last executing test programs: 7.347288504s ago: executing program 3 (id=11054): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) fsopen(0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0xd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x6, 0x16, 0x1, {0x22, 0xdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x59, 0x4, 0x77}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x9, 0x4, 0x40, 0x42}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x4, 0x5}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}]}) 4.897316373s ago: executing program 4 (id=11060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x9, 0x0, 0xfff}, 0x2, 0x49b, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) fcntl$dupfd(r0, 0x0, r0) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x9, 0x0, 0xfff}, 0x2, 0x49b, 0x5}) (async) 4.873085139s ago: executing program 4 (id=11061): socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async, rerun: 32) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async, rerun: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r2, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) (async) renameat2(r3, &(0x7f00000001c0)='./file1/file4/file7/file5\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 4.52892542s ago: executing program 4 (id=11063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x1c4, 0x0, 0xaa8a}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{r5, 0x2004}], 0x1, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) io_pgetevents(0x0, 0xf, 0x0, &(0x7f0000000600), &(0x7f0000000400)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000140)={[0x7fffffff]}, 0xffffffffffffff34}) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r6, 0x200004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021008070900000028bd7000e1dbdf25070017000000000000fe8800000000000000000000000001010001000002004e2300"/72], 0x48}}, 0x20000014) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1d0, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf3e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4ab4a075}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb37}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x983}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfb}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x814}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000804) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r10, 0x29, 0x36, &(0x7f0000000300)=@dstopts={0x33}, 0x8) setsockopt$inet6_int(r10, 0x29, 0x17, &(0x7f0000000000), 0x4) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendfile(r4, r6, 0x0, 0x80001d00c0d1) 4.516480945s ago: executing program 0 (id=11064): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001380)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r2, @ANYBLOB="050400080000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08007000040007000a00180003030303030300000400080104000801080027000000000008002201a3010000080027000300000008002600161700000800220159020000080026006c09000005001801090000000800a100020000001400238006000100d700000006000d"], 0x1e8}}, 0x24000050) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x81, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0}) 4.424437979s ago: executing program 4 (id=11065): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000140)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r6, 0x8b21, &(0x7f0000000040)) syz_io_uring_setup(0x739, &(0x7f0000000180)={0x0, 0xf8f1, 0x4, 0x0, 0x340, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = open(0x0, 0x1850c2, 0x14c) ftruncate(r7, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r8, 0x0, 0x5, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 3.930950776s ago: executing program 1 (id=11068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xfd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x24048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) sendto$packet(r7, &(0x7f0000000080)="632c72b380f45b75617500fa08e9", 0xe, 0x4004, &(0x7f00000000c0)={0x11, 0x1, r10, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x400c1, &(0x7f00000001c0)={0x11, 0x88a8, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, &(0x7f00000001c0)='sysfs\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r13, 0xc0405602, &(0x7f0000000280)={0xfffffff7, 0x0, 0x2, "0fb536faf6326c56c357442b12c03888abb3ca45817ed28ab8848ea9068c24bd", 0x49433553}) 3.849120381s ago: executing program 3 (id=11069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 3.436131135s ago: executing program 3 (id=11070): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800008, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}, {@allow_other}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, 'comm\x00'}}, {@flag='ro'}]}}, 0x0, 0x0, &(0x7f0000000340)="99ef31327c578be51963ad08943e0f3f081511de86e2a4ec2bb51ba990982845bc0e06d18dbeb29f11efdf4b7f9ebb16db6cb40066f4b41110be3d87442c78f93bb251dbbe30d3787e1679ccb40c72995cfaa4af4fba0391e6506fb18f887283204c87acf122a43daf5a81eafdef9e8cc612ba90") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 3.324940057s ago: executing program 3 (id=11072): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000017540)="ff71829fe4a1c2b69161eb22301834c078051bf08c354ed79b422579c4f0028b231d2f66efe9fa31dfcc7d80923afb2ce209b6b2305f3ba55267a1927b76934c8c6e934eebf3dcc1aef7ea48d181dd69812fc6cd6103f0def060ff9d83775072deae1e4774b92f8fef33c8c2eb96023f0d7ce140c4df3e21a53f2341a941ab02c3abc724cc99a0dedd5f2918831bde14de8a8526f4000f2ee3424ee12f4eddb55cac2d8405261da648a9b048171be79909ae07d64d56645f04a784437468873fccd912d6e1768b0a5b07f9d9ae8a222d33db09222bc6b147028564c1edd12edd7dba141e69250d84697999bef065fc0a7326be5383ee0b374453b020446c2c12519837084ab888aae575531d4d527c6718ff6851a50d3bb125267b40b41c5a6ca053c17f1479c369339962329165461119d5123c2e17897c1b00054edf20eb85721aa5e447c26a2cea06651165151c9bac78d141b9b0974fbe2d0d080f53a9bdf0f0342bba32e5e18e5f0bf3fff60f97ea1962a9ba6a5fedbe378970dc4a35dbd19f80ef0c951c6e6943b7879fcd33054d4d3f1cfb93a7841279778ffb074c6b7b8f0986cce8d1c1e49c710fbd5a5a65d2eb9209a76a0b1e123c7864f4fed1b2ca77b355816cb47101fcf8d8d067645e287b5dc237c438d967cb8550c8d00017adc072fb5bf96deb9efb2a0d7431b02be050cfbe89ffafef354d0dca814fc15d60a7b4f0f26c7c715144a181ace6debf7aec4437c99f4ae2284bdc6ab99867c1039db1f0f92ea4d96e078cde653551e988287708fc7104db33a9d7dea654bf0f379a70fd145c17a2ed50b8207b1a2b8d1a268500fff8372e5f491968d3e15e1b0d2e18b5e27c6728b1a9503d20441422c30be1c06009098123b4d9d0e4028232b41a805293b49c3eb93bb81cabd77617e58852b14e473a6fd50ad533fd321ac073e09b2a0fd854567cfdc14910d971ce9a415c6b89bdc6c122e339f4870dcd3813f13307c2d7f9fa51dbff64faf63ede2facb77734c08e59b1253ea21a7c692709ef9f2a5bd7a2163990e3086ca7e5dfa133e666fc6b28512decdd595b52e70dd80dd5d4e4a6a6f899e69525e668e8ca0b687e014756cc8018d58715ea3426ab988cc226ad55aaa6ea22258af4dbc59b9d0dbfdcb7ab75a75ed3c879b09313cea39c47e12e09f56e55cc68c844a35e3236f5eef4eb20935bf69e70fd8da82c7c26522fd0b988a21da4b26666bb5048761b7680bdc21e2e8c4f2cea045a7ab0b475858bf53a24723c1a86e66a352b139b07c756af6a1c30b83fbf8a973c965de9328b6d9a73b97425753b1c3a481acec639442255dba72712848a05d19cb99762becf6c179d6f9e55202ed739eb97a4b852769aed7222c4b832db4cdbae30", 0x3de}], 0x1}}], 0x1, 0xc001) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x17) userfaultfd(0x80001) 3.241103294s ago: executing program 1 (id=11073): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$KVM_SMI(r1, 0xaeb7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) syz_usb_connect(0x5, 0x30e, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x76, 0x60, 0xdc, 0x20, 0x1b80, 0xe424, 0x1b34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fc, 0x1, 0xc, 0xbf, 0x10, 0x7, [{{0x9, 0x4, 0x7f, 0x3, 0xc, 0x8e, 0x2f, 0xab, 0x8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7b4709fb"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xdaab, 0x6, 0x1f}, {0x6, 0x24, 0x1a, 0x9, 0x14}, [@obex={0x5, 0x24, 0x15, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x8, 0x7fff}]}], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0xaa, 0xb9, [@generic={0x7e, 0x21, "6830cce9a1546686afd0b6884b675eb1aacbe07f689487b9bc234d4dc3842669f1e76bb0a56b4140a9bdc3e7e12a62e9c73b76a18536df292d62106825bd754a8c5412ed61f220c509b64eebb203f23ca7a788c912c4de0fffc4d1b5cc3bc56ef3bce2a104232cf6c1073c1e8b4ba08218879925f3dd72651ac592f5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5b, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x8, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x87, 0x7}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x5, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x9, 0x5, 0x4, [@generic={0x22, 0xa, "da438d53f56cc4af8dfdcf45169aaf398813b2c6dbcd10baebd558a944dced0f"}, @generic={0x5f, 0x1, "e4a0a542339e36e3898cce3207533d0992914ec21c142ebd33e6b2e6b0cd43b91776c3abe0241516e1260214cf2b69656873f8e31f8615d392c58264931f41f0324f84bcc617a46ec2733057024e732f204511a875ed7568961b3fb713"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x8e, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x5, 0x5, 0x3, [@generic={0x92, 0x31, "3329caec0a03a277c19627c98df6dbb0d9f18aa281d39ce1ac9e3223c4c3c95650c212b4567339a866097d758c85a9c8f4a104e92c6f82366ee55fe332f9ae35845812824dab70d4b0d351f51275a8d7b0ffccfb34a1e0aec34bfe56edff7eb64b1d1387ef2aa08bcd17b7b8b3037fdf629f27f38f6e912b9a42d8ac721c9ab79c17052b42323cd18b25e8426f739902"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x0, 0x3, 0xa7, [@generic={0x4c, 0x23, "781bbbd42447ed6cb0b88e2b097f9a5271ad79f722db07dda979f79b113e3723b8c86a1c1195e02715e5255df81e5d8d1a008a3923fad1a867a09779ff026c40e21e25914a9944b186fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0x6, 0xf3}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xfb, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9f3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x40, 0x5a}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x8, 0x9, 0x4, [@generic={0x3b, 0x31, "ba4a1e2693caee02fd209ff804bcd4d34ae8f3ce90c6ce70510c946a7dda13e16b1abf2763be4c896093a2cb42fab99d6b9652a63eb954e7d0"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xc, 0x5, 0x0, 0xff, 0xb}, 0x11, &(0x7f0000000040)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xe0, 0x0, 0x2, 0xf, 0xffff}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x411}}, {0x2c, &(0x7f00000000c0)=@string={0x2c, 0x3, "41dc7b9fb75997bd0cdbbcd0ae9413fd8df84d21fe7e8d35b09b23a19713cd02c8396539adff273d8497"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}, {0xe9, &(0x7f0000000540)=@string={0xe9, 0x3, "2aebaac15626bd9f9ad652d4ba9aa1fee915d7fb27d91f8de38a8c04884cbae7f457da7bddd02c8d6a279dfbf8d9e1a3c834344236a53d585241859dcd9e6574de519d470dd7a783341f9cc97203d22a13aa51a225142f6695e76e15239465ea2b7d6a885737d69cb9ac9e07535d2f9afdc1810e46db1015b0275bd3ad57b714df27d56e2268cd26fbb72c0889b43e7864f576e7db76329a7a6ddc6acba0e12d36b61bfa2f13ce50c4b923b351ac2de2d27d4395b07fb960573c764a0882cebc3852bc0120a9784236faf613ae6d3c453fba1ad2fedd24fba13001f3db6f93d7953c829acd624b"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}]}) 2.837062916s ago: executing program 2 (id=11075): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x50}}, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r4}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r6 = dup3(r5, r0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) 2.616465427s ago: executing program 4 (id=11076): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000002"], 0x0) time(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000ffffffffffffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400080029"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.508274486s ago: executing program 4 (id=11077): r0 = getpid() ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)="69ca81bb66c98bb8127ed975d8cf077428b157d1a7f214925cd3ed6e380f764c31e92fe39f41aecaeb3d79b144100efe3e37b0b27c5160882c", 0x39}) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ee02000000000000000109022400010000c00009040000030300000009210000010122070009058103ff03000000"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x5, 0x0, &(0x7f0000002300)) syz_usb_control_io(r2, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, 0xfffffffffffffffe) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r3, 0x2272, 0x1000000000000) (async) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000740)={0x0, 0xd, 0x7, {0x7, 0x0, "8c8fde8535"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.354987711s ago: executing program 0 (id=11078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x801, 0xfffffdfe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x9c3, 0xd4}}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0xfffffffc, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}]}, 0x24}, 0x1, 0x0, 0x0, 0xc011}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000280), 0x40000000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x10c, r4, 0x2, 0x70bd2d, 0x2d, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xa00}, {0x5, 0x12, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x3fb}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xc}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48000}, 0x9110) socket$nl_generic(0x10, 0x3, 0x10) 1.991860446s ago: executing program 2 (id=11079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00fa8004000880040010800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.937839951s ago: executing program 2 (id=11080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 1.862565003s ago: executing program 0 (id=11081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070040000900020073797a3100000000100007800c00", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40408c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) syz_io_uring_setup(0x4056, &(0x7f0000000200)={0x0, 0x697a, 0x24000, 0x2, 0x1ed, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="00000095aa"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070040000900020073797a3100000000100007800c00", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40408c0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) (async) syz_io_uring_setup(0x4056, &(0x7f0000000200)={0x0, 0x697a, 0x24000, 0x2, 0x1ed, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0)) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="00000095aa"], 0x24}}, 0x0) (async) 1.84541086s ago: executing program 2 (id=11082): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000180), 0x0, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x7fffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) msgctl$IPC_RMID(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x10, 0xfff2}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.827814748s ago: executing program 0 (id=11083): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x808) 1.736353843s ago: executing program 0 (id=11084): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000180), 0x0, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x7fffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) msgctl$IPC_RMID(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x10, 0xfff2}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.713850601s ago: executing