last executing test programs: 8m21.478581703s ago: executing program 0 (id=153): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@mmap={0x3, 0x3, 0x4, 0xe000, 0x8, {0x77359400}, {0x2, 0x0, 0x0, 0xff, 0x89, 0x40, "f4ed82dc"}, 0x3ff, 0x1, {}, 0x6}) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x6}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x94}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8m21.414210144s ago: executing program 0 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8m21.228809689s ago: executing program 0 (id=155): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m20.450436591s ago: executing program 0 (id=159): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m20.166356006s ago: executing program 0 (id=161): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b7d}, 0x1c) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x5}, {{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000003080)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)=""/15, 0xf}, 0x7}], 0x2, 0x40002001, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "8a2c5f", 0x6c, 0x2f, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x37}, {[@routing={0x3a, 0x4, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0x77, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0xf, 0x2, 0x5, 0x3, 0x1, 0x1, 0x0, 0x7f}, 0x2, {0x10000, 0x1, 0x1, 0x16, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 8m19.795709786s ago: executing program 0 (id=163): socket$inet_sctp(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 8m19.089390057s ago: executing program 32 (id=163): socket$inet_sctp(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 8m11.340278885s ago: executing program 4 (id=198): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in6=@private2}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000540)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x5, 0x5, {}, {}, 0x2, 0x3}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f00000006c0)=0xc) getuid() sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8m9.923730774s ago: executing program 4 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8m9.581564401s ago: executing program 4 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 8m9.194258672s ago: executing program 4 (id=209): mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m8.890139302s ago: executing program 4 (id=211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8m8.470443223s ago: executing program 4 (id=212): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 8m7.677172772s ago: executing program 33 (id=212): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 6m4.95586869s ago: executing program 6 (id=982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0x9, 0xa}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m3.789083467s ago: executing program 6 (id=989): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6m3.408565297s ago: executing program 6 (id=994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6m3.007440348s ago: executing program 6 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m2.676502268s ago: executing program 6 (id=998): prctl$PR_SET_SECUREBITS(0x1c, 0x20e4d4927a9618fd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m2.373025008s ago: executing program 6 (id=1000): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 6m2.074711525s ago: executing program 34 (id=1000): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 1m2.09772502s ago: executing program 3 (id=2558): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xdb8, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1m1.629710111s ago: executing program 3 (id=2560): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000041}, 0x0) 1m0.723256543s ago: executing program 3 (id=2565): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7eff, 0xa, 0x103}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x89, 0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.473218478s ago: executing program 3 (id=2566): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 59.416883442s ago: executing program 3 (id=2572): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x3, 0x0, [0x4, 0x6, 0xffffffffffffffe0, 0x200], [0xffffffffffffffff, 0x8a41, 0x7, 0xff, 0x7, 0x1, 0x6, 0x5, 0x2, 0x7, 0x101, 0x3, 0xfe, 0x17, 0xfffffffffffffff7, 0x71, 0x1, 0x88, 0x3, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0xfffffffffffffe01, 0x0, 0x7fffffff, 0x9, 0x200000d, 0x3, 0x9, 0x0, 0x10000, 0x8, 0x5, 0x101, 0x9, 0x6, 0x5, 0x4, 0x7fffffffffffffff, 0x7c, 0x65f80000, 0xfffffffffffffffe, 0x200, 0xffffffff, 0x1, 0x2, 0x1, 0x1, 0x7, 0x2b, 0x200002, 0x800100000000000, 0x4, 0x3, 0x71, 0x9, 0x3d5, 0x1d7bc000000, 0x5, 0xc, 0x4, 0x7fffffff, 0xdee, 0x38, 0x81, 0x9, 0x4, 0xfffffffffffffffe, 0x7165, 0x0, 0x1, 0x1, 0x3, 0x7, 0x7, 0xfffffffffffffff4, 0x7, 0x5, 0x6, 0x2, 0x3, 0xef76, 0x100000001, 0x410, 0xf1a, 0x4, 0x0, 0x1292000, 0x7, 0x88, 0x0, 0x8000000000000000, 0x2, 0x3, 0x6, 0xff, 0x8000, 0xff, 0x8, 0x0, 0x1, 0xf4, 0x7, 0x200, 0x7, 0x6, 0x0, 0x9, 0x9, 0x0, 0x3, 0x10000000000, 0x100000000000000, 0x9b6a, 0x1e83, 0x600, 0x7, 0x3, 0x45df, 0x8000]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000017000000020000000000000070778efbba7fe2e5f9a9b9e2ac501a9379ac7362b53e07d2486dbe8593df1154ffd8ae21668a0e7ce7fbf14d0c24b8570534d5176856ba545791bf5e9a84ecc9e12619197609bdf0c45d43511d835af1fcdc2e1cf9cf4599a29b35361df4028524bd3f9d25552d6d3fda76f66f70ecce6bad2f104597498d94777a9fef0bb067353b83edb01766404910c3d58fbc2b42eac6a966a2ee7b32f3eea7b7e36ef318eaf1ca2ce9862026cef8390fbf96a5295b580e9419c1cf0000000200ab0bc26d2455086dc026dbdf272f4179325a60be58b42ab3ced79616eb36457abd8a6b84b0c55dd05d5cb9b885413e02d20723d7bc924a"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 58.843143113s ago: executing program 3 (id=2575): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xcf) fcntl$setlease(r3, 0x400, 0x1) timer_getoverrun(r2) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xcf) fcntl$setlease(r3, 0x400, 0x1) timer_getoverrun(r2) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40480d2) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 6.464793685s ago: executing program 7 (id=2813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.462538525s ago: executing program 1 (id=2814): lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x24, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.245144959s ago: executing program 5 (id=2815): socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@broadcast, 0xee24, 0x0, 0x4e22, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x81000, 0x200000004, 0x40000000007, 0x20ffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='nv\x00', 0x3) 6.054489316s ago: executing program 7 (id=2817): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xfc55, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) accept$unix(r3, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x200, 0x0, 0xa, 0x1000000, 0xd8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x200, 0x9, 0xfffffffe, 'syz1\x00', 'syz0\x00', {0x8290}}}}, {{@ip={@empty, @loopback, 0xff, 0xffffff00, 'team_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x48}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 6.014486532s ago: executing program 8 (id=2818): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x6a, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205000000e68e47700c"], 0x0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=r1}, 0x0) pipe2(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 5.976116351s ago: executing program 5 (id=2820): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02000486b20609050f02"], 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0xd, 0xd, 0x4, 0x2000, 0xa4f1, {0x77359400}, {0x1, 0x0, 0x4, 0xd, 0x0, 0x9, "9d3a4c1a"}, 0x8000, 0x4, {}, 0x89}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xe86, 0x40401, 0x4, 0x5, 0x0, "0d693e0100003700"}) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x0, 0x0, 0x0, 0xfffffffc}) r5 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r5, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x18, r6, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f00000000c0)="4987a034977f549ecf9800000000050000000000", 0x14}], 0x2, 0x0, 0x0, 0x11000000}, 0x20008014) 5.504817645s ago: executing program 1 (id=2821): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x4}], {}, [{}], {0x10, 0x7}}, 0x4c, 0x2) 4.774917613s ago: executing program 2 (id=2822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 4.535393463s ago: executing program 2 (id=2823): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x42, 0x4f) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) fanotify_init(0x200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.237721338s ago: executing program 1 (id=2824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000040)=""/71, 0x47) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x25044800, &(0x7f00000005c0)="d1eb3edf36e67c2163dcc760e4ff99469a6a260fef28cf517384d914e5fe9af6a54439760ea123d9414f7e2d25aa3a833ffaacdcc98c84c3b16c5af26946a9f92ff9228ddb54764abdebbf2825bba3da2c3b547d157bac5ddf930fbde7d84823d01a444f4400079ff5b5443fb1ef2cafd7fa8236e849f1d36bfa9b8582c2327e5c77384b193c206e046a68cc935765535a505e86a1499fa6fd315428b328cccd55a280dc178b4344e414040765b327f43f82f380458194eb23f5e3b14e597ffb28b52b75", 0xc4, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x70d8000, 0x2003) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x98, r6, 0xc29, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26ea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 4.114486975s ago: executing program 5 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff46, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x10000, 0x45a5, 0x8, 0x6, 0x7f, 0x0, 0x57, 0x3, 0x80, 0xfff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x7, 0x3, 0x4, 0x7f, 0x101, 0x2000de, 0x10, 0x7, 0x6, 0x80, 0xfff, 0x6, 0x9, 0x7fff, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x40002, 0x7000000, 0x5, 0x1, 0xecd, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0xfffffffd, 0x3, 0x7ff, 0x5, 0x82, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0xc2a4, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x3ffffe, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x1, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x2, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x83, 0x8, 0x9268, 0x80000000, 0x2, 0x400007, 0x4000004, 0x3, 0x4, 0x3, 0x5, 0xa524, 0x7, 0x6, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xe}, {0x4}, {0x2, 0x43cb54b047ae0fb9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200488d8}, 0x0) 3.845174371s ago: executing program 1 (id=2826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x25b4, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x20000804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.78750802s ago: executing program 2 (id=2827): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2b, 'net'}]}, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.494493259s ago: executing program 1 (id=2828): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3.441571469s ago: executing program 7 (id=2829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.325606474s ago: executing program 5 (id=2830): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069d481, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xe0f02, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.806344348s ago: executing program 8 (id=2831): dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) 2.79473826s ago: executing program 2 (id=2832): socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000480)={0x0, 0x18e4, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x2, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}, 0xffffffffffffffff}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r7, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) r11 = syz_ublk_setup_io_uring(0x54e5, &(0x7f0000000540)={0x0, 0x6809, 0x1000, 0x1, 0x3b9, 0x0, r10}, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4488, 0x10002, 0x401, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x0, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x4, 0x48b, 0x0, 0x0}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0) 2.430325546s ago: executing program 1 (id=2833): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.366870865s ago: executing program 5 (id=2834): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef625a66bef81ef81eeec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 923.983485ms ago: executing program 2 (id=2835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 824.126903ms ago: executing program 8 (id=2836): socket$inet6(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 678.305328ms ago: executing program 5 (id=2837): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 543.019345ms ago: executing program 8 (id=2838): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x2, 0x22b0, 0x46, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0xb8f133ac4ad20386, 0x0, 0x40007, 0x0}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0xfa, 0x5, 0xd, 0x0, 0x1000, 0x40, 0x3, 0x7, 0x8, 0xd7, 0x0, 0x2, 0x0, 0x7ff, 0xd, 0x2c, 0x0, 0x4, 0xd, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 411.773713ms ago: executing program 2 (id=2839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x85) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 285.94954ms ago: executing program 8 (id=2840): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_setup(0x3b2, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x209, 0x9, 0x0, 0x80000001, 0x7fb, 0x7, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'wg2\x00', @remote}) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 98.404387ms ago: executing program 8 (id=2841): socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2842): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) getpid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xe056, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000000, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x801, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): led to get link speed/duplex [ 493.338275][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.440414][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 493.478280][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.521119][T10083] ath6kl: Failed to submit usb control message: -71 [ 493.541145][T10083] ath6kl: unable to send the bmi data to the device: -71 [ 493.558340][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 493.565486][T10083] ath6kl: Unable to send get target info: -71 [ 493.590782][T10083] ath6kl: Failed to init ath6kl core: -71 [ 493.608765][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.612044][T10083] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 493.659134][T10083] usb 6-1: USB disconnect, device number 36 [ 493.690403][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 493.728419][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.812789][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 493.842264][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.876275][ T5691] comedi comedi5: could not set alternate setting 3 in high speed [ 493.898424][ T5691] usbdux 3-1:34.116: driver 'usbdux' failed to auto-configure device. [ 493.934394][ T5691] usbdux 3-1:34.116: probe with driver usbdux failed with error -71 [ 493.965251][ T5691] usb 3-1: USB disconnect, device number 47 [ 494.908465][T10086] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 495.106574][T10086] usb 4-1: Using ep0 maxpacket: 16 [ 495.138197][T10086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.154919][T10086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.177023][T10086] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.265342][T10086] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 495.296885][T10086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.381255][T10086] usb 