last executing test programs: 5.45107422s ago: executing program 3 (id=104): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.327340507s ago: executing program 1 (id=113): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.133680931s ago: executing program 1 (id=115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x4, 0x9, 0x10000, 0x9, 0x0, "67bd7d849dd889bdab58d7331b936fe22c6251", 0x6, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000180)='2\x00', 0x2) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc}]}, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x5c, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xcb}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff8000}]}, 0x5c}}, 0x4) 3.679396192s ago: executing program 2 (id=118): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.296141452s ago: executing program 2 (id=121): io_setup(0x8, &(0x7f00000000c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0xfffffff8, 0x7, 0x703f4ebb, 0x1000001}, {0x1, 0x6, 0x6, 0xffffffff, 0x3}]}) writev(r1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x5c41, &(0x7f0000000300)={0x0, 0x6053, 0x803, 0x1, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000001780), 0xa) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0, 0x0, 0x801000}, &(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x0, 0x48f, 0xffffffffffffffff, 0x0}]) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000017c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@gre_packet={0x5, 0x6, "47a01b", 0x49, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0, 0x89}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x9, 0x0, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x7, 0x2, 0x2, 0x1b, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "c7b72f8b09"}}}}}}, 0x7f) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r9, &(0x7f0000000000)='%', 0x1, 0xfffffffffffffffc}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}]) 3.041614048s ago: executing program 0 (id=122): socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.819303133s ago: executing program 0 (id=123): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.615029627s ago: executing program 0 (id=124): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) 2.439613062s ago: executing program 3 (id=125): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='1\x00', 0x1) 2.297664905s ago: executing program 2 (id=126): sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a", 0xa5}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.999422653s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x8c, 0x428006, 0x3f11, 0x80046, 0x0, 0x1000094}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.737727299s ago: executing program 0 (id=128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.529591974s ago: executing program 3 (id=129): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.496208934s ago: executing program 0 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.417625567s ago: executing program 2 (id=131): connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00') 1.28739047s ago: executing program 0 (id=132): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)={0x0, 0x7, 0x3, "bf761f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.26614685s ago: executing program 2 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x48d, 0x8595, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='*\n-\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r5, 0x0, 0x18, &(0x7f0000000000)="0e", 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 1.201479252s ago: executing program 3 (id=134): io_setup(0x8, &(0x7f00000000c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0xfffffff8, 0x7, 0x703f4ebb, 0x1000001}, {0x1, 0x6, 0x6, 0xffffffff, 0x3}]}) writev(r1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x5c41, &(0x7f0000000300)={0x0, 0x6053, 0x803, 0x1, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000001780), 0xa) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0, 0x0, 0x801000}, &(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x0, 0x48f, 0xffffffffffffffff, 0x0}]) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000017c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@gre_packet={0x5, 0x6, "47a01b", 0x49, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0, 0x89}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x9, 0x0, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x7, 0x2, 0x2, 0x1b, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "c7b72f8b09"}}}}}}, 0x7f) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r9, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='%', 0x1, 0xfffffffffffffffc}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}]) 1.077436655s ago: executing program 1 (id=135): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {0x0}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 839.39506ms ago: executing program 1 (id=136): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) 735.678373ms ago: executing program 3 (id=137): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}], 0x2) 580.652217ms ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="063bbbb64679b5"], 0x0) 207.376805ms ago: executing program 1 (id=139): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 1 (id=140): socket$rds(0x15, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) recvmsg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. syzkaller login: [ 78.661404][ T5761] cgroup: Unknown subsys name 'net' [ 78.794637][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.484534][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.072214][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.081499][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.089231][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.098047][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.125884][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.133364][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.188721][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.197204][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.206283][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.214183][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.241383][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.256899][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.275582][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.286373][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.297895][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.310346][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.315372][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.319700][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.327843][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.339233][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.346925][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.359951][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.369409][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.377241][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.835856][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.880034][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.981659][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.010484][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 83.064740][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.072828][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.080443][ T5773] bridge_slave_0: entered allmulticast mode [ 83.088191][ T5773] bridge_slave_0: entered promiscuous mode [ 83.118694][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.126043][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.133239][ T5777] bridge_slave_0: entered allmulticast mode [ 83.143522][ T5777] bridge_slave_0: entered promiscuous mode [ 83.159770][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.167085][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.174291][ T5777] bridge_slave_1: entered allmulticast mode [ 83.181733][ T5777] bridge_slave_1: entered promiscuous mode [ 83.189849][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.199038][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.206416][ T5773] bridge_slave_1: entered allmulticast mode [ 83.213455][ T5773] bridge_slave_1: entered promiscuous mode [ 83.295373][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.330066][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.344645][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.383003][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.447642][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.454811][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.462945][ T5776] bridge_slave_0: entered allmulticast mode [ 83.470785][ T5776] bridge_slave_0: entered promiscuous mode [ 83.479148][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.489419][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.496810][ T5782] bridge_slave_0: entered allmulticast mode [ 83.503836][ T5782] bridge_slave_0: entered promiscuous mode [ 83.512965][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.520222][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.527510][ T5782] bridge_slave_1: entered allmulticast mode [ 83.534651][ T5782] bridge_slave_1: entered promiscuous mode [ 83.545042][ T5777] team0: Port device team_slave_0 added [ 83.554413][ T5777] team0: Port device team_slave_1 added [ 83.572128][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.579648][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.587219][ T5776] bridge_slave_1: entered allmulticast mode [ 83.594422][ T5776] bridge_slave_1: entered promiscuous mode [ 83.649275][ T5773] team0: Port device team_slave_0 added [ 83.680295][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.694405][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.705929][ T5773] team0: Port device team_slave_1 added [ 83.723347][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.733642][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.760394][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.774789][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.787623][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.816712][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.823708][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.849853][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.891319][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.898435][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.927896][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.955054][ T5776] team0: Port device team_slave_0 added [ 83.972285][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.980629][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.007502][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.020838][ T5776] team0: Port device team_slave_1 added [ 84.031010][ T5782] team0: Port device team_slave_0 added [ 84.039789][ T5782] team0: Port device team_slave_1 added [ 84.093594][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.100866][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.127119][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.173778][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.181570][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.207883][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.218742][ T5780] Bluetooth: hci0: command tx timeout [ 84.231031][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.238242][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.264482][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.278209][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.285213][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.312055][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.329563][ T5777] hsr_slave_0: entered promiscuous mode [ 84.337155][ T5777] hsr_slave_1: entered promiscuous mode [ 84.361152][ T5773] hsr_slave_0: entered promiscuous mode [ 84.366898][ T5780] Bluetooth: hci2: command tx timeout [ 84.372912][ T5773] hsr_slave_1: entered promiscuous mode [ 84.375923][ T5780] Bluetooth: hci1: command tx timeout [ 84.384251][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.392951][ T5773] Cannot create hsr debugfs directory [ 84.445588][ T5780] Bluetooth: hci3: command tx timeout [ 84.452863][ T5776] hsr_slave_0: entered promiscuous mode [ 84.460141][ T5776] hsr_slave_1: entered promiscuous mode [ 84.467115][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.474699][ T5776] Cannot create hsr debugfs directory [ 84.578325][ T5782] hsr_slave_0: entered promiscuous mode [ 84.584783][ T5782] hsr_slave_1: entered promiscuous mode [ 84.593225][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.601239][ T5782] Cannot create hsr debugfs directory [ 84.995860][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.016383][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.027617][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.040510][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.115393][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.126741][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.138562][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.149637][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.255974][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.271235][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.305947][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.320463][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.376392][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.397160][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.422252][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.437285][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.494707][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546720][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.602416][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.632152][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.639545][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.653196][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.660438][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.681157][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.692653][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.723351][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.730609][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.784215][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.791436][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.837675][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.898750][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.905978][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.952352][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.964807][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.972029][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.044685][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.091732][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.098976][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.140662][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.147911][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.297170][ T5780] Bluetooth: hci0: command tx timeout [ 86.318170][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.423226][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.449479][ T5780] Bluetooth: hci1: command tx timeout [ 86.454965][ T5780] Bluetooth: hci2: command tx timeout [ 86.537329][ T5780] Bluetooth: hci3: command tx timeout [ 86.550345][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.651019][ T5777] veth0_vlan: entered promiscuous mode [ 86.704450][ T5777] veth1_vlan: entered promiscuous mode [ 86.723805][ T5776] veth0_vlan: entered promiscuous mode [ 86.762704][ T5776] veth1_vlan: entered promiscuous mode [ 86.824551][ T5777] veth0_macvtap: entered promiscuous mode [ 86.836724][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.867232][ T5777] veth1_macvtap: entered promiscuous mode [ 86.880947][ T5776] veth0_macvtap: entered promiscuous mode [ 86.895336][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.910222][ T5776] veth1_macvtap: entered promiscuous mode [ 86.957749][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.969360][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.983193][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.995307][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.020943][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.038329][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.049943][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.062034][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.099182][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.126566][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.135312][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.156566][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.178021][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.191539][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.200588][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.209599][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.287280][ T5773] veth0_vlan: entered promiscuous mode [ 87.334904][ T5782] veth0_vlan: entered promiscuous mode [ 87.352300][ T5782] veth1_vlan: entered promiscuous mode [ 87.377830][ T5773] veth1_vlan: entered promiscuous mode [ 87.606880][ T5773] veth0_macvtap: entered promiscuous mode [ 