last executing test programs: 12.130267549s ago: executing program 4 (id=3656): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x4040) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="7bfafb5aa5f9a00d1bc90e49a2e6a78321c1cb22ce6d3405eb077526ba0d6a63affbd22f8670aa57f9394620187ebe06faa7ab8afeb269489be4d838001964c3df1cb620c1323b32dc87b3a046d4b70e025f5a6cdf12d666285181ca58257952bc9724b3a44e0484aca9c25409aa57b8bf2c883ff36c969396965b9b71e0a9cbb2758620a3d4161addf44693370c3a89f6635b6ed8d57078b6db3ccc5436ef01c01a9c5f6664be6504a4", 0xaa}, {&(0x7f0000000240)="17abbf5a045be455d3a8e05b273ecb1d0551be850fec3431a88a5d44a210648142c03ad18cd0b3ca178909775d3dcd92427ec223ce2158b5256997652b52161e6a8f94eda1d5b83784c37330965679f12199124cf45447feccef67b8a10c452333bc68f4257556975f5a7e810447c3", 0x6f}, {&(0x7f00000002c0)}], 0x3) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) 11.190835536s ago: executing program 0 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff00070000000800", @ANYRES32=r8, @ANYBLOB="0800051d000000"], 0x58}}, 0x0) 10.483739936s ago: executing program 4 (id=3660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xb8}}, 0x4000c040) lseek(r0, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) madvise(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = syz_open_dev$audion(0x0, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1006, 0x2, {0x0}, 0x80000003}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 9.596548967s ago: executing program 3 (id=3661): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80003, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x5}}, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.402943167s ago: executing program 3 (id=3662): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000a015"], 0x78}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x100000001, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x4010) r5 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r5, 0xffffffffffffffff, 0x80000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/228, 0xe4) 9.175668724s ago: executing program 2 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2000000000000102, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r7}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 8.911142053s ago: executing program 0 (id=3664): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f0000000500)="08383eeecdd57c523bb0ca7909dca756f65213f41cbed4b32d51", 0x1a}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdc", 0xc1}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c8b914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b34", 0xb4}], 0x3, &(0x7f0000000cc0)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) socket(0x10, 0x803, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x911c, 0x40, 0x3, 0x2fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x1, 0x0, r4, 0x5, 0x73e}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000f40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket(0x40000000015, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.645761935s ago: executing program 1 (id=3665): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) getsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000300)=0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x3ff, @empty, 0x100}, 0x1c) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r6, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) 8.644694045s ago: executing program 0 (id=3666): syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x403, 0x2402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000640)={0x1e, 0x0, 0x3015, 0x4e, 0x1, {0x8, 0xa9}}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.613524829s ago: executing program 2 (id=3667): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) 7.278209465s ago: executing program 0 (id=3668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x8880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r5, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r6, &(0x7f0000002d00), 0x0, 0x0, &(0x7f0000002e00)={0x77359400}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r8, 0x0, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000100)={0x0, 0xe, 0x3, "55dc20"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.075644055s ago: executing program 1 (id=3669): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/197, 0xc5}, {&(0x7f0000000ac0)=""/81, 0x51}, {&(0x7f0000000b40)=""/178, 0xb2}, {&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/87, 0x57}, {&(0x7f0000000d40)=""/154, 0x9a}, {&(0x7f0000000e00)=""/6, 0x6}], 0x7) write$binfmt_elf32(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416, 0x1}, {0x354, 0x1}, {0xf4ef}, {0x80000000, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x2, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="d8"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x6, 0x4) 6.988554065s ago: executing program 1 (id=3670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001940)=@buf) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f00000001c0)=""/12, &(0x7f0000000000)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 6.754663482s ago: executing program 4 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000200), 0x4) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x83, {0x83, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1dcde884954ca092f6268bdde"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e33214654c590d88a015f75564d3e4c03c2152e6dd611a1202f7ddb"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000600)={0x0, 0xb, 0x63, "a1a0d14aacaf9ba9379a4e30c26c65398a340248b755e54d0263b00b15e7e7ac931b1cba0d60d40418248ac5c03147a739b62ca47014405349c1665988f4b5cc447d3baf44af443ac4c698b8aff6333bd367cb98bd8b0e36deaefcf377898bed4abd1b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x85}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8890) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004d333000000fe88000000000000000000000000000106000000000000000300000000000000f7ffffffffffffff0200000000000000000000000100000006000000000000000b0000000000000000700000000000000000000024000000008000000000000080000000000000000300000000000000f400000008000000c56300002cbd7000073500000800040506000000000000000600000000000000bf000800bb000800007ab300fc4b8fc256d3797cc4228b74e0a496d4145b2b924596330f47e5ea8f04229fe0bfc026535c90ded1115b98daef9e9aceed491c33104f3f0f9cad481ebf73b5b5c7bfe9d68b012a7d9bcf2112bb082c3cbeffa72ae48b6792c4032d63af0f0d2bae0eb8f8197ba3f12d04d654a2e31a4450502365dc1d3a10d82f95b7225c2708f11a5ef0fe0e7a7d990a2b10089440e87edd5b6245795acf5027c02f3944982644ab9a4a762f7d5f49574994eae2727a95927600080018000600000008001d00060000001c00040001004e214e200000ac1414aa00000000000000000000000008001d00f5ffffff"], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000140)}) 6.180218631s ago: executing program 3 (id=3672): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) 5.818913716s ago: executing program 2 (id=3673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80102) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00']) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, 0x0, 0x0, 0x6e}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0xffffffffffffffff}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000030101010000000000000000020000001c000f8008004beba2d6882c6e729995be210f230340000000463905e8b470398bd0426fbabd3ffa64000240000000b408000140000000041800028014000180084fbe1684355f89b09c341055b4f27aa8120d7d8e19b8e02e141a6a30181d545461"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44080) 4.968845203s ago: executing program 1 (id=3674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r4, 0x3, 0x1, 0x1, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x88, r8, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.448489858s ago: executing program 4 (id=3675): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000280)='a', 0x1, 0x5}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 3.950179687s ago: executing program 2 (id=3676): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/182) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x8, 0x6, 0x8, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x8, 0x5, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x400004, 0x106c, 0x7fffffff, 0x7ffffffffffff, 0x80000004000080, 0x0, 0x8, 0xfffffffffffffffd, 0x800, 0x0, 0x8002], 0x1, 0x3f2211}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 3.831812515s ago: executing program 0 (id=3677): io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={{r3}, 0x0, 0x4d966584, 0xfffffffffffffe01}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x12}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x553}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0xfffffffffffffd2b, 0x5, 0xd}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 3.608569947s ago: executing program 3 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su_\x17(y\xb6\xfb\xb2\x1b\v`\xd7:<\x16\x7f\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\x04\x00(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5S\xa8\xa9P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W', 0x3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x46002, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000140)={0x18, r4}) write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001f00000000000000080009000d000000", 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400200001600830425b97000fbdbdf2500000000000000000000000000000001200100000000100000f90000000000004e2100044e2200030a00200200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000004d632000000ac1414aa00000000000000000000000009000000000000006ceb000000000000050000000000000004000000000000000d0000000000000085000000000000009d000000000000000a00000000000000ce000000000000008affffffffffffff0100000000000000850200000000000009000000c0ffffff0400000028bd7080000000000a0000af1000000000000000040000001105000008000c00feffffff0c000f00000000000000000008000b"], 0x240}}, 0x4000880) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000280)={'lo\x00', @ifru_addrs=@phonet={0x23, 0x7, 0x6, 0x9}}}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, r9, 0x1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000002e000908fefffffffddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r10], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.170437535s ago: executing program 1 (id=3679): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) getsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000300)=0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x3ff, @empty, 0x100}, 0x1c) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r6, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)}, 0x0) 2.923045042s ago: executing program 3 (id=3680): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r4, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2.6863906s ago: executing program 4 (id=3681): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110ac000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x280, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 2.032617251s ago: executing program 0 (id=3682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xf7fffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x33565348, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000011c0)=[{0xe258, 0x5e, 0x0, 0x7}, {0xf, 0x6, 0x7, 0x4001}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xce22, 0x40, @empty, 0xa28}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="d408000000000000611067000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) 1.890494676s ago: executing program 2 (id=3683): r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) fremovexattr(r3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x17}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6d1b, 0x2, 0x93d1, 0x80000000}) 1.417232511s ago: executing program 1 (id=3684): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x2, "ef20"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x40000000000c1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xfee0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x12, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0053000000200400010500"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_pts(r4, 0x141601) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000680)={0x80000001, 0xfffffffd, 0xf4e6, 0x7fff, 0xfe, "f8b954dc87a7b159489d7fcca7e17519ba9ce3"}) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 977.812286ms ago: executing program 4 (id=3685): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x113141, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) syncfs(0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) socket(0x10, 0x80003, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 897.84076ms ago: executing program 3 (id=3686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80102) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00']) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, 0x0, 0x0, 0x6e}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0xffffffffffffffff}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000030101010000000000000000020000001c000f8008004beba2d6882c6e729995be210f230340000000463905e8b470398bd0426fbabd3ffa64000240000000b408000140000000041800028014000180084fbe1684355f89b09c341055b4f27aa8120d7d8e19b8e02e141a6a30181d545461"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44080) 0s ago: executing program 2 (id=3687): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) kernel console output (not intermixed with test programs): 20.998922][T12330] usb 4-1: no configurations [ 1121.036476][T12330] usb 4-1: can't read configurations, error -22 [ 1121.208831][T12330] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1121.374154][T19095] xt_hashlimit: size too large, truncated to 1048576 [ 1121.399024][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1121.418194][T12330] usb 4-1: no configurations [ 1121.435817][T12330] usb 4-1: can't read configurations, error -22 [ 1121.469393][T12330] usb usb4-port1: attempt power cycle [ 1121.828116][T12330] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1121.877251][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1121.901030][T12330] usb 4-1: no configurations [ 1121.927139][T12330] usb 4-1: can't read configurations, error -22 [ 1122.118378][T12330] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1122.170670][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1122.187571][T12330] usb 4-1: no configurations [ 1122.216645][T12330] usb 4-1: can't read configurations, error -22 [ 1122.249214][T12330] usb usb4-port1: unable to enumerate USB device [ 1122.441173][T19107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1123.211669][T19118] bond2: (slave gretap1): Releasing active interface [ 1123.263228][T19118] bond4: (slave bond5): Releasing backup interface [ 1123.270668][T19118] bond5: left promiscuous mode [ 1124.713641][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1124.799747][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1124.870854][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1125.012633][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1125.113797][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1125.247783][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1126.127830][T19176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1130.311159][T19232] kvm: pic: non byte write [ 1130.879313][T12330] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1130.918116][T17489] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1131.039504][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1131.062475][T12330] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1131.068568][T17489] usb 5-1: Using ep0 maxpacket: 32 [ 1131.086993][T12330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.087770][T17489] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1131.121347][T17489] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1131.131224][T17489] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1131.140665][T17489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1131.140732][T17489] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1131.140787][T17489] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1131.140828][T17489] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1131.140850][T17489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.146706][T17489] usb 5-1: config 0 descriptor?? [ 1131.179451][T12330] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1131.204131][T19247] netlink: 'syz.1.2962': attribute type 3 has an invalid length. [ 1131.359293][T12330] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1131.407079][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.449252][T12330] usb 4-1: Product: syz [ 1131.469509][T12330] usb 4-1: Manufacturer: syz [ 1131.479896][T12330] usb 4-1: SerialNumber: syz [ 1131.506662][T12330] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1131.531823][T12330] r8152-cfgselector 