4-1: config 0 descriptor?? [ 495.406042][T10086] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input51 [ 495.482787][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.570437][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.630064][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.723336][T11266] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.765145][T13400] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.799642][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 495.809306][T10073] usb 4-1: USB disconnect, device number 38 [ 495.837422][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 495.876851][ T4976] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 495.918259][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 496.082366][T13412] syzkaller0: entered promiscuous mode [ 496.097815][T13412] syzkaller0: entered allmulticast mode [ 496.182411][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.216670][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.598243][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 499.858252][T11705] net_ratelimit: 37 callbacks suppressed [ 499.858272][T11705] bond1: (slave gretap1): failed to get link speed/duplex [ 499.888140][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 500.001785][T13454] syzkaller0: entered promiscuous mode [ 500.007434][T13454] syzkaller0: entered allmulticast mode [ 501.447770][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455156][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.770306][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2347'. [ 503.318862][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 503.498147][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.530572][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 503.548577][T10083] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 503.638212][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.668556][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 503.747025][T10083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.770252][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.770470][T10083] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 503.788206][T11705] bond1: (slave gretap1): failed to get link speed/duplex [ 503.809266][T10083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.848561][T10083] usb 3-1: config 0 descriptor?? [ 503.869912][T10083] pwc: Askey VC010 type 2 USB webcam detected. [ 503.890273][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.285798][T10083] pwc: recv_control_msg error -32 req 02 val 2b00 [ 504.298219][T10083] pwc: recv_control_msg error -32 req 02 val 2700 [ 504.318498][T10083] pwc: recv_control_msg error -32 req 02 val 2c00 [ 504.349183][T10083] pwc: recv_control_msg error -32 req 04 val 1000 [ 504.368223][T10083] pwc: recv_control_msg error -32 req 04 val 1300 [ 504.383068][T10083] pwc: recv_control_msg error -32 req 04 val 1400 [ 504.400674][T10083] pwc: recv_control_msg error -32 req 02 val 2000 [ 504.419168][T10083] pwc: recv_control_msg error -32 req 02 val 2100 [ 504.431338][T10083] pwc: recv_control_msg error -32 req 04 val 1500 [ 504.448952][T10083] pwc: recv_control_msg error -32 req 02 val 2500 [ 504.459706][T10083] pwc: recv_control_msg error -32 req 02 val 2400 [ 504.638197][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 504.680530][T10083] pwc: recv_control_msg error -71 req 02 val 2900 [ 504.727541][T10083] pwc: recv_control_msg error -71 req 02 val 2800 [ 504.759352][T10083] pwc: recv_control_msg error -71 req 04 val 1100 [ 504.793334][T10083] pwc: recv_control_msg error -71 req 04 val 1200 [ 504.890178][T10083] pwc: Registered as video103. [ 504.919003][ T62] net_ratelimit: 17 callbacks suppressed [ 504.919018][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 504.943471][T10083] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 505.008333][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 505.024403][T10083] usb 3-1: USB disconnect, device number 48 [ 505.098397][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 505.151956][T11705] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 505.240302][T11705] bond1: (slave gretap1): failed to get link speed/duplex [ 505.289052][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 505.364736][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 505.428309][T11705] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 505.518403][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 505.586552][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 506.897397][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 508.084506][T13559] could not allocate digest TFM handle crct10dif [ 509.722897][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.766175][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.118228][ T62] net_ratelimit: 71 callbacks suppressed [ 510.118245][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.148162][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 510.269888][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.305429][T11705] bond1: (slave gretap1): failed to get link speed/duplex [ 510.378248][T11705] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.419086][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 510.492967][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.531786][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 510.555615][T13598] netlink: 'syz.1.2383': attribute type 10 has an invalid length. [ 510.603585][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.641448][T13598] team0: entered allmulticast mode [ 510.655514][T13598] team_slave_0: entered allmulticast mode [ 510.673978][T13598] team_slave_1: entered allmulticast mode [ 510.696160][T13598] bond0: (slave team0): Enslaving as an active interface with an up link [ 510.739019][T13598] team_slave_0: entered promiscuous mode [ 510.747076][T13598] team_slave_1: entered promiscuous mode [ 510.788250][T11705] bond1: (slave gretap1): failed to get link speed/duplex [ 510.808533][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.990175][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.040392][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.419109][T13606] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 511.512020][T13606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 511.584783][T13608] vlan3: entered allmulticast mode [ 511.596215][T13608] bond7: entered allmulticast mode [ 511.688475][T13606] bond7: (slave geneve4): making interface the new active one [ 511.722439][T13606] geneve4: entered allmulticast mode [ 511.775033][T13606] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 512.081857][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.137275][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.802456][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.828584][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.099150][T13628] syzkaller0: entered promiscuous mode [ 513.123524][T13628] syzkaller0: entered allmulticast mode [ 513.616272][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2396'. [ 514.256224][T13642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2396'. [ 514.459294][T13648] tipc: Resetting bearer [ 514.627529][T13648] tipc: Resetting bearer [ 514.703103][T11714] tipc: Resetting bearer [ 514.881440][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.917646][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.199277][T11714] net_ratelimit: 56 callbacks suppressed [ 515.199299][T11714] bond1: (slave gretap1): failed to get link speed/duplex [ 515.229809][T10073] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 515.298407][T11714] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.408237][T11714] bond1: (slave gretap1): failed to get link speed/duplex [ 515.441400][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.471000][T10073] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 515.502480][T10073] usb 6-1: config 253 has no interface number 0 [ 515.537833][T10073] usb 6-1: config 253 interface 130 has no altsetting 0 [ 515.546876][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 515.643826][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.700371][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 515.795480][T10073] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 515.807501][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.851046][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 515.859992][T10073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.905973][T10073] usb 6-1: Product: syz [ 515.937131][T10073] usb 6-1: Manufacturer: syz [ 515.956659][T11714] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.977190][T10073] usb 6-1: SerialNumber: syz [ 516.132439][T13667] syzkaller0: entered promiscuous mode [ 516.166020][T13667] syzkaller0: entered allmulticast mode [ 516.295528][T13670] fuse-io-uring is disabled [ 516.313104][T13670] fuse-io-uring is disabled [ 516.390876][T13670] fuse-io-uring is disabled [ 516.398351][T13670] fuse-io-uring is disabled [ 516.403005][T13670] fuse-io-uring is disabled [ 516.432812][T13670] fuse-io-uring is disabled [ 516.444421][T13670] fuse-io-uring is disabled [ 516.464100][T13670] fuse-io-uring is disabled [ 516.486243][T13670] fuse-io-uring is disabled [ 516.498915][T13670] fuse-io-uring is disabled [ 517.582842][T13677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2408'. [ 517.901987][T13684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 517.938176][T10083] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 518.135302][T10083] usb 3-1: config 0 interface 0 has no altsetting 0 [ 518.170521][T10083] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 518.211705][T10083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.254953][T10083] usb 3-1: config 0 descriptor?? [ 518.390655][T10073] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 518.572536][T10073] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 518.598260][T10073] dib0700: firmware download failed at 7 with -22 [ 518.624512][T10073] usb 6-1: USB disconnect, device number 37 [ 518.737376][T10083] hid_parser_main: 7 callbacks suppressed [ 518.737401][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.778079][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.793490][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.820726][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.854024][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.874892][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.886702][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.904989][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.916514][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.923803][T10083] topre 0003:0853:0146.0017: unknown main item tag 0x0 [ 518.953589][T10083] topre 0003:0853:0146.0017: hidraw0: USB HID v7f.fd Device [HID 0853:0146] on usb-dummy_hcd.2-1/input0 [ 519.798219][T10073] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 519.834145][T10083] usb 3-1: USB disconnect, device number 49 [ 519.970427][T10073] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 519.989475][T10073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.005827][T10073] usb 6-1: config 0 has no interfaces? [ 520.014125][T10073] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 520.027077][T10073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.044678][T10073] usb 6-1: config 0 descriptor?? [ 520.063582][ T29] audit: type=1800 audit(1783903560.988:1285): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2417" name="/" dev="fuse" ino=1 res=0 errno=0 [ 520.159655][T13713] tipc: Enabled bearer , priority 0 [ 520.174409][T13713] syzkaller0: entered promiscuous mode [ 520.181007][T13713] syzkaller0: entered allmulticast mode [ 520.223666][T13717] netlink: 'syz.3.2420': attribute type 21 has an invalid length. [ 520.234036][T13718] hub 8-0:1.0: USB hub found [ 520.249799][T13718] hub 8-0:1.0: 1 port detected [ 520.275233][T13717] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2420'. [ 520.285680][T13717] netlink: 'syz.3.2420': attribute type 1 has an invalid length. [ 520.295240][T13717] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2420'. [ 520.376116][T13719] tipc: Resetting bearer [ 520.400597][T13712] tipc: Resetting bearer [ 520.417777][T10086] usb 6-1: USB disconnect, device number 38 [ 520.465575][T13712] tipc: Disabling bearer [ 520.528708][T11709] net_ratelimit: 70 callbacks suppressed [ 520.528728][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 520.576691][T13723] tipc: Resetting bearer [ 520.689090][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.701366][T13721] tipc: Resetting bearer [ 520.706220][T11714] bond1: (slave gretap1): failed to get link speed/duplex [ 520.802514][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.898593][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 520.939796][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.010285][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 521.048976][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.120875][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 521.159170][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.247515][T13744] loop6: detected capacity change from 0 to 2640 [ 521.256525][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.256644][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.256742][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.256838][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.256932][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.257050][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.257168][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.257327][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.257356][T13744] ldm_validate_partition_table(): Disk read failed. [ 521.258664][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.258781][T13744] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.258962][T13744] Dev loop6: unable to read RDB block 0 [ 521.259556][T13744] loop6: unable to read partition table [ 521.259768][T13744] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 521.339214][T13744] loop6: detected capacity change from 2640 to 524288000 [ 521.751249][T11709] tipc: Resetting bearer [ 521.919539][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 523.318992][T13773] syzkaller0: entered promiscuous mode [ 523.325469][T13773] syzkaller0: entered allmulticast mode [ 523.877130][T13778] syzkaller0: entered promiscuous mode [ 523.885272][T13778] syzkaller0: entered allmulticast mode [ 524.123682][T13782] kvm: pic: level sensitive irq not supported [ 524.126228][T13782] kvm: pic: single mode not supported [ 524.135147][T13782] kvm: pic: single mode not supported [ 524.143354][T13782] kvm: pic: level sensitive irq not supported [ 524.150876][T13782] kvm: pic: single mode not supported [ 524.157008][T13782] kvm: pic: level sensitive irq not supported [ 524.262166][T13789] tipc: Started in network mode [ 524.273564][T13789] tipc: Node identity 4246, cluster identity 4711 [ 524.280166][T13789] tipc: Node number set to 16966 [ 524.478920][ T5691] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 524.648667][T10086] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 524.670283][ T5691] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.681466][ T5691] usb 8-1: config 0 has no interfaces? [ 524.687012][ T5691] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.696387][ T5691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.721120][ T5691] usb 8-1: config 0 descriptor?? [ 524.819966][T10086] usb 6-1: Using ep0 maxpacket: 8 [ 524.845998][T10086] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 524.865351][T10086] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.900923][T10086] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 524.919115][T10086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.936572][T10086] usb 6-1: Product: syz [ 524.956951][T10086] usb 6-1: Manufacturer: syz [ 524.988993][T13801] tipc: Resetting bearer [ 524.994858][T10086] usb 6-1: SerialNumber: syz [ 525.026184][T10086] usb 6-1: config 0 descriptor?? [ 525.088346][T13798] tipc: Enabling of bearer rejected, already enabled [ 525.116398][T13800] tipc: Resetting bearer [ 525.155925][ T29] audit: type=1326 audit(1783903566.078:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.196994][ T29] audit: type=1326 audit(1783903566.078:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.260568][ T29] audit: type=1326 audit(1783903566.088:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.325589][ T29] audit: type=1326 audit(1783903566.088:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.403300][ T29] audit: type=1326 audit(1783903566.088:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.502630][T11707] tipc: Resetting bearer [ 525.508918][ T29] audit: type=1326 audit(1783903566.158:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.508970][ T29] audit: type=1326 audit(1783903566.158:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.596669][ T29] audit: type=1326 audit(1783903566.158:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451119daeb code=0x7ffc0000 [ 525.636614][T13813] tipc: Enabling of bearer rejected, already enabled [ 525.665241][T13813] tipc: Resetting bearer [ 525.672065][ T29] audit: type=1326 audit(1783903566.488:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.698229][T11709] net_ratelimit: 67 callbacks suppressed [ 525.698250][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.714248][ T29] audit: type=1326 audit(1783903566.488:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.7.