program 1 (id=11085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.346081304s ago: executing program 3 (id=11086): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x1000000, 0x54485746, 0x3, @stepwise={0x0, 0x80, 0xb923, 0x9, 0x8, 0x3}}) r1 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x80, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000d40)="01", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="b0000000daffffff", @ANYBLOB="f64488f51822f56a"], 0xb0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x8000, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) sendmsg$sock(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="36fedcc6748c6a040d179a8a557c2dcfb748b406676a7882baaad9a6870ae42fa356030b81bbf07da8d97c53161efa23bba49037b47ab921bfd49aaa", 0x3c}, {&(0x7f00000000c0)="5df06323beace9ce8eb7ef7712bc3f8792b69990b0f9d10bf91ed9880a25d742981b543eaab33b3614cbbc606d71d53dfb5575eac4096291fc698c02d13265af6b8e34278d714ee105383594cf3b6edf37d41f1f61ca6a12f59bdeefdc9b253bbeb632436400b83342cd90a4f02d", 0x6e}, {&(0x7f0000000140)="a4beb50d6200f4f6dda106f8b9645612a46ec3f1e3", 0x15}, {&(0x7f00000002c0)="08c539115526c1fdac0c483ec5be1cef3bead3fa2f377a2d56c69bd8074c6ec11eb4af75ef1f10aa6523a6b0f53f6bd5075942e6127b4fee5d4a6138d5f84f5426e6bdd559b042eac6f0b1311314512ef44fa1e36f80b5d66e601ae2465a59b729f4251fd33dbd89f82b7feeb0112c6a74845f1236884e5a724a5bfc2ece0a332b43a79c3d23677d4c4d017e10a8bafb7cda682fea1d8bda7143e70bee60ae38886f5a494ac59135873516d9d4a3fa52cd976295ef14ce7ee64aa09b358aadf6cbba947c5b9354fc2c0316b9950a97bc918063d660813c1d67bfb00a6f95d4d06172168b7b917b37b5ff2a926605dff9a0df", 0xf2}], 0x4, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x30}, 0x80) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x20004860}, 0x4000) 1.130281664s ago: executing program 1 (id=11087): io_setup(0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 704.298405ms ago: executing program 3 (id=11088): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20054840) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r5) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x1fc0, @empty, 0x5}}}, 0x38) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0xffff1c98, 0xfffffffa, 0x5, 0x40}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 539.737059ms ago: executing program 1 (id=11089): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg(r0, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000018c0)={0x2, 0x0, {&(0x7f00000008c0)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000080)={0x1, {&(0x7f0000000640)=""/228, 0xe4, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 257.351998ms ago: executing program 1 (id=11090): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000008a00)=[{{&(0x7f0000000380)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000400)="4df583197f09e9c32c469d388016bf32a8584afb916e020ac416a1b372fea9b69736238f9f9ad43e48e27d15c845e5ba827d95eab2cffbb0e0e506c706dbac766d75a883a9e06ba844ba80c131d97a1c8d8358cae6e47d43d43fca471a4c1a710c60a09e1bdf2775f100ca94ac765669ab3e396369dd9ec0919253002216f1e26f", 0x81}], 0x1, 0x0, 0x0, 0x20002810}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000780)="0f7a9cfdb4d2e29af3d4faaebbd0da17ced26a14022472ade0b697f888e30af2322821bc4cd70dcfb673930b4619a42783a2247002f6c95f5a6df773a8e773e8c81dac92b073ee49368009829206ede0540c44ce550315e208d3dd71c8ff1b9c783de806017106", 0x67}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="acb064683018ceb59cb346c638918f67636794322d65e2339c1b390ef7f8f581da053fe59d8c6f6d6551d10726c6486e7c0355b236d501f49d7ff0fffa9119356ab4d96ab9b392ae99d8856035e40367c25bca46b500258be3816fa2e90670b801005068b3271369d8950b75953533ca47a3f0f6e33931ec21f7fcae20fb2db9f3ca9e5242d880f9a3cfa1a33517458a44643a62e96cfd0686ada4b417f503e1644896bc07f0cdfb89bc9c548cbf674ff29bfac6b0be2a", 0xb7}, {&(0x7f00000002c0)="d1695bf9f937b407eea68bd14ad72d15e8f5f1c7af7c3cb08f031f59dfd023954f920d340874d646c40ac19c033bc1bce1c4195776ad0d765e76798071", 0x3d}], 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES64=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c487df6000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="89899513d0e2552e80a1fb299d93aade4830eed95fdc56affc68efa1c3ca188456946859c0bad2346c076de453a21e034a7bde03d4a89686f9da2e6e55c1efa6686026f1486d8e0c2c017b650bdccd85a71f0db6f736470deb8c8cd8811132d0", @ANYRES64=r3, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=r2, @ANYRES64=r2], 0xb0, 0x40040}}, {{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001900)="0991e895d392f811ce7d2161f058c057f601ad97087d06b4030032cb1787a36fd241da546ef79559c0cfff9dd3fc5940773cdce5012722ed02a5f82952eb081c42c86138def64da4488d05f3ef48fade8f46bb4bf179b7dc66c508af602dc95c69db3bb5dcf7d5a193f906000000000000e9d43ff12d6ecf00000000", 0x7c}, {&(0x7f0000002000)="8ac0df7a51ba61fd8672d9d5355863a4679cea", 0x13}], 0x2, &(0x7f0000001ac0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000003bb17dcae225597717101d483757c2affd2e5a891018cc53ef4c0b7c10b0d80951d45080de45af7238bd8c20f1fc496718d589f82e150d2e95949cfc13aef37b0467d695c0713fad4caaa4b8e41414b41266dc5aef8cf60700000000000000d85b88a01c4c8730ffd7c61629d1608ddf8e51198e92073f121ce6072134d54ba4f418c7c161d838", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x880}}, {{0x0, 0x0, &(0x7f0000008700)=[{&(0x7f0000008300)="2bf45661969fb645c0caa4ef6f94e49e91327b8501545829a9a3c79e1a1e7f429f6c51252c5fad48dd05d944777d0b4e9215be8129ae25c5894c6f6b886aef9a8f79c894e0281684d61cb17648fb4b8b2edc5c2795a13eebf36297eea9d58bd48b4377d7a8209b7b43b7133fb6b15e635b5b25e1ca54dc262dac433daf519274e6c8643483e66c3b4defe8e4117f13ae431c08bacea339ff336aae5a7e18af248a582f9648507af158ca74e4e8dc7084d3185357b721225f7ce481bbf351c9db0742e69cae33b6653f3ca0a85f82f5591875befb4688efc1b52e95161c7a3d12a5ae66", 0xe3}, {&(0x7f0000008400)="40490c15b27029c1f459b00fcc807642a28c364893e67b09ab38c565d3c5c847c558ae6e70b5bfd12881ea03d8fe44f7c41bf7087162c56dc25633c20a25e7515643582b5af8e8dd92e644a1df3d9bd68658cbd541a3251016695df6bed81a8a168de2631a458384fc7f9f348a439d7211ab576814c245c61dad7b869cb41d964ed6f370694bf2a90757ec12e7e7a9fc", 0x90}, {&(0x7f00000084c0)}, {&(0x7f0000008500)="adae47b7242a5ac3b5c6ad1c9d6a88293ed674806c101a503c9f29349d85cedf32b6c8a1b4370b50b5ad3380bb7f5c28115b7f742d3ab85c5fa5b9562d0da66bb98a705239c373d1d2ddc10c34bbd5ae2ac2292eee9102c517ffee1862c6af7a7d94db58fe7f12a9", 0x68}, {&(0x7f0000008580)="f848f56203dc054d09be7efdd4d62f8b6543b7e9b0d0b93fe9dfe2ba0aa53e994333e798dd595a6a9e8221c74918314c49e79ade7076ca5a441cf12e8aa7523df2fc50d2e42b6d92455a84c9a7a2b4943e15792537601102ec06a71c59d0e930a9547061c0b8edc9d0fc7c798aa929536d92438b6dc319682774f69521e254b7d276fb5783572a65aedff70b9d0875c0f87abb0e836a", 0x96}, {&(0x7f0000008640)="c33d3813465744f3b14dc908e6b9fcdacce2ac8471db8c37690dd511932e7103fa35a4fb785224ff504efc17db7d41f67d105ea0f1f49926e2536e05fd9d2f0ab8a411617dfb20fd0d414d5d1d18edcbad5fa43d25af03efb977f88500bc360ff753c685ac833b3b074baac1f991421f75073ae14da288ca62f74fe11b8b2ad761ee1445255120e32fb79cd18c403e1301323a722cc89d1527b5a38b2e233571e068be767dce96", 0xa7}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="1000000000000000010000000100000010000000000000000200000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00c48d2ea651aa03b29fe6000000000000000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES16=r0, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3], 0xb8, 0x80}}], 0x4, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x0, 0x86) (async) fchdir(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') (async) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (async) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ca000/0x800000)=nil, 0x800000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) 146.919183ms ago: executing program 2 (id=11091): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8d, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, &(0x7f0000000000)) ioctl$BTRFS_IOC_SEND(r11, 0x40489426, &(0x7f0000002140)={{r9}, 0xa, &(0x7f00000020c0)=[0x4, 0x4, 0x7f, 0x7, 0xd, 0x970, 0xfffffffffffffc01, 0x3cf, 0x2, 0xfffffffffffffffb], 0xffffffffffffffff, 0x3, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2037) socket$l2tp(0x2, 0x2, 0x73) 58.07911ms ago: executing program 0 (id=11092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a", 0x75}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 0s ago: executing program 2 (id=11093): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x51, 0x1, 0x2, "d02067fb6ddd6f0f30807278f89b3c3c0131965ebd9ca8ac000000000000de00", 0x384c4150}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x51, 0x1, 0x2, "d02067fb6ddd6f0f30807278f89b3c3c0131965ebd9ca8ac000000000000de00", 0x384c4150}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) (async) kernel console output (not intermixed with test programs): d 35108 [ 2546.679948][T11858] bond1: entered allmulticast mode [ 2546.686004][T11858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2546.713947][T11855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2547.018684][T11842] chnl_net:caif_netlink_parms(): no params data found [ 2547.260986][T28933] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2547.431083][T28933] usb 3-1: Using ep0 maxpacket: 16 [ 2547.438622][T28933] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 2547.451447][ T3850] Bluetooth: hci0: command tx timeout [ 2547.468596][T28933] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2547.507611][T28933] usb 3-1: config 0 has no interface number 0 [ 2547.546573][T28933] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 2547.556535][T28933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.587705][T28933] usb 3-1: Product: syz [ 2547.601200][T28933] usb 3-1: Manufacturer: syz [ 2547.611376][T28933] usb 3-1: SerialNumber: syz [ 2547.645175][T28933] usb 3-1: config 0 descriptor?? [ 2547.827462][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.846122][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.861969][T11842] bridge_slave_0: entered allmulticast mode [ 2547.876318][T11864] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10703'. [ 2547.894427][T11842] bridge_slave_0: entered promiscuous mode [ 2547.922254][T28933] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 2547.947780][T28933] usb 3-1: bad CDC descriptors [ 2547.953138][T28883] usb 5-1: USB disconnect, device number 114 [ 2547.968975][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.978490][T28933] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 2547.988211][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.999836][T28933] usb 3-1: USB disconnect, device number 81 [ 2548.007259][T11842] bridge_slave_1: entered allmulticast mode [ 2548.034037][T11842] bridge_slave_1: entered promiscuous mode [ 2548.324682][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2548.356997][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2548.730999][T28883] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2549.052323][T28883] usb 5-1: Using ep0 maxpacket: 16 [ 2549.059263][T28883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2549.073184][T28883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2549.104252][T28883] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2549.139044][T28883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2549.153250][T28883] usb 5-1: Product: syz [ 2549.163185][T28883] usb 5-1: Manufacturer: syz [ 2549.167828][T28883] usb 5-1: SerialNumber: syz [ 2549.199476][T28883] usb 5-1: config 0 descriptor?? [ 2549.236161][T28883] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2549.263087][T28883] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2549.519111][ T6136] team0: Port device bridge2 removed [ 2549.531414][ T3850] Bluetooth: hci0: command tx timeout [ 2549.848785][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2549.859995][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2549.869914][T28883] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2549.879321][T28883] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2549.887777][ T6136] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2549.916703][ T6136] bond0 (unregistering): Released all slaves [ 2550.173612][ T6136] bond1 (unregistering): Released all slaves [ 2550.426875][ T6136] bond2 (unregistering): Released all slaves [ 2550.516748][T28883] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 2550.525900][T28883] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 2550.542347][T28883] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 2550.549899][T28883] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 2550.805266][ T6136] bond3 (unregistering): Released all slaves [ 2551.332622][T28883] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 2551.342593][T28883] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 2551.361006][ T6136] bond4 (unregistering): Released all slaves [ 2551.516713][T28883] usb 5-1: USB disconnect, device number 115 [ 2551.553885][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10714'. [ 2551.581302][ T6136] : left promiscuous mode [ 2551.621110][ T3850] Bluetooth: hci0: command tx timeout [ 2551.685379][T11842] team0: Port device team_slave_0 added [ 2551.701440][ T6136] tipc: Left network mode [ 2551.704838][T11842] team0: Port device team_slave_1 added [ 2552.240098][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10721'. [ 2552.250085][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10721'. [ 2552.261046][T28883] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2552.339913][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2552.363999][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2552.456516][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2552.620012][T28883] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2552.800855][T30329] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2552.911741][T28883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.019424][T28883] usb 2-1: config 0 descriptor?? [ 2553.059142][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2553.067233][T28883] cp210x 2-1:0.0: cp210x converter detected [ 2553.076735][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2553.112837][T30329] usb 1-1: Using ep0 maxpacket: 16 [ 2553.162136][T30329] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 2553.361009][T30329] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2553.404560][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2553.421423][T30329] usb 1-1: config 0 has no interface number 0 [ 2553.480643][T28883] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2553.551348][T30329] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 2553.587029][T30329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.627383][T30329] usb 1-1: Product: syz [ 2553.642565][T28883] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2553.655204][T30329] usb 1-1: Manufacturer: syz [ 2553.659826][T30329] usb 1-1: SerialNumber: syz [ 2553.690939][ T3850] Bluetooth: hci0: command tx timeout [ 2553.771006][T25939] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 2553.792519][T30329] usb 1-1: config 0 descriptor?? [ 2553.842011][ T7974] net_ratelimit: 15 callbacks suppressed [ 