4-1: config 0 descriptor?? [ 1131.551275][T17489] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1131.635190][T17489] usb 5-1: USB disconnect, device number 77 [ 1131.674524][T17489] usblp0: removed [ 1131.770342][T19261] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1132.087609][T19268] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1132.158150][T17489] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1132.309891][T17489] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1132.325811][T17489] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1132.359010][T17489] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1132.394141][T17489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.428674][T17489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1132.467495][T17489] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1132.521252][T17489] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1132.551078][T17489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.606887][T17489] usb 5-1: config 0 descriptor?? [ 1132.631795][T19242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1132.724807][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2973'. [ 1132.937416][T17489] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1133.125966][ C0] usblp0: nonzero read bulk status received: -71 [ 1133.139258][T12330] usb 5-1: USB disconnect, device number 78 [ 1133.351102][T19241] usblp0: removed [ 1133.693526][T12330] r8152-cfgselector 4-1: USB disconnect, device number 70 [ 1133.745826][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1133.772751][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1133.828819][T17489] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1133.978406][T17489] usb 3-1: Using ep0 maxpacket: 32 [ 1133.998766][T17489] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1134.017161][T17489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.037064][T17489] usb 3-1: Product: syz [ 1134.054596][T17489] usb 3-1: Manufacturer: syz [ 1134.070867][T17489] usb 3-1: SerialNumber: syz [ 1134.089033][T17489] usb 3-1: config 0 descriptor?? [ 1134.109724][T17489] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1134.126899][T17489] dvb-usb: bulk message failed: -22 (4/0) [ 1134.134550][T17489] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1134.157857][T17489] dvb-usb: bulk message failed: -22 (5/0) [ 1134.175490][T17489] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1134.206686][T17489] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1134.223211][T17489] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1134.231773][T17489] usb 3-1: media controller created [ 1134.257232][T17489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.302788][T19286] ttusb2: i2c wr len=58 too high [ 1134.326955][T17489] usb 3-1: selecting invalid altsetting 3 [ 1134.334353][T17489] ttusb2: set interface to alts=3 failed [ 1134.451300][T17489] DVB: Unable to find symbol tda10086_attach() [ 1134.469067][T17489] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1134.526710][T17489] dvb-usb: bulk message failed: -22 (4/0) [ 1134.544885][T17489] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1134.562791][T19312] syzkaller1: entered promiscuous mode [ 1134.573135][T19312] syzkaller1: entered allmulticast mode [ 1134.579497][T17489] dvb-usb: bulk message failed: -22 (5/0) [ 1134.588744][T17489] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1134.625031][T17489] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1134.653070][T17489] usb 3-1: USB disconnect, device number 80 [ 1134.752225][T17489] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1136.335767][T12330] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1136.486510][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2993'. [ 1136.528131][T12330] usb 5-1: Using ep0 maxpacket: 16 [ 1136.535425][T12330] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1136.551801][T12330] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1136.561182][T12330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.666952][T12330] usb 5-1: Product: syz [ 1136.677440][T12330] usb 5-1: Manufacturer: syz [ 1136.716570][T12330] usb 5-1: SerialNumber: syz [ 1136.772707][T12330] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1136.779305][T12330] r8152-cfgselector 5-1: config 0 descriptor?? [ 1137.052132][T12330] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1137.062759][T12330] r8152-cfgselector 5-1: No union descriptors [ 1137.093171][T12330] r8152-cfgselector 5-1: USB disconnect, device number 79 [ 1138.207070][T19347] kvm: MONITOR instruction emulated as NOP! [ 1138.341281][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 1140.682865][T19373] binder: 19372:19373 ioctl 4018620d 0 returned -22 [ 1140.709586][T19373] pim6reg: entered allmulticast mode [ 1140.735331][T19373] pim6reg: left allmulticast mode [ 1140.967028][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 1142.566546][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1142.579813][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1142.758079][T12330] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1142.823379][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'. [ 1142.894188][T19418] team0: Port device C removed [ 1142.917866][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1142.929824][T12330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.942953][T12330] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1142.958731][T12330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.974664][T12330] usb 5-1: config 0 descriptor?? [ 1143.103440][T19426] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1143.204007][T12330] usbhid 5-1:0.0: can't add hid device: -71 [ 1143.222803][T12330] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1143.276540][T12330] usb 5-1: USB disconnect, device number 80 [ 1143.298600][T17489] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1143.470579][T17489] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1143.508244][T17489] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1143.546866][T17489] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1143.553521][T19437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1143.556585][T17489] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1143.576085][T17489] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1143.589948][T17489] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1143.599463][T17489] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1143.607873][T17489] usb 4-1: Product: syz [ 1143.612267][T17489] usb 4-1: Manufacturer: syz [ 1143.635124][T17489] cdc_wdm 4-1:1.0: skipping garbage [ 1143.643803][T17489] cdc_wdm 4-1:1.0: skipping garbage [ 1143.655853][T17489] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1143.662168][T17489] cdc_wdm 4-1:1.0: Unknown control protocol [ 1143.769838][T12330] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1143.833748][ T807] usb 4-1: USB disconnect, device number 71 [ 1143.948467][T12330] usb 5-1: Using ep0 maxpacket: 32 [ 1143.958473][T12330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.982384][T12330] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1144.001849][T12330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.017202][T12330] usb 5-1: config 0 descriptor?? [ 1144.032894][T12330] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1144.070670][T12330] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1144.377992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1144.510874][ T807] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1144.570937][T12330] usb 5-1: USB disconnect, device number 81 [ 1144.585003][T12330] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1144.670136][ T807] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1144.680880][ T807] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1144.700408][ T807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1144.718440][ T807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1144.738600][ T807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1144.764221][ T807] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1144.777327][ T807] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1144.791916][ T807] usb 4-1: Product: syz [ 1144.800534][ T807] usb 4-1: Manufacturer: syz [ 1144.821575][ T807] cdc_wdm 4-1:1.0: skipping garbage [ 1144.838138][ T807] cdc_wdm 4-1:1.0: skipping garbage [ 1144.865808][ T807] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1144.883493][ T807] cdc_wdm 4-1:1.0: Unknown control protocol [ 1145.024689][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.030371][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.036348][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.042157][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.047947][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.053786][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.060089][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.065989][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.071867][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.077669][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.083551][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.089439][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.095227][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.101193][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.106997][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.112816][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.118945][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.124786][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.130592][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.136414][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.142239][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.148445][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.154295][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.160126][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.165923][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.171867][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.177686][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.183623][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.189419][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.195208][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.201018][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.206812][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.212786][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.218602][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.224429][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.230375][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.236193][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.242104][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.247887][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.253679][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.259601][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.265244][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.272535][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.278405][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.284352][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.290313][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.296423][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.303823][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.309669][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.315475][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.321808][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.327690][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.333683][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.339484][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.345274][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.351127][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.357050][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.363042][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.368864][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.374646][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.380449][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.389463][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.395280][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.401158][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.407022][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.412943][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.418856][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.424631][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.430422][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.436220][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.442043][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.447823][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.453769][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.459568][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.465356][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.471192][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.477005][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.483000][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.488810][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.494685][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.500527][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.506312][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.512294][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.518166][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.524027][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.529838][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.535630][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.541545][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.547322][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.553141][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.558963][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.564764][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.570718][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.576512][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.582303][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.588102][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.593916][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.599988][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.605634][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.611348][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.617195][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.623152][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.629292][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.635124][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.640963][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.646829][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.652508][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.658441][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.664249][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.670059][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.675788][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.681874][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.687776][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.693453][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.699522][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.705190][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.711117][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.716992][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.722653][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.728716][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.734527][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.740222][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.746088][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.751771][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.757719][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.763582][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.769417][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.775225][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.781042][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.786878][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.793193][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.799166][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.805001][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.810848][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.816678][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.823686][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.829502][