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451119de59 code=0x7ffc0000 [ 525.728695][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 525.848162][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.863458][T13815] syzkaller0: entered promiscuous mode [ 525.870714][T13815] syzkaller0: entered allmulticast mode [ 525.928839][T10074] usb 6-1: USB disconnect, device number 39 [ 525.969108][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.989823][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 526.036308][T13817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 526.099251][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 526.138149][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 526.227160][T13822] usb 8-1: USB disconnect, device number 17 [ 526.233314][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 526.270091][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 526.368456][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 526.441581][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.455713][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.474821][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.488878][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.545646][T13821] hub 8-0:1.0: USB hub found [ 526.563587][T13821] hub 8-0:1.0: 1 port detected [ 526.708477][ T5706] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 526.867956][T13832] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2459'. [ 526.916203][ T5706] usb 4-1: config 0 has no interfaces? [ 526.924512][ T5706] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 526.934750][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.943300][ T5706] usb 4-1: Product: syz [ 526.947629][ T5706] usb 4-1: Manufacturer: syz [ 526.952903][ T5706] usb 4-1: SerialNumber: syz [ 526.961473][ T5706] usb 4-1: config 0 descriptor?? [ 527.404626][T13824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.430647][ T5706] usb 4-1: USB disconnect, device number 39 [ 527.558124][ T5691] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 527.730572][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 527.761465][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 527.793011][ T5691] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.831833][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.869274][ T5691] usb 6-1: Product: syz [ 527.884195][ T5691] usb 6-1: Manufacturer: syz [ 527.897820][ T5691] usb 6-1: SerialNumber: syz [ 527.917834][ T5691] usb 6-1: config 0 descriptor?? [ 527.944513][ T5691] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 527.973102][ T5691] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 528.187101][T13860] fuse: Bad value for 'fd' [ 528.237058][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 528.255466][T13860] lo: Caught tx_queue_len zero misconfig [ 528.256483][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 528.518915][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 528.708921][ T5691] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 528.733511][T13865] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.740966][T13865] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.884870][T13870] binder: BINDER_SET_CONTEXT_MGR already set [ 528.904756][T13867] syzkaller0: entered promiscuous mode [ 528.913533][T13870] binder: 13868:13870 ioctl 4018620d 200000000040 returned -16 [ 528.930770][T13867] syzkaller0: entered allmulticast mode [ 529.083541][T13873] loop4: detected capacity change from 0 to 2640 [ 529.119844][T13873] buffer_io_error: 11 callbacks suppressed [ 529.119864][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.171640][T13874] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.181256][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.225633][T13874] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.259956][ T5691] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 529.300102][ T5691] em28xx 6-1:0.0: board has no eeprom [ 529.337424][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.355167][T13874] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.374084][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.386187][T13874] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.405272][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.416146][T13873] Buffer I/O error on dev loop4, logical block 0, async page read [ 529.487870][T13873] ldm_validate_partition_table(): Disk read failed. [ 529.528631][T13873] Dev loop4: unable to read RDB block 0 [ 529.556649][T13873] loop4: unable to read partition table [ 529.596676][T13873] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 529.718675][ T5691] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 529.741118][ T5691] em28xx 6-1:0.0: dvb set to bulk mode. [ 529.756192][ T5706] em28xx 6-1:0.0: Binding DVB extension [ 529.768796][ T4991] ldm_validate_partition_table(): Disk read failed. [ 529.793867][ T4991] Dev loop4: unable to read RDB block 0 [ 529.804777][ T4991] loop4: unable to read partition table [ 529.911828][T13895] tipc: Resetting bearer [ 529.971830][T13894] tipc: Resetting bearer [ 530.515565][ T62] tipc: Resetting bearer [ 530.708529][ T62] net_ratelimit: 48 callbacks suppressed [ 530.708688][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 530.818232][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.920127][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 530.980324][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 531.068504][ T62] bond1: (slave gretap1): failed to get link speed/duplex [ 531.128146][ T62] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 531.218248][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 531.285931][T13842] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 531.339974][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 531.478284][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 531.490129][ T5706] em28xx 6-1:0.0: Registering input extension [ 531.569051][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.064794][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.115676][ T5720] usb 6-1: USB disconnect, device number 40 [ 532.173423][ T5720] em28xx 6-1:0.0: Disconnecting em28xx [ 532.204041][ T5720] em28xx 6-1:0.0: Closing input extension [ 532.321996][ T5720] em28xx 6-1:0.0: Freeing device [ 532.795356][T13926] bond0: (slave bond_slave_1): Releasing backup interface [ 532.998334][ T5720] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 533.178536][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 533.217751][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 533.375680][ T5720] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 533.444943][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.498434][ T5720] usb 6-1: Product: syz [ 533.522402][ T5720] usb 6-1: Manufacturer: syz [ 533.543153][ T5720] usb 6-1: SerialNumber: syz [ 533.579738][ T5720] usb 6-1: config 0 descriptor?? [ 533.617989][ T5720] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 534.705985][T13937] syzkaller0: entered promiscuous mode [ 534.748563][T13937] syzkaller0: entered allmulticast mode [ 535.216219][T13941] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2489'. [ 535.605597][T13950] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 535.630806][T13949] hub 8-0:1.0: USB hub found [ 535.647855][T13950] netlink: 'syz.1.2500': attribute type 2 has an invalid length. [ 535.655201][T13949] hub 8-0:1.0: 1 port detected [ 535.666358][T13946] bond5: option ad_select: invalid value (253) [ 535.685283][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 535.715779][T13946] bond5 (unregistering): Released all slaves [ 535.922787][T13951] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 535.922807][T13951] netlink: 'syz.1.2500': attribute type 2 has an invalid length. [ 535.923540][T11709] net_ratelimit: 62 callbacks suppressed [ 535.923570][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 535.980842][ T5720] gspca_zc3xx: reg_r err -32 [ 536.068404][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 536.168364][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 536.178343][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 536.278121][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 536.288377][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 536.388280][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 536.403750][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 536.498248][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 536.538253][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 536.578433][ T5720] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 536.608702][ T5720] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 536.993917][T13971] tipc: Enabled bearer , priority 0 [ 537.029156][T13971] syzkaller0: entered promiscuous mode [ 537.044298][T13971] syzkaller0: entered allmulticast mode [ 537.098711][T13974] netlink: 'syz.7.2497': attribute type 1 has an invalid length. [ 537.197287][T13974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.223348][T13971] tipc: Resetting bearer [ 537.338652][T13978] bond1: (slave geneve3): making interface the new active one [ 537.367621][T13978] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 537.448399][T13970] tipc: Resetting bearer [ 537.592960][T13970] tipc: Disabling bearer [ 538.143639][T10073] usb 6-1: USB disconnect, device number 41 [ 538.342317][T13989] syzkaller0: entered promiscuous mode [ 538.375412][T13989] syzkaller0: entered allmulticast mode [ 538.567632][T13992] sctp: [Deprecated]: syz.1.2504 (pid 13992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.567632][T13992] Use struct sctp_sack_info instead [ 538.794049][T13995] binder: 13994:13995 ioctl 4018620d 0 returned -22 [ 538.825571][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 539.326400][T14008] netlink: 'syz.7.2508': attribute type 1 has an invalid length. [ 539.433303][T14008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.473798][T14010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.526569][T14010] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 539.568597][T14010] bond2: (slave gre1): Error -95 calling set_mac_address [ 539.634062][T14011] gretap1: entered promiscuous mode [ 539.659249][T14011] bond2: (slave gretap1): making interface the new active one [ 539.694635][T14011] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 539.703873][T10073] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 539.764165][T14008] macvlan2: entered promiscuous mode [ 539.793952][T14008] macvlan2: entered allmulticast mode [ 539.825003][T14008] bond2: entered promiscuous mode [ 539.848687][T14008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 539.869795][T10073] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 539.891346][T14008] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 539.917353][T10073] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 539.953637][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.977282][T14008] bond2: left promiscuous mode [ 540.006931][T10073] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 540.039151][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.062270][T10073] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 540.082339][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.119443][T10073] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 540.166199][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.192837][T10073] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 540.202581][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.221718][T10073] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 540.232764][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.247961][T10073] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 540.273154][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.303299][T10073] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 540.344689][T10073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.387252][T10073] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.410109][T10073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.478822][T10073] usb 4-1: Product: syz [ 540.504869][T10073] usb 4-1: Manufacturer: syz [ 540.533660][T10073] usb 4-1: SerialNumber: syz [ 540.654272][T10073] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.681262][T10074] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.962647][T14019] syzkaller0: entered promiscuous mode [ 540.973030][T14019] syzkaller0: entered allmulticast mode [ 541.074594][T10073] hid_parser_main: 221 callbacks suppressed [ 541.074613][T10073] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 541.152299][T10073] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.752429][T14042] vivid-004: ================= START STATUS ================= [ 541.763387][T10074] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 541.770855][T14042] vivid-004: Radio HW Seek Mode: Bounded [ 541.778363][T10074] ath9k_htc: Failed to initialize the device [ 541.787579][T14042] vivid-004: Radio Programmable HW Seek: false [ 541.797831][T14042] vivid-004: RDS Rx I/O Mode: Block I/O [ 541.821872][T14042] vivid-004: Generate RBDS Instead of RDS: false [ 541.829907][T14042] vivid-004: RDS Reception: true [ 541.836632][T14042] vivid-004: RDS Program Type: 0 inactive [ 541.861150][T14042] vivid-004: RDS PS Name: inactive [ 541.866571][T14042] vivid-004: RDS Radio Text: inactive [ 541.874437][T14042] vivid-004: RDS Traffic Announcement: false inactive [ 541.883017][T14042] vivid-004: RDS Traffic Program: false inactive [ 541.893345][T14042] vivid-004: RDS Music: false inactive [ 541.915876][T14042] vivid-004: ================== END STATUS ================== [ 542.127460][T10074] usb 4-1: ath9k_htc: USB layer deinitialized [ 545.518800][T11710] net_ratelimit: 43 callbacks suppressed [ 545.518821][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 545.546559][T10086] usb 4-1: USB disconnect, device number 40 [ 545.552029][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.619854][T14057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 545.637463][T14062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.646014][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 