2553.842026][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2553.976228][T11842] hsr_slave_0: entered promiscuous mode [ 2554.032890][T25939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2554.046193][T11842] hsr_slave_1: entered promiscuous mode [ 2554.059253][T25939] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2554.076619][T11842] debugfs: 'hsr0' already exists in 'hsr' [ 2554.084756][T11950] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10722'. [ 2554.122416][T11842] Cannot create hsr debugfs directory [ 2554.133149][T25939] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 2554.166439][T25939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.325718][T25939] usb 5-1: config 0 descriptor?? [ 2554.627805][T11949] input: syz1 as /devices/virtual/input/input244 [ 2554.641509][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2554.667362][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.943066][T28883] usb 5-1: USB disconnect, device number 116 [ 2555.003220][ T6136] hsr_slave_0: left promiscuous mode [ 2555.021713][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2555.107146][ T6136] team0 (unregistering): Port device batadv1 removed [ 2555.517314][T30332] usb 2-1: USB disconnect, device number 108 [ 2555.564194][T30332] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2555.594924][T30332] cp210x 2-1:0.0: device disconnected [ 2555.976029][T30329] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 2556.003220][T30329] usb 1-1: bad CDC descriptors [ 2556.035876][T30329] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 2556.124303][T30329] usb 1-1: USB disconnect, device number 57 [ 2556.427203][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10729'. [ 2556.663544][T11999] FAULT_INJECTION: forcing a failure. [ 2556.663544][T11999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2556.765774][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.4.10732 Tainted: G L syzkaller #0 PREEMPT(full) [ 2556.765805][T11999] Tainted: [L]=SOFTLOCKUP [ 2556.765812][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2556.765824][T11999] Call Trace: [ 2556.765833][T11999] [ 2556.765842][T11999] dump_stack_lvl+0x189/0x250 [ 2556.765869][T11999] ? __pfx____ratelimit+0x10/0x10 [ 2556.765892][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2556.765912][T11999] ? __pfx__printk+0x10/0x10 [ 2556.765947][T11999] should_fail_ex+0x414/0x560 [ 2556.765974][T11999] _copy_to_user+0x31/0xb0 [ 2556.766001][T11999] simple_read_from_buffer+0xe1/0x170 [ 2556.766027][T11999] proc_fail_nth_read+0x1b3/0x220 [ 2556.766050][T11999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2556.766072][T11999] ? rw_verify_area+0x2a6/0x4d0 [ 2556.766089][T11999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2556.766109][T11999] vfs_read+0x200/0xa30 [ 2556.766126][T11999] ? fdget_pos+0x247/0x320 [ 2556.766151][T11999] ? __pfx___mutex_lock+0x10/0x10 [ 2556.766174][T11999] ? __pfx_vfs_read+0x10/0x10 [ 2556.766193][T11999] ? __fget_files+0x2a/0x420 [ 2556.766218][T11999] ? __fget_files+0x3a0/0x420 [ 2556.766237][T11999] ? __fget_files+0x2a/0x420 [ 2556.766267][T11999] ksys_read+0x145/0x250 [ 2556.766296][T11999] ? __pfx_ksys_read+0x10/0x10 [ 2556.766317][T11999] ? do_syscall_64+0xbe/0xf80 [ 2556.766342][T11999] do_syscall_64+0xfa/0xf80 [ 2556.766364][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.766382][T11999] ? clear_bhb_loop+0x60/0xb0 [ 2556.766403][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.766421][T11999] RIP: 0033:0x7f02f898e15c [ 2556.766439][T11999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2556.766470][T11999] RSP: 002b:00007f02f980b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2556.766490][T11999] RAX: ffffffffffffffda RBX: 00007f02f8be5fa0 RCX: 00007f02f898e15c [ 2556.766505][T11999] RDX: 000000000000000f RSI: 00007f02f980b0a0 RDI: 0000000000000004 [ 2556.766517][T11999] RBP: 00007f02f980b090 R08: 0000000000000000 R09: 0000000000000000 [ 2556.766528][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2556.766539][T11999] R13: 00007f02f8be6038 R14: 00007f02f8be5fa0 R15: 00007f02f8d0fa28 [ 2556.766570][T11999] [ 2557.014218][ T6136] hsr0 (unregistering): left allmulticast mode [ 2558.079034][T30332] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2558.653462][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 2558.747044][T30332] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2558.779600][T30332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.814770][T30332] usb 2-1: config 0 descriptor?? [ 2558.833541][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 2558.896608][T30332] cp210x 2-1:0.0: cp210x converter detected [ 2559.330111][T30332] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2559.359545][T30332] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2559.773911][T11983] bridge_slave_1: left allmulticast mode [ 2559.779802][T11983] bridge_slave_1: left promiscuous mode [ 2559.807043][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.817486][T11983] bridge_slave_0: left allmulticast mode [ 2559.824005][T11983] bridge_slave_0: left promiscuous mode [ 2559.829964][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2559.925323][T12000] syzkaller1: entered promiscuous mode [ 2559.931260][T12000] syzkaller1: entered allmulticast mode [ 2560.012133][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2560.161247][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2560.208663][ T6136] IPVS: stop unused estimator thread 0... [ 2560.298571][ T30] audit: type=1326 audit(1765118707.429:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2560.331688][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2560.335488][ T30] audit: type=1326 audit(1765118707.459:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2560.364420][ T30] audit: type=1326 audit(1765118707.459:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2560.418082][ T30] audit: type=1326 audit(1765118707.459:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2560.502648][ T30] audit: type=1326 audit(1765118707.459:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.051694][ T30] audit: type=1326 audit(1765118707.459:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.108154][ T30] audit: type=1326 audit(1765118707.459:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.139152][ T6011] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2561.158355][ T30] audit: type=1326 audit(1765118707.459:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.182705][ T30] audit: type=1326 audit(1765118707.459:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.247062][T25939] usb 2-1: USB disconnect, device number 109 [ 2561.264611][ T6011] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2561.317979][T25939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2561.371560][T25939] cp210x 2-1:0.0: device disconnected [ 2561.388436][ T30] audit: type=1326 audit(1765118707.459:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02f898f749 code=0x7ffc0000 [ 2561.554497][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2561.722114][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2561.742194][T25939] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2561.842748][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2561.911781][T25939] usb 2-1: Using ep0 maxpacket: 32 [ 2561.919077][T25939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.937303][T25939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.976322][T25939] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2562.008319][T25939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.051238][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2562.059356][T28883] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2562.074114][T25939] usb 2-1: config 0 descriptor?? [ 2562.136840][T11842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2562.157925][T11842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2562.181529][T11842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2562.213866][ T6011] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2562.222189][T11842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2562.233045][T28883] usb 3-1: Using ep0 maxpacket: 16 [ 2562.243746][T28883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.278236][T28883] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2562.346734][T28883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.375161][T28883] usb 3-1: config 0 descriptor?? [ 2562.453202][T12073] netlink: 'syz.0.10746': attribute type 2 has an invalid length. [ 2562.493219][T12069] could not allocate digest TFM handle poly1305-neon [ 2562.713490][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2562.787810][T28883] mcp2221 0003:04D8:00DD.0097: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2562.922702][T11842] 8021q: adding VLAN 0 to HW filter on device team0 [ 2562.991510][T28883] usb 3-1: USB disconnect, device number 82 [ 2563.013783][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 2563.020985][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2563.085213][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.092434][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2563.232970][T11842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2563.359886][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2563.443381][T11842] veth0_vlan: entered promiscuous mode [ 2563.459611][T11842] veth1_vlan: entered promiscuous mode [ 2563.479520][T25939] usbhid 2-1:0.0: can't add hid device: -71 [ 2563.496356][T25939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2563.523913][T25939] usb 2-1: USB disconnect, device number 110 [ 2563.533018][T11842] veth0_macvtap: entered promiscuous mode [ 2563.555250][T11842] veth1_macvtap: entered promiscuous mode [ 2563.671445][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2563.735773][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2563.786509][T29476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.816644][T29476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.827728][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10749'. [ 2563.865266][T29476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.887181][T29476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2564.039783][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2564.088672][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2564.265302][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2564.307033][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2565.051692][ T2986] net_ratelimit: 14 callbacks suppressed [ 2565.051711][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.213200][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.271037][T30329] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2565.341869][T28883] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 2565.352757][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.441073][T30329] usb 3-1: Using ep0 maxpacket: 16 [ 2565.449117][T30329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2565.488181][T30329] usb 3-1: config 129 has an invalid interface number: 247 but max is 18 [ 2565.493381][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.510968][T25939] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2565.531240][T30329] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.531703][T31305] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2565.553847][T28883] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 2565.583293][T30329] usb 3-1: config 129 has 1 interface, different from the descriptor's value: 19 [ 2565.600329][T28883] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2565.640341][T30329] usb 3-1: config 129 has no interface number 0 [ 2565.654785][T28883] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 2565.661004][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.674797][T25939] usb 5-1: Using ep0 maxpacket: 8 [ 2565.694291][T30329] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.56 [ 2565.695778][T31305] usb 4-1: device descriptor read/64, error -71 [ 2565.710939][T30329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.710966][T30329] usb 3-1: Product: syz [ 2565.710981][T30329] usb 3-1: Manufacturer: syz [ 2565.710995][T30329] usb 3-1: SerialNumber: syz [ 2565.748157][T25939] usb 5-1: config 162 has an invalid interface number: 197 but max is 0 [ 2565.757402][T25939] usb 5-1: config 162 has no interface number 0 [ 2565.764208][T25939] usb 5-1: config 162 interface 197 has no altsetting 0 [ 2565.797305][T25939] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 2565.817632][T28883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.846409][T25939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.855076][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2565.877491][T25939] usb 5-1: Product: syz [ 2565.888848][T28883] usb 2-1: config 0 descriptor?? [ 2565.891346][T25939] usb 5-1: Manufacturer: syz [ 2565.907804][T25939] usb 5-1: SerialNumber: syz [ 2565.952717][T28883] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2565.960815][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2566.023177][T31305] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2566.070852][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2566.181066][T31305] usb 4-1: device descriptor read/64, error -71 [ 2566.187734][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2566.301546][T29476] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2566.311701][T31305] usb usb4-port1: attempt power cycle [ 2566.352612][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.363818][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.417756][T25939] usb 5-1: USB disconnect, device number 117 [ 2566.485438][T12142] bond0: entered promiscuous mode [ 2566.494518][T12142] bond_slave_0: entered promiscuous mode [ 2566.501742][T12142] bond_slave_1: entered promiscuous mode [ 2566.515297][T12142] batadv_slave_0: entered promiscuous mode [ 2566.522353][T12142] batadv_slave_0: left promiscuous mode [ 2566.528669][T12142] bond0: left promiscuous mode [ 2566.540719][T12142] bond_slave_0: left promiscuous mode [ 2566.555665][T12142] bond_slave_1: left promiscuous mode [ 2566.660978][T31305] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2566.682121][T31305] usb 4-1: device descriptor read/8, error -71 [ 2566.921929][T31305] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2566.962391][T31305] usb 4-1: device descriptor read/8, error -71 [ 2567.087627][T31305] usb usb4-port1: unable to enumerate USB device [ 2567.676430][T30329] etas_es58x 3-1:129.247: Starting syz syz (Serial Number syz) [ 2567.750866][T30329] usb 3-1: USB disconnect, device number 83 [ 2567.818804][T12166] syzkaller0: entered promiscuous mode [ 2567.836685][T12166] syzkaller0: entered allmulticast mode [ 2567.957008][T12169] dummy0: entered promiscuous mode [ 2568.017244][T12169] dummy0: left promiscuous mode [ 2568.059452][T30333] usb 2-1: USB disconnect, device number 111 [ 2568.082789][T31305] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2568.269924][T31305] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2568.301912][T31305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2568.319646][T31305] usb 