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.835362][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.841200][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.847127][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.853264][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.859362][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.865211][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.871282][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.877117][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.882800][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1145.888851][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.894906][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.900764][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.906655][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.912680][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.918789][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.924638][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.930532][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.938945][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.944811][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.951238][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.957173][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.963042][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.968878][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.974717][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.980826][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.990041][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1145.995760][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.001787][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.007452][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.014709][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.020392][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.028234][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.033991][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.039881][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.045685][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.051596][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.057407][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.063228][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.069309][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.075135][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.080963][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.086773][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.092667][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.098906][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.104724][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.110604][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.116388][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.122205][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.128316][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.134143][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.140028][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.145909][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.151727][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.157512][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.163445][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.169277][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.175075][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.180868][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.186655][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.192619][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.198486][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.204299][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.210102][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.215887][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.221866][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.227656][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.233494][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.239345][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.245251][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.251188][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.256982][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.262780][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.268666][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.274487][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.280497][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.286299][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.292114][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.297950][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.303786][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.309759][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.315562][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.321365][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.327156][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.332954][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.338908][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.344701][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.350500][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.356326][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.362171][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.368020][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.374122][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.380159][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.385980][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.391943][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.397786][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.403809][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.409625][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.415435][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.421251][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.427055][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.433001][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.438837][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.444657][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.450639][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.456440][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.462393][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.468232][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.474079][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.479907][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.485707][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.491677][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.497561][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.503402][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.509265][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.515269][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.520932][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.526770][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.532414][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.538191][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.544007][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.549941][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.555756][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.561568][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.567358][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.573143][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.579216][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.585138][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.590830][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.596618][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 1146.602498][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 1146.608129][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1146.643910][T12330] usb 4-1: USB disconnect, device number 72 [ 1147.375916][T19467] netlink: 'syz.3.3040': attribute type 39 has an invalid length. [ 1147.734120][T19478] syz_tun: entered allmulticast mode [ 1147.823926][T19479] dvmrp8: entered allmulticast mode [ 1147.865330][T19476] syz_tun: left allmulticast mode [ 1149.981390][ T807] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1150.151096][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 1150.164928][ T807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.188699][ T807] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1150.208420][T12330] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1150.220263][ T807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.235293][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.259154][ T807] usb 4-1: SerialNumber: syz [ 1150.276386][ T807] hub 4-1:1.0: bad descriptor, ignoring hub [ 1150.291192][ T807] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1150.310844][ T807] usb 4-1: No union descriptors [ 1150.368149][T12330] usb 5-1: Using ep0 maxpacket: 8 [ 1150.384220][T12330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.406276][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'. [ 1150.407092][T12330] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.466308][T12330] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 1150.503360][T12330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.598400][ T807] usb 4-1: USB disconnect, device number 73 [ 1150.601488][T12330] usb 5-1: Product: syz [ 1150.649759][T12330] usb 5-1: Manufacturer: syz [ 1150.681525][T12330] usb 5-1: SerialNumber: syz [ 1150.737067][T12330] usb 5-1: config 0 descriptor?? [ 1151.164278][T19548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 1151.224697][T19548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1151.482412][T19558] syzkaller1: entered promiscuous mode [ 1151.501238][T19558] syzkaller1: entered allmulticast mode [ 1152.543400][T19567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3075'. [ 1152.920747][ T807] usb 5-1: USB disconnect, device number 82 [ 1153.201925][T19584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3083'. [ 1153.235363][T19584] syzkaller1: entered promiscuous mode [ 1153.241118][T19584] syzkaller1: entered allmulticast mode [ 1153.664917][T19594] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1153.998421][ T807] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1154.128165][ T807] usb 3-1: device descriptor read/64, error -71 [ 1154.363096][T19602] syz_tun: entered allmulticast mode [ 1154.368129][ T807] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1154.396094][T19601] syz_tun: left allmulticast mode [ 1154.508497][ T807] usb 3-1: device descriptor read/64, error -71 [ 1154.618839][ T807] usb usb3-port1: attempt power cycle [ 1154.917774][T19611] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1154.935499][T19611] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1154.968188][ T807] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1154.992108][ T807] usb 3-1: device descriptor read/8, error -71 [ 1155.238176][ T807] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1155.270413][ T807] usb 3-1: device descriptor read/8, error -71 [ 1155.388560][ T807] usb usb3-port1: unable to enumerate USB device [ 1155.858083][T12330] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1156.033103][T12330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.043690][T12330] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1156.066700][T12330] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1156.127302][T12330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.164598][T12330] usb 4-1: config 0 descriptor?? [ 1157.258198][ T807] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1157.458133][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 1157.465167][ T807] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1157.558518][ T807] usb 3-1: config 0 has no interface number 0 [ 1157.579293][ T807] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1157.596902][ T807] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1157.644491][ T807] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1157.668641][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.695720][ T807] usb 3-1: Product: syz [ 1157.716666][ T807] usb 3-1: Manufacturer: syz [ 1157.742308][ T807] usb 3-1: SerialNumber: syz [ 1157.773839][ T807] usb 3-1: config 0 descriptor?? [ 1157.794745][ T807] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1157.806267][ T807] em28xx 3-1:0.89: Video interface 89 found: [ 1158.421780][ T807] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1158.642396][T12330] usb 4-1: USB disconnect, device number 74 [ 1158.739735][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1158.795178][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1158.820109][T19676] macvtap1: entered promiscuous mode [ 1158.855649][T19676] bridge0: entered promiscuous mode [ 1158.878937][T19676] macvtap1: entered allmulticast mode [ 1158.899864][T19676] bridge0: entered allmulticast mode [ 1158.989292][T19677] bridge0: left allmulticast mode [ 1159.009306][T19677] bridge0: left promiscuous mode [ 1159.054383][ T807] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1159.107138][ T807] em28xx 3-1:0.89: board has no eeprom [ 1159.309304][ T807] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1159.333127][ T807] em28xx 3-1:0.89: analog set to bulk mode. [ 1159.367121][ T807] usb 3-1: USB disconnect, device number 85 [ 1159.377888][T17489] em28xx 3-1:0.89: Registering V4L2 extension [ 1159.399099][ T807] em28xx 3-1:0.89: Disconnecting em28xx [ 1159.566164][T17489] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1159.604254][T17489] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1159.612875][T17489] em28xx 3-1:0.89: No AC97 audio processor [ 1159.678048][T12330] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1159.707419][T17489] usb 3-1: Decoder not found [ 1159.712973][T17489] em28xx 3-1:0.89: failed to create media graph [ 1159.734953][T17489] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1159.787923][T17489] em28xx 3-1:0.89: Registering snapshot button... [ 1159.820367][T17489] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input107 [ 1159.858441][T12330] usb 4-1: Using ep0 maxpacket: 32 [ 1159.878410][T12330] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.910137][T12330] usb 4-1: config 0 has no interface number 0 [ 1159.946282][T12330] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1159.987612][T17489] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1160.007122][T12330] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1160.034740][ T807] em28xx 3-1:0.89: Closing input extension [ 1160.036171][T12330] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1160.070627][ T807] em28xx 3-1:0.89: Deregistering snapshot button [ 1160.074067][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.130403][T12330] usb 4-1: Product: syz [ 1160.148310][T12330] usb 4-1: Manufacturer: syz [ 1160.166724][T12330] usb 4-1: SerialNumber: syz [ 1160.215967][T12330] usb 4-1: config 0 descriptor?? [ 1160.427231][ T807] em28xx 3-1:0.89: Freeing device [ 1160.474054][T12330] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1160.560073][T12330] cx231xx 4-1:0.1: Failed to read PCB config [ 1160.570749][T12330] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1160.590772][T12330] usb 4-1: USB disconnect, device number 75 [ 1161.070876][T19708] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1161.080470][T12330] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1161.238238][T12330] usb 4-1: Using ep0 maxpacket: 32 [ 1161.266158][T12330] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.279135][T12330] usb 4-1: config 0 has no interface number 0 [ 1161.299649][T12330] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1161.324530][T15521] Bluetooth: hci4: Unknown advertising packet type: 0x14 [ 1161.326112][T12330] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1161.379181][T12330] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1161.404579][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.431385][T12330] usb 4-1: Product: syz [ 1161.450004][T12330] usb 4-1: Manufacturer: syz [ 1161.464168][T12330] usb 4-1: SerialNumber: syz [ 1161.486053][T12330] usb 4-1: config 0 descriptor?? [ 1161.731031][T12330] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1161.748247][ T807] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1161.769861][T12330] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1161.889164][T12330] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1161.907570][T12330] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1161.923677][ T807] usb 5-1: config 2 has an invalid interface number: 210 but max is 2 [ 