758.890790][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.912024][T12644] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 758.924950][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.940048][T12644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.958437][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 758.969906][T12644] usb 4-1: Product: syz [ 758.988276][T12644] usb 4-1: Manufacturer: syz [ 758.997432][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.013638][T12644] usb 4-1: SerialNumber: syz [ 759.056281][ T9] usb 5-1: config 0 descriptor?? [ 759.125565][T16488] SET target dimension over the limit! [ 759.288049][ T5636] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 759.349584][T16490] xt_hashlimit: size too large, truncated to 1048576 [ 759.400439][T12649] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 759.407084][T16490] xt_hashlimit: max too large, truncated to 1048576 [ 759.438450][T12649] airspy 3-1:0.0: Registered as swradio24 [ 759.444498][T12649] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 759.663842][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.676498][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.737448][T12649] usb 3-1: USB disconnect, device number 32 [ 759.936893][T12644] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 759.958144][T12644] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 759.969966][T12644] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 759.982229][T12644] safe_serial 4-1:189.127: safe_serial converter detected [ 759.991535][T12644] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 760.005874][T12644] usb 4-1: USB disconnect, device number 22 [ 760.107096][T12654] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 760.172610][T16505] xt_recent: Unsupported userspace flags (000000b1) [ 760.275703][T12654] usb 2-1: device descriptor read/64, error -71 [ 760.337095][T16513] netlink: 'syz.2.3078': attribute type 2 has an invalid length. [ 760.346226][T16513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.440568][T16514] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 760.447534][T16514] syzkaller1: linktype set to 0 [ 760.454293][T16510] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 760.461288][T16510] syzkaller1: linktype set to 0 [ 760.545580][T12654] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 760.615521][T12649] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 760.685357][T12654] usb 2-1: device descriptor read/64, error -71 [ 760.785373][T12649] usb 3-1: Using ep0 maxpacket: 16 [ 760.807692][T12654] usb usb2-port1: attempt power cycle [ 760.813723][T12649] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 760.823461][T12649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.835164][T12649] usb 3-1: config 0 has no interface number 0 [ 760.847754][T12649] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 760.859714][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.877287][T12649] usb 3-1: Product: syz [ 760.888660][T12649] usb 3-1: Manufacturer: syz [ 760.893919][T12649] usb 3-1: SerialNumber: syz [ 760.908760][T12649] usb 3-1: config 0 descriptor?? [ 760.927975][T12649] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 760.934923][T12649] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 760.944152][T12649] uvcvideo 3-1:0.105: No valid video chain found. [ 761.131376][T12649] usb 3-1: USB disconnect, device number 33 [ 761.156645][T12654] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 761.196674][T12654] usb 2-1: device descriptor read/8, error -71 [ 761.455358][T12654] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 761.498629][T12654] usb 2-1: device descriptor read/8, error -71 [ 761.553472][T16523] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 761.576540][ T9] usb 5-1: USB disconnect, device number 42 [ 761.612045][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3080'. [ 761.626592][T12654] usb usb2-port1: unable to enumerate USB device [ 761.710098][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3080'. [ 761.739093][T16523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.811577][T16523] bond1: (slave gretap1): making interface the new active one [ 761.824096][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 761.861318][T16523] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 761.908368][T16531] tipc: Enabling of bearer rejected, failed to enable media [ 762.188876][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 762.197310][ T5710] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 762.390590][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 762.396068][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 762.406870][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 762.439295][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 762.447303][ T5710] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 762.456931][ T5710] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 762.467655][ T5710] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 762.497348][ T5710] usb 3-1: config 140 has no interface number 0 [ 762.503772][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.518318][ T5710] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 762.529237][ T9] usb 5-1: config 1 interface 2 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 762.565414][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.593037][ T5710] usb 3-1: Product: syz [ 762.597582][ T9] usb 5-1: config 1 interface 2 has no altsetting 1 [ 762.604293][ T5710] usb 3-1: Manufacturer: syz [ 762.609249][ T5710] usb 3-1: SerialNumber: syz [ 762.647587][ T9] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 762.664613][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.706829][ T9] usb 5-1: Product: syz [ 762.716380][ T9] usb 5-1: Manufacturer: syz [ 762.749723][ T9] usb 5-1: SerialNumber: syz [ 763.030430][ T9] usb 5-1: 1:1 : bogus bTerminalLink 5 [ 763.087068][T12649] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 763.119695][ T9] usb 5-1: unit 0 not found! [ 763.254289][ T9] usb 5-1: USB disconnect, device number 43 [ 763.265566][T12649] usb 4-1: Using ep0 maxpacket: 8 [ 763.278772][T12649] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 763.297228][T12649] usb 4-1: config 0 has no interface number 0 [ 763.339332][T12649] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.357709][T15775] udevd[15775]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.376441][T12649] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 763.435332][T12649] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 763.457353][T12649] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.493372][T12649] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.503025][T12649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.535186][T12649] usb 4-1: config 0 descriptor?? [ 763.571813][T12649] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 763.609515][ T5710] usb 3-1: reset high-speed USB device number 34 using dummy_hcd [ 763.804859][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.898484][T16551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.907385][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.928048][T16549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.940025][T16549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.951112][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 763.974845][T16551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.009127][ T5710] usb 3-1: device firmware changed [ 764.139120][ T5710] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 764.178101][ T5710] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 764.201620][ T5711] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 764.244333][ T5711] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 764.257753][ T5710] usb 3-1: USB disconnect, device number 34 [ 