1-1: Product: syz [ 2568.328146][T31305] usb 1-1: Manufacturer: syz [ 2568.337882][T31305] usb 1-1: SerialNumber: syz [ 2568.359708][T31305] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2568.405367][T30333] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2569.364056][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.452457][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.473483][T30333] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2569.495101][T30333] ath9k_htc: Failed to initialize the device [ 2569.562985][T30333] usb 1-1: ath9k_htc: USB layer deinitialized [ 2569.921009][T30333] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2570.130937][ T3567] net_ratelimit: 26 callbacks suppressed [ 2570.130952][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.166645][T12205] xt_hashlimit: max too large, truncated to 1048576 [ 2570.201468][T31305] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2570.270967][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.351329][T28933] usb 1-1: USB disconnect, device number 58 [ 2570.360928][T31305] usb 3-1: Using ep0 maxpacket: 16 [ 2570.384195][T31305] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 2570.404870][T31305] usb 3-1: config 0 has no interface number 0 [ 2570.431855][T31305] usb 3-1: config 0 interface 255 has no altsetting 0 [ 2570.491379][T31305] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2570.511385][ T6011] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.528817][T31305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.542775][T12220] netlink: 'syz.1.10776': attribute type 12 has an invalid length. [ 2570.557729][T31305] usb 3-1: Product: syz [ 2570.574374][T31305] usb 3-1: Manufacturer: syz [ 2570.583557][T31305] usb 3-1: SerialNumber: syz [ 2570.606407][T31305] usb 3-1: config 0 descriptor?? [ 2570.621566][T31305] ums-onetouch 3-1:0.255: USB Mass Storage device detected [ 2570.622923][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.791417][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.832836][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.841828][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.855986][T12203] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10773'. [ 2570.870006][T31305] usb 3-1: USB disconnect, device number 84 [ 2570.877416][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2570.877433][ T30] audit: type=1326 audit(1765118718.009:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2570.911887][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2570.979302][ T30] audit: type=1326 audit(1765118718.009:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.037828][ T30] audit: type=1326 audit(1765118718.009:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.061353][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2571.129777][ T30] audit: type=1326 audit(1765118718.009:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.191202][T14551] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2571.203768][ T30] audit: type=1326 audit(1765118718.009:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.252044][ T30] audit: type=1326 audit(1765118718.009:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.275590][ T30] audit: type=1326 audit(1765118718.009:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.300893][ T30] audit: type=1326 audit(1765118718.009:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.301569][ T3792] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2571.391019][ T30] audit: type=1326 audit(1765118718.009:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.420838][ T30] audit: type=1326 audit(1765118718.009:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.10780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f898f749 code=0x7fc00000 [ 2571.500956][ T3792] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2571.930525][T12252] netlink: 'syz.0.10785': attribute type 6 has an invalid length. [ 2571.941363][T12252] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10785'. [ 2571.953711][T12253] netlink: 'syz.0.10785': attribute type 6 has an invalid length. [ 2572.001162][T12253] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10785'. [ 2572.131040][T12256] xt_hashlimit: max too large, truncated to 1048576 [ 2573.134999][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10791'. [ 2573.801029][T31305] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 2573.963647][T31305] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2573.979918][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2574.016571][T31305] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2574.047158][T11841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2574.059716][T11841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2574.069151][T11841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2574.076991][T28933] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2574.086392][T11841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2574.098193][T11841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2574.110025][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2574.123679][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2574.137355][T31305] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2574.145686][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2574.157694][T31305] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2574.171733][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2574.184697][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2574.203452][T31305] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2574.213911][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2574.241791][T31305] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2574.274804][T28933] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2574.293868][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2574.306498][T28933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.325088][T28933] usb 1-1: Product: syz [ 2574.333530][T31305] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2574.346816][T28933] usb 1-1: Manufacturer: syz [ 2574.356866][T28933] usb 1-1: SerialNumber: syz [ 2574.375392][T28933] usb 1-1: config 0 descriptor?? [ 2574.384289][T31305] usb 5-1: string descriptor 0 read error: -22 [ 2574.396287][T31305] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2574.406335][T31305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.545662][T31305] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2574.679157][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2574.688581][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2574.849359][T12289] chnl_net:caif_netlink_parms(): no params data found [ 2574.859227][T12297] netlink: 'syz.4.10794': attribute type 3 has an invalid length. [ 2574.873067][T12297] netlink: 'syz.4.10794': attribute type 3 has an invalid length. [ 2574.882271][T12297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10794'. [ 2574.890848][T28883] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 2574.903531][T25939] usb 5-1: USB disconnect, device number 118 [ 2575.054461][T28883] usb 4-1: Invalid ep0 maxpacket: 64 [ 2575.062546][T12301] xt_hashlimit: max too large, truncated to 1048576 [ 2575.088576][ T2986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2575.103915][ T2986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2575.192996][T28883] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 2575.234185][ T2986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2575.245921][ T2986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2575.272375][T12289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.309340][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.328461][T12289] bridge_slave_0: entered allmulticast mode [ 2575.377853][T12289] bridge_slave_0: entered promiscuous mode [ 2575.391256][T28883] usb 4-1: Invalid ep0 maxpacket: 64 [ 2575.396942][T28883] usb usb4-port1: attempt power cycle [ 2575.439575][ T2986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2575.459709][ T2986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2575.495374][T12289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.507639][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.521268][T12289] bridge_slave_1: entered allmulticast mode [ 2575.555737][T12289] bridge_slave_1: entered promiscuous mode [ 2575.574927][ T2986] bridge0: port 3(netdevsim0) entered disabled state [ 2575.613532][ T2986] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 2575.628495][ T2986] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 2575.642893][ T2986] bridge0: port 3(netdevsim0) entered disabled state [ 2575.659150][ T2986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2575.679224][ T2986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2575.719471][T12310] vxcan1: entered promiscuous mode [ 2575.725771][T12310] vxcan1: entered allmulticast mode [ 2575.751033][T28883] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 2575.758696][T14550] net_ratelimit: 25 callbacks suppressed [ 2575.758708][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2575.815987][T28883] usb 4-1: Invalid ep0 maxpacket: 64 [ 2575.945204][T12313] macvlan2: entered promiscuous mode [ 2575.968167][T12289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2576.022617][T28883] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 2576.052011][T28883] usb 4-1: Invalid ep0 maxpacket: 64 [ 2576.058840][T28883] usb usb4-port1: unable to enumerate USB device [ 2576.066277][T14551] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2576.087301][T12289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2576.173075][T11841] Bluetooth: hci4: command tx timeout [ 2576.231019][T28883] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2576.369308][T12289] team0: Port device team_slave_0 added [ 2576.378773][T12289] team0: Port device team_slave_1 added [ 2576.413078][T28883] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 2576.425842][T28883] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 2576.455532][T12289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2576.465375][T28883] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2576.465963][T12289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2576.482544][T28883] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 2576.515093][T12289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2576.528758][T12289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2576.537253][T28883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.537330][T12289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2576.626788][T12289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2576.633749][T28883] usb 5-1: Product: syz [ 2576.642731][T28883] usb 5-1: Manufacturer: syz [ 2576.663305][T28883] usb 5-1: SerialNumber: syz [ 2576.678650][T12315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2576.687019][T12315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2576.706877][ T2986] bridge_slave_1: left allmulticast mode [ 2576.714384][ T2986] bridge_slave_1: left promiscuous mode [ 2576.724318][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 2576.738280][ T2986] bridge_slave_0: left allmulticast mode [ 2576.753641][ T2986] bridge_slave_0: left promiscuous mode [ 2576.767009][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 2576.783034][T28933] usb 1-1: USB disconnect, device number 59 [ 2576.835891][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10805'. [ 2576.899047][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.909887][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.965965][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.005895][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.008352][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2577.167079][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2577.303843][T28883] rtl8150 5-1:1.0: couldn't reset the device [ 2577.321300][T28883] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 2577.346808][T28883] usb 5-1: USB disconnect, device number 119 [ 2577.745236][T28883] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2577.813426][T12338] xt_hashlimit: max too large, truncated to 1048576 [ 2578.030897][T28883] usb 5-1: Using ep0 maxpacket: 32 [ 2578.054387][T28883] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2578.070995][T28883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.105226][ T2986] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 2578.129137][T28883] usb 5-1: config 0 descriptor?? [ 2578.145198][T28883] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2578.153367][ T2986] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 2578.171368][ T2986] bridge1 (unregistering): left promiscuous mode [ 2578.185357][ T2986] bridge1 (unregistering): left allmulticast mode [ 2578.252465][T11841] Bluetooth: hci4: command tx timeout [ 2578.271491][T12342] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10810'. [ 2578.373219][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10808'. [ 2578.401161][ T2986] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 2578.786065][T12352] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10812'. [ 2579.460184][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2579.498126][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2579.519011][ T2986] bond0 (unregistering): Released all slaves [ 2579.781076][T28883] gspca_vc032x: reg_w err -110 [ 2579.797585][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.811030][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.847415][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.882134][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.912004][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.955759][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.968992][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2579.971809][ T2986] bond1 (unregistering): Released all slaves [ 2579.989748][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.003354][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.017679][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.033895][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.054086][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.059484][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.074227][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.089852][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.106689][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.119930][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.136188][T28883] gspca_vc032x: I2c Bus Busy Wait 00 [ 2580.156454][T28883] gspca_vc032x: Unknown sensor... [ 2580.166651][T28883] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 2580.333626][T11841] Bluetooth: hci4: command tx timeout [ 2580.616408][ T2986] bond2 (unregistering): Released all slaves [ 2580.635508][T12372] futex_wake_op: syz.3.10818 tries to shift op by 144; fix this program [ 2580.663702][ T2986] bond3 (unregistering): Released all slaves [ 2580.684004][T12374] fuse: Bad value for 'fd' [ 2580.722517][ T2986] bond4 (unregistering): Released all slaves [ 2580.781662][ T2986] bond5 (unregistering): Released all slaves [ 2580.818619][ T2986] bond6 (unregistering): Released all slaves [ 2580.864390][ T2986] bond7 (unregistering): Released all slaves [ 2581.543277][ T2986] bond8 (unregistering): Released all slaves [ 2581.612081][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2581.752514][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2581.878240][T30329] usb 5-1: USB disconnect, device number 120 [ 2581.888149][ T2986] tipc: Left network mode [ 2582.069412][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2582.202516][T12289] hsr_slave_0: entered promiscuous mode [ 2582.210872][T12289] hsr_slave_1: entered promiscuous mode [ 2582.263746][T12289] debugfs: 'hsr0' already exists in 'hsr' [ 2582.269647][T12289] Cannot create hsr debugfs directory [ 2582.320987][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2582.437644][T11841] Bluetooth: hci4: command tx timeout [ 2582.458886][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2583.061117][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2583.512284][ T2986] hsr_slave_0: left promiscuous mode [ 2583.560349][ T2986] 0: left promiscuous mode [ 2583.579580][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2583.603721][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10824'. [ 2583.852882][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2583.869734][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2583.992524][ T2986] veth1_vlan: left promiscuous mode [ 2584.002416][ T2986] veth0_vlan: left promiscuous mode [ 2584.604124][ T2986] pimreg (unregistering): left allmulticast mode [ 2585.483569][T12438] xt_hashlimit: max too large, truncated to 1048576 [ 2585.641431][T12442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2587.510984][T28883] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2587.740836][T28883] usb 3-1: Using ep0 maxpacket: 8 [ 2587.748083][T28883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2587.787935][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2587.878808][T28883] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2587.898860][T28883] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2587.925590][T28883] usb 3-1: Product: syz [ 2587.987059][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2587.996895][T28883] usb 3-1: Manufacturer: syz [ 2588.051107][T28883] usb 3-1: SerialNumber: syz [ 2588.121279][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2588.312620][T12497] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2588.383128][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10839'. [ 2588.431303][T28883] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 2588.433135][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2588.439751][T28883] visor 3-1:1.0: probe with driver visor failed with error -110 [ 2588.614765][T12509] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2588.677234][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2589.171160][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2589.172145][ T2986] IPVS: stop unused estimator thread 0... [ 2589.264941][T12289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2589.298997][T12289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2589.436764][T12516] netlink: 'syz.4.10848': attribute type 1 has an invalid length. [ 2589.579821][T12516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2589.590170][T12289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2589.622870][T12289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2589.821926][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2590.015895][T12289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2590.079828][T25939] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2590.154976][T12289] 8021q: adding VLAN 0 to HW filter on device team0 [ 2590.249373][ T3171] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2590.281233][T25939] usb 1-1: Using ep0 maxpacket: 16 [ 2590.293562][T25939] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 2590.310959][T25939] usb 1-1: config 4 has no interface number 0 [ 2590.317190][T25939] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 2590.340034][T25939] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2590.372711][T25939] usb 1-1: config 4 interface 51 has no altsetting 0 [ 2590.389939][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.397111][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2590.413436][T25939] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 2590.424101][T25939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2590.446935][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.454091][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2590.462710][T25939] usb 1-1: Product: syz [ 2590.466935][T25939] usb 1-1: Manufacturer: syz [ 2590.474023][T25939] usb 1-1: SerialNumber: syz [ 2590.503331][T28933] usb 3-1: USB disconnect, device number 85 [ 2590.564943][T12289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2590.574776][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.575697][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.623063][T12535] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2590.671205][T12535] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2591.003995][T12289] veth0_vlan: entered promiscuous mode [ 2591.043304][T12564] netlink: 'syz.3.10856': attribute type 1 has an invalid length. [ 2591.169322][T12566] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2591.187005][T12564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2591.436256][T30329] IPVS: starting estimator thread 0... [ 2591.454673][T12571] bond2: entered allmulticast mode [ 2591.477418][T12571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2591.526122][T12289] veth1_vlan: entered promiscuous mode [ 2591.875536][T12575] IPVS: using max 28 ests per chain, 67200 per kthread [ 2592.196581][T12289] veth0_macvtap: entered promiscuous mode [ 2592.373812][T12289] veth1_macvtap: entered promiscuous mode [ 2592.435300][T12289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2592.478396][T12289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2592.543470][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.565432][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.606514][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.644862][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.760993][T28883] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2592.901372][ T3171] net_ratelimit: 7 callbacks suppressed [ 2592.901393][ T3171] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2592.916720][T28883] usb 5-1: Using ep0 maxpacket: 8 [ 2592.926175][T28883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2592.948436][T28883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2593.021833][T28883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2593.029978][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.059016][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.074160][T28883] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2593.130298][T28883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.162355][T25939] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71 [ 2593.180973][T28883] usb 5-1: Product: syz [ 2593.211100][ T3171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.214800][T28883] usb 5-1: Manufacturer: syz [ 2593.226463][ T3717] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2593.228135][T25939] usb 1-1: USB disconnect, device number 60 [ 2593.249102][ T3171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.286782][T28883] usb 5-1: SerialNumber: syz [ 2593.337040][T28883] usb 5-1: config 0 descriptor?? [ 2593.378820][T28883] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2593.387670][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2593.535935][ T3717] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2593.681068][T28883] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2593.708582][T28883] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2593.840885][ T3171] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2593.853948][T28883] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2593.901786][T28883] usb 5-1: USB disconnect, device number 121 [ 2593.993475][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2594.121150][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2594.285032][ T2986] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2594.420868][T30333] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2594.519861][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2594.611912][T30333] usb 3-1: Using ep0 maxpacket: 32 [ 2594.618757][T30333] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2594.633634][T30333] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2594.642739][ T3171] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2594.659074][T30333] usb 3-1: can't read configurations, error -61 [ 2594.710899][T30329] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2594.823177][T12637] netlink: 'syz.4.10866': attribute type 1 has an invalid length. [ 2594.831612][T30333] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2594.890799][T30329] usb 4-1: Using ep0 maxpacket: 8 [ 2594.905715][T30329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2594.930861][T30329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2594.964840][T12637] bond4: entered allmulticast mode [ 2594.994059][T30329] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2595.000898][T30333] usb 3-1: Using ep0 maxpacket: 32 [ 2595.003930][T30329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.018839][T30329] usb 4-1: Product: syz [ 2595.022736][T12637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2595.031223][T30329] usb 4-1: Manufacturer: syz [ 2595.033769][T30333] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2595.035845][T30329] usb 4-1: SerialNumber: syz [ 2595.061718][T30329] usb 4-1: config 0 descriptor?? [ 2595.092805][T30333] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2595.108357][T30333] usb 3-1: can't read configurations, error -61 [ 2595.161221][T30333] usb usb3-port1: attempt power cycle [ 2595.485410][T12649] xt_hashlimit: max too large, truncated to 1048576 [ 2595.556195][T30329] usb 4-1: USB disconnect, device number 42 [ 2595.565897][T30333] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2595.622206][T30333] usb 3-1: Using ep0 maxpacket: 32 [ 2595.632628][T30333] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2595.652711][T30333] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2595.664029][T30333] usb 3-1: can't read configurations, error -61 [ 2595.810603][T30333] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2595.831899][T30333] usb 3-1: Using ep0 maxpacket: 32 [ 2595.838682][T30333] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2595.859605][T30333] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2595.875851][T30333] usb 3-1: can't read configurations, error -61 [ 2595.901792][T30333] usb usb3-port1: unable to enumerate USB device [ 2596.891747][T31305] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2597.057130][T31305] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 2597.071610][T31305] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2597.153920][T31305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2597.708489][T31305] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2597.717959][T31305] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2597.870985][T31305] usb 5-1: Product: syz [ 2597.877105][T31305] usb 5-1: Manufacturer: syz [ 2597.892777][T31305] usb 5-1: SerialNumber: syz [ 2597.926900][T31305] usb 5-1: config 0 descriptor?? [ 2597.952804][T31305] hub 5-1:0.0: bad descriptor, ignoring hub [ 2597.966144][T31305] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2597.981740][ T7077] net_ratelimit: 12 callbacks suppressed [ 2597.981761][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2597.993653][T31305] usb 5-1: selecting invalid altsetting 0 [ 2598.120910][ T6136] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2598.260916][ T6136] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2598.321351][T12589] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 2598.333888][T12688] netlink: 'syz.2.10876': attribute type 27 has an invalid length. [ 2598.346434][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2598.386183][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2598.416803][T12689] netlink: 'syz.1.10878': attribute type 1 has an invalid length. [ 2598.536645][T30329] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2598.568636][T12688] tipc: Resetting bearer [ 2598.587944][T12589] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 2598.599450][T12589] usb 1-1: config 5 has no interface number 0 [ 2598.606346][T12589] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2598.626847][T12589] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 2598.643490][T12589] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2598.657031][T12688] syzkaller0: left promiscuous mode [ 2598.662771][T12688] syzkaller0: left allmulticast mode [ 2598.705783][T12589] usb 1-1: config 5 interface 123 has no altsetting 0 [ 2598.744586][T12688] veth5: left promiscuous mode [ 2598.753094][T12688] bridge3: left promiscuous mode [ 2598.761432][T12688] bond3: left allmulticast mode [ 2598.815152][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2598.825717][T12589] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2598.836870][T12589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.848529][T12589] usb 1-1: Product: syz [ 2598.856030][T12589] usb 1-1: Manufacturer: syz [ 2598.866543][T12589] usb 1-1: SerialNumber: syz [ 2598.873240][T12699] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 2598.926173][T12692] bond1: entered allmulticast mode [ 2598.940628][T12705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2598.960100][T12692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2599.034006][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2599.085956][T12699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2599.116413][T12699] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2599.142988][T12699] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2599.167222][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.178494][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2599.190867][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2599.209183][T12589] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2599.235999][T12699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2599.254241][T12589] usb 1-1: USB disconnect, device number 61 [ 2599.254811][T12711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10881'. [ 2599.263771][T12699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2599.291316][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2599.317619][T12699] usb 3-1: SerialNumber: syz [ 