1161.932818][T12330] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1161.941944][ T807] usb 5-1: config 2 has an invalid interface number: 19 but max is 2 [ 1161.965605][T12330] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1161.978899][ T807] usb 5-1: config 2 has an invalid interface number: 240 but max is 2 [ 1162.002795][T12330] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1162.016011][ T807] usb 5-1: config 2 has no interface number 0 [ 1162.027593][T12330] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71 [ 1162.040090][ T807] usb 5-1: config 2 has no interface number 1 [ 1162.058902][ T807] usb 5-1: config 2 has no interface number 2 [ 1162.076979][ T807] usb 5-1: config 2 interface 210 altsetting 36 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 1162.106604][ T807] usb 5-1: config 2 interface 210 altsetting 36 bulk endpoint 0x2 has invalid maxpacket 8 [ 1162.126526][T12330] i2c i2c-2: Added multiplexed i2c bus 4 [ 1162.142884][ T807] usb 5-1: config 2 interface 210 altsetting 36 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1162.171588][T12330] i2c i2c-2: Added multiplexed i2c bus 5 [ 1162.172176][ T807] usb 5-1: config 2 interface 210 altsetting 36 has a duplicate endpoint with address 0x2, skipping [ 1162.216978][ T807] usb 5-1: config 2 interface 210 altsetting 36 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1162.217261][T12330] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1162.261967][ T807] usb 5-1: config 2 interface 19 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1162.294923][ T807] usb 5-1: config 2 interface 19 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1162.322858][ T807] usb 5-1: config 2 interface 19 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1162.340084][T12330] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1162.389826][ T807] usb 5-1: config 2 interface 19 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1162.413112][T12330] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1162.430082][ T807] usb 5-1: config 2 interface 19 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1162.432027][T12330] usb 4-1: USB disconnect, device number 76 [ 1162.500143][ T807] usb 5-1: config 2 interface 240 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1162.557040][ T807] usb 5-1: config 2 interface 240 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1162.606128][ T807] usb 5-1: config 2 interface 210 has no altsetting 0 [ 1162.628475][ T807] usb 5-1: config 2 interface 19 has no altsetting 0 [ 1162.652151][ T807] usb 5-1: config 2 interface 240 has no altsetting 0 [ 1162.676362][ T807] usb 5-1: New USB device found, idVendor=048d, idProduct=9306, bcdDevice=c7.33 [ 1162.687852][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.712313][ T807] usb 5-1: Product: syz [ 1162.741319][ T807] usb 5-1: Manufacturer: syz [ 1162.753943][ T807] usb 5-1: SerialNumber: syz [ 1162.778921][T19724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1163.050509][ T807] uvcvideo 5-1:2.19: probe with driver uvcvideo failed with error -22 [ 1163.133037][ T807] usb 5-1: USB disconnect, device number 83 [ 1164.309759][ T807] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1164.468152][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 1164.487280][T19764] netlink: 'syz.1.3141': attribute type 16 has an invalid length. [ 1164.513720][ T807] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1164.525919][T19764] netlink: 'syz.1.3141': attribute type 17 has an invalid length. [ 1164.595027][ T807] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1164.635991][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.675453][ T807] usb 4-1: Product: syz [ 1164.687870][ T807] usb 4-1: Manufacturer: syz [ 1164.699748][T19764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.716041][ T807] usb 4-1: SerialNumber: syz [ 1164.726633][T19764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.770715][ T807] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1164.781895][T19764] dummy0: left allmulticast mode [ 1164.798596][ T807] r8152-cfgselector 4-1: config 0 descriptor?? [ 1164.816945][T19764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1164.913985][T19769] netlink: 'syz.2.3142': attribute type 2 has an invalid length. [ 1165.177184][T19777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.639492][ T29] audit: type=1804 audit(1776721891.083:1006): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3146" name="/newroot/653/file0" dev="fuse" ino=1 res=1 errno=0 [ 1166.238414][ T807] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1166.389763][ T807] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1166.404223][ T807] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1166.434610][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1166.459139][ T807] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1166.476496][ T807] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1166.495458][ T807] usb 5-1: Product: syz [ 1166.511332][ T807] usb 5-1: Manufacturer: syz [ 1166.530114][ T807] usb 5-1: SerialNumber: syz [ 1166.561710][ T807] usb 5-1: config 0 descriptor?? [ 1166.596199][ T807] usb 5-1: selecting invalid altsetting 0 [ 1166.636804][T19794] syzkaller0: entered promiscuous mode [ 1166.652859][T19794] syzkaller0: entered allmulticast mode [ 1166.836391][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 1167.043062][T12330] usb 5-1: USB disconnect, device number 84 [ 1167.405881][T16526] r8152-cfgselector 4-1: USB disconnect, device number 77 [ 1167.701202][T19813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1167.860821][T19820] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1169.726058][ T29] audit: type=1326 audit(1776721895.173:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.0.3170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1490b9c819 code=0x0 [ 1169.777495][ T807] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1170.198077][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 1170.227158][ T807] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1170.357880][ T807] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1170.415000][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.450822][ T807] usb 4-1: Product: syz [ 1170.502752][ T807] usb 4-1: Manufacturer: syz [ 1170.520315][ T807] usb 4-1: SerialNumber: syz [ 1170.568543][ T807] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1170.610780][ T807] r8152-cfgselector 4-1: config 0 descriptor?? [ 1171.589461][T19886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3177'. [ 1172.981934][T12330] r8152-cfgselector 4-1: USB disconnect, device number 78 [ 1173.448093][T16526] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1173.609498][T16526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.639053][T16526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.663338][T16526] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1173.683830][T16526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.712921][T16526] usb 3-1: config 0 descriptor?? [ 1174.139008][T16526] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1174.201919][T16526] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1174.219250][T16526] lenovo 0003:17EF:6047.0014: unknown main item tag 0x0 [ 1174.275930][T16526] lenovo 0003:17EF:6047.0014: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1174.340241][ T807] usb 3-1: USB disconnect, device number 86 [ 1174.483537][T19911] fido_id[19911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1175.108469][ T807] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1175.248538][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1175.278252][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 1175.395209][ T807] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1175.451721][ T807] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1175.496184][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.517241][ T807] usb 4-1: Product: syz [ 1175.528321][ T807] usb 4-1: Manufacturer: syz [ 1175.536639][ T807] usb 4-1: SerialNumber: syz [ 1175.613237][ T807] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1175.632773][ T807] r8152-cfgselector 4-1: config 0 descriptor?? [ 1175.906545][T19937] netlink: 'syz.1.3193': attribute type 7 has an invalid length. [ 1175.955308][T19937] xt_NFQUEUE: number of total queues is 0 [ 1176.130856][T19940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3194'. [ 1176.629813][T19947] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3196'. [ 1177.133573][T19959] kvm: pic: non byte write [ 1177.230547][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.237262][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.670275][T16526] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 1179.266808][T19984] kvm: pic: non byte write [ 1179.754718][T19993] kvm: pic: single mode not supported [ 1179.756115][T19993] kvm: pic: level sensitive irq not supported [ 1179.765460][T19993] kvm: pic: single mode not supported [ 1179.777713][T19993] kvm: pic: level sensitive irq not supported [ 1179.797588][T19993] kvm: pic: single mode not supported [ 1179.808600][T19993] kvm: pic: level sensitive irq not supported [ 1179.843405][T19993] kvm: pic: single mode not supported [ 1179.849571][T19993] kvm: pic: level sensitive irq not supported [ 1179.907174][T19993] kvm: pic: level sensitive irq not supported [ 1179.956950][T19993] kvm: pic: level sensitive irq not supported [ 1179.988636][T19993] kvm: pic: level sensitive irq not supported [ 1180.009813][T19993] kvm: pic: level sensitive irq not supported [ 1180.032266][T19993] kvm: pic: non byte write [ 1180.068421][T19993] kvm: pic: level sensitive irq not supported [ 1180.220964][T15521] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1180.696101][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1180.838329][T20011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1180.880976][T20011] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1181.344227][T20016] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1181.366535][T20016] bond3 (unregistering): Released all slaves [ 1181.419093][ T807] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1181.578377][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 1181.586332][ T807] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 1181.594776][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.619794][ T807] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1181.633861][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.663671][ T807] usb 4-1: Product: syz [ 1181.674248][ T807] usb 4-1: Manufacturer: syz [ 1181.689863][ T807] usb 4-1: SerialNumber: syz [ 1181.713624][ T807] usb 4-1: config 0 descriptor?? [ 1181.733137][ T807] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1183.777306][ T807] usb 4-1: USB disconnect, device number 80 [ 1184.177399][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1184.735946][T20064] loop7: detected capacity change from 0 to 7 [ 1184.768301][ T807] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1184.928793][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 1184.938793][ T807] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1184.949093][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.979913][ T807] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1184.999651][ T807] pvrusb2: ********** [ 1185.006238][ T807] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1185.029344][ T807] pvrusb2: Important functionality might not be entirely working. [ 1185.047324][ T807] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1185.074751][ T807] pvrusb2: ********** [ 1185.185332][ T2366] pvrusb2: Invalid write control endpoint [ 1185.424578][T20062] pvrusb2: Invalid write control endpoint [ 1185.451924][ T807] usb 4-1: USB disconnect, device number 81 [ 1185.505885][ T2366] pvrusb2: Invalid write control endpoint [ 1185.513346][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1185.528116][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1185.537160][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1185.548364][ T2366] pvrusb2: Device being rendered inoperable [ 1185.559280][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1185.567856][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1185.627591][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1185.637355][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1185.649153][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1186.019248][T12330] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1186.022654][T20073] netlink: 'syz.4.3232': attribute type 4 has an invalid length. [ 1186.043434][T20073] netlink: 'syz.4.3232': attribute type 4 has an invalid length. [ 1186.102810][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 1186.114097][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 1186.181328][T12330] usb 3-1: Using ep0 maxpacket: 16 [ 1186.188937][T12330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1186.208263][T12330] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1186.220541][T12330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.230546][T12330] usb 3-1: Product: syz [ 1186.235692][T12330] usb 3-1: Manufacturer: syz [ 1186.241281][T12330] usb 3-1: SerialNumber: syz [ 1186.263123][T12330] usb 3-1: config 0 descriptor?? [ 1186.277222][T12330] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1186.295411][T12330] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1186.408339][ T5895] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1186.561115][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.577388][ T5895] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1186.587667][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.600369][ T5895] usb 5-1: config 0 descriptor?? [ 1186.619263][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 1186.887415][T12330] em28xx 3-1:0.0: chip ID is em2765 [ 1187.010515][T20083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 1187.028409][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1187.036522][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 1187.051345][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1187.061415][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 1187.084053][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 1187.094486][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 1187.103288][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 1187.111193][ T5895] pwc: recv_control_msg error -32 req 02 val 2100 [ 1187.322267][ T5895] pwc: recv_control_msg error -71 req 02 val 2500 [ 1187.341613][ T5895] pwc: recv_control_msg error -71 req 02 val 2400 [ 1187.358435][ T5895] pwc: recv_control_msg error -71 req 02 val 2600 [ 1187.386028][ T5895] pwc: recv_control_msg error -71 req 02 val 2900 [ 1187.400618][ T5895] pwc: recv_control_msg error -71 req 02 val 2800 [ 1187.422717][ T5895] pwc: recv_control_msg error -71 req 04 val 1100 [ 1187.439070][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 1187.459848][ T5895] pwc: Registered as video103. [ 1187.470310][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input108 [ 1187.497325][ T5895] usb 5-1: USB disconnect, device number 85 [ 1187.518180][T12330] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1187.561321][T12330] em28xx 3-1:0.0: board has no eeprom [ 1188.147084][T20104] syzkaller0: entered promiscuous mode [ 1188.153673][T20104] syzkaller0: entered allmulticast mode [ 1188.702214][T20070] em28xx 3-1:0.0: writing to i2c device at 0xfe failed (error=-5) [ 1188.729489][T12330] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1188.781928][T12330] em28xx 3-1:0.0: dvb set to bulk mode. [ 1188.832842][T16526] em28xx 3-1:0.0: Binding DVB extension [ 1188.917733][T12330] usb 3-1: USB disconnect, device number 87 [ 1188.981622][T12330] em28xx 3-1:0.0: Disconnecting em28xx [ 1189.229262][T16526] em28xx 3-1:0.0: Registering input extension [ 1189.283706][T12330] em28xx 3-1:0.0: Closing input extension [ 1189.558448][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.575562][T12330] em28xx 3-1:0.0: Freeing device [ 1189.585503][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.616326][T20132] binder: 20129:20132 ioctl c0306201 2000000003c0 returned -14 [ 1189.655690][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.685085][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.706931][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.731502][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.754303][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.778167][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.810298][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.840428][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.895945][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.934675][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.964769][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1189.995601][T20131] binder: 20129:20131 ioctl 4020ae46 