545.655832][T14062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.682342][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.748200][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 545.798182][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.845396][T14067] syzkaller0: entered promiscuous mode [ 545.851058][T14067] syzkaller0: entered allmulticast mode [ 545.869248][ T5691] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 545.908112][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.918267][ T5706] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 545.925976][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 546.028166][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 546.038388][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 546.053164][ T5691] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 546.062734][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.071603][ T5691] usb 3-1: Product: syz [ 546.075950][ T5691] usb 3-1: Manufacturer: syz [ 546.081737][ T5691] usb 3-1: SerialNumber: syz [ 546.089746][ T5691] usb 3-1: config 0 descriptor?? [ 546.101322][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 546.110897][ T5706] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 546.124784][ T5706] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 546.134583][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.143243][ T5706] usb 8-1: Product: syz [ 546.147593][ T5706] usb 8-1: Manufacturer: syz [ 546.152850][ T5706] usb 8-1: SerialNumber: syz [ 546.164455][ T5706] r8152-cfgselector 8-1: Unknown version 0x0000 [ 546.174424][ T5706] r8152-cfgselector 8-1: config 0 descriptor?? [ 546.317839][ T5691] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.322062][T14077] tipc: Resetting bearer [ 546.378141][T14076] tipc: Resetting bearer [ 546.521509][T11700] tipc: Resetting bearer [ 546.533299][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.543672][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.590874][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.607779][T14083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.618481][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.632066][ T5720] r8152-cfgselector 8-1: USB disconnect, device number 19 [ 547.254854][T14103] syz.7.2540 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 547.296379][T14104] usb usb8: usbfs: process 14104 (syz.1.2539) did not claim interface 4 before use [ 547.680334][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.710854][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.767480][ T5691] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 547.795325][ T5691] usb 3-1: USB disconnect, device number 50 [ 548.058214][ T5720] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 548.242765][ T5720] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 548.256726][ T5720] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.269708][ T5720] usb 8-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 548.278807][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.290416][ T5720] usb 8-1: config 0 descriptor?? [ 548.482290][T14122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.738876][ T5720] hid (null): bogus close delimiter [ 548.746753][T14127] netlink: 'syz.5.2548': attribute type 1 has an invalid length. [ 548.780696][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.791721][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 548.791735][ T29] audit: type=1326 audit(1783903589.718:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14121 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9e79de59 code=0x0 [ 548.829925][T14127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.842269][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.858458][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.875495][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.900404][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.935000][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.947249][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.965213][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.974900][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.983411][ T5720] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 548.995763][ T5720] megaworld 0003:07B5:0312.0019: bogus close delimiter [ 549.005070][ T5720] megaworld 0003:07B5:0312.0019: item 0 2 2 10 parsing failed [ 549.015356][ T5720] megaworld 0003:07B5:0312.0019: parse failed [ 549.023032][ T5720] megaworld 0003:07B5:0312.0019: probe with driver megaworld failed with error -22 [ 549.049946][ T5720] usb 8-1: USB disconnect, device number 20 [ 549.113068][T14129] bond5: (slave gretap1): making interface the new active one [ 549.124235][T14129] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 549.135414][T14133] kvm: kvm [14132]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 549.147428][ T4941] Bluetooth: hci2: unexpected event for opcode 0x041b [ 549.444263][T14138] syzkaller0: entered promiscuous mode [ 549.450508][T14138] syzkaller0: entered allmulticast mode [ 549.488123][T10083] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 549.688565][T10083] usb 6-1: Using ep0 maxpacket: 32 [ 549.715688][T10083] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 549.756731][T10083] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.779862][T14142] syzkaller0: entered promiscuous mode [ 549.793863][T14142] syzkaller0: entered allmulticast mode [ 549.796815][T10083] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.838461][T10083] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.857967][T10083] usb 6-1: config 1 has no interface number 0 [ 549.873562][T10083] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.896826][T10083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.957090][T10083] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 550.293145][T14147] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 550.350510][T14147] kvm: pic: non byte read [ 550.379133][T14147] kvm: pic: level sensitive irq not supported [ 550.383277][T14147] kvm: pic: non byte read [ 550.440877][T14147] kvm: pic: level sensitive irq not supported [ 550.442265][T14147] kvm: pic: non byte read [ 550.505693][T14147] kvm: pic: level sensitive irq not supported [ 550.506063][T14147] kvm: pic: non byte read [ 550.546502][T14147] kvm: pic: level sensitive irq not supported [ 550.547473][T14147] kvm: pic: non byte read [ 550.629472][T11700] net_ratelimit: 74 callbacks suppressed [ 550.629490][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.700357][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 550.788138][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.848841][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 550.928881][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.988824][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 551.088310][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 551.118443][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 551.221637][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 551.278835][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 551.298410][ T5691] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 551.321836][T14170] veth1_to_bond: entered promiscuous mode [ 551.335743][T14170] veth1_to_bond: entered allmulticast mode [ 551.352148][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2562'. [ 551.404083][T14170] veth1_to_bond (unregistering): left promiscuous mode [ 551.434648][T14170] veth1_to_bond (unregistering): left allmulticast mode [ 551.449576][T14173] binder: BINDER_SET_CONTEXT_MGR already set [ 551.485644][T14173] binder: 14171:14173 ioctl 4018620d 200000000300 returned -16 [ 551.519422][T14170] bond0: (slave bond_slave_1): Releasing backup interface [ 551.544414][ T5691] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.563134][T14170] bond_slave_1 (unregistering): left allmulticast mode [ 551.570098][ T5691] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 551.570141][ T5691] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.570186][ T5691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.617779][ T5691] usb 8-1: config 0 descriptor?? [ 551.703147][ T5691] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 551.764393][T14172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2562'. [ 552.173164][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2567'. [ 552.191430][T10083] snd_usb_pod 6-1:1.1: set_interface failed [ 552.200268][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2567'. [ 552.212072][T10083] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 552.224338][T10083] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 552.261336][T10083] usb 6-1: USB disconnect, device number 42 [ 552.988446][ T5706] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 553.199290][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 553.219537][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.259628][ T5706] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.289637][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.337367][ T5706] usb 3-1: config 0 descriptor?? [ 553.536162][ T5691] usb 8-1: USB disconnect, device number 21 [ 553.589780][ T5706] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 553.797809][T10073] usb 3-1: USB disconnect, device number 51 [ 553.803945][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 554.122610][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.141916][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.155183][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.165818][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.175832][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.350795][ T29] audit: type=1326 audit(1783903595.278:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.411336][ T29] audit: type=1326 audit(1783903595.308:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.480562][ T29] audit: type=1326 audit(1783903595.308:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.567694][ T29] audit: type=1326 audit(1783903595.308:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.685903][ T29] audit: type=1326 audit(1783903595.308:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.772335][ T29] audit: type=1326 audit(1783903595.308:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc159de59 code=0x7ffc0000 [ 554.826154][ T29] audit: type=1326 audit(1783903595.368:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbc155e68e code=0x7ffc0000 [ 554.861973][ T29] audit: type=1326 audit(1783903595.368:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbc155e68e code=0x7ffc0000 [ 554.921047][ T29] audit: type=1326 audit(1783903595.368:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbc155e68e code=0x7ffc0000 [ 554.945978][ T29] audit: type=1326 audit(1783903595.368:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.2580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbc155e68e code=0x7ffc0000 [ 555.074548][T14214] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.083576][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.093255][T14214] bridge_slave_0: entered allmulticast mode [ 555.102764][T14214] bridge_slave_0: entered promiscuous mode [ 555.119218][T14214] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.128739][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.143753][T14214] bridge_slave_1: entered allmulticast mode [ 555.171259][T14214] bridge_slave_1: entered promiscuous mode [ 555.279789][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.296354][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.353701][T14214] team0: Port device team_slave_0 added [ 555.364449][T14214] team0: Port device team_slave_1 added [ 555.416355][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.423999][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.456234][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.483877][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.492133][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.524500][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.704872][T14214] hsr_slave_0: entered promiscuous mode [ 555.722356][T14214] hsr_slave_1: entered promiscuous mode [ 555.732374][T14214] debugfs: 'hsr0' already exists in 'hsr' [ 555.738654][T14214] Cannot create hsr debugfs directory [ 555.908279][T11702] net_ratelimit: 49 callbacks suppressed [ 555.908297][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 556.038265][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.078132][ T5691] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 556.228185][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.250316][ T4941] Bluetooth: hci2: command tx timeout [ 556.267153][T14214] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.268478][ T5691] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 556.296295][ T5691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.309777][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.319740][T14214] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.329785][ T5691] usb 8-1: config 0 descriptor?? [ 556.347513][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.356393][T14214] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.378427][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.388504][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.405930][T14214] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.417756][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.546371][ T5691] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 556.549568][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 556.598297][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.648502][T14214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.679489][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 556.740765][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.772125][T14214] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.812464][T11707] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.819680][T11707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.870444][T11707] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.877642][T11707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.920971][ T5691] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 556.930820][ T5691] [drm] Initialized udl on minor 2 [ 556.980053][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 557.018890][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.128332][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 557.143847][T14214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.175250][ T5691] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 557.270494][T14214] veth0_vlan: entered promiscuous mode [ 557.276962][ T5691] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 557.316442][ T5691] usb 8-1: USB disconnect, device number 22 [ 557.325062][T14214] veth1_vlan: entered promiscuous mode [ 557.349379][T10083] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 557.404870][T14214] veth0_macvtap: entered promiscuous mode [ 557.442119][T14214] veth1_macvtap: entered promiscuous mode [ 557.482814][T14266] vlan4: entered promiscuous mode [ 557.525480][T14214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.545846][T14214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.570176][T11707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.587354][T11707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.621604][T11707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.635910][T11707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.785965][T11707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.803450][T11707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.861616][T11700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.872621][T11700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.045861][T14274] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 