2599.339740][T12699] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2599.354416][T12699] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 2599.363781][T12699] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 2599.400948][T28801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2599.511886][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2599.737820][T12693] netlink: 'syz.2.10876': attribute type 27 has an invalid length. [ 2599.785223][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.811627][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2599.981404][T30329] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2599.999729][T12589] usb 5-1: USB disconnect, device number 122 [ 2600.292725][T30329] usb 2-1: Using ep0 maxpacket: 16 [ 2600.345409][T30329] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 2600.361589][T30329] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2600.403055][T30329] usb 2-1: config 0 has no interface number 0 [ 2600.429658][T30329] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 2600.449796][T30329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.480772][T30329] usb 2-1: Product: syz [ 2600.513208][T30329] usb 2-1: Manufacturer: syz [ 2600.526096][T30329] usb 2-1: SerialNumber: syz [ 2600.672416][T30329] usb 2-1: config 0 descriptor?? [ 2600.975889][T12716] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10882'. [ 2601.243860][T12734] xt_hashlimit: max too large, truncated to 1048576 [ 2601.919853][T30343] usb 3-1: USB disconnect, device number 90 [ 2602.007290][T12743] futex_wake_op: syz.0.10890 tries to shift op by 144; fix this program [ 2602.212269][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10891'. [ 2602.271251][ T6991] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2602.279222][T12747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2602.372436][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10891'. [ 2602.502470][ T6991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2602.538512][ T6991] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2602.558579][ T6991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.628233][ T6991] usb 4-1: config 0 descriptor?? [ 2602.649721][ T6991] pwc: Askey VC010 type 2 USB webcam detected. [ 2602.666976][T12750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 2602.673608][T12750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2602.733787][T12750] vhci_hcd vhci_hcd.0: Device attached [ 2602.802003][T12753] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 2602.808643][T12753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2602.871065][T12753] vhci_hcd vhci_hcd.0: Device attached [ 2602.882510][T12750] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 2602.889141][T12750] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2602.941076][T12750] vhci_hcd vhci_hcd.0: Device attached [ 2602.971167][T12697] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 2602.993814][T12753] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 2603.000456][T12753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2603.046196][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10893'. [ 2603.048632][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2603.056004][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10893'. [ 2603.056306][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10893'. [ 2603.090899][T11348] net_ratelimit: 29 callbacks suppressed [ 2603.090943][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2603.106739][T12753] vhci_hcd vhci_hcd.0: Device attached [ 2603.128222][T12763] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 2603.134860][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2603.156742][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10893'. [ 2603.201374][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.202954][T12753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2603.262048][ T6136] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2603.284070][ T6991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2603.316467][T12750] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(23) [ 2603.321237][T12769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2603.323109][T12750] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2603.335027][T12763] vhci_hcd vhci_hcd.0: Device attached [ 2603.347423][ T6991] pwc: recv_control_msg error -32 req 02 val 2700 [ 2603.362502][ T6991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2603.391073][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2603.419944][ T6991] pwc: recv_control_msg error -32 req 04 val 1000 [ 2603.442022][ T6991] pwc: recv_control_msg error -32 req 04 val 1300 [ 2603.452054][ T6991] pwc: recv_control_msg error -32 req 04 val 1400 [ 2603.461896][ T6991] pwc: recv_control_msg error -32 req 02 val 2000 [ 2603.469109][ T6991] pwc: recv_control_msg error -32 req 02 val 2100 [ 2603.479712][ T6991] pwc: recv_control_msg error -32 req 04 val 1500 [ 2603.487996][ T6991] pwc: recv_control_msg error -32 req 02 val 2500 [ 2603.493533][T30329] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 2603.497413][ T6991] pwc: recv_control_msg error -32 req 02 val 2400 [ 2603.517192][T30329] usb 2-1: bad CDC descriptors [ 2603.523151][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2603.545928][T30329] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 2603.554704][T12750] vhci_hcd vhci_hcd.0: Device attached [ 2603.599592][T30329] usb 2-1: USB disconnect, device number 112 [ 2603.631482][T12774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2603.680439][T12750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(34) [ 2603.681005][T12774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2603.687086][T12750] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2603.708160][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10894'. [ 2603.717989][T12750] vhci_hcd vhci_hcd.0: Device attached [ 2603.758918][T12753] vhci_hcd vhci_hcd.0: port 0 already used [ 2603.782078][T12767] vhci_hcd: connection closed [ 2603.782543][T12774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2603.783837][T12760] vhci_hcd: connection closed [ 2603.788804][T12764] vhci_hcd: connection closed [ 2603.803290][T12774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2603.815962][T12758] vhci_hcd: connection closed [ 2603.816058][T12754] vhci_hcd: connection closed [ 2603.821999][T12751] vhci_hcd: connection reset by peer [ 2603.823369][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2603.839897][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2603.848143][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2603.912594][T12784] ip6t_srh: unknown srh invflags 4000 [ 2604.154383][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.171204][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.183104][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.212790][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.222419][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.236051][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.263326][ T6991] pwc: recv_control_msg error -71 req 02 val 2900 [ 2604.279820][ T6991] pwc: recv_control_msg error -71 req 02 val 2800 [ 2604.289779][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.326549][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.333355][ T6991] pwc: recv_control_msg error -71 req 04 val 1100 [ 2604.344004][ T6991] pwc: recv_control_msg error -71 req 04 val 1200 [ 2604.354940][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.391659][T12784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2604.409871][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.422778][ T6991] pwc: Registered as video103. [ 2604.428862][ T6991] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input245 [ 2604.446551][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.462742][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.490993][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.517696][T12777] vhci_hcd: connection closed [ 2604.520966][ T6991] usb 4-1: USB disconnect, device number 44 [ 2604.533174][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.604520][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.642284][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 2604.711608][ T1035] vhci_hcd vhci_hcd.2: release socket [ 2604.892569][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 2604.951055][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2605.111572][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2605.234028][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2605.371594][ T3171] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2605.551113][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2605.931956][T30329] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2606.092649][T30329] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 2606.120445][T30329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2606.167274][T30329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 2606.210302][T30329] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 2606.219376][T30329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.280159][T30329] usb 5-1: config 0 descriptor?? [ 2606.723366][T12820] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10904'. [ 2606.752471][T30329] usbhid 5-1:0.0: can't add hid device: -71 [ 2606.775766][T30329] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2606.811853][T30329] usb 5-1: USB disconnect, device number 123 [ 2607.236191][T12835] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2607.246345][T12835] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2607.337748][T12835] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2607.654061][T12844] input: syz1 as /devices/virtual/input/input246 [ 2607.665199][T31305] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2607.825150][T31305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2607.839141][T31305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2607.857903][T31305] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2608.032442][T31305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.101357][T12697] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2608.145508][T31305] usb 5-1: config 0 descriptor?? [ 2608.161281][ T7077] net_ratelimit: 23 callbacks suppressed [ 2608.161302][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2608.283156][T12850] syzkaller0: Caught tx_queue_len zero misconfig [ 2608.806745][T31305] usb 5-1: string descriptor 0 read error: -22 [ 2608.857750][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.033049][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.043857][T31305] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0098/input/input247 [ 2609.142430][T31305] uclogic 0003:256C:006D.0098: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 2609.175029][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.310944][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.321199][T31305] usb 5-1: USB disconnect, device number 124 [ 2609.371966][T31304] usb usb38-port1: attempt power cycle [ 2609.430964][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.550883][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.680969][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2609.902245][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2610.041198][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2610.111059][T31304] usb usb38-port1: unable to enumerate USB device [ 2610.156257][T12866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10914'. [ 2610.167348][T12866] futex_wake_op: syz.4.10914 tries to shift op by 144; fix this program [ 2611.270420][T30329] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2611.343586][T12901] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 4, id = 0 [ 2611.430983][T30329] usb 4-1: Using ep0 maxpacket: 32 [ 2611.437837][T30329] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2611.451094][T30329] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2611.495828][T30329] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2611.529503][T30329] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2611.530823][T30343] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2611.559054][T30329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2611.584666][T30329] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2611.596536][T30329] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2611.607167][T30329] usb 4-1: Product: syz [ 2611.614130][T30329] usb 4-1: Manufacturer: syz [ 2611.619838][T30329] usb 4-1: SerialNumber: syz [ 2611.636893][T30329] usb 4-1: config 0 descriptor?? [ 2611.668366][T30329] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2611.699644][T30329] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2611.708098][T30343] usb 5-1: device descriptor read/64, error -71 [ 2612.000536][T30343] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2612.022241][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 2612.028975][T12697] usb 4-1: USB disconnect, device number 45 [ 2612.140951][T30343] usb 5-1: device descriptor read/64, error -71 [ 2612.261270][T30343] usb usb5-port1: attempt power cycle [ 2612.324524][T12912] netlink: 'syz.0.10925': attribute type 32 has an invalid length. [ 2612.336871][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10925'. [ 2612.347385][T12912] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 2612.399227][T12914] futex_wake_op: syz.1.10926 tries to shift op by 144; fix this program [ 2612.452482][T12915] kvm: apic: phys broadcast and lowest prio [ 2612.601192][T30343] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2612.632315][T30343] usb 5-1: device descriptor read/8, error -71 [ 2612.902156][T30343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2612.931538][T30343] usb 5-1: device descriptor read/8, error -71 [ 2612.991061][T30329] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2613.041276][T30343] usb usb5-port1: unable to enumerate USB device [ 2613.174072][T30329] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2613.182969][T30329] usb 2-1: config 179 has no interface number 0 [ 2613.189334][T30329] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2613.191553][ T1035] net_ratelimit: 26 callbacks suppressed [ 2613.191572][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2613.207018][T30329] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2613.207053][T30329] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2613.207079][T30329] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 2613.207104][T30329] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2613.298514][T30329] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2613.313342][T30329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.326866][T12917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2613.334996][T12917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2613.502320][ T7974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2613.609400][T31304] usb 2-1: USB disconnect, device number 113 [ 