7fa9190fefc0 returned -22 [ 1194.321564][T20173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1194.460357][T20173] ip6gre1: entered promiscuous mode [ 1194.500326][T20173] ip6gre1: entered allmulticast mode [ 1194.533380][T20175] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1194.985283][T20177] syzkaller0: entered promiscuous mode [ 1195.004935][T20177] syzkaller0: entered allmulticast mode [ 1196.915556][T20216] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1198.595007][T20234] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1199.432507][ T29] audit: type=1804 audit(1776721924.883:1008): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3275" name="/newroot/684/file0" dev="fuse" ino=1 res=1 errno=0 [ 1200.975439][T20227] syzkaller0: entered promiscuous mode [ 1200.988203][T20227] syzkaller0: entered allmulticast mode [ 1204.184243][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1204.899616][T16526] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1205.120039][T16526] usb 5-1: Using ep0 maxpacket: 16 [ 1205.166027][T16526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1205.187183][T16526] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1205.235151][T16526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.254932][T16526] usb 5-1: Product: syz [ 1205.264151][T16526] usb 5-1: Manufacturer: syz [ 1205.304838][T16526] usb 5-1: SerialNumber: syz [ 1205.342501][T16526] usb 5-1: config 0 descriptor?? [ 1205.368713][T16526] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1205.405875][T16526] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1205.949775][T20291] syzkaller0: entered promiscuous mode [ 1205.968807][T16526] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1205.976521][T20291] syzkaller0: entered allmulticast mode [ 1206.439913][T16526] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1206.500588][T16526] em28xx 5-1:0.0: board has no eeprom [ 1206.858900][T16526] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1206.870598][T16526] em28xx 5-1:0.0: dvb set to bulk mode. [ 1206.887632][T12330] em28xx 5-1:0.0: Binding DVB extension [ 1207.355319][T20316] syzkaller0: entered promiscuous mode [ 1207.384408][T20316] syzkaller0: entered allmulticast mode [ 1208.048490][T20286] em28xx 5-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 1208.100690][T16526] usb 5-1: USB disconnect, device number 86 [ 1208.130389][T16526] em28xx 5-1:0.0: Disconnecting em28xx [ 1208.197732][T12330] em28xx 5-1:0.0: Registering input extension [ 1208.224622][T16526] em28xx 5-1:0.0: Closing input extension [ 1208.383137][T20333] syzkaller0: entered promiscuous mode [ 1208.391224][T16526] em28xx 5-1:0.0: Freeing device [ 1208.397290][T20333] syzkaller0: entered allmulticast mode [ 1208.468212][ T5895] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1208.628870][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 1208.645033][ T5895] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1208.682984][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.696826][T20340] bridge0: port 2(macsec0) entered blocking state [ 1208.704760][ T5895] usb 4-1: Product: syz [ 1208.709812][ T5895] usb 4-1: Manufacturer: syz [ 1208.716439][T20340] bridge0: port 2(macsec0) entered disabled state [ 1208.723474][ T5895] usb 4-1: SerialNumber: syz [ 1208.731391][T20340] macsec0: entered allmulticast mode [ 1208.742229][ T5895] usb 4-1: config 0 descriptor?? [ 1208.748879][T20340] veth1_macvtap: entered allmulticast mode [ 1208.760095][ T5895] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1208.790410][T20340] macsec0: entered promiscuous mode [ 1209.151248][T20347] input: syz1 as /devices/virtual/input/input111 [ 1209.372376][ T5895] gspca_ov534_9: reg_w failed -71 [ 1209.553942][T20354] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1209.658150][ T5895] gspca_ov534_9: Unknown sensor 0000 [ 1209.658248][ T5895] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1209.692469][ T5895] usb 4-1: USB disconnect, device number 82 [ 1210.525800][T20369] syzkaller0: entered promiscuous mode [ 1210.560762][T20369] syzkaller0: entered allmulticast mode [ 1210.839557][T20372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1210.997203][T20376] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 1211.072540][T20376] bond3: entered promiscuous mode [ 1211.094562][T20376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1211.130568][T20379] vlan3: entered allmulticast mode [ 1211.144451][T20379] bond3: entered allmulticast mode [ 1211.217361][T20376] bond3: (slave bridge3): making interface the new active one [ 1211.247312][T20376] bridge3: entered promiscuous mode [ 1211.265071][T20376] bridge3: entered allmulticast mode [ 1211.329300][T20376] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1215.171291][T20412] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1216.494522][T20388] Set syz1 is full, maxelem 65536 reached [ 1216.521013][T16526] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1216.620560][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1216.688652][T16526] usb 5-1: Using ep0 maxpacket: 16 [ 1216.703079][T16526] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1216.724600][T16526] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1216.735970][T16526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.784169][T16526] usb 5-1: Product: syz [ 1216.788745][T16526] usb 5-1: Manufacturer: syz [ 1216.793518][T16526] usb 5-1: SerialNumber: syz [ 1216.810394][T16526] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1216.816913][T16526] r8152-cfgselector 5-1: config 0 descriptor?? [ 1217.078120][T12330] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1217.279083][T12330] usb 3-1: Using ep0 maxpacket: 16 [ 1217.311212][T12330] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1217.323929][T20442] syzkaller0: entered promiscuous mode [ 1217.332428][T20442] syzkaller0: entered allmulticast mode [ 1217.350443][T12330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1217.366943][T12330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.411626][T12330] usb 3-1: Product: syz [ 1217.416855][T12330] usb 3-1: Manufacturer: syz [ 1217.426212][T12330] usb 3-1: SerialNumber: syz [ 1217.458198][T12330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1217.464707][T12330] r8152-cfgselector 3-1: config 0 descriptor?? [ 1218.467134][T20447] vivid-002: ================= START STATUS ================= [ 1218.510210][T20447] vivid-002: Radio HW Seek Mode: Bounded [ 1218.554219][T20447] vivid-002: Radio Programmable HW Seek: false [ 1218.579693][T20447] vivid-002: RDS Rx I/O Mode: Block I/O [ 1218.608905][T20447] vivid-002: Generate RBDS Instead of RDS: false [ 1218.636016][T20447] vivid-002: RDS Reception: true [ 1218.655789][T20447] vivid-002: RDS Program Type: 0 inactive [ 1218.669785][T20447] vivid-002: RDS PS Name: inactive [ 1218.679364][T20447] vivid-002: RDS Radio Text: inactive [ 1218.697316][T20453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.707629][T20447] vivid-002: RDS Traffic Announcement: false inactive [ 1218.720006][T20447] vivid-002: RDS Traffic Program: false inactive [ 1218.742138][T20447] vivid-002: RDS Music: false inactive [ 1218.757059][T20447] vivid-002: ================== END STATUS ================== [ 1219.276596][T16526] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 1219.575209][T20465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 1219.987881][T12330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1220.012659][T12330] r8152-cfgselector 3-1: No union descriptors [ 1220.049040][T12330] r8152-cfgselector 3-1: USB disconnect, device number 88 [ 1220.343751][T20471] tipc: Started in network mode [ 1220.358889][T20471] tipc: Node identity , cluster identity 4711 [ 1220.387294][T20471] tipc: Failed to obtain node identity [ 1220.412358][T20471] tipc: Enabling of bearer rejected, failed to enable media [ 1220.439548][T20474] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1220.962676][T20480] syzkaller0: entered promiscuous mode [ 1220.984421][T20480] syzkaller0: entered allmulticast mode [ 1221.327605][T20487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1221.558349][T20491] kernel read not supported for file /¡sxt (pid: 20491 comm: syz.2.3347) [ 1221.588844][ T29] audit: type=1800 audit(1776721947.033:1009): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3347" name=A17378741A dev="mqueue" ino=80893 res=0 errno=0 [ 1221.975102][T20497] netlink: 'syz.4.3349': attribute type 1 has an invalid length. [ 1222.043735][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.071214][T20502] vlan0: entered promiscuous mode [ 1222.076392][T20502] bond0: entered promiscuous mode [ 1222.082043][T20502] vlan0: entered allmulticast mode [ 1222.087381][T20502] bond0: entered allmulticast mode [ 1222.255031][T20497] bond0: (slave bridge3): making interface the new active one [ 1222.266129][T20497] bridge3: entered promiscuous mode [ 1222.272238][T20497] bridge3: entered allmulticast mode [ 1222.280332][T20497] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1222.635214][T20507] syzkaller0: entered promiscuous mode [ 1222.655547][T20507] syzkaller0: entered allmulticast mode [ 1222.870619][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1225.798702][T12330] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1226.075240][T12330] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1226.119861][T12330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.135797][T12330] usb 4-1: config 0 descriptor?? [ 1226.169545][T12330] cp210x 4-1:0.0: cp210x converter detected [ 1226.578406][T12330] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1226.811089][T12330] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1228.816433][T12330] usb 4-1: USB disconnect, device number 83 [ 1228.838772][T12330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1228.893669][T12330] cp210x 4-1:0.0: device disconnected [ 1229.193602][T20566] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1230.193779][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1230.991462][T20593] syzkaller0: entered promiscuous mode [ 1230.997751][T20593] syzkaller0: entered allmulticast mode [ 1231.010798][T20593] 0: reclassify loop, rule prio 0, protocol 800 [ 1231.558907][T12330] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1231.768397][T16526] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1231.778787][T12330] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1231.817554][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.861616][T12330] usb 3-1: config 0 descriptor?? [ 1231.950326][T16526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.986537][T16526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1232.002445][T12330] cp210x 3-1:0.0: cp210x converter detected [ 1232.036691][T16526] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.065536][T16526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.130035][T16526] usb 4-1: Product: syz [ 1232.152829][T16526] usb 4-1: Manufacturer: syz [ 1232.172525][T16526] usb 4-1: SerialNumber: syz [ 1232.497067][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1232.553164][ T807] usb 4-1: USB disconnect, device number 84 [ 1232.578425][T12330] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1232.849454][T12330] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1234.127304][T20617] syzkaller0: entered promiscuous mode [ 1234.142422][T20617] syzkaller0: entered allmulticast mode [ 1234.340825][T20621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1234.497577][ T807] usb 3-1: USB disconnect, device number 89 [ 1234.518760][ T807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1234.553355][ T807] cp210x 3-1:0.0: device disconnected [ 1234.676799][T20627] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1235.215037][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1235.698087][T12330] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1235.863077][T12330] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1235.874794][T12330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.895527][T12330] usb 5-1: config 0 descriptor?? [ 1235.905443][T20642] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1236.186427][T20633] syz.4.3387: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1236.202150][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.4.3387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.202186][T20633] Tainted: [L]=SOFTLOCKUP [ 1236.202193][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1236.202207][T20633] Call Trace: [ 1236.202216][T20633] [ 1236.202224][T20633] dump_stack_lvl+0xe8/0x150 [ 1236.202262][T20633] warn_alloc+0x249/0x340 [ 1236.202293][T20633] ? __pfx_warn_alloc+0x10/0x10 [ 1236.202338][T20633] __vmalloc_node_range_noprof+0x132/0x1750 [ 1236.202363][T20633] ? __mutex_trylock_common+0x158/0x260 [ 1236.202390][T20633] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1236.202419][T20633] ? trace_contention_end+0x3d/0x140 [ 1236.202444][T20633] ? __mutex_lock+0x319/0x1550 [ 1236.202474][T20633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1236.202496][T20633] ? tomoyo_path_number_perm+0x219/0x630 [ 1236.202525][T20633] ? dvb_demux_do_ioctl+0x320/0x540 [ 1236.202551][T20633] ? __pfx___mutex_lock+0x10/0x10 [ 1236.202575][T20633] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1236.202600][T20633] vmalloc_noprof+0xb2/0xe0 [ 1236.202622][T20633] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1236.202648][T20633] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1236.202678][T20633] dvb_demux_do_ioctl+0x45d/0x540 [ 1236.202705][T20633] dvb_usercopy+0x199/0x2e0 [ 1236.202726][T20633] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1236.202748][T20633] ? __pfx_dvb_usercopy+0x10/0x10 [ 1236.202781][T20633] ? __fget_files+0x3a0/0x420 [ 1236.202800][T20633] ? __fget_files+0x2a/0x420 [ 1236.202823][T20633] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1236.202846][T20633] dvb_demux_ioctl+0x29/0x40 [ 1236.202870][T20633] __se_sys_ioctl+0xfc/0x170 [ 1236.202895][T20633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.202917][T20633] do_syscall_64+0x15f/0xf80 [ 1236.202939][T20633] ? clear_bhb_loop+0x40/0x90 [ 1236.202964][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.202984][T20633] RIP: 0033:0x7fccafd9c819 [ 1236.203027][T20633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.203045][T20633] RSP: 002b:00007fccb0bf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.203068][T20633] RAX: ffffffffffffffda RBX: 00007fccb0015fa0 RCX: 00007fccafd9c819 [ 1236.203083][T20633] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1236.203096][T20633] RBP: 00007fccafe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1236.203109][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.203122][T20633] R13: 00007fccb0016038 R14: 00007fccb0015fa0 R15: 00007fccb013fa48 [ 1236.203155][T20633] [ 1236.204403][T20633] Mem-Info: [ 1236.504627][T20633] active_anon:24167 inactive_anon:0 isolated_anon:0 [ 1236.504627][T20633] active_file:14826 inactive_file:4061 isolated_file:0 [ 1236.504627][T20633] unevictable:768 dirty:302 writeback:0 [ 1236.504627][T20633] slab_reclaimable:11052 slab_unreclaimable:121828 [ 1236.504627][T20633] mapped:30640 shmem:18330 pagetables:1708 [ 1236.504627][T20633] sec_pagetables:0 bounce:0 [ 1236.504627][T20633] kernel_misc_reclaimable:0 [ 1236.504627][T20633] free:1295849 free_pcp:15140 free_cma:0 [ 1236.552863][T12330] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1236.574218][T20633] Node 0 active_anon:96568kB inactive_anon:0kB active_file:59260kB inactive_file:16104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122516kB dirty:1208kB writeback:0kB shmem:71784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13488kB pagetables:6688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1236.667063][T20633] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1236.745987][T20633] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1236.837590][ T29] audit: type=1804 audit(1776721962.253:1010): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3391" name="bus" dev="ramfs" ino=83302 res=1 errno=0 [ 1236.983555][T20633] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 1236.989528][T20633] Node 0 DMA32 free:1280476kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97232kB inactive_anon:0kB active_file:59260kB inactive_file:16104kB unevictable:1536kB writepending:1232kB zspages:0kB present:3129332kB managed:2550972kB mlocked:0kB bounce:0kB free_pcp:43900kB local_pcp:19736kB free_cma:0kB [ 1237.082776][T20633] lowmem_reserve[]: 0 0 0 0 0 [ 1237.121205][T20633] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:592kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.262264][T20633] lowmem_reserve[]: 0 0 0 0 0 [ 1237.300128][T20633] Node 1 Normal free:3887784kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15772kB local_pcp:0kB free_cma:0kB [ 1237.498545][T20633] lowmem_reserve[]: 0 0 0 0 0 [ 