558.094470][T14274] kvm: pic: non byte read [ 558.105383][T14279] tipc: Resetting bearer [ 558.111978][T14274] kvm: pic: level sensitive irq not supported [ 558.112060][T14274] kvm: pic: non byte read [ 558.125966][T14274] kvm: pic: level sensitive irq not supported [ 558.126043][T14274] kvm: pic: non byte read [ 558.142772][T14274] kvm: pic: level sensitive irq not supported [ 558.142854][T14274] kvm: pic: non byte read [ 558.165616][T14274] kvm: pic: level sensitive irq not supported [ 558.165690][T14274] kvm: pic: non byte read [ 558.189587][T14278] tipc: Resetting bearer [ 558.194832][T14274] kvm: pic: level sensitive irq not supported [ 558.195439][T14274] kvm: pic: non byte read [ 558.217423][T14274] kvm: pic: level sensitive irq not supported [ 558.217503][T14274] kvm: pic: non byte read [ 558.323810][ T4941] Bluetooth: hci2: command tx timeout [ 558.428157][ T5691] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 558.438052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 558.525839][T14290] syzkaller0: entered promiscuous mode [ 558.547111][T14290] syzkaller0: entered allmulticast mode [ 558.652488][ T5691] usb 9-1: config 0 has no interfaces? [ 558.663592][ T5691] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.688059][ T5691] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.714568][ T5691] usb 9-1: config 0 descriptor?? [ 558.744155][T11710] tipc: Resetting bearer [ 558.984610][T10086] usb 9-1: USB disconnect, device number 2 [ 559.100974][ T5720] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 559.322195][ T5720] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 559.345533][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.371235][ T5720] usb 6-1: Product: syz [ 559.388447][ T5720] usb 6-1: Manufacturer: syz [ 559.410682][ T5720] usb 6-1: SerialNumber: syz [ 559.456392][ T5720] usb 6-1: config 0 descriptor?? [ 559.526047][ T5720] ch341 6-1:0.0: ch341-uart converter detected [ 560.398220][ T4941] Bluetooth: hci2: command tx timeout [ 560.615369][T14321] syzkaller0: entered promiscuous mode [ 560.636675][T14321] syzkaller0: entered allmulticast mode [ 560.918180][T11707] net_ratelimit: 59 callbacks suppressed [ 560.918195][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.019512][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 561.268431][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 561.305483][ T5720] ch341-uart ttyUSB0: failed to read break control: -71 [ 561.320225][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.337452][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 561.418828][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 561.430820][ T5720] usb 6-1: USB disconnect, device number 43 [ 561.461231][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.480469][ T5720] ch341 6-1:0.0: device disconnected [ 561.550835][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 561.609304][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.698736][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 561.752941][T14336] loop9: detected capacity change from 0 to 2640 [ 561.759291][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.807212][T14336] buffer_io_error: 31 callbacks suppressed [ 561.807232][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.837932][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.856607][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.866616][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.875619][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.887019][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.897049][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.906189][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.939122][T14336] ldm_validate_partition_table(): Disk read failed. [ 561.980190][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.015193][T14336] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.035070][T14336] Dev loop9: unable to read RDB block 0 [ 562.065403][T14336] loop9: unable to read partition table [ 562.108355][T14336] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 562.410005][T14351] tipc: Enabling of bearer rejected, already enabled [ 562.439375][T14351] tipc: Resetting bearer [ 562.491461][ T4941] Bluetooth: hci2: command tx timeout [ 562.787055][T14357] syzkaller0: entered promiscuous mode [ 562.807329][T14357] syzkaller0: entered allmulticast mode [ 562.879933][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 562.880306][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.880374][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.498124][T10074] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 563.698419][T10074] usb 6-1: Using ep0 maxpacket: 16 [ 563.764528][T10074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.837419][T10074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.892120][T10074] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.961303][T10074] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 564.020136][T10074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.076149][T10074] usb 6-1: config 0 descriptor?? [ 564.188333][T10086] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 564.390433][T10086] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 564.432411][T10086] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 564.484004][T10086] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 564.520112][T10086] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.566864][T10086] usb 9-1: config 0 descriptor?? [ 564.922690][T10086] usbhid 9-1:0.0: can't add hid device: -71 [ 564.960541][T10086] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 565.022941][T10086] usb 9-1: USB disconnect, device number 3 [ 565.098202][ T5706] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 565.122311][T10074] usbhid 6-1:0.0: can't add hid device: -71 [ 565.148345][T10074] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 565.167385][T14380] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2625' sets config #0 [ 565.188333][T10074] usb 6-1: USB disconnect, device number 44 [ 565.269412][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 565.291343][ T5706] usb 3-1: config 182 has an invalid interface number: 81 but max is 0 [ 565.319729][ T5706] usb 3-1: config 182 has no interface number 0 [ 565.343952][ T5706] usb 3-1: config 182 interface 81 has no altsetting 0 [ 565.365435][ T5706] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 565.412209][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.446844][ T5706] usb 3-1: Product: syz [ 565.463345][ T5706] usb 3-1: Manufacturer: syz [ 565.489022][ T5706] usb 3-1: SerialNumber: syz [ 565.582444][T14383] loop7: detected capacity change from 0 to 16384 [ 565.927980][ C0] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.938294][ C0] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 565.947660][ C0] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 565.987297][ C0] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 566.009005][ C1] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.019823][ C0] I/O error, dev loop7, sector 3336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.031246][T11700] net_ratelimit: 71 callbacks suppressed [ 566.031284][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 566.048982][ C0] I/O error, dev loop7, sector 3344 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.058548][ C0] I/O error, dev loop7, sector 3352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.067975][ C0] I/O error, dev loop7, sector 3360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.077474][ C0] I/O error, dev loop7, sector 3368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.091542][T14383] loop7: detected capacity change from 16384 to 0 [ 566.098476][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.210779][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 566.248894][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.318530][ T5706] usb 3-1: USB disconnect, device number 52 [ 566.348961][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 566.398292][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.428896][T14389] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 566.466593][T10083] IPVS: starting estimator thread 0... [ 566.488943][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 566.520633][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.552867][T14394] syzkaller0: left promiscuous mode [ 566.561928][T14394] syzkaller0: left allmulticast mode [ 566.569207][T14394] tipc: Resetting bearer [ 566.583151][T14391] IPVS: using max 43 ests per chain, 103200 per kthread [ 566.605636][T14394] tipc: Resetting bearer [ 566.628794][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 566.791439][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 566.813204][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 566.813217][ T29] audit: type=1326 audit(1783903607.738:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63579de59 code=0x7ffc0000 [ 566.930879][T14406] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 566.957192][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 566.978440][T10075] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 566.989067][ T29] audit: type=1326 audit(1783903607.738:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63579de59 code=0x7ffc0000 [ 567.059662][T14401] bond5: entered promiscuous mode [ 567.069739][T14401] bridge2: entered promiscuous mode [ 567.086332][T14401] bond5: entered allmulticast mode [ 567.099368][T14401] bridge2: entered allmulticast mode [ 567.111568][T14401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.172462][T10075] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.190435][ T29] audit: type=1326 audit(1783903607.738:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb63579de59 code=0x7ffc0000 [ 567.224288][T10075] usb 8-1: config 0 has no interface number 0 [ 567.245773][T10075] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.289912][T10075] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.311482][ T29] audit: type=1326 audit(1783903607.758:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63579de59 code=0x7ffc0000 [ 567.348732][T10075] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 567.368802][T10075] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.389225][ T29] audit: type=1326 audit(1783903607.758:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63579de59 code=0x7ffc0000 [ 567.448989][T10075] usb 8-1: config 0 descriptor?? [ 567.586868][ T29] audit: type=1326 audit(1783903607.798:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63575e68e code=0x7ffc0000 [ 567.716131][ T29] audit: type=1326 audit(1783903607.878:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63575e68e code=0x7ffc0000 [ 567.821245][ T29] audit: type=1326 audit(1783903607.878:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63575e68e code=0x7ffc0000 [ 567.913170][T14397] usb usb7: usbfs: process 14397 (syz.7.2631) did not claim interface 0 before use [ 567.945069][ T29] audit: type=1326 audit(1783903607.898:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63575e68e code=0x7ffc0000 [ 568.005077][T10075] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.001A/input/input54 [ 568.035068][ T29] audit: type=1326 audit(1783903607.908:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz.5.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63575e68e code=0x7ffc0000 [ 568.275959][T14421] program syz.8.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.311243][T10075] holtek_kbd 0003:04D9:A055.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 568.528157][T10073] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 568.708252][T10073] usb 3-1: Using ep0 maxpacket: 16 [ 568.721137][T10073] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 568.735623][T10073] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.769559][T10073] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 568.803893][T10073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.825501][T10073] usb 3-1: SerialNumber: syz [ 568.860326][T10073] usb 3-1: 0:2 : does not exist [ 569.140695][T10075] usb 8-1: USB disconnect, device number 23 [ 570.011006][T10073] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 570.043564][T10073] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 570.061317][T10073] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 570.078998][T10073] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 570.124639][T10073] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 570.173030][T10073] usb 3-1: USB disconnect, device number 53 [ 570.207715][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2648'. [ 570.342192][T14462] ip6erspan0: entered allmulticast mode [ 570.534556][T14469] fuse: Bad value for 'fd' [ 570.645878][T14471] netlink: 'syz.2.2652': attribute type 1 has an invalid length. [ 570.677577][T14471] 8021q: adding VLAN 0 to HW filter on device bond8 [ 570.713511][T14471] veth9: entered allmulticast mode [ 570.733188][T14471] bond8: (slave veth9): Enslaving as an active interface with a down link [ 570.760714][T14473] bond8: entered promiscuous mode [ 570.766675][T14473] bond8: entered allmulticast mode [ 570.824527][T14471] macvlan2: entered promiscuous mode [ 570.830463][T14471] macvlan2: entered allmulticast mode [ 570.837095][T14471] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.966250][T14457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 570.975594][T14457] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 570.996224][T14457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.002916][T14457] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 571.016422][T14457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.024751][T14457] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 571.034610][T14457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.042409][T14457] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 571.055205][T14457] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 571.140289][T11700] net_ratelimit: 75 callbacks suppressed [ 571.140306][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.188162][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 571.290049][T11700] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.318634][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 571.439201][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.492612][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 571.579789][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.620918][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 571.730351][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.834507][T11702] bond1: (slave gretap1): failed to get link speed/duplex [ 572.246408][T14510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.255579][T14510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.329353][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 572.498961][T14519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2665'. [ 573.038216][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 573.038286][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 573.038392][ T4941] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.325794][T14526] syzkaller0: entered promiscuous mode [ 573.325820][T14526] syzkaller0: entered allmulticast mode [ 573.326170][T14526] tipc: Resetting bearer [ 573.474259][T14528] syzkaller0: entered promiscuous mode [ 573.484331][T14528] syzkaller0: entered allmulticast mode [ 573.818280][T14534] xt_hashlimit: size too large, truncated to 1048576 [ 573.958385][T10074] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 574.143054][T10074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.156650][T14549] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 574.166856][T10074] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 574.215776][T14549] kvm: pic: non byte read [ 