2613.609457][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2613.615501][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2613.634056][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2613.741752][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2613.872613][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.000944][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.068051][T12932] fuse: Bad value for 'fd' [ 2614.110910][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.230905][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.341234][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.451030][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2614.839606][T12697] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2614.937259][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2614.956694][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.260581][T12696] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2616.771116][T30329] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 2616.955456][T30329] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2616.973151][T30329] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2617.005713][T30329] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2617.038159][T30329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.271783][T30329] usb 2-1: usb_control_msg returned -32 [ 2617.287773][T30329] usbtmc 2-1:16.0: can't read capabilities [ 2617.798586][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10950'. [ 2618.440945][T23590] net_ratelimit: 31 callbacks suppressed [ 2618.440967][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2618.561494][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2618.672366][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2618.790913][ T1035] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2618.910901][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2619.021418][ T3717] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2619.073653][T13020] netlink: 'syz.3.10952': attribute type 63 has an invalid length. [ 2619.198149][ T3567] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2619.240958][T13020] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10952'. [ 2619.277734][T13020] gretap0: entered allmulticast mode [ 2619.292407][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10953'. [ 2619.341457][T13020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2619.386109][T13024] netlink: 'syz.2.10953': attribute type 30 has an invalid length. [ 2619.416303][ T3792] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2619.469955][T12696] usb 2-1: USB disconnect, device number 114 [ 2619.532416][T13026] kvm: emulating exchange as write [ 2619.674385][ T7270] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2620.106254][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10958'. [ 2620.604581][T13051] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10960'. [ 2620.830913][T12696] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2620.901209][T12589] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2620.960865][T12696] usb 4-1: device descriptor read/64, error -71 [ 2621.051252][T12589] usb 1-1: Using ep0 maxpacket: 8 [ 2621.061154][T12589] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 2621.071546][T12589] usb 1-1: config 0 has no interface number 0 [ 2621.093665][T12589] usb 1-1: New USB device found, idVendor=045e, idProduct=0449, bcdDevice=58.19 [ 2621.106783][T12589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.127729][T12589] usb 1-1: Product: syz [ 2621.149850][T13066] netlink: 'syz.2.10965': attribute type 10 has an invalid length. [ 2621.157505][T12589] usb 1-1: Manufacturer: syz [ 2621.169850][T12589] usb 1-1: SerialNumber: syz [ 2621.177348][T13065] [U]  [ 2621.180143][T13065] [U] K{ [ 2621.192232][T13065] [U] t 1ŠFfˊ`GJgo/mC [ 2621.201707][T12696] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2621.204586][T12589] usb 1-1: config 0 descriptor?? [ 2621.226409][T13065] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 2621.252836][T13065] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 2621.288268][T13065] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 2621.341042][T12696] usb 4-1: device descriptor read/64, error -71 [ 2621.410909][T13065] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 2621.441831][T13055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.451390][T12696] usb usb4-port1: attempt power cycle [ 2621.471296][T13065] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 2621.472180][T13055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.483809][T13065] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 2621.513806][ T6991] usb 1-1: USB disconnect, device number 62 [ 2621.536620][T13065] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 2621.667258][T13065] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 2621.677263][T13065] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 2621.694139][T13065] [U] 22Ʃx?0;3u [ 2621.698836][T13065] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 2621.726100][T13065] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 2621.736635][T13065] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 2621.746166][T13065] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 2621.753147][T13065] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 2621.766490][T13065] [U] ec [ 2621.769617][T13065] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 2621.790857][T12696] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2621.811481][T12696] usb 4-1: device descriptor read/8, error -71 [ 2621.819924][T13064] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 2622.051858][T12696] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2622.091499][T12696] usb 4-1: device descriptor read/8, error -71 [ 2622.194456][T13076] netlink: 388 bytes leftover after parsing attributes in process `syz.4.10967'. [ 2622.251287][T12696] usb usb4-port1: unable to enumerate USB device [ 2622.762698][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 2622.762786][ T30] audit: type=1326 audit(1765118769.899:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.0.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477298f749 code=0x7ffc0000 [ 2622.843885][ T30] audit: type=1326 audit(1765118769.949:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.0.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477298f749 code=0x7ffc0000 [ 2623.041250][T12589] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2623.223403][T12589] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2623.243932][T12589] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2623.257217][T12589] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 2623.267716][T12589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.341239][T12589] usb 2-1: config 0 descriptor?? [ 2623.400980][T30329] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2623.436798][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10976'. [ 2623.450998][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10976'. [ 2623.461097][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10976'. [ 2623.470065][T13101] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10976'. [ 2623.479811][T14550] net_ratelimit: 29 callbacks suppressed [ 2623.479829][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2623.491527][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10976'. [ 2623.565993][T30329] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2623.580974][T30329] usb 3-1: can't read configurations, error -71 [ 2623.601545][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2623.721436][ T7270] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2623.841805][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2623.951902][ T7270] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2624.068850][T12122] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2624.211500][T13125] ALSA: mixer_oss: invalid OSS volume ']b#u4e.fG)CA݆T4Y' [ 2624.234945][T13125] ALSA: mixer_oss: invalid OSS volume '7c-}n0eO:ԛ^ [ 2639.629388][T13373] dump_stack_lvl+0x189/0x250 [ 2639.629420][T13373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2639.629442][T13373] ? __pfx__printk+0x10/0x10 [ 2639.629466][T13373] ? find_vma+0xe7/0x160 [ 2639.629504][T13373] fixup_user_fault+0x64a/0x700 [ 2639.629534][T13373] fault_in_user_writeable+0x72/0xe0 [ 2639.629555][T13373] futex_lock_pi+0x773/0xa90 [ 2639.629588][T13373] ? __pfx_futex_lock_pi+0x10/0x10 [ 2639.629607][T13373] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2639.629660][T13373] ? __pfx_futex_wake_mark+0x10/0x10 [ 2639.629690][T13373] ? __pfx_futex_wake+0x10/0x10 [ 2639.629709][T13373] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 2639.629739][T13373] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2639.629770][T13373] do_futex+0x292/0x420 [ 2639.629796][T13373] ? __pfx_do_futex+0x10/0x10 [ 2639.629817][T13373] ? __vm_munmap+0x2c1/0x380 [ 2639.629847][T13373] __se_sys_futex+0x36f/0x400 [ 2639.629881][T13373] ? __pfx___se_sys_futex+0x10/0x10 [ 2639.629911][T13373] ? __x64_sys_futex+0x21/0xf0 [ 2639.629935][T13373] do_syscall_64+0xfa/0xf80 [ 2639.629962][T13373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2639.629980][T13373] ? clear_bhb_loop+0x60/0xb0 [ 2639.630004][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2639.630023][T13373] RIP: 0033:0x7f0f43d8f749 [ 2639.630041][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2639.630057][T13373] RSP: 002b:00007f0f44b4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2639.630078][T13373] RAX: ffffffffffffffda RBX: 00007f0f43fe5fa0 RCX: 00007f0f43d8f749 [ 2639.630094][T13373] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 2639.630107][T13373] RBP: 00007f0f43e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2639.630119][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2639.630132][T13373] R13: 00007f0f43fe6038 R14: 00007f0f43fe5fa0 R15: 00007f0f4410fa28 [ 2639.630166][T13373] [ 2640.005741][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.053135][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.082050][T13375] team0: Port device team_slave_0 removed [ 2640.141587][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2640.214112][T30329] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2640.262806][ T36] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2640.370374][T31304] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2640.371339][T30329] usb 4-1: device descriptor read/64, error -71 [ 2640.384856][ T5517] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2640.392913][ T36] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2640.430906][T30343] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2640.511822][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2640.520648][T31304] usb 1-1: Using ep0 maxpacket: 16 [ 2640.527799][T31304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2640.590772][ T5517] usb 3-1: Using ep0 maxpacket: 32 [ 2640.689324][T30329] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2640.699278][T31304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2640.721991][T14550] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2640.833876][T31304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2641.070960][T30329] usb 4-1: device descriptor read/64, error -71 [ 2641.078178][T30343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2641.106205][ T5517] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2641.120887][T30343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2641.120891][T31304] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2641.120917][T30343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2641.153307][T31304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.156694][ T5517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.174765][ T5517] usb 3-1: Product: syz [ 2641.175960][T31304] usb 1-1: config 0 descriptor?? [ 2641.178946][ T5517] usb 3-1: Manufacturer: syz [ 2641.178964][ T5517] usb 3-1: SerialNumber: syz [ 2641.194479][T30329] usb usb4-port1: attempt power cycle [ 2641.200836][T30343] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2641.227926][ T5517] usb 3-1: config 0 descriptor?? [ 2641.237433][T30343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.249180][ T5517] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2641.273361][T30343] usb 2-1: config 0 descriptor?? [ 2641.550939][T30329] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2641.571601][T30329] usb 4-1: device descriptor read/8, error -71 [ 2641.623421][T13382] random: crng reseeded on system resumption [ 2641.654805][T31304] usbhid 1-1:0.0: can't add hid device: -71 [ 2641.669189][T31304] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2641.699970][T31304] usb 1-1: USB disconnect, device number 66 [ 2641.734164][T30343] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2641.825983][T30329] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2641.851464][T30329] usb 4-1: device descriptor read/8, error -71 [ 2641.971398][T30329] usb usb4-port1: unable to enumerate USB device [ 2641.984196][T12697] usb 2-1: USB disconnect, device number 121 [ 2642.599126][T30329] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2642.774359][T30329] usb 1-1: Using ep0 maxpacket: 8 [ 2642.785324][T30329] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 2642.801835][T30329] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2642.817459][T30329] usb 1-1: Product: syz [ 2642.825608][T30329] usb 1-1: Manufacturer: syz [ 2642.835125][T30329] usb 1-1: SerialNumber: syz [ 2642.852221][T30329] usb 1-1: config 0 descriptor?? [ 2642.868036][ T5517] gspca_ov534_9: reg_w failed -71 [ 2643.005226][T13426] syzkaller0: entered promiscuous mode [ 2643.011356][T13426] syzkaller0: entered allmulticast mode [ 2643.045851][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2643.045866][ T30] audit: type=1326 audit(1765118790.179:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.081283][ T30] audit: type=1326 audit(1765118790.179:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.106961][ T30] audit: type=1326 audit(1765118790.189:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.130513][ T30] audit: type=1326 audit(1765118790.189:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.153898][ T5517] gspca_ov534_9: Unknown sensor 0000 [ 2643.153980][ T5517] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2643.171142][ T5517] usb 3-1: USB disconnect, device number 99 [ 2643.183301][ T30] audit: type=1326 audit(1765118790.189:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.209910][ T30] audit: type=1326 audit(1765118790.189:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.344423][ T30] audit: type=1326 audit(1765118790.189:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.391120][ T30] audit: type=1326 audit(1765118790.199:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.1.