1237.504347][T20633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1237.536524][T20633] Node 0 DMA32: 1081*4kB (UME) 2850*8kB (UME) 3223*16kB (UME) 1526*32kB (UME) 1041*64kB (UME) 739*128kB (UME) 451*256kB (UME) 299*512kB (UM) 250*1024kB (UM) 36*2048kB (UM) 96*4096kB (UM) = 1280228kB [ 1237.586549][T20633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1237.620193][T20633] Node 1 Normal: 5*4kB (U) 3*8kB (U) 5*16kB (UM) 1*32kB (U) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 947*4096kB (M) = 3887836kB [ 1237.659806][T20633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.682906][T20633] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1237.702181][T20633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.728661][T20633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1237.756823][T20633] 37215 total pagecache pages [ 1237.791737][T20633] 0 pages in swap cache [ 1237.811714][T20633] Free swap = 124996kB [ 1237.826675][T20633] Total swap = 124996kB [ 1237.839464][T20633] 2097051 pages RAM [ 1237.869540][T20633] 0 pages HighMem/MovableOnly [ 1237.894082][T20633] 427545 pages reserved [ 1237.921667][T20633] 0 pages cma reserved [ 1238.025666][T12330] [drm:udl_init] *ERROR* Selecting channel failed [ 1238.298068][T12330] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1238.313424][T12330] [drm] Initialized udl on minor 2 [ 1238.367463][T12330] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1238.440897][T12330] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1238.492213][T12330] usb 5-1: USB disconnect, device number 88 [ 1238.612390][T16526] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1238.673436][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.680144][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.845410][T20664] tipc: Started in network mode [ 1238.864896][T20664] tipc: Node identity , cluster identity 4711 [ 1238.887236][T20664] tipc: Failed to obtain node identity [ 1238.917254][T20664] tipc: Enabling of bearer rejected, failed to enable media [ 1241.171511][T20693] syzkaller0: entered promiscuous mode [ 1241.196260][T20693] syzkaller0: entered allmulticast mode [ 1241.313236][T20695] netlink: 'syz.2.3404': attribute type 1 has an invalid length. [ 1241.332806][T20695] netlink: 'syz.2.3404': attribute type 1 has an invalid length. [ 1241.856563][T20708] binder: 20707:20708 ioctl 4018620d 0 returned -22 [ 1242.798222][T12330] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1242.992625][T12330] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1243.031001][T12330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.099227][T12330] usb 4-1: config 0 descriptor?? [ 1243.212094][T12330] cp210x 4-1:0.0: cp210x converter detected [ 1243.638844][T12330] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1243.931142][T12330] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1244.806513][T20742] tipc: Started in network mode [ 1244.811635][T20742] tipc: Node identity , cluster identity 4711 [ 1244.817875][T20742] tipc: Failed to obtain node identity [ 1244.839596][T20742] tipc: Enabling of bearer rejected, failed to enable media [ 1245.110938][T20748] tipc: Started in network mode [ 1245.116266][T20748] tipc: Node identity , cluster identity 4711 [ 1245.134247][T20748] tipc: Failed to obtain node identity [ 1245.155578][T20748] tipc: Enabling of bearer rejected, failed to enable media [ 1245.569464][T20754] binder_alloc: 20753: binder_alloc_buf, no vma [ 1245.658022][T20758] tipc: Started in network mode [ 1245.665482][T20758] tipc: Node identity , cluster identity 4711 [ 1245.665865][ T5895] usb 4-1: USB disconnect, device number 85 [ 1245.672512][T20758] tipc: Failed to obtain node identity [ 1245.688750][T20758] tipc: Enabling of bearer rejected, failed to enable media [ 1245.730931][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1245.769527][ T5895] cp210x 4-1:0.0: device disconnected [ 1245.800877][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1246.208260][T12330] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1246.378060][T12330] usb 5-1: Using ep0 maxpacket: 16 [ 1246.390853][T12330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.414434][T12330] usb 5-1: config 0 has no interfaces? [ 1246.434443][T12330] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1246.444375][T12330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.467871][T12330] usb 5-1: Product: syz [ 1246.476250][T12330] usb 5-1: Manufacturer: syz [ 1246.485600][T12330] usb 5-1: SerialNumber: syz [ 1246.506673][T12330] usb 5-1: config 0 descriptor?? [ 1246.737499][T12330] usb 5-1: USB disconnect, device number 89 [ 1247.159002][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1247.311634][T20779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1247.432504][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1247.448827][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1247.777457][T20790] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1248.171471][T15521] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 1248.178522][T15521] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 1248.209042][T20797] lo: MTU too low for tipc bearer [ 1248.226569][T20797] tipc: Enabling of bearer rejected, failed to enable media [ 1248.710166][T20810] tipc: Started in network mode [ 1248.738093][T20810] tipc: Node identity ae7c566c187c, cluster identity 4711 [ 1248.769123][T20810] tipc: Enabled bearer , priority 0 [ 1248.785965][T20813] syzkaller0: entered promiscuous mode [ 1248.815386][T20813] syzkaller0: entered allmulticast mode [ 1248.891797][T20810] tipc: Resetting bearer [ 1248.900487][T20810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.985834][T20809] tipc: Resetting bearer [ 1249.053141][T20809] tipc: Disabling bearer [ 1249.303732][T20818] syzkaller0: entered promiscuous mode [ 1249.323970][T20818] syzkaller0: entered allmulticast mode [ 1249.429495][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.453461][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.483325][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.520795][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.586022][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.619774][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.655214][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.690532][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.736739][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.787019][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.837520][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.845420][T20826] syzkaller0: entered promiscuous mode [ 1249.845442][T20826] syzkaller0: entered allmulticast mode [ 1249.854177][T20826] 0: reclassify loop, rule prio 0, protocol 700 [ 1249.921105][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1249.983942][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1250.033282][T20821] binder: 20820:20821 ioctl 4020ae46 7fccb0bf8fc0 returned -22 [ 1250.122541][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1250.202268][T20834] syzkaller0: entered promiscuous mode [ 1250.208180][T20834] syzkaller0: entered allmulticast mode [ 1250.380037][T20839] syzkaller0: entered promiscuous mode [ 1250.398325][T20839] syzkaller0: entered allmulticast mode [ 1250.658656][T12330] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1250.830179][T12330] usb 3-1: config 0 has no interfaces? [ 1250.836909][T12330] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1250.847499][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.864771][T12330] usb 3-1: config 0 descriptor?? [ 1251.062373][T20849] syzkaller0: entered promiscuous mode [ 1251.068601][T20849] syzkaller0: entered allmulticast mode [ 1251.204707][T12330] usb 3-1: USB disconnect, device number 90 [ 1251.687389][T20856] syzkaller0: entered promiscuous mode [ 1251.697482][T20856] syzkaller0: entered allmulticast mode [ 1251.999238][T20859] syzkaller0: entered promiscuous mode [ 1252.005189][T20859] syzkaller0: entered allmulticast mode [ 1252.347656][T20865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1253.129266][T12330] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1253.300880][T12330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.314271][T12330] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1253.324443][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.347711][T12330] usb 3-1: config 0 descriptor?? [ 1253.361811][T12330] pwc: Askey VC010 type 2 USB webcam detected. [ 1253.764997][T12330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1253.786797][T12330] pwc: recv_control_msg error -32 req 02 val 2700 [ 1253.822644][T12330] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1253.865158][T12330] pwc: recv_control_msg error -32 req 04 val 1000 [ 1253.888854][T12330] pwc: recv_control_msg error -32 req 04 val 1300 [ 1253.907174][T12330] pwc: recv_control_msg error -32 req 04 val 1400 [ 1253.929069][T12330] pwc: recv_control_msg error -32 req 02 val 2000 [ 1253.949133][T12330] pwc: recv_control_msg error -32 req 02 val 2100 [ 1253.974154][T12330] pwc: recv_control_msg error -32 req 04 val 1500 [ 1254.000475][T12330] pwc: recv_control_msg error -32 req 02 val 2500 [ 1254.035322][T12330] pwc: recv_control_msg error -32 req 02 val 2400 [ 1254.066633][T12330] pwc: recv_control_msg error -32 req 02 val 2600 [ 1254.094485][T12330] pwc: recv_control_msg error -32 req 02 val 2900 [ 1254.124090][T12330] pwc: recv_control_msg error -32 req 02 val 2800 [ 1254.154221][T12330] pwc: recv_control_msg error -32 req 04 val 1100 [ 1254.198441][T20897] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1254.251132][T12330] pwc: Registered as video103. [ 1254.274923][T12330] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input112 [ 1254.471353][T12330] usb 3-1: USB disconnect, device number 91 [ 1255.088890][T20909] fuse: Unknown parameter 'r “ãþootmode' [ 1255.112880][T20903] kvm: emulating exchange as write [ 1256.324025][T20927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3479'. [ 1256.932559][T20930] syz.0.3481: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1256.968343][T20930] CPU: 0 UID: 0 PID: 20930 Comm: syz.0.3481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.968378][T20930] Tainted: [L]=SOFTLOCKUP [ 1256.968384][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1256.968391][T20930] Call Trace: [ 1256.968397][T20930] [ 1256.968403][T20930] dump_stack_lvl+0xe8/0x150 [ 1256.968424][T20930] warn_alloc+0x249/0x340 [ 1256.968441][T20930] ? __pfx_warn_alloc+0x10/0x10 [ 1256.968464][T20930] __vmalloc_node_range_noprof+0x132/0x1750 [ 1256.968478][T20930] ? __mutex_trylock_common+0x158/0x260 [ 1256.968492][T20930] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1256.968509][T20930] ? trace_contention_end+0x3d/0x140 [ 1256.968523][T20930] ? __mutex_lock+0x319/0x1550 [ 1256.968539][T20930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1256.968551][T20930] ? tomoyo_path_number_perm+0x219/0x630 [ 1256.968567][T20930] ? dvb_demux_do_ioctl+0x320/0x540 [ 1256.968581][T20930] ? __pfx___mutex_lock+0x10/0x10 [ 1256.968593][T20930] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1256.968606][T20930] vmalloc_noprof+0xb2/0xe0 [ 1256.968618][T20930] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1256.968632][T20930] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1256.968647][T20930] dvb_demux_do_ioctl+0x45d/0x540 [ 1256.968661][T20930] dvb_usercopy+0x199/0x2e0 [ 1256.968674][T20930] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1256.968695][T20930] ? __pfx_dvb_usercopy+0x10/0x10 [ 1256.968720][T20930] ? __fget_files+0x3a0/0x420 [ 1256.968731][T20930] ? __fget_files+0x2a/0x420 [ 1256.968743][T20930] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1256.968754][T20930] dvb_demux_ioctl+0x29/0x40 [ 1256.968767][T20930] __se_sys_ioctl+0xfc/0x170 [ 1256.968780][T20930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.968792][T20930] do_syscall_64+0x15f/0xf80 [ 1256.968801][T20930] ? trace_irq_disable+0x3b/0x140 [ 1256.968815][T20930] ? clear_bhb_loop+0x40/0x90 [ 1256.968827][T20930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.968838][T20930] RIP: 0033:0x7f1490b9c819 [ 1256.968850][T20930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.968865][T20930] RSP: 002b:00007f14919d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.968886][T20930] RAX: ffffffffffffffda RBX: 00007f1490e15fa0 RCX: 00007f1490b9c819 [ 1256.968900][T20930] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1256.968908][T20930] RBP: 00007f1490c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1256.968916][T20930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.968922][T20930] R13: 00007f1490e16038 R14: 00007f1490e15fa0 R15: 00007f1490f3fa48 [ 1256.968939][T20930] [ 1256.970137][T20930] Mem-Info: [ 1257.472172][T20930] active_anon:25383 inactive_anon:0 isolated_anon:0 [ 1257.472172][T20930] active_file:14826 inactive_file:4067 isolated_file:0 [ 1257.472172][T20930] unevictable:768 dirty:274 writeback:0 [ 1257.472172][T20930] slab_reclaimable:11230 slab_unreclaimable:120078 [ 1257.472172][T20930] mapped:31671 shmem:18330 pagetables:1703 [ 1257.472172][T20930] sec_pagetables:0 bounce:0 [ 1257.472172][T20930] kernel_misc_reclaimable:0 [ 1257.472172][T20930] free:1299172 free_pcp:13034 free_cma:0 [ 1257.618251][T20930] Node 0 active_anon:102932kB inactive_anon:0kB active_file:59260kB inactive_file:16128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126640kB dirty:1088kB writeback:0kB shmem:71784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:6668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1257.731573][T20930] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1257.848604][T20930] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.962742][T20930] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 1257.976661][T20938] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1257.983200][T20938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1258.055788][T20930] Node 0 DMA32 free:1293564kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102212kB inactive_anon:0kB active_file:59260kB inactive_file:16140kB unevictable:1536kB writepending:1076kB zspages:0kB present:3129332kB managed:2550972kB mlocked:0kB bounce:0kB free_pcp:35504kB local_pcp:20768kB free_cma:0kB [ 1258.133405][T20938] vhci_hcd vhci_hcd.0: Device attached [ 1258.228862][T20930] lowmem_reserve[]: 0 0 0 0 0 [ 1258.237694][T20930] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:592kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.278114][ T5895] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1258.310592][T20930] lowmem_reserve[]: 0 0 0 0 0 [ 1258.331171][T20930] Node 1 Normal free:3889348kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14260kB local_pcp:0kB free_cma:0kB [ 1258.417850][T20930] lowmem_reserve[]: 0 0 0 0 0 [ 1258.417893][T20930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1258.418508][T20930] Node 0 DMA32: 1769*4kB (UME) 2471*8kB (UME) 3192*16kB (UME) 1528*32kB (UME) 1049*64kB (UME) 766*128kB (UME) 477*256kB (UME) 303*512kB (UM) 253*1024kB (UM) 36*2048kB (UM) 96*4096kB (UM) = 1295260kB [ 1258.418661][T20930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.418722][T20930] Node 1 Normal: 5*4kB (U) 4*8kB (U) 5*16kB (UM) 0*32kB 1*64kB (M) 2*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 947*4096kB (M) = 3889348kB [ 1258.418813][T20930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.418823][T20930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.418832][T20930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.418841][T20930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.418850][T20930] 37223 total pagecache pages [ 1258.418855][T20930] 0 pages in swap cache [ 1258.418860][T20930] Free swap = 124996kB [ 1258.418865][T20930] Total swap = 124996kB [ 1258.418871][T20930] 2097051 pages RAM [ 1258.418876][T20930] 0 pages HighMem/MovableOnly [ 1258.418880][T20930] 427545 pages reserved [ 1258.418885][T20930] 0 pages cma reserved [ 1258.429089][T16526] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1258.435792][ T5895] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1258.586095][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.594510][ T5895] usb 3-1: Product: syz [ 1258.601865][ T5895] usb 3-1: Manufacturer: syz [ 1258.606669][ T5895] usb 3-1: SerialNumber: syz [ 1258.839862][T20939] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1258.856084][ T1018] vhci_hcd vhci_hcd.2: stop threads [ 1258.865206][ T1018] vhci_hcd vhci_hcd.2: release socket [ 1258.874098][ T1018] vhci_hcd vhci_hcd.2: disconnect device [ 1258.940440][ T5895] rtl8150 3-1:1.0: couldn't reset the device [ 1258.960645][ T5895] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1259.001287][ T5895] usb 3-1: USB disconnect, device number 92 [ 1259.323747][T20957] syzkaller0: entered promiscuous mode [ 1259.335558][T20957] syzkaller0: entered allmulticast mode [ 1259.692744][T20963] syzkaller0: entered promiscuous mode [ 1259.700971][T20963] syzkaller0: entered allmulticast mode [ 1260.179664][T20972] simple: basic_1 [ 1260.185051][T20972] simple: basic_2 [ 1260.188752][T20972] simple: basic_3 [ 1260.192390][T20972] simple: basic_4 [ 1260.196007][T20972] simple: basic_5 [ 1260.199666][T20972] simple: basic_6 [ 1260.203291][T20972] simple: basic_7 [ 1260.206977][T20972] simple: basic_8 [ 1260.210628][T20972] simple: basic_9 [ 1260.214270][T20972] simple: basic_10 [ 1260.218012][T20972] simple: basic_11 [ 1260.221731][T20972] simple: basic_12 [ 1260.225568][T20972] simple: basic_13 [ 1260.229351][T20972] simple: basic_14 [ 1260.233093][T20972] simple: basic_15 [ 1260.236799][T20972] simple: basic_16 [ 1260.240555][T20972] simple: basic_17 [ 1260.244284][T20972] 0: reclassify loop, rule prio 0, protocol 800 [ 1260.348249][T12330] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1260.528829][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1260.541646][T12330] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1260.566047][T12330] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1260.588586][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.644617][T12330] usb 4-1: Product: syz [ 1260.661074][T12330] usb 4-1: Manufacturer: syz [ 1260.682278][T12330] usb 4-1: SerialNumber: syz [ 1260.731094][T12330] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1260.758739][T12330] r8152-cfgselector 4-1: config 0 descriptor?? [ 1260.904363][T20995] dummy0: left allmulticast mode [ 1261.028074][T12330] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1261.047258][T12330] r8152-cfgselector 4-1: No union descriptors [ 1261.666649][T21001] tipc: Started in network mode [ 1261.680672][T21001] tipc: Node identity , cluster identity 4711 [ 1261.702435][T21001] tipc: Failed to obtain node identity [ 1261.715414][T21001] tipc: Enabling of bearer rejected, failed to enable media [ 1262.055160][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1263.084783][ T5895] r8152-cfgselector 4-1: USB disconnect, device number 86 [ 1263.548901][T16526] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1264.147398][T21026] kvm: kvm [21025]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffec00008924 [ 1264.216278][T21026] kvm: kvm [21025]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffffff5600004f44 [ 1264.253014][T21026] kvm: kvm [21025]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffec00001199 [ 1264.285009][T21026] kvm: kvm [21025]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1265.674675][T21045] syzkaller0: left promiscuous mode [ 1265.688519][T21045] syzkaller0: left allmulticast mode [ 1266.190915][T17479] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1266.358619][T17479] usb 3-1: Using ep0 maxpacket: 8 [ 1266.371989][T17479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.393786][T17479] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1266.432153][T17479] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1266.452120][T17479] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1266.475149][T17479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.506863][T17479] usb 3-1: config 0 descriptor?? [ 1266.541841][T17479] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1266.625905][T21055] tipc: Started in network mode [ 1266.631719][T21055] tipc: Node identity 8aa16c2b41f5, cluster identity 4711 [ 1266.640940][T21055] tipc: Enabled bearer , priority 0 [ 1266.661313][T21055] syzkaller0: entered promiscuous mode [ 1266.667894][T21055] syzkaller0: entered allmulticast mode [ 1266.739810][T21055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1266.762194][T21055] tipc: Resetting bearer [ 1266.785497][T21054] tipc: Resetting bearer [ 1266.820896][T21054] tipc: Disabling bearer [ 1267.528095][T17479] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1267.543834][T21071] syzkaller0: entered promiscuous mode [ 1267.572734][T21071] syzkaller0: entered allmulticast mode [ 1267.808847][T17479] usb 4-1: Using ep0 maxpacket: 16 [ 1267.827055][T17479] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1267.888849][T17479] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1267.926526][T17479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.945957][T17479] usb 4-1: Product: syz [ 1267.954759][T17479] usb 4-1: Manufacturer: syz [ 1267.990689][T17479] usb 4-1: SerialNumber: syz [ 1268.119483][T17479] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1268.149456][T17479] r8152-cfgselector 4-1: config 0 descriptor?? [ 1268.365340][T17479] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1268.377536][T17479] r8152-cfgselector 4-1: No union descriptors [ 1269.028885][T16526] usb 3-1: USB disconnect, device number 93 [ 1270.289663][T21101] fuse: Unknown parameter './file0' [ 1270.998260][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1271.025609][T17479] r8152-cfgselector 4-1: USB disconnect, device number 87 [ 1271.052499][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1271.079101][T21106] team_slave_1: entered promiscuous mode [ 1271.142464][T21106] macvtap1: entered promiscuous mode [ 1271.184559][T21106] team0: entered promiscuous mode [ 1271.232831][T21106] macvtap1: entered allmulticast mode [ 1271.259100][T21106] team0: entered allmulticast mode [ 1271.265124][T21106] team_slave_1: entered allmulticast mode [ 1271.273858][T21106] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1271.337561][T21107] team0: left allmulticast mode [ 1271.378075][T21107] team_slave_1: left allmulticast mode [ 1271.408399][T21107] team0: left promiscuous mode [ 1271.413706][T21107] team_slave_1: left promiscuous mode [ 1273.018075][T17479] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1273.179594][T17479] usb 3-1: not running at top speed; connect to a high speed hub [ 1273.212386][T17479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.254648][T17479] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1273.286171][T17479] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1273.315590][T17479] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1273.333745][T17479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.361610][T17479] usb 3-1: Product: syz [ 1273.373750][T17479] usb 3-1: Manufacturer: syz [ 1273.386127][T17479] usb 3-1: SerialNumber: syz [ 1273.957039][ T29] audit: type=1326 audit(1776721999.403:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21153 comm="syz.4.3535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccafd9c819 code=0x0 [ 1275.090694][T21161] QAT: Device 11 not found [ 1275.464365][T21169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1275.730001][T12330] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1275.868183][T12330] usb 4-1: device descriptor read/64, error -71 [ 1276.118016][T12330] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1276.160790][T17479] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input113 [ 1276.212943][ T5196] bcm5974 3-1:1.0: could not read from device [ 1276.253315][T17479] usb 3-1: USB disconnect, device number 94 [ 1276.267125][ T5196] bcm5974 3-1:1.0: could not read from device [ 1276.287478][T12330] usb 4-1: device descriptor read/64, error -71 [ 1276.375593][ T5196] bcm5974 3-1:1.0: could not read from device [ 1276.419688][T12330] usb usb4-port1: attempt power cycle [ 1276.772457][T21184] syzkaller0: entered promiscuous mode [ 1276.778209][T12330] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1276.786227][T21184] syzkaller0: entered allmulticast mode [ 1276.818309][T12330] usb 4-1: device descriptor read/8, error -71 [ 1277.069280][T12330] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1277.108842][T12330] usb 4-1: device descriptor read/8, error -71 [ 1277.244668][T12330] usb usb4-port1: unable to enumerate USB device [ 1278.096144][T21207] syzkaller0: entered promiscuous mode [ 1278.110283][T21207] syzkaller0: entered allmulticast mode [ 1278.942929][T12330] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1279.012906][T21215] tipc: Started in network mode [ 1279.019092][T21215] tipc: Node identity , cluster identity 4711 [ 1279.025321][T21215] tipc: Failed to obtain node identity [ 1279.035486][T21215] tipc: Enabling of bearer rejected, failed to enable media [ 1279.128044][T12330] usb 4-1: Using ep0 maxpacket: 16 [ 1279.140801][T12330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.184722][T12330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.206294][T12330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.224395][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.249160][T12330] usb 4-1: Product: syz [ 1279.255074][T12330] usb 4-1: Manufacturer: syz [ 1279.267163][T12330] usb 4-1: SerialNumber: syz [ 1279.295999][T12330] usb 4-1: 0:2 : does not exist [ 1279.489253][ T5895] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1279.688351][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 1279.728864][ T5895] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1279.759644][ T5895] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1279.795755][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.816962][ T5895] usb 5-1: Product: syz [ 1279.826455][ T5895] usb 5-1: Manufacturer: syz [ 1279.836961][ T5895] usb 5-1: SerialNumber: syz [ 1279.870267][ T5895] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1279.888190][ T5895] r8152-cfgselector 5-1: config 0 descriptor?? [ 1280.152793][T21230] veth0_vlan: entered allmulticast mode [ 1280.185566][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1280.280158][T21230] veth0_vlan (unregistering): left allmulticast mode [ 1282.155992][T17479] usb 4-1: USB disconnect, device number 92 [ 1282.547450][ T5895] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1282.603779][ T5895] r8152-cfgselector 5-1: No union descriptors [ 1282.659539][ T5895] r8152-cfgselector 5-1: USB disconnect, device number 90 [ 1282.980571][ T807] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1283.158468][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 1283.230227][ T807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1283.292825][ T807] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1283.332384][ T807] usb 4-1: config 7 has an invalid descriptor of length 55, skipping remainder of the config [ 1283.377380][ T807] usb 4-1: config 7 has no interface number 0 [ 1283.415633][ T807] usb 4-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 1283.462826][ T807] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x87 has invalid maxpacket 65482, setting to 1024 [ 1283.516182][ T807] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1283.577533][ T807] usb 4-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.644133][ T807] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1283.704130][ T807] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1283.735586][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.775555][ T807] usb 4-1: Product: syz [ 1283.796773][ T807] usb 4-1: Manufacturer: syz [ 1283.814659][ T807] usb 4-1: SerialNumber: syz [ 1283.856179][T21257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1284.148254][ T807] usb 4-1: Limiting number of CPorts to U8_MAX [ 1284.260877][ T807] usb 4-1: Not enough endpoints found in device, aborting! [ 1285.027165][T21280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1025 (2050 ns) > initial count (14 ns). Using initial count to start timer. [ 1285.445483][T21292] syzkaller0: entered promiscuous mode [ 1285.458344][T21292] syzkaller0: entered allmulticast mode [ 1285.668853][T12330] usb 4-1: USB disconnect, device number 93 [ 1285.930096][T21302] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1288.224769][ T29] audit: type=1400 audit(1776722013.653:1012): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=21321 comm="syz.2.3578" [ 1288.231047][T21329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1288.435100][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1288.462431][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1291.140275][T21354] syzkaller0: entered promiscuous mode [ 1291.155140][T21354] syzkaller0: entered allmulticast mode [ 1291.187525][T21354] tc action pedit offset must be on 32 bit boundaries [ 1291.378059][T12330] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1291.539925][T12330] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1291.550778][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.562180][T12330] usb 3-1: config 0 descriptor?? [ 1291.572094][T12330] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1291.977171][T12330] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1292.256633][T21370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.271477][T21370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.515054][T12330] gspca_cpia1: usb_control_msg 02, error -32 [ 1292.536496][T12330] gspca_cpia1: usb_control_msg 02, error -71 [ 1292.544310][T12330] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1292.570640][T12330] usb 3-1: USB disconnect, device number 95 [ 1293.240847][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1293.263022][T21381] veth0: entered promiscuous mode [ 1293.290521][T21381] veth0: left promiscuous mode [ 1293.313329][T21382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3595'. [ 1293.572179][T21384] syzkaller0: entered promiscuous mode [ 1293.587891][T21384] syzkaller0: entered allmulticast mode [ 1295.977445][T21421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3608'. [ 1296.008006][T12330] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1296.181341][T12330] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1296.212639][T12330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.243698][T12330] usb 4-1: config 0 descriptor?? [ 1296.266185][T12330] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1296.389993][T21424] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1296.396146][T21424] syzkaller0: group set to 0 [ 1296.673976][T12330] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1297.001843][T21414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.029116][T21414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.397775][T12330] gspca_cpia1: usb_control_msg 02, error -32 [ 1297.458078][T12330] gspca_cpia1: usb_control_msg 02, error -71 [ 1297.464190][T12330] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1297.482305][T12330] usb 4-1: USB disconnect, device number 94 [ 1299.483547][T21457] trusted_key: encrypted_key: insufficient parameters specified [ 1300.125903][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.150582][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.518215][T16526] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1300.702049][T16526] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1300.712482][T16526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.737815][T16526] usb 5-1: Product: syz [ 1300.749257][T16526] usb 5-1: Manufacturer: syz [ 1300.759246][T16526] usb 5-1: SerialNumber: syz [ 1301.013183][T15521] Bluetooth: hci3: unexpected event for opcode 0x000b [ 1301.187800][T16526] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1301.187962][T16526] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1301.188774][T16526] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1301.188806][T16526] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1301.189171][T16526] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1301.199176][T16526] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1301.467602][T21429] Set syz1 is full, maxelem 65536 reached [ 1303.020768][T21505] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1303.305590][T16526] usb 5-1: USB disconnect, device number 91 [ 1303.467492][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1303.524507][T21508] dummy0: entered promiscuous mode [ 1303.552272][T21508] macsec1: entered promiscuous mode [ 1303.575504][T21508] vlan3: entered promiscuous mode [ 1303.931684][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1304.155534][T21512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.286988][ C1] sd 0:0:1:0: [sda] tag#7957 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1304.297605][ C1] sd 0:0:1:0: [sda] tag#7957 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 1305.530481][T21536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.299278][T21548] loop6: detected capacity change from 0 to 2640 [ 1306.327442][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.357471][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.378736][T21549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1306.409903][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.438276][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.481480][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.517605][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.555293][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.592543][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.604719][T21548] ldm_validate_partition_table(): Disk read failed. [ 1306.629678][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.685484][T21548] Buffer