574.222369][T10074] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.235440][T14549] kvm: pic: level sensitive irq not supported [ 574.235516][T14549] kvm: pic: non byte read [ 574.258599][T14549] kvm: pic: level sensitive irq not supported [ 574.260190][T10074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.285210][T14549] kvm: pic: non byte read [ 574.294791][T14549] kvm: pic: level sensitive irq not supported [ 574.294914][T14549] kvm: pic: non byte read [ 574.335184][T10074] usb 3-1: config 0 descriptor?? [ 574.375985][T10074] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 574.408810][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 575.128791][T14211] Bluetooth: hci0: command 0x0406 tx timeout [ 575.135174][ T4941] Bluetooth: hci2: command 0x0c1a tx timeout [ 575.138563][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 575.152471][T14561] loop2: detected capacity change from 0 to 7 [ 575.172858][T14561] loop2: [ 575.179021][T14561] loop2: partition table partially beyond EOD, truncated [ 575.688760][ T5706] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 575.863150][ T5706] usb 8-1: unable to get BOS descriptor or descriptor too short [ 575.891089][ T5706] usb 8-1: not running at top speed; connect to a high speed hub [ 575.935231][ T5706] usb 8-1: config 13 has an invalid interface number: 102 but max is 0 [ 575.962099][ T5706] usb 8-1: config 13 has no interface number 0 [ 575.981205][ T5706] usb 8-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 575.994420][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.006536][ T5706] usb 8-1: Product: syz [ 576.014032][ T5706] usb 8-1: Manufacturer: syz [ 576.021159][ T5706] usb 8-1: SerialNumber: syz [ 576.023064][T14567] syz.1.2678: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 576.084548][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.099066][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.1.2678 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.099098][T14567] Tainted: [L]=SOFTLOCKUP [ 576.099106][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.099127][T14567] Call Trace: [ 576.099207][T14567] [ 576.099252][T14567] dump_stack_lvl+0xe8/0x150 [ 576.099409][T14567] warn_alloc+0x24c/0x270 [ 576.099477][T14567] ? __pfx_warn_alloc+0x10/0x10 [ 576.099553][T14567] __vmalloc_node_range_noprof+0x12c/0x1730 [ 576.099583][T14567] ? __mutex_trylock_common+0x15f/0x270 [ 576.099635][T14567] ? __pfx___mutex_trylock_common+0x10/0x10 [ 576.099664][T14567] ? trace_contention_end+0x3d/0x140 [ 576.099688][T14567] ? __mutex_lock+0x30d/0x1550 [ 576.099819][T14567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 576.099844][T14567] ? tomoyo_path_number_perm+0x219/0x5f0 [ 576.099961][T14567] ? dvb_demux_do_ioctl+0x320/0x540 [ 576.100063][T14567] ? __pfx___mutex_lock+0x10/0x10 [ 576.100096][T14567] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 576.100122][T14567] vmalloc_noprof+0xb2/0xe0 [ 576.100147][T14567] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 576.100173][T14567] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 576.100203][T14567] dvb_demux_do_ioctl+0x45d/0x540 [ 576.100231][T14567] dvb_usercopy+0x199/0x2e0 [ 576.100285][T14567] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 576.100308][T14567] ? __pfx_dvb_usercopy+0x10/0x10 [ 576.100350][T14567] ? __fget_files+0x3a2/0x420 [ 576.100389][T14567] ? __fget_files+0x2a/0x420 [ 576.100419][T14567] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 576.100442][T14567] dvb_demux_ioctl+0x29/0x40 [ 576.100473][T14567] __se_sys_ioctl+0xfc/0x170 [ 576.100494][T14567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.100536][T14567] do_syscall_64+0x174/0x580 [ 576.100619][T14567] ? trace_irq_disable+0x3b/0x140 [ 576.100664][T14567] ? clear_bhb_loop+0x40/0x90 [ 576.100689][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.100709][T14567] RIP: 0033:0x7fdbc159de59 [ 576.100762][T14567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.100779][T14567] RSP: 002b:00007fdbbf7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.100808][T14567] RAX: ffffffffffffffda RBX: 00007fdbc1825fa0 RCX: 00007fdbc159de59 [ 576.100823][T14567] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 576.100836][T14567] RBP: 00007fdbc1633e6f R08: 0000000000000000 R09: 0000000000000000 [ 576.100849][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.100860][T14567] R13: 00007fdbc1826038 R14: 00007fdbc1825fa0 R15: 00007fdbc194fa48 [ 576.100891][T14567] [ 576.100942][T14567] Mem-Info: [ 576.228806][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.255463][T14567] active_anon:24078 inactive_anon:0 isolated_anon:0 [ 576.255463][T14567] active_file:0 inactive_file:61984 isolated_file:0 [ 576.255463][T14567] unevictable:768 dirty:377 writeback:0 [ 576.255463][T14567] slab_reclaimable:11283 slab_unreclaimable:107611 [ 576.255463][T14567] mapped:33171 shmem:17596 pagetables:1755 [ 576.255463][T14567] sec_pagetables:0 bounce:0 [ 576.255463][T14567] kernel_misc_reclaimable:0 [ 576.255463][T14567] free:1267914 free_pcp:9851 free_cma:0 [ 576.435486][T11700] net_ratelimit: 68 callbacks suppressed [ 576.435502][T11700] bond1: (slave gretap1): failed to get link speed/duplex [ 576.462923][T14567] Node 0 active_anon:96612kB inactive_anon:0kB active_file:0kB inactive_file:247672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132828kB dirty:1476kB writeback:0kB shmem:69148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16152kB pagetables:6816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 576.499862][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.522190][T10074] usb 3-1: USB disconnect, device number 54 [ 576.566916][T14567] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:32kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 576.607503][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 576.629332][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.706348][T14567] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.728506][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 576.829530][ T5706] cdc_phonet 8-1:13.102: More than one union descriptor, skipping ... [ 576.867101][ T5706] cdc_phonet 8-1:13.102: probe with driver cdc_phonet failed with error -22 [ 576.887092][T14567] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 576.893590][T14567] Node 0 DMA32 free:1126864kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94276kB inactive_anon:0kB active_file:0kB inactive_file:247680kB unevictable:1536kB writepending:1488kB zspages:0kB present:3129332kB managed:2548716kB mlocked:0kB bounce:0kB free_pcp:40744kB local_pcp:19428kB free_cma:0kB [ 576.941399][ T5706] usb 8-1: USB disconnect, device number 24 [ 576.978662][T14567] lowmem_reserve[]: 0 0 0 0 0 [ 576.994493][T14567] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.024363][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.025889][T14567] lowmem_reserve[]: 0 0 0 0 0 [ 577.052494][T14567] Node 1 Normal free:3929116kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB writepending:32kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.098329][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 577.120338][T14567] lowmem_reserve[]: 0 0 0 0 0 [ 577.126320][T14567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.152192][T14567] Node 0 DMA32: 56*4kB (ME) 914*8kB (UME) 500*16kB (UM) 321*32kB (UM) 268*64kB (UME) 174*128kB (UME) 81*256kB (UM) 27*512kB (M) 13*1024kB (UME) 5*2048kB (UM) 245*4096kB (UM) = 1126864kB [ 577.186397][T14567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.198517][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 577.204652][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.226644][T14567] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 8*32kB (UM) 3*64kB (U) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 956*4096kB (M) = 3929116kB [ 577.246508][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 577.303153][T14567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.328777][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.364724][T14567] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 577.418351][T14567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.479882][T14567] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 577.514240][T14567] 76655 total pagecache pages [ 577.535578][T14567] 0 pages in swap cache [ 577.540137][T14567] Free swap = 124996kB [ 577.545708][T14567] Total swap = 124996kB [ 577.552579][T14567] 2097051 pages RAM [ 577.556479][T14567] 0 pages HighMem/MovableOnly [ 577.564806][T14567] 428191 pages reserved [ 577.579758][T14567] 0 pages cma reserved [ 577.898941][T14576] tipc: Enabled bearer , priority 0 [ 577.935724][T14576] syzkaller0: entered promiscuous mode [ 577.953295][T14576] syzkaller0: entered allmulticast mode [ 578.119185][T14583] tipc: Resetting bearer [ 578.154824][T14585] syzkaller0: entered promiscuous mode [ 578.167208][T14585] syzkaller0: entered allmulticast mode [ 578.182977][T14575] tipc: Resetting bearer [ 578.248669][T14575] tipc: Disabling bearer [ 579.360376][T10086] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 579.538816][T10086] usb 3-1: Using ep0 maxpacket: 32 [ 579.550860][T10086] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 579.574241][T10086] usb 3-1: config 0 has no interface number 0 [ 579.585339][T10086] usb 3-1: config 0 interface 12 has no altsetting 0 [ 579.607346][T10086] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 579.635644][T10086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.648089][T10086] usb 3-1: Product: syz [ 579.652498][T10086] usb 3-1: Manufacturer: syz [ 579.657375][T10086] usb 3-1: SerialNumber: syz [ 579.693340][T10086] usb 3-1: config 0 descriptor?? [ 579.924847][T14618] misc userio: No port type given on /dev/userio [ 580.013831][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2700'. [ 580.898193][T10074] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 580.971130][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.995458][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.076146][T10074] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 581.114864][T10074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.148831][T10074] usb 8-1: Product: syz [ 581.164955][T10074] usb 8-1: Manufacturer: syz [ 581.184453][T10074] usb 8-1: SerialNumber: syz [ 581.260658][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.272879][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.479464][T10086] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 581.490625][T10086] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 581.499042][T10086] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 581.506833][T10086] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 581.530810][T10086] usb 3-1: USB disconnect, device number 55 [ 581.538645][T11713] net_ratelimit: 66 callbacks suppressed [ 581.538660][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 581.569496][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.618713][ T5691] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 581.630511][T10074] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 581.642662][T10074] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 581.658175][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 581.688257][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.768218][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 581.780754][ T5691] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 581.792810][ T5691] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 581.798497][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.812303][ T5691] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 581.828994][ T5691] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 581.840112][ T5691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.852264][ T5691] usb 9-1: Product: syz [ 581.858759][ T5691] usb 9-1: Manufacturer: syz [ 581.863616][ T5691] usb 9-1: SerialNumber: syz [ 581.876102][ T5691] usb 9-1: config 0 descriptor?? [ 581.878527][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 581.938601][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.008747][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 582.095404][ T5691] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 582.313640][ T5691] usb 9-1: USB disconnect, device number 4 [ 582.481261][T14665] vxlan0: entered promiscuous mode [ 582.504746][T14665] team0: Port device vxlan0 added [ 582.513817][T11713] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.533208][T11713] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.560626][T11713] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.600731][T11713] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.747009][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 582.762932][T10074] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 582.793116][T10074] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 582.835250][T10074] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 582.891579][T10074] usb 8-1: USB disconnect, device number 25 [ 583.400319][T14680] team0: Device ipvlan2 failed to register rx_handler [ 583.499886][ T5720] IPVS: starting estimator thread 0... [ 583.598949][T14685] IPVS: using max 29 ests per chain, 69600 per kthread [ 583.698932][T10074] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 583.873113][T10074] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.909382][T10074] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 583.937760][T10074] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.964366][T10074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.007419][T10074] usb 8-1: config 0 descriptor?? [ 584.055358][T10074] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 584.691653][T10074] usb 8-1: USB disconnect, device number 26 [ 585.078599][ T5706] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 585.185323][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2725'. [ 585.248800][ T5706] usb 6-1: Using ep0 maxpacket: 32 [ 585.255948][ T5706] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 585.277396][ T5706] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 585.303133][ T5706] usb 6-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 585.319692][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.341260][ T5706] usb 6-1: Product: syz [ 585.350108][ T5706] usb 6-1: Manufacturer: syz [ 585.360455][ T5706] usb 6-1: SerialNumber: syz [ 585.524989][T14714] tipc: Started in network mode [ 585.531683][T14714] tipc: Node identity aee8c6093859, cluster identity 4711 [ 585.540199][T14714] tipc: Enabled bearer , priority 0 [ 585.547778][T14714] syzkaller0: entered promiscuous mode [ 585.555664][T14714] syzkaller0: entered allmulticast mode [ 585.590071][T14714] tipc: Resetting bearer [ 585.597533][T14713] tipc: Resetting bearer [ 585.621031][T14713] tipc: Disabling bearer [ 586.298612][ T5706] apple-mfi-fastcharge 6-1: USB disconnect, device number 45 [ 586.429512][T14722] syzkaller0: entered promiscuous mode [ 586.435350][T14722] syzkaller0: entered allmulticast mode [ 586.578370][T11710] net_ratelimit: 76 callbacks suppressed [ 586.578389][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 586.578427][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.688304][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 586.688364][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.798386][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.798415][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 586.909018][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 586.938181][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.051535][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 587.052182][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.244131][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 587.244150][ T29] audit: type=1800 audit(1783903628.168:1833): pid=14736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2736" name="/" dev="fuse" ino=1 