764.308329][T16553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3089'. [ 764.328154][ T5711] ================================================================== [ 764.336295][ T5711] BUG: KASAN: slab-use-after-free in __kernfs_new_node+0x54b/0x980 [ 764.344250][ T5711] Read of size 4 at addr ffff88805990f870 by task kworker/0:5/5711 [ 764.352223][ T5711] [ 764.354601][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.354631][ T5711] Tainted: [L]=SOFTLOCKUP [ 764.354638][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.354653][ T5711] Workqueue: events request_firmware_work_func [ 764.354687][ T5711] Call Trace: [ 764.354697][ T5711] [ 764.354706][ T5711] dump_stack_lvl+0xe8/0x150 [ 764.354730][ T5711] print_address_description+0x55/0x1e0 [ 764.354752][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 764.354772][ T5711] print_report+0x58/0x70 [ 764.354791][ T5711] kasan_report+0x117/0x150 [ 764.354813][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 764.354836][ T5711] kasan_check_range+0x264/0x2c0 [ 764.354859][ T5711] __kernfs_new_node+0x54b/0x980 [ 764.354883][ T5711] ? __pfx___kernfs_new_node+0x10/0x10 [ 764.354903][ T5711] ? kernfs_root+0x1c/0x230 [ 764.354924][ T5711] ? kernfs_root+0x1c/0x230 [ 764.354942][ T5711] ? kernfs_root+0x1c/0x230 [ 764.354958][ T5711] ? kernfs_root+0x1c/0x230 [ 764.354979][ T5711] kernfs_create_dir_ns+0xfe/0x230 [ 764.355004][ T5711] sysfs_create_dir_ns+0x12f/0x2a0 [ 764.355035][ T5711] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 764.355066][ T5711] ? do_raw_spin_unlock+0xf5/0x210 [ 764.355095][ T5711] kobject_add_internal+0x622/0xcd0 [ 764.355135][ T5711] kobject_add+0x163/0x240 [ 764.355159][ T5711] ? rcu_is_watching+0x15/0xb0 [ 764.355183][ T5711] ? __pfx_kobject_add+0x10/0x10 [ 764.355208][ T5711] ? __kmalloc_cache_noprof+0x150/0x660 [ 764.355239][ T5711] ? kobject_init+0x7f/0x1e0 [ 764.355264][ T5711] get_device_parent+0x316/0x3a0 [ 764.355294][ T5711] device_add+0x2d4/0xb80 [ 764.355321][ T5711] firmware_fallback_sysfs+0x2dd/0xa40 [ 764.355348][ T5711] ? kfree+0x1c5/0x640 [ 764.355376][ T5711] _request_firmware+0x1049/0x1780 [ 764.355407][ T5711] ? __pfx__request_firmware+0x10/0x10 [ 764.355431][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 764.355459][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 764.355487][ T5711] request_firmware_work_func+0xac/0x2d0 [ 764.355512][ T5711] ? rcu_is_watching+0x15/0xb0 [ 764.355535][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 764.355561][ T5711] process_scheduled_works+0xa8e/0x14e0 [ 764.355600][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 764.355630][ T5711] ? assign_work+0x3cf/0x5d0 [ 764.355658][ T5711] worker_thread+0xa47/0xfb0 [ 764.355692][ T5711] ? __kthread_parkme+0x71/0x1f0 [ 764.355724][ T5711] kthread+0x388/0x470 [ 764.355744][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 764.355771][ T5711] ? __pfx_kthread+0x10/0x10 [ 764.355791][ T5711] ret_from_fork+0x514/0xb70 [ 764.355814][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 764.355835][ T5711] ? __switch_to+0xc89/0x1420 [ 764.355864][ T5711] ? __pfx_kthread+0x10/0x10 [ 764.355884][ T5711] ret_from_fork_asm+0x1a/0x30 [ 764.355915][ T5711] [ 764.355922][ T5711] [ 764.633046][ T5711] Allocated by task 5710: [ 764.637395][ T5711] kasan_save_track+0x3e/0x80 [ 764.642124][ T5711] __kasan_slab_alloc+0x6c/0x80 [ 764.647098][ T5711] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 764.652617][ T5711] __kernfs_new_node+0xe6/0x980 [ 764.657510][ T5711] kernfs_create_dir_ns+0xfe/0x230 [ 764.662670][ T5711] sysfs_create_dir_ns+0x12f/0x2a0 [ 764.667835][ T5711] kobject_add_internal+0x622/0xcd0 [ 764.673087][ T5711] kobject_add+0x163/0x240 [ 764.677545][ T5711] device_add+0x3fa/0xb80 [ 764.681918][ T5711] usb_new_device+0x99d/0x1620 [ 764.686710][ T5711] hub_event+0x28e8/0x4d30 [ 764.691159][ T5711] process_scheduled_works+0xa8e/0x14e0 [ 764.696736][ T5711] worker_thread+0xa47/0xfb0 [ 764.701372][ T5711] kthread+0x388/0x470 [ 764.705473][ T5711] ret_from_fork+0x514/0xb70 [ 764.710116][ T5711] ret_from_fork_asm+0x1a/0x30 [ 764.714917][ T5711] [ 764.717271][ T5711] Freed by task 15: [ 764.721099][ T5711] kasan_save_track+0x3e/0x80 [ 764.725822][ T5711] kasan_save_free_info+0x40/0x50 [ 764.730881][ T5711] __kasan_slab_free+0x5c/0x80 [ 764.735671][ T5711] kmem_cache_free+0x182/0x650 [ 764.740471][ T5711] rcu_core+0x78b/0x10a0 [ 764.744842][ T5711] handle_softirqs+0x225/0x840 [ 764.749653][ T5711] run_ksoftirqd+0x36/0x60 [ 764.754109][ T5711] smpboot_thread_fn+0x57c/0xa80 [ 764.759111][ T5711] kthread+0x388/0x470 [ 764.763213][ T5711] ret_from_fork+0x514/0xb70 [ 764.767855][ T5711] ret_from_fork_asm+0x1a/0x30 [ 764.772658][ T5711] [ 764.775006][ T5711] Last potentially related work creation: [ 764.780742][ T5711] kasan_save_stack+0x3e/0x60 [ 764.785628][ T5711] kasan_record_aux_stack+0xbd/0xd0 [ 764.790883][ T5711] call_rcu+0xee/0x8b0 [ 764.795000][ T5711] kernfs_put+0x622/0x820 [ 764.799359][ T5711] evict+0x624/0xb50 [ 764.803309][ T5711] dentry_kill+0x1b9/0x880 [ 764.807773][ T5711] finish_dput+0x1a/0x260 [ 764.812127][ T5711] lookup_fast+0x3d0/0x5d0 [ 764.816567][ T5711] link_path_walk+0x71f/0x1910 [ 764.821465][ T5711] path_openat+0x236/0x3830 [ 764.825999][ T5711] do_file_open+0x23e/0x4a0 [ 764.830541][ T5711] do_sys_openat2+0x115/0x200 [ 764.835332][ T5711] __x64_sys_openat+0x138/0x170 [ 764.840233][ T5711] do_syscall_64+0x174/0x580 [ 764.844875][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.850806][ T5711] [ 764.853162][ T5711] The buggy address belongs to the object at ffff88805990f870 [ 764.853162][ T5711] which belongs to the cache kernfs_node_cache of size 176 [ 764.867766][ T5711] The buggy address is located 0 bytes inside of [ 764.867766][ T5711] freed 176-byte region [ffff88805990f870, ffff88805990f920) [ 764.881524][ T5711] [ 764.883886][ T5711] The buggy address belongs to the physical page: [ 764.890340][ T5711] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5990f [ 764.899134][ T5711] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 764.906284][ T5711] page_type: f5(slab) [ 764.910326][ T5711] raw: 00fff00000000000 ffff8881404138c0 dead000000000100 dead000000000122 [ 764.918954][ T5711] raw: 0000000000000000 0000000800110011 00000000f5000000 0000000000000000 [ 764.927576][ T5711] page dumped because: kasan: bad access detected [ 764.934037][ T5711] page_owner tracks the page as allocated [ 764.939773][ T5711] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6440, tgid 6439 (syz.1.215), ts 140518121773, free_ts 140496307154 [ 764.960481][ T5711] post_alloc_hook+0x1f9/0x250 [ 764.965299][ T5711] get_page_from_freelist+0x21fa/0x2270 [ 764.970892][ T5711] __alloc_frozen_pages_noprof+0x18d/0x380 [ 764.976765][ T5711] allocate_slab+0x79/0x5e0 [ 764.981305][ T5711] refill_objects+0x2d5/0x350 [ 764.986023][ T5711] __pcs_replace_empty_main+0x2bf/0x6b0 [ 764.991611][ T5711] kmem_cache_alloc_noprof+0x382/0x5f0 [ 764.997236][ T5711] __kernfs_new_node+0xe6/0x980 [ 765.002135][ T5711] kernfs_new_node+0xea/0x140 [ 765.006864][ T5711] kernfs_create_link+0xa7/0x200 [ 765.011846][ T5711] sysfs_do_create_link_sd+0x83/0x110 [ 765.017276][ T5711] module_add_driver+0x10b/0x320 [ 765.022254][ T5711] bus_add_driver+0x391/0x670 [ 765.026970][ T5711] driver_register+0x23a/0x320 [ 765.031772][ T5711] usb_gadget_register_driver_owner+0xf9/0x270 [ 765.037990][ T5711] raw_ioctl+0x1541/0x41c0 [ 765.042450][ T5711] page last free pid 23 tgid 23 stack trace: [ 765.048456][ T5711] __free_frozen_pages+0xc1e/0xd10 [ 765.053621][ T5711] tlb_remove_table_rcu+0x85/0x100 [ 765.058767][ T5711] rcu_core+0x78b/0x10a0 [ 765.063058][ T5711] handle_softirqs+0x225/0x840 [ 765.067870][ T5711] run_ksoftirqd+0x36/0x60 [ 765.072325][ T5711] smpboot_thread_fn+0x57c/0xa80 [ 765.077316][ T5711] kthread+0x388/0x470 [ 765.081425][ T5711] ret_from_fork+0x514/0xb70 [ 765.086139][ T5711] ret_from_fork_asm+0x1a/0x30 [ 765.090953][ T5711] [ 