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43d8f749 code=0x7ffc0000 [ 2643.426367][T13430] fuse: Bad value for 'user_id' [ 2643.431864][T13430] fuse: Bad value for 'user_id' [ 2643.483706][T13411] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11064'. [ 2643.768758][T30329] usb 1-1: USB disconnect, device number 67 [ 2643.941502][T31304] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2644.020830][ T7077] net_ratelimit: 23 callbacks suppressed [ 2644.020885][ T7077] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.041512][T13446] input: syz0 as /devices/virtual/input/input254 [ 2644.100277][T31304] usb 2-1: Using ep0 maxpacket: 16 [ 2644.120145][T31304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.141358][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.143582][T31304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2644.163381][T31304] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2644.182291][T31304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2644.192288][T31304] usb 2-1: Product: syz [ 2644.197023][T31304] usb 2-1: Manufacturer: syz [ 2644.202764][T31304] usb 2-1: SerialNumber: syz [ 2644.271096][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.354876][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2644.380958][T25801] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.391114][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2644.429000][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2644.439786][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2644.466898][T31304] usb 2-1: 0:2 : does not exist [ 2644.479742][T31304] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2644.491484][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.521282][T31304] usb 2-1: USB disconnect, device number 122 [ 2644.553606][T13455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2644.568049][T26980] udevd[26980]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2644.595047][T30329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2644.612003][T14551] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.742699][T11348] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2644.760993][T30329] usb 5-1: Using ep0 maxpacket: 32 [ 2644.777691][T30329] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2644.793031][T30329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.816118][T30329] usb 5-1: config 0 descriptor?? [ 2644.834176][T13459] openvswitch: netlink: Key type 250 is out of range max 32 [ 2644.882429][T23590] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 2645.024959][T30329] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2645.042418][T30329] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2645.060987][T30329] dib0700: firmware download failed at 7 with -22 [ 2645.153910][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11082'. [ 2645.177463][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11082'. [ 2645.387866][T13476] bond2: entered allmulticast mode [ 2645.399528][T13476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2645.566064][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11084'. [ 2645.731976][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11084'. [ 2645.791172][T13487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11086'. [ 2752.060152][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2752.066797][ C1] rcu: 1-....: (1 GPs behind) idle=d39c/1/0x4000000000000000 softirq=393582/393592 fqs=4162 [ 2752.078780][ C1] rcu: hardirqs softirqs csw/system [ 2752.085191][ C1] rcu: number: 5251 0 0 [ 2752.091591][ C1] rcu: cputime: 138 52350 2 ==> 52520(ms) [ 2752.099374][ C1] rcu: (t=10504 jiffies g=350181 q=330 ncpus=2) [ 2752.105682][ C1] rcu: rcu_preempt kthread starved for 2181 jiffies! g350181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2752.116862][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2752.126819][ C1] rcu: RCU grace-period kthread stack dump: [ 2752.132709][ C1] task:rcu_preempt state:R running task stack:27376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2752.146178][ C1] Call Trace: [ 2752.149450][ C1] [ 2752.152370][ C1] __schedule+0x14bc/0x5000 [ 2752.156884][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2752.162772][ C1] ? __pfx___schedule+0x10/0x10 [ 2752.167615][ C1] ? schedule+0x91/0x360 [ 2752.171844][ C1] schedule+0x165/0x360 [ 2752.175997][ C1] schedule_timeout+0x12b/0x270 [ 2752.180834][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2752.186211][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2752.191490][ C1] ? prepare_to_swait_event+0x341/0x380 [ 2752.197041][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 2752.201898][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2752.208041][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2752.213311][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2752.218536][ C1] ? finish_swait+0xcd/0x1f0 [ 2752.223112][ C1] rcu_gp_kthread+0x99/0x390 [ 2752.227685][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2752.232877][ C1] ? __kthread_parkme+0x7b/0x200 [ 2752.237800][ C1] ? __kthread_parkme+0x1a1/0x200 [ 2752.242810][ C1] kthread+0x711/0x8a0 [ 2752.246867][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2752.252047][ C1] ? __pfx_kthread+0x10/0x10 [ 2752.256621][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2752.261801][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 2752.266980][ C1] ? __pfx_kthread+0x10/0x10 [ 2752.271554][ C1] ret_from_fork+0x599/0xb30 [ 2752.276125][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2752.281221][ C1] ? __switch_to_asm+0x39/0x70 [ 2752.285970][ C1] ? __switch_to_asm+0x33/0x70 [ 2752.290714][ C1] ? __pfx_kthread+0x10/0x10 [ 2752.295286][ C1] ret_from_fork_asm+0x1a/0x30 [ 2752.300040][ C1] [ 2752.303050][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2752.309354][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2752.314719][ C0] NMI backtrace for cpu 0 [ 2752.314740][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2752.314762][ C0] Tainted: [L]=SOFTLOCKUP [ 2752.314768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2752.314778][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2752.314802][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 90 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2752.314816][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2752.314831][ C0] RAX: 08a356e682464700 RBX: ffffffff81978eba RCX: 08a356e682464700 [ 2752.314845][ C0] RDX: 0000000000000001 RSI: ffffffff8d786736 RDI: ffffffff8bc01ce0 [ 2752.314857][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2752.314869][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f817970 [ 2752.314880][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2752.314891][ C0] FS: 0000000000000000(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 2752.314904][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2752.314916][ C0] CR2: 00007f32e2063f80 CR3: 00000000312ee000 CR4: 00000000003526f0 [ 2752.314932][ C0] Call Trace: [ 2752.314940][ C0] [ 2752.314947][ C0] default_idle+0x13/0x20 [ 2752.314968][ C0] default_idle_call+0x73/0xb0 [ 2752.314990][ C0] do_idle+0x1ea/0x520 [ 2752.315007][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2752.315027][ C0] ? __pfx_do_idle+0x10/0x10 [ 2752.315047][ C0] ? do_idle+0xc/0x520 [ 2752.315064][ C0] cpu_startup_entry+0x44/0x60 [ 2752.315080][ C0] rest_init+0x2de/0x300 [ 2752.315096][ C0] start_kernel+0x3a7/0x400 [ 2752.315120][ C0] x86_64_start_reservations+0x24/0x30 [ 2752.315137][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2752.315153][ C0] common_startup_64+0x13e/0x147 [ 2752.315181][ C0] [ 2752.505221][ C1] CPU: 1 UID: 0 PID: 6733 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2752.505244][ C1] Tainted: [L]=SOFTLOCKUP [ 2752.505249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2752.505258][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 2752.505280][ C1] Code: 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48 8d 7e 01 8b 89 4c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0e fa 9b 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 2752.505291][ C1] RSP: 0018:ffffc90000a084c8 EFLAGS: 00000246 [ 2752.505304][ C1] RAX: ffffffff895c0522 RBX: 0000000000000008 RCX: ffff88802bee3d00 [ 2752.505314][ C1] RDX: 0000000000000100 RSI: 0000000000000008 RDI: 0000000000000300 [ 2752.505323][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004 [ 2752.505330][ C1] R10: 0000000000000008 R11: 0000000000000100 R12: ffff888027bcee5c [ 2752.505339][ C1] R13: ffff88802a1d9700 R14: dffffc0000000000 R15: 0000000000000000 [ 2752.505348][ C1] FS: 00005555721ee500(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 2752.505359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2752.505370][ C1] CR2: 00007f8bc71156c0 CR3: 0000000058ae8000 CR4: 00000000003526f0 [ 2752.505382][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300002a [ 2752.505390][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2752.505398][ C1] Call Trace: [ 2752.505406][ C1] [ 2752.505411][ C1] tcf_classify+0x4a2/0x1140 [ 2752.505440][ C1] hfsc_enqueue+0x323/0xf20 [ 2752.505462][ C1] ? __pfx_hfsc_enqueue+0x10/0x10 [ 2752.505473][ C1] ? do_raw_spin_lock+0x121/0x290 [ 2752.505492][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2752.505512][ C1] dev_qdisc_enqueue+0x4e/0x240 [ 2752.505527][ C1] ? __dev_queue_xmit+0xc60/0x3140 [ 2752.505543][ C1] __dev_queue_xmit+0x1829/0x3140 [ 2752.505562][ C1] ? __dev_queue_xmit+0x289/0x3140 [ 2752.505573][ C1] ? neigh_resolve_output+0x438/0x750 [ 2752.505599][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2752.505619][ C1] ? read_seqbegin+0x1ac/0x250 [ 2752.505634][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 2752.505648][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2752.505662][ C1] ? eth_header+0x11b/0x200 [ 2752.505676][ C1] ? __asan_memcpy+0x40/0x70 [ 2752.505696][ C1] ? eth_header+0x11b/0x200 [ 2752.505710][ C1] ? __pfx_eth_header+0x10/0x10 [ 2752.505721][ C1] ? neigh_resolve_output+0x624/0x750 [ 2752.505747][ C1] ip_finish_output2+0xd40/0x1160 [ 2752.505765][ C1] ? ip_skb_dst_mtu+0x18d/0xb70 [ 2752.505786][ C1] ? ip_finish_output2+0x452/0x1160 [ 2752.505805][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 2752.505824][ C1] ? ip_skb_dst_mtu+0x18d/0xb70 [ 2752.505839][ C1] ? ip_skb_dst_mtu+0x917/0xb70 [ 2752.505857][ C1] ? ip_finish_output+0x33a/0x3f0 [ 2752.505876][ C1] ip_output+0x29f/0x450 [ 2752.505893][ C1] ? ip_output+0x5b/0x450 [ 2752.505910][ C1] igmp_ifc_timer_expire+0xbb6/0xde0 [ 2752.505928][ C1] ? igmp_ifc_timer_expire+0x26/0xde0 [ 2752.505948][ C1] call_timer_fn+0x16e/0x590 [ 2752.505962][ C1] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 2752.505977][ C1] ? call_timer_fn+0xbe/0x590 [ 2752.505991][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2752.506012][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2752.506027][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 2752.506042][ C1] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 2752.506058][ C1] __run_timer_base+0x61a/0x860 [ 2752.506082][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2752.506094][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 2752.506123][ C1] run_timer_softirq+0xb7/0x180 [ 2752.506137][ C1] handle_softirqs+0x27d/0x850 [ 2752.506154][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2752.506172][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2752.506189][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2752.506208][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2752.506222][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2752.506242][ C1] irq_exit_rcu+0x9/0x30 [ 2752.506253][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2752.506270][ C1] [ 2752.506275][ C1] [ 2752.506280][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2752.506295][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 2752.506307][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 f4 49 df 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 2752.506318][ C1] RSP: 0018:ffffc900049972e8 EFLAGS: 00000206 [ 2752.506329][ C1] RAX: 10fc63fb5b731f00 RBX: 0000000000000000 RCX: 10fc63fb5b731f00 [ 2752.506339][ C1] RDX: 0000000079b10ad9 RSI: ffffffff8d96d336 RDI: ffffffff8bc01ce0 [ 2752.506348][ C1] RBP: ffffffff8233a278 R08: ffffffff8233a278 R09: ffffffff8df419e0 [ 2752.506358][ C1] R10: dffffc0000000000 R11: fffff940005864c1 R12: 0000000000000002 [ 2752.506367][ C1] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246 [ 2752.506379][ C1] ? page_table_check_set+0x148/0x610 [ 2752.506394][ C1] ? page_table_check_set+0x148/0x610 [ 2752.506413][ C1] ? pfn_valid+0xba/0x490 [ 2752.506428][ C1] ? pfn_valid+0xba/0x490 [ 2752.506440][ C1] ? page_table_check_set+0x148/0x610 [ 2752.506453][ C1] page_table_check_set+0x165/0x610 [ 2752.506465][ C1] ? page_table_check_set+0x148/0x610 [ 2752.506482][ C1] copy_pmd_range+0x4d02/0x7e00 [ 2752.506494][ C1] ? arch_stack_walk+0xfc/0x150 [ 2752.506518][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2752.506543][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 2752.506559][ C1] ? copy_mm+0x13c/0x4b0 [ 2752.506572][ C1] ? copy_process+0x165d/0x3950 [ 2752.506584][ C1] ? kernel_clone+0x21e/0x820 [ 2752.506601][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2752.506631][ C1] copy_page_range+0xb88/0x11d0 [ 2752.506661][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 2752.506681][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2752.506699][ C1] dup_mmap+0xf4a/0x1b80 [ 2752.506724][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 2752.506744][ C1] ? mm_init+0xa91/0xc60 [ 2752.506762][ C1] copy_mm+0x13c/0x4b0 [ 2752.506778][ C1] copy_process+0x165d/0x3950 [ 2752.506800][ C1] ? copy_process+0x915/0x3950 [ 2752.506820][ C1] ? __pfx_copy_process+0x10/0x10 [ 2752.506836][ C1] ? count_memcg_event_mm+0x21/0x260 [ 2752.506858][ C1] kernel_clone+0x21e/0x820 [ 2752.506877][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2752.506905][ C1] __x64_sys_clone+0x18b/0x1e0 [ 2752.506923][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 2752.506954][ C1] ? do_syscall_64+0xbe/0xf80 [ 2752.506973][ C1] do_syscall_64+0xfa/0xf80 [ 2752.506990][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2752.507002][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2752.507018][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2752.507031][ C1] RIP: 0033:0x7f8bc6385e93 [ 2752.507045][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 2752.507056][ C1] RSP: 002b:00007f8bc670fca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2752.507069][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bc6385e93 [ 2752.507078][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2752.507087][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2752.507095][ C1] R10: 00005555721ee7d0 R11: 0000000000000246 R12: 0000000000000000 [ 2752.507104][ C1] R13: 00000000000927c0 R14: 00000000002862e6 R15: 00007f8bc670fe40 [ 2752.507125][ C1] [ 2753.271304][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2753.277639][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2753.288984][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2753.299085][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2754.224077][ C1] sched: DL replenish lagged too much