res=0 errno=0 [ 588.204156][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2743'. [ 588.932946][T14756] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.939779][T14756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 588.949241][T14756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.956501][T14756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 589.466647][T14778] tipc: Enabled bearer , priority 0 [ 589.495567][T14778] syzkaller0: entered promiscuous mode [ 589.515970][T14778] syzkaller0: entered allmulticast mode [ 589.611689][T14778] tipc: Resetting bearer [ 589.657852][T14777] tipc: Resetting bearer [ 589.816135][T14777] tipc: Disabling bearer [ 589.901445][T14782] syzkaller0: entered promiscuous mode [ 589.923817][T14782] syzkaller0: entered allmulticast mode [ 589.987126][T14781] tipc: Enabled bearer , priority 0 [ 590.046022][T14780] tipc: Resetting bearer [ 590.227494][T14780] tipc: Disabling bearer [ 590.239013][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 590.819847][ T5706] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 590.947152][T14791] fuse: Invalid rootmode [ 590.959248][T14562] Bluetooth: hci3: command 0x0406 tx timeout [ 590.965288][ T4941] Bluetooth: hci0: command 0x0406 tx timeout [ 590.971962][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 591.022543][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 591.082413][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 591.155640][ T5706] usb 3-1: config 6 has an invalid interface number: 105 but max is 0 [ 591.196255][ T5706] usb 3-1: config 6 has no interface number 0 [ 591.227013][ T29] audit: type=1800 audit(1783903632.148:1834): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2754" name="/" dev="fuse" ino=1 res=0 errno=0 [ 591.238169][ T5706] usb 3-1: config 6 interface 105 has no altsetting 0 [ 591.305153][ T5706] usb 3-1: New USB device found, idVendor=1410, idProduct=7006, bcdDevice=f0.c8 [ 591.361750][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.391433][ T5706] usb 3-1: Product: syz [ 591.404500][ T5706] usb 3-1: Manufacturer: syz [ 591.415496][ T5706] usb 3-1: SerialNumber: syz [ 591.629002][T10672] net_ratelimit: 68 callbacks suppressed [ 591.629021][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.724125][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 591.735843][ T5691] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 591.798169][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.846167][T14786] lo: left promiscuous mode [ 591.881147][T14786] tunl0: left promiscuous mode [ 591.916855][T14786] gre0: left promiscuous mode [ 591.939266][ T5691] usb 8-1: Using ep0 maxpacket: 16 [ 591.957043][T14786] erspan0: left promiscuous mode [ 591.970225][ T5691] usb 8-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 591.982748][T14786] ip_vti0: left promiscuous mode [ 591.989298][ T5691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.003410][T14786] ip6_vti0: left promiscuous mode [ 592.015084][T14786] sit0: left promiscuous mode [ 592.023760][ T5691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 592.036252][T14786] ip6tnl0: left promiscuous mode [ 592.042670][T14786] ip6gre0: left promiscuous mode [ 592.051576][ T5691] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 592.063482][T14786] syz_tun: left promiscuous mode [ 592.077753][T14786] ip6gretap0: left promiscuous mode [ 592.087328][ T5691] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.109357][T14786] bridge0: left promiscuous mode [ 592.126614][ T5691] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.139854][T14786] team0: left promiscuous mode [ 592.151151][T14786] vxlan0: left promiscuous mode [ 592.158822][ T5691] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.171347][ T5691] usb 8-1: Manufacturer: syz [ 592.176058][T14786] dummy0: left promiscuous mode [ 592.195278][T14786] nlmon0: left promiscuous mode [ 592.201989][ T5691] usb 8-1: config 0 descriptor?? [ 592.232489][T14786] batadv0: left promiscuous mode [ 592.241093][T14786] veth0: left promiscuous mode [ 592.249587][T14786] veth1: left promiscuous mode [ 592.258366][T14786] wg0: left promiscuous mode [ 592.265145][T14786] wg1: left promiscuous mode [ 592.274084][T14786] wg2: left promiscuous mode [ 592.282622][T14786] veth0_to_bridge: left promiscuous mode [ 592.304802][T14786] veth1_to_bridge: left promiscuous mode [ 592.326119][T14786] veth1_to_bond: left promiscuous mode [ 592.339705][T14786] veth0_to_team: left promiscuous mode [ 592.347039][T14786] team_slave_0: left promiscuous mode [ 592.358587][T14786] veth1_to_team: left promiscuous mode [ 592.365147][T14786] team_slave_1: left promiscuous mode [ 592.407542][T14786] veth0_to_batadv: left promiscuous mode [ 592.434076][T14786] batadv_slave_0: left promiscuous mode [ 592.444062][T14786] xfrm0: left promiscuous mode [ 592.462943][T14786] veth1_to_hsr: left promiscuous mode [ 592.483050][T14786] hsr0: left promiscuous mode [ 592.505023][T14786] veth1_virt_wifi: left promiscuous mode [ 592.524713][T14786] veth0_virt_wifi: left promiscuous mode [ 592.546410][T14786] virt_wifi0: left promiscuous mode [ 592.575068][T14786] vlan0: left promiscuous mode [ 592.581101][T14786] vlan1: left promiscuous mode [ 592.587022][T14786] macvlan0: left promiscuous mode [ 592.589550][ T5691] rc_core: IR keymap rc-hauppauge not found [ 592.603542][T14786] macvlan1: left promiscuous mode [ 592.627851][T14786] ipvlan0: left promiscuous mode [ 592.635458][ T5691] Registered IR keymap rc-empty [ 592.651791][T14786] ipvlan1: left promiscuous mode [ 592.657797][T14786] veth1_macvtap: left promiscuous mode [ 592.671953][T14786] macvtap0: left promiscuous mode [ 592.686836][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 592.702197][T14786] geneve0: left promiscuous mode [ 592.716026][T14786] geneve1: left promiscuous mode [ 592.725280][T14786] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 592.746967][T14786] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 592.760177][T14786] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 592.773022][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 592.782104][T14786] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 592.797024][T14786] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 592.810200][T14786] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 592.824395][T14786] bond1: left promiscuous mode [ 592.831818][T14786] gre1: left promiscuous mode [ 592.837532][T14786] : left promiscuous mode [ 592.855786][T14786] bond2: left promiscuous mode [ 592.872290][T14786] veth2: left promiscuous mode [ 592.882213][ T5691] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 592.900664][T14786] veth3: left promiscuous mode [ 592.921423][T14786] bond3: left promiscuous mode [ 592.942917][T14786] geneve2: left promiscuous mode [ 592.960551][T14786] bond4: left promiscuous mode [ 592.975810][T14786] veth4: left promiscuous mode [ 592.987306][T14786] veth5: left promiscuous mode [ 593.015067][T14786] geneve3: left promiscuous mode [ 593.060822][ T5720] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 593.112794][T14786] bond8: left promiscuous mode [ 593.118635][T14786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.232120][T11710] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 593.286705][T11710] bond8: (slave veth9): making interface the new active one [ 593.294897][ T5720] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 593.354998][T11710] bond8: active interface up! [ 593.398247][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.429410][ T5691] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input55 [ 593.519720][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 593.535177][ T5706] option 3-1:6.105: GSM modem (1-port) converter detected [ 593.551862][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.644989][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.652720][ T5706] usb 3-1: USB disconnect, device number 56 [ 593.660450][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 593.683151][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.699667][ T5706] option 3-1:6.105: device disconnected [ 593.721108][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.748660][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.775815][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.808792][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.849694][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 593.859699][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.899117][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.906626][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.938800][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.959256][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 593.980346][ T5691] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 594.010513][ T5691] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 594.024233][ T5691] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 594.076916][ T5691] usb 8-1: USB disconnect, device number 27 [ 594.728687][ T5691] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 594.962036][ T5691] usb 6-1: config 0 has no interfaces? [ 594.992856][T10074] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 595.020197][ T5691] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.082098][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.148900][ T5691] usb 6-1: config 0 descriptor?? [ 595.192806][T10074] usb 8-1: config index 0 descriptor too short (expected 65183, got 72) [ 595.235178][T10074] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 595.273233][T10074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.320065][T10074] usb 8-1: Product: syz [ 595.340966][T10074] usb 8-1: Manufacturer: syz [ 595.364735][T10074] usb 8-1: SerialNumber: syz [ 595.408652][T10074] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 595.441473][ T5720] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 595.673743][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.714557][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.785413][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.804254][T10074] usb 6-1: USB disconnect, device number 46 [ 595.847146][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.907149][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.957076][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.048893][T10073] usb 8-1: USB disconnect, device number 28 [ 596.562463][ T5720] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 596.594818][ T5720] ath9k_htc: Failed to initialize the device [ 596.664917][T10073] usb 8-1: ath9k_htc: USB layer deinitialized [ 596.719374][T11713] net_ratelimit: 48 callbacks suppressed [ 596.719392][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 596.818106][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.909708][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 596.958718][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.049148][T10073] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 597.057890][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 597.098606][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.179535][T11713] bond1: (slave gretap1): failed to get link speed/duplex [ 597.219182][T10073] usb 8-1: Using ep0 maxpacket: 32 [ 597.245571][T10073] usb 8-1: config index 0 descriptor too short (expected 241, got 72) [ 597.254483][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.293433][T10073] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 597.318699][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 597.336319][T10073] usb 8-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 597.356106][T10073] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.382496][T10073] usb 8-1: config 0 descriptor?? [ 597.404207][T11713] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.418718][T10073] mos7840 8-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 598.038088][T10085] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 598.104622][T14860] tipc: Enabling of bearer rejected, already enabled [ 598.115708][T14860] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1792) ! [ 598.129465][T14860] tipc: Resetting bearer [ 598.233110][T10085] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.247063][T10085] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 598.274312][T10085] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.299902][T10085] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 598.312178][T10085] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 598.330944][T10085] usb 9-1: Product: syz [ 598.335386][T10085] usb 9-1: Manufacturer: syz [ 598.343256][T10085] usb 9-1: SerialNumber: syz [ 598.375223][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880564fa800: rx timeout, send abort [ 598.596838][T10085] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 598.883768][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880564fa800: abort rx timeout. Force session deactivation [ 598.922510][T10075] usb 9-1: USB disconnect, device number 5 [ 599.214298][T14869] vivid-003: ================= START STATUS ================= [ 599.222851][T14869] vivid-003: RDS Tx I/O Mode: Controls [ 599.234359][T10073] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 599.251468][T14869] vivid-003: RDS Program ID: 32904 [ 599.267104][T14870] tipc: Resetting bearer [ 599.276225][T10073] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 599.285450][T14869] vivid-003: RDS Program Type: 3 [ 599.293162][T14869] vivid-003: RDS PS Name: VIVID-TX [ 599.304808][T14869] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 599.322066][T10073] usb 8-1: USB disconnect, device number 29 [ 599.334632][T14869] vivid-003: RDS Stereo: true [ 599.349421][T14869] vivid-003: RDS Artificial Head: false [ 599.361088][T10073] mos7840 8-1:0.0: device disconnected [ 599.380943][T14869] vivid-003: RDS Compressed: false [ 599.411443][T14869] vivid-003: RDS Dynamic PTY: false [ 599.431365][T14869] vivid-003: RDS Traffic Announcement: false [ 599.446185][T14869] vivid-003: RDS Traffic Program: true [ 599.462380][T14869] vivid-003: RDS Music: true [ 599.476352][T14869] vivid-003: ================== END STATUS ================== [ 599.515804][T14868] tipc: Resetting bearer [ 599.531014][T14857] usblp0: removed [ 599.685409][T14872] tipc: Resetting bearer [ 599.759319][T14871] tipc: Resetting bearer [ 600.127909][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.168119][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.352193][T11710] tipc: Resetting bearer [ 600.682067][T14885] xt_policy: too many policy elements [ 600.971762][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.006528][T14891] tipc: Enabled bearer , priority 0 [ 601.016535][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.047279][T14891] syzkaller0: entered promiscuous mode [ 601.059599][T14891] syzkaller0: entered allmulticast mode [ 601.083437][T14891] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 601.190306][T14891] tipc: Resetting bearer [ 601.252129][T14889] tipc: Resetting bearer [ 601.352449][ T5691] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 601.416598][T14889] tipc: Disabling bearer [ 601.434097][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2788'. [ 601.468214][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'. [ 601.540675][ T5691] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 601.558035][ T5691] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.579340][ T5691] usb 8-1: config 0 has no interfaces? [ 601.589982][ T5691] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 601.612728][ T5691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.676808][ T5691] usb 8-1: config 0 descriptor?? [ 601.900467][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 601.949603][T10672] net_ratelimit: 65 callbacks suppressed [ 601.949623][T10672] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.003928][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 