765.093299][ T5711] Memory state around the buggy address: [ 765.098965][ T5711] ffff88805990f700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 765.107077][ T5711] ffff88805990f780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.115177][ T5711] >ffff88805990f800: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 765.123368][ T5711] ^ [ 765.131206][ T5711] ffff88805990f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.139332][ T5711] ffff88805990f900: fb fb fb fb fc fc fc fc fc fc fc fc 00 00 00 00 [ 765.147433][ T5711] ================================================================== [ 765.454801][ T5711] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 765.462087][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.473071][ T5711] Tainted: [L]=SOFTLOCKUP [ 765.477429][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 765.487519][ T5711] Workqueue: events request_firmware_work_func [ 765.493724][ T5711] Call Trace: [ 765.497037][ T5711] [ 765.500021][ T5711] vpanic+0x56c/0xa60 [ 765.504053][ T5711] ? __pfx_vpanic+0x10/0x10 [ 765.508597][ T5711] ? __pfx___schedule+0x10/0x10 [ 765.513499][ T5711] panic+0xc5/0xd0 [ 765.517268][ T5711] ? __pfx_panic+0x10/0x10 [ 765.521754][ T5711] ? preempt_schedule_common+0x82/0xd0 [ 765.527257][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 765.532414][ T5711] check_panic_on_warn+0x89/0xb0 [ 765.537391][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 765.542546][ T5711] end_report+0x73/0x170 [ 765.546841][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 765.552012][ T5711] kasan_report+0x128/0x150 [ 765.556561][ T5711] ? __kernfs_new_node+0x54b/0x980 [ 765.561712][ T5711] kasan_check_range+0x264/0x2c0 [ 765.566680][ T5711] __kernfs_new_node+0x54b/0x980 [ 765.571735][ T5711] ? __pfx___kernfs_new_node+0x10/0x10 [ 765.577242][ T5711] ? kernfs_root+0x1c/0x230 [ 765.581873][ T5711] ? kernfs_root+0x1c/0x230 [ 765.586428][ T5711] ? kernfs_root+0x1c/0x230 [ 765.591485][ T5711] ? kernfs_root+0x1c/0x230 [ 765.596023][ T5711] kernfs_create_dir_ns+0xfe/0x230 [ 765.601173][ T5711] sysfs_create_dir_ns+0x12f/0x2a0 [ 765.606323][ T5711] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 765.612030][ T5711] ? do_raw_spin_unlock+0xf5/0x210 [ 765.617235][ T5711] kobject_add_internal+0x622/0xcd0 [ 765.622480][ T5711] kobject_add+0x163/0x240 [ 765.626933][ T5711] ? rcu_is_watching+0x15/0xb0 [ 765.631753][ T5711] ? __pfx_kobject_add+0x10/0x10 [ 765.636735][ T5711] ? __kmalloc_cache_noprof+0x150/0x660 [ 765.642327][ T5711] ? kobject_init+0x7f/0x1e0 [ 765.646981][ T5711] get_device_parent+0x316/0x3a0 [ 765.651979][ T5711] device_add+0x2d4/0xb80 [ 765.656350][ T5711] firmware_fallback_sysfs+0x2dd/0xa40 [ 765.661826][ T5711] ? kfree+0x1c5/0x640 [ 765.665920][ T5711] _request_firmware+0x1049/0x1780 [ 765.671087][ T5711] ? __pfx__request_firmware+0x10/0x10 [ 765.676586][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 765.682438][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 765.688205][ T5711] request_firmware_work_func+0xac/0x2d0 [ 765.693906][ T5711] ? rcu_is_watching+0x15/0xb0 [ 765.698733][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 765.704506][ T5711] process_scheduled_works+0xa8e/0x14e0 [ 765.710102][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 765.716108][ T5711] ? assign_work+0x3cf/0x5d0 [ 765.720743][ T5711] worker_thread+0xa47/0xfb0 [ 765.725388][ T5711] ? __kthread_parkme+0x71/0x1f0 [ 765.730382][ T5711] kthread+0x388/0x470 [ 765.734488][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 765.739656][ T5711] ? __pfx_kthread+0x10/0x10 [ 765.744287][ T5711] ret_from_fork+0x514/0xb70 [ 765.748912][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 765.754064][ T5711] ? __switch_to+0xc89/0x1420 [ 765.758780][ T5711] ? __pfx_kthread+0x10/0x10 [ 765.763406][ T5711] ret_from_fork_asm+0x1a/0x30 [ 765.768220][ T5711] [ 765.771918][ T5711] Kernel Offset: disabled [ 765.776270][ T5711] Rebooting in 86400 seconds..