I/O error on dev loop6, logical block 0, async page read [ 1306.709071][T21548] Dev loop6: unable to read RDB block 0 [ 1306.729527][T21548] loop6: unable to read partition table [ 1306.765826][T21548] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1306.855456][ T5211] ldm_validate_partition_table(): Disk read failed. [ 1306.876327][ T5211] Dev loop6: unable to read RDB block 0 [ 1306.895950][ T5211] loop6: unable to read partition table [ 1307.585750][T21573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1309.129102][T16526] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1309.328654][T16526] usb 4-1: Using ep0 maxpacket: 16 [ 1309.340134][T16526] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.364571][T16526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1309.404915][T16526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1309.438366][T16526] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1309.459592][T16526] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.511075][T16526] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1309.536263][T16526] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1309.554816][T16526] usb 4-1: Manufacturer: syz [ 1309.574550][T16526] usb 4-1: config 0 descriptor?? [ 1312.739048][T16526] rc_core: IR keymap rc-hauppauge not found [ 1312.752053][T16526] Registered IR keymap rc-empty [ 1312.771642][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1312.828204][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1312.881775][T16526] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1312.955859][T16526] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 1313.057489][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.083017][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.119569][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.184702][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.229047][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.283709][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.348364][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.439562][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.478120][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.509221][T16526] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.553693][T16526] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1313.559664][T21645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3659'. [ 1313.622025][T16526] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1313.766786][T16526] usb 4-1: USB disconnect, device number 95 [ 1314.001937][T21647] libceph: resolve '0..' (ret=-3): failed [ 1314.161881][T21647] netlink: 'syz.0.3658': attribute type 72 has an invalid length. [ 1314.196395][T21647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1318.098031][ T807] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1318.248123][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 1318.255159][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.276511][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.314966][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1318.373123][ T807] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1318.402454][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.440222][ T807] usb 5-1: config 0 descriptor?? [ 1318.876767][ T807] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1318.924408][ T807] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1318.929350][T21702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1319.056395][ T807] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1319.068315][ T807] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1319.086576][ T807] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 1319.178359][ T807] input: HID 0955:7214 Haptics as /devices/virtual/input/input116 [ 1319.284207][T21694] random: crng reseeded on system resumption [ 1319.603226][ T807] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 1319.637144][ T807] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1319.742633][T16526] usb 5-1: USB disconnect, device number 92 [ 1319.758398][ T807] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1319.812171][ T807] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1319.894532][ T807] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1319.963936][ T807] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1319.981733][T21709] tipc: Enabled bearer , priority 10 [ 1320.858181][ T807] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1321.018055][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 1321.039258][ T807] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1321.064927][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.073381][ T5895] tipc: Node number set to 3053475436 [ 1321.102415][ T807] usb 3-1: Product: syz [ 1321.116038][ T807] usb 3-1: Manufacturer: syz [ 1321.136419][T21723] IPVS: Error connecting to the multicast addr [ 1321.145359][ T807] usb 3-1: SerialNumber: syz [ 1321.175526][ T807] usb 3-1: config 0 descriptor?? [ 1321.210422][ T807] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1321.234802][T21723] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1321.250954][ T807] dvb-usb: bulk message failed: -22 (2/0) [ 1321.299909][ T807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1321.321321][ T807] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1321.347802][ T807] usb 3-1: media controller created [ 1321.413258][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.452594][ T807] dvb-usb: bulk message failed: -22 (1/0) [ 1321.526259][ T807] DVB: Unable to find symbol mt352_attach() [ 1321.540150][ T807] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1321.653518][T21717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.668116][ T807] rc_core: IR keymap rc-dvico-portable not found [ 1321.687652][ T807] Registered IR keymap rc-empty [ 1321.692923][T21717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.716034][ T807] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1321.750986][T21717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.760846][ T807] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input117 [ 1321.777156][T21717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.792044][ T807] dvb-usb: schedule remote query interval to 100 msecs. [ 1321.805912][ T807] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1321.884213][T21717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1321.910646][ T807] dvb-usb: bulk message failed: -22 (1/0) [ 1322.029746][ T807] dvb-usb: bulk message failed: -22 (1/0) [ 1322.055731][ T807] usb 3-1: USB disconnect, device number 96 [ 1322.189268][T21742] xt_TCPMSS: Only works on TCP SYN packets [ 1322.206193][ T807] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1323.802654][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1324.686132][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1324.728867][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1324.775988][T21769] bridge0: entered promiscuous mode [ 1324.795821][T21769] ip6gretap0: entered promiscuous mode [ 1324.806265][T21769] debugfs: 'hsr1' already exists in 'hsr' [ 1324.820180][T21769] Cannot create hsr debugfs directory [ 1324.950772][ C0] [ 1324.953118][ C0] ============================================ [ 1324.959249][ C0] WARNING: possible recursive locking detected [ 1324.965388][ C0] syzkaller #0 Tainted: G L [ 1324.971345][ C0] -------------------------------------------- [ 1324.977561][ C0] syz.0.3682/21748 is trying to acquire lock: [ 1324.983605][ C0] ffff888034058fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1324.992641][ C0] [ 1324.992641][ C0] but task is already holding lock: [ 1325.000005][ C0] ffff888055b6cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1325.010343][ C0] [ 1325.010343][ C0] other info that might help us debug this: [ 1325.018399][ C0] Possible unsafe locking scenario: [ 1325.018399][ C0] [ 1325.025921][ C0] CPU0 [ 1325.029189][ C0] ---- [ 1325.032454][ C0] lock(&hsr->seqnr_lock); [ 1325.037031][ C0] lock(&hsr->seqnr_lock); [ 1325.041527][ C0] [ 1325.041527][ C0] *** DEADLOCK *** [ 1325.041527][ C0] [ 1325.049743][ C0] May be due to missing lock nesting notation [ 1325.049743][ C0] [ 1325.058051][ C0] 9 locks held by syz.0.3682/21748: [ 1325.063241][ C0] #0: ffff8880701e38f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xd60 [ 1325.073056][ C0] #1: ffffc90000007cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1325.083041][ C0] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1325.092155][ C0] #3: ffff888055b6cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1325.102831][ C0] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 1325.112294][ C0] #5: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1325.122190][ C0] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 1325.131436][ C0] #7: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1325.141347][ C0] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1325.150474][ C0] [ 1325.150474][ C0] stack backtrace: [ 1325.156354][ C0] CPU: 0 UID: 0 PID: 21748 Comm: syz.0.3682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.156370][ C0] Tainted: [L]=SOFTLOCKUP [ 1325.156375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1325.156382][ C0] Call Trace: [ 1325.156388][ C0] [ 1325.156394][ C0] dump_stack_lvl+0xe8/0x150 [ 1325.156412][ C0] print_deadlock_bug+0x279/0x290 [ 1325.156425][ C0] __lock_acquire+0x253f/0x2cf0 [ 1325.156442][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.156457][ C0] ? skb_network_protocol+0x234/0x400 [ 1325.156472][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1325.156484][ C0] lock_acquire+0x106/0x350 [ 1325.156498][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1325.156511][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1325.156524][ C0] ? lock_acquire+0x106/0x350 [ 1325.156538][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1325.156549][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1325.156570][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1325.156581][ C0] hsr_dev_xmit+0x237/0x360 [ 1325.156593][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 1325.156605][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1325.156621][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1325.156637][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1325.156652][ C0] ? ebt_do_table+0x2665/0x2830 [ 1325.156666][ C0] ? ebt_do_table+0x2665/0x2830 [ 1325.156681][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1325.156699][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 1325.156716][ C0] ? lock_acquire+0x106/0x350 [ 1325.156731][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1325.156745][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1325.156757][ C0] NF_HOOK+0x360/0x3f0 [ 1325.156769][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1325.156783][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1325.156795][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1325.156807][ C0] ? lock_acquire+0x106/0x350 [ 1325.156822][ C0] br_forward_finish+0xd3/0x130 [ 1325.156834][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1325.156846][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1325.156858][ C0] NF_HOOK+0x360/0x3f0 [ 1325.156870][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1325.156881][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1325.156892][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1325.156905][ C0] ? br_handle_vlan+0x3e7/0x530 [ 1325.156916][ C0] __br_forward+0x397/0x540 [ 1325.156927][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1325.156939][ C0] br_flood+0x6ee/0xb80 [ 1325.156953][ C0] ? br_dev_xmit+0x193/0x1990 [ 1325.156968][ C0] br_dev_xmit+0x12bd/0x1990 [ 1325.156982][ C0] ? br_dev_xmit+0x193/0x1990 [ 1325.156997][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 1325.157013][ C0] ? dev_queue_xmit_nit+0x6f1/0xad0 [ 1325.157027][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1325.157044][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1325.157058][ C0] ? handle_softirqs+0x22a/0x840 [ 1325.157073][ C0] ? __wake_up_common_lock+0x190/0x1f0 [ 1325.157087][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1325.157100][ C0] ? do_syscall_64+0x15f/0xf80 [ 1325.157112][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1325.157128][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 1325.157144][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1325.157156][ C0] ? skb_clone+0x246/0x3a0 [ 1325.157170][ C0] hsr_forward_skb+0x167e/0x2a80 [ 1325.157185][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 1325.157199][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1325.157213][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.157225][ C0] ? __asan_memset+0x22/0x50 [ 1325.157237][ C0] ? __skb_pad+0x405/0x610 [ 1325.157251][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 1325.157267][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1325.157280][ C0] hsr_announce+0x1db/0x370 [ 1325.157292][ C0] ? hsr_announce+0x89/0x370 [ 1325.157304][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1325.157315][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.157329][ C0] call_timer_fn+0x192/0x5e0 [ 1325.157338][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1325.157350][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1325.157359][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1325.157370][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.157384][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1325.157396][ C0] __run_timer_base+0x652/0x8b0 [ 1325.157410][ C0] ? ktime_get+0x45/0x220 [ 1325.157424][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1325.157441][ C0] run_timer_softirq+0xb7/0x170 [ 1325.157455][ C0] handle_softirqs+0x22a/0x840 [ 1325.157470][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1325.157485][ C0] __irq_exit_rcu+0xca/0x220 [ 1325.157499][ C0] irq_exit_rcu+0x9/0x30 [ 1325.157512][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1325.157528][ C0] [ 1325.157532][ C0] [ 1325.157536][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1325.157547][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1325.157576][ C0] Code: f7 e8 8d f4 e7 f5 f7 c3 00 02 00 00 74 05 e8 60 7d 13 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 76 d9 f5 65 8b 05 1d e3 85 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1325.157588][ C0] RSP: 0018:ffffc9001b75f688 EFLAGS: 00000206 [ 1325.157600][ C0] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 0000000080000001 [ 1325.157607][ C0] RDX: 0000000000000006 RSI: ffffffff8dfd5677 RDI: 0000000000000001 [ 1325.157614][ C0] RBP: 0000000000000000 R08: ffffffff903364f7 R09: 1ffffffff2066c9e [ 1325.157622][ C0] R10: dffffc0000000000 R11: fffffbfff2066c9f R12: 0000000000000001 [ 1325.157629][ C0] R13: ffff8880701e3a40 R14: ffff8880701e3a00 R15: ffff8880701e3a40 [ 1325.157641][ C0] __wake_up_common_lock+0x190/0x1f0 [ 1325.157656][ C0] __unix_dgram_recvmsg+0x485/0xd60 [ 1325.157673][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1325.157687][ C0] ? irqentry_exit+0x218/0x730 [ 1325.157696][ C0] ? trace_irq_disable+0x3b/0x140 [ 1325.157710][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.157725][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 1325.157735][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1325.157745][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 1325.157757][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 1325.157772][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1325.157789][ C0] ? import_iovec+0x73/0xa0 [ 1325.157800][ C0] ___sys_recvmsg+0x215/0x590 [ 1325.157815][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1325.157828][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1325.157844][ C0] do_recvmmsg+0x334/0x800 [ 1325.157859][ C0] ? cgroup1_freezing+0x20/0x350 [ 1325.157869][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1325.157890][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1325.157913][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1325.157939][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.157956][ C0] do_syscall_64+0x15f/0xf80 [ 1325.157973][ C0] ? trace_irq_disable+0x3b/0x140 [ 1325.157990][ C0] ? clear_bhb_loop+0x40/0x90 [ 1325.158001][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.158011][ C0] RIP: 0033:0x7f1490b9c819 [ 1325.158022][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.158030][ C0] RSP: 002b:00007f14919af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1325.158048][ C0] RAX: ffffffffffffffda RBX: 00007f1490e16090 RCX: 00007f1490b9c819 [ 1325.158056][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1325.158063][ C0] RBP: 00007f1490c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1325.158069][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1325.158076][ C0] R13: 00007f1490e16128 R14: 00007f1490e16090 R15: 00007f1490f3fa48 [ 1325.158086][ C0]