602.090964][T11710] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.135749][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.150344][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 602.161960][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.182250][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.216148][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.228621][T11702] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.309461][T11710] bond1: (slave gretap1): failed to get link speed/duplex [ 602.388125][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.438700][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 602.498669][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.587420][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 603.085882][T14921] tipc: Resetting bearer [ 603.173721][T14921] syzkaller0: left promiscuous mode [ 603.182249][T14921] syzkaller0: left allmulticast mode [ 603.194800][T14919] tipc: Resetting bearer [ 603.302377][T14926] tipc: Resetting bearer [ 603.349783][T14926] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2798'. [ 603.369208][T14925] tipc: Resetting bearer [ 604.073677][ T5691] usb 8-1: USB disconnect, device number 30 [ 604.235726][T11707] tipc: Resetting bearer [ 604.481365][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.514146][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.039851][T14968] syzkaller0: entered promiscuous mode [ 606.045654][T14968] syzkaller0: entered allmulticast mode [ 606.068912][T14968] tipc: Enabled bearer , priority 0 [ 606.086198][T14968] tipc: Resetting bearer [ 606.100134][T14967] tipc: Resetting bearer [ 606.174099][T14967] tipc: Disabling bearer [ 606.608457][ T5691] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 606.678604][T10086] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 606.698185][T10073] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 606.761674][ T5691] usb 8-1: Using ep0 maxpacket: 8 [ 606.771358][ T5691] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 606.796770][ T5691] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 606.808622][ T5691] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.829122][ T5691] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.850274][T10073] usb 9-1: Using ep0 maxpacket: 16 [ 606.864352][T10073] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.866937][ T5691] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.892237][T10073] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.893502][T10086] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 606.903929][T10073] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.922112][ T5691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.931346][T10086] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.943212][T10073] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 606.950366][T10086] usb 6-1: config 0 has no interface number 0 [ 606.961743][T10086] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 606.976010][T10073] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.981192][T10086] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 606.991234][T11707] net_ratelimit: 73 callbacks suppressed [ 606.991284][T11707] bond1: (slave gretap1): failed to get link speed/duplex [ 607.011963][T10086] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.035722][T10073] usb 9-1: config 0 descriptor?? [ 607.045846][T10086] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 607.057125][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.072113][T10086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.084696][T10086] usb 6-1: Product: syz [ 607.089912][T10086] usb 6-1: Manufacturer: syz [ 607.095024][T10086] usb 6-1: SerialNumber: syz [ 607.109698][T10086] usb 6-1: config 0 descriptor?? [ 607.124763][T14976] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 607.148560][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 607.165864][ T5691] usb 8-1: GET_CAPABILITIES returned 0 [ 607.173947][ T5691] usbtmc 8-1:16.0: can't read capabilities [ 607.181135][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.258915][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 607.298169][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.368483][T11709] bond1: (slave gretap1): failed to get link speed/duplex [ 607.408467][T11707] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.422318][T10086] usb 6-1: probing VID:PID(0424:012C) [ 607.467281][T10086] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B [ 607.488241][T10672] bond1: (slave gretap1): failed to get link speed/duplex [ 607.496584][T10073] hid-picolcd 0003:04D8:F002.001B: unknown global tag 0xe [ 607.505593][T10086] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0F [ 607.517242][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 607.533747][T10086] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 607.537933][T10073] hid-picolcd 0003:04D8:F002.001B: item 0 2 1 14 parsing failed [ 607.543350][T10073] hid-picolcd 0003:04D8:F002.001B: device report parse failed [ 607.558661][T11709] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.607102][T10073] hid-picolcd 0003:04D8:F002.001B: probe with driver hid-picolcd failed with error -22 [ 607.633395][T10086] vub300 6-1:0.133: probe with driver vub300 failed with error -22 [ 607.693072][T10086] usb 6-1: USB disconnect, device number 47 [ 608.268386][T10073] usb 8-1: USB disconnect, device number 31 [ 608.322207][T14999] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2824'. [ 608.655881][T15003] tipc: Enabling of bearer rejected, already enabled [ 608.666746][T15003] syzkaller0: entered promiscuous mode [ 608.681483][T15003] syzkaller0: entered allmulticast mode [ 608.687413][T15003] tipc: Resetting bearer [ 609.318677][T10086] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 609.483580][ T5691] usb 9-1: USB disconnect, device number 6 [ 609.496455][T10086] usb 8-1: Using ep0 maxpacket: 16 [ 609.517086][T10086] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 609.572803][T10086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.610691][T10086] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 609.638866][T10086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.661850][T10086] usb 8-1: Product: syz [ 609.677504][T10086] usb 8-1: Manufacturer: syz [ 609.693789][T10086] usb 8-1: SerialNumber: syz [ 609.724984][T10086] usb 8-1: config 0 descriptor?? [ 609.754459][T10086] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 609.780474][T10086] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 609.999290][T15022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.045193][T15022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.372185][T10086] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 610.403386][T10086] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 611.049986][T10086] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 611.079778][T10086] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 611.102732][T10086] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 611.127283][T10086] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 611.674046][T15044] syzkaller0: entered promiscuous mode [ 611.703781][T15044] syzkaller0: entered allmulticast mode [ 611.796052][T10086] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 611.850776][T10086] usb 8-1: USB disconnect, device number 32 [ 611.999311][ T111] net_ratelimit: 74 callbacks suppressed [ 611.999331][ T111] bond1: (slave gretap1): failed to get link speed/duplex [ 612.088082][ T6004] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.139655][ T6004] bond1: (slave gretap1): failed to get link speed/duplex [ 612.208753][ T9927] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.264282][ T9927] bond1: (slave gretap1): failed to get link speed/duplex [ 612.329451][ T9927] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.392419][ T6004] bond1: (slave gretap1): failed to get link speed/duplex [ 612.418768][T15063] [ 612.421234][T15063] ============================================ [ 612.427511][T15063] WARNING: possible recursive locking detected [ 612.433833][T15063] syzkaller #0 Tainted: G L [ 612.439846][T15063] -------------------------------------------- [ 612.446052][T15063] syz.8.2841/15063 is trying to acquire lock: [ 612.452126][T15063] ffffffff8f62a3b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 612.462369][T15063] [ 612.462369][T15063] but task is already holding lock: [ 612.469745][T15063] ffffffff8f62a3b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 612.479866][T15063] [ 612.479866][T15063] other info that might help us debug this: [ 612.487933][T15063] Possible unsafe locking scenario: [ 612.487933][T15063] [ 612.495422][T15063] CPU0 [ 612.498708][T15063] ---- [ 612.502008][T15063] lock(qp_broker_list.mutex); [ 612.506905][T15063] lock(qp_broker_list.mutex); [ 612.511815][T15063] [ 612.511815][T15063] *** DEADLOCK *** [ 612.511815][T15063] [ 612.519988][T15063] May be due to missing lock nesting notation [ 612.519988][T15063] [ 612.528365][T15063] 1 lock held by syz.8.2841/15063: [ 612.533482][T15063] #0: ffffffff8f62a3b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 612.544041][T15063] [ 612.544041][T15063] stack backtrace: [ 612.549941][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.8.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.549964][T15063] Tainted: [L]=SOFTLOCKUP [ 612.549970][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.549981][T15063] Call Trace: [ 612.549987][T15063] [ 612.549994][T15063] dump_stack_lvl+0xe8/0x150 [ 612.550020][T15063] print_deadlock_bug+0x279/0x290 [ 612.550045][T15063] __lock_acquire+0x24df/0x2cf0 [ 612.550068][T15063] ? kernel_text_address+0xa5/0xe0 [ 612.550115][T15063] ? __kernel_text_address+0xd/0x30 [ 612.550139][T15063] ? stack_depot_save_flags+0x28b/0x800 [ 612.550216][T15063] ? lock_acquire+0x106/0x350 [ 612.550237][T15063] ? vmci_qp_broker_detach+0xe9/0xec0 [ 612.550258][T15063] lock_acquire+0x106/0x350 [ 612.550278][T15063] ? vmci_qp_broker_detach+0xe9/0xec0 [ 612.550305][T15063] __mutex_lock+0x19d/0x1550 [ 612.550334][T15063] ? vmci_qp_broker_detach+0xe9/0xec0 [ 612.550356][T15063] ? kasan_save_track+0x3e/0x80 [ 612.550379][T15063] ? kasan_save_free_info+0x40/0x50 [ 612.550394][T15063] ? __kasan_slab_free+0x5c/0x80 [ 612.550412][T15063] ? kfree+0x1c5/0x640 [ 612.550431][T15063] ? vmci_ctx_put+0x5ba/0xc00 [ 612.550445][T15063] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 612.550460][T15063] ? vmci_datagram_dispatch+0x450/0xc80 [ 612.550476][T15063] ? vmci_qp_broker_detach+0x887/0xec0 [ 612.550496][T15063] ? vmci_ctx_put+0x619/0xc00 [ 612.550509][T15063] ? vmci_host_close+0x8e/0x140 [ 612.550528][T15063] ? __fput+0x418/0xa50 [ 612.550546][T15063] ? exit_to_user_mode_loop+0x1fa/0x730 [ 612.550570][T15063] ? do_syscall_64+0x353/0x580 [ 612.550591][T15063] ? vmci_qp_broker_detach+0xe9/0xec0 [ 612.550612][T15063] ? __pfx___mutex_lock+0x10/0x10 [ 612.550639][T15063] vmci_qp_broker_detach+0xe9/0xec0 [ 612.550662][T15063] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 612.550682][T15063] ? kasan_quarantine_put+0xbb/0x1f0 [ 612.550700][T15063] ? lockdep_hardirqs_on+0x7a/0x110 [ 612.550721][T15063] ? kfree+0x1c5/0x640 [ 612.550735][T15063] ? vmci_ctx_put+0x5ba/0xc00 [ 612.550748][T15063] ? vmci_ctx_put+0x13e/0xc00 [ 612.550764][T15063] vmci_ctx_put+0x619/0xc00 [ 612.550777][T15063] ? vmci_ctx_put+0x13e/0xc00 [ 612.550793][T15063] ? __pfx_vmci_ctx_put+0x10/0x10 [ 612.550808][T15063] ? preempt_schedule_thunk+0x16/0x40 [ 612.550826][T15063] ? preempt_schedule_common+0x82/0xd0 [ 612.550846][T15063] ? preempt_schedule_thunk+0x16/0x40 [ 612.550864][T15063] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 612.550883][T15063] vmci_datagram_dispatch+0x450/0xc80 [ 612.550902][T15063] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 612.550922][T15063] vmci_qp_broker_detach+0x887/0xec0 [ 612.550945][T15063] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 612.550965][T15063] ? kasan_quarantine_put+0xbb/0x1f0 [ 612.550984][T15063] ? kfree+0x1c5/0x640 [ 612.550998][T15063] ? vmci_ctx_put+0x5ba/0xc00 [ 612.551014][T15063] vmci_ctx_put+0x619/0xc00 [ 612.551028][T15063] ? vmci_ctx_put+0x13e/0xc00 [ 612.551043][T15063] ? __pfx_vmci_ctx_put+0x10/0x10 [ 612.551063][T15063] vmci_host_close+0x8e/0x140 [ 612.551083][T15063] ? __pfx_vmci_host_close+0x10/0x10 [ 612.551102][T15063] __fput+0x418/0xa50 [ 612.551122][T15063] task_work_run+0x1d9/0x270 [ 612.551145][T15063] ? __pfx_task_work_run+0x10/0x10 [ 612.551170][T15063] exit_to_user_mode_loop+0x1fa/0x730 [ 612.551188][T15063] ? rcu_is_watching+0x15/0xb0 [ 612.551210][T15063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.551226][T15063] do_syscall_64+0x353/0x580 [ 612.551246][T15063] ? trace_irq_disable+0x3b/0x140 [ 612.551265][T15063] ? clear_bhb_loop+0x40/0x90 [ 612.551281][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.551296][T15063] RIP: 0033:0x7fedf539de59 [ 612.551317][T15063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.551331][T15063] RSP: 002b:00007fedf624b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 612.551348][T15063] RAX: 0000000000000000 RBX: 00007fedf5626090 RCX: 00007fedf539de59 [ 612.551359][T15063] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 612.551369][T15063] RBP: 00007fedf5433e6f R08: 0000000000000000 R09: 0000000000000000 [ 612.551380][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.551389][T15063] R13: 00007fedf5626128 R14: 00007fedf5626090 R15: 00007fedf574fa48 [ 612.551407][T15063] [ 612.551476][ T6004] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.030454][ T6004] bond1: (slave gretap1): failed to get link speed/duplex [ 613.120711][ T6004] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 613.248247][T10075] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 613.398103][T10075] usb 8-1: Using ep0 maxpacket: 32 [ 613.405008][T10075] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 613.413633][T10075] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 613.422546][T10075] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 613.432098][T10075] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 613.442708][T10075] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 613.452707][T10075] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 613.465850][T10075] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 613.475650][T10075] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.485166][T10075] usb 8-1: config 0 descriptor?? [ 613.695254][T10075] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 613.955200][ C1] usblp0: nonzero read bulk status received: -71 [ 613.955885][ T5691] usb 8-1: USB disconnect, device number 33 [ 613.972756][T15065] usblp0: removed [ 617.088554][ T48] net_ratelimit: 71 callbacks suppressed [ 617.088575][ T48] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.108849][ T111] bond1: (slave gretap1): failed to get link speed/duplex [ 617.209012][ T6004] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.218564][ T6012] bond1: (slave gretap1): failed to get link speed/duplex [ 617.318727][ T9927] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.329645][ T6004] bond1: (slave gretap1): failed to get link speed/duplex [ 617.429035][ T111] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.438611][ T111] bond1: (slave gretap1): failed to get link speed/duplex [ 617.540147][ T6012] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.554396][ T6012] bond1: (slave gretap1): failed to get link speed/duplex [ 622.179069][ T6004] net_ratelimit: 82 callbacks suppressed [ 622.179091][ T6004] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.198780][ T9926] bond1: (slave gretap1): failed to get link speed/duplex [ 622.298567][ T111] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.308226][ T111] bond1: (slave gretap1): failed to get link speed/duplex