87.617187][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.625295][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.642568][ T5782] veth0_macvtap: entered promiscuous mode [ 87.665170][ T5773] veth1_macvtap: entered promiscuous mode [ 87.671829][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.690209][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.760435][ T5782] veth1_macvtap: entered promiscuous mode [ 87.794073][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.794087][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.825459][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.833818][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.844870][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.856471][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.868412][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.924096][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.948930][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.959165][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.970761][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.983387][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.011203][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.022394][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.033906][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.047566][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.070216][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.078676][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.094794][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.101013][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.107977][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.126621][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.136616][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.147920][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.176119][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.213362][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.223954][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.234530][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.246806][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.257285][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.271232][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.294658][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.369263][ T5780] Bluetooth: hci0: command tx timeout [ 88.374948][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.385103][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394067][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.407574][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.525851][ T5780] Bluetooth: hci1: command tx timeout [ 88.535966][ T5780] Bluetooth: hci2: command tx timeout [ 88.590002][ T5835] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 88.608212][ T5780] Bluetooth: hci3: command tx timeout [ 88.638994][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.662575][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.767364][ T5838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.794799][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.805699][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.819925][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.835773][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.916760][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.924662][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.950911][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.151998][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 89.196649][ T5812] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.229066][ T5812] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 89.275832][ T5812] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.307034][ T5846] binder: 5844:5846 ioctl c0306201 0 returned -14 [ 89.323320][ T5812] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.338315][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.338642][ T5849] Zero length message leads to an empty skb [ 89.347354][ T5812] usb 2-1: Product: syz [ 89.356766][ T5812] usb 2-1: Manufacturer: syz [ 89.361734][ T5812] usb 2-1: SerialNumber: syz [ 89.390081][ T5850] binder: 5844:5850 ioctl c0306201 0 returned -14 [ 89.432819][ T5812] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 89.456831][ T5812] imon 2-1:155.0: unable to initialize intf0, err -19 [ 89.472422][ T5812] imon:imon_probe: failed to initialize context! [ 89.479335][ T5812] imon 2-1:155.0: unable to register, err -19 [ 89.566647][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.760906][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.786346][ T5830] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 89.807604][ T5830] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 89.825588][ T5830] usb 3-1: Product: syz [ 89.832976][ T5830] usb 3-1: Manufacturer: syz [ 89.844254][ T5830] usb 3-1: SerialNumber: syz [ 89.859513][ T5830] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 89.875756][ T5830] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 90.086023][ T5847] input: syz0 as /devices/virtual/input/input5 [ 90.337942][ T5830] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 90.729062][ T5830] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 90.769733][ T5830] em28xx 3-1:1.0: board has no eeprom [ 90.887375][ T5830] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 90.926762][ T5830] em28xx 3-1:1.0: dvb set to bulk mode. [ 90.945192][ T8] em28xx 3-1:1.0: Binding DVB extension [ 91.000076][ T5830] usb 3-1: USB disconnect, device number 2 [ 91.008519][ T8] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 91.024652][ T5830] em28xx 3-1:1.0: Disconnecting em28xx [ 91.046889][ T8] zl10353_read_register: readreg error (reg=127, ret==-19) [ 91.082428][ T8] em28xx 3-1:1.0: frontend initialization failed [ 91.101557][ T8] em28xx 3-1:1.0: Remote control support is not available for this card. [ 91.156914][ T5830] em28xx 3-1:1.0: Closing input extension [ 91.209155][ T5830] em28xx 3-1:1.0: Freeing device [ 91.480758][ T5893] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 91.744130][ T5902] capability: warning: `syz.2.17' uses 32-bit capabilities (legacy support in use) [ 91.896589][ T5908] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 92.217266][ T27] cfg80211: failed to load regulatory.db [ 92.687497][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.971485][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.995506][ T23] usb 2-1: USB disconnect, device number 2 [ 93.013579][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.054420][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.084036][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.263310][ T5919] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.290439][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 93.552520][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.726474][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.955544][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.966380][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 94.026288][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.077827][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.089511][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.116799][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.181315][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.197168][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 94.218048][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.229761][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.238383][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.280413][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.316593][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.324723][ T27] usb 1-1: Product: syz [ 94.361820][ T27] usb 1-1: Manufacturer: syz [ 94.369845][ T27] usb 1-1: SerialNumber: syz [ 94.376215][ T5945] misc userio: No port type given on /dev/userio [ 94.406815][ T5948] misc userio: The device must be registered before sending interrupts [ 94.498699][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 94.510846][ T23] usbtmc 2-1:16.0: can't read capabilities [ 94.626498][ T27] usb 1-1: 0:2 : does not exist [ 94.667050][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 94.735314][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 94.783076][ T27] usb 1-1: USB disconnect, device number 2 [ 94.867579][ T5952] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.24'. [ 94.900555][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 95.048771][ T174] usb 2-1: USB disconnect, device number 3 [ 95.716833][ T5966] Cannot find add_set index 2 as target [ 95.963207][ T23] usb 3-1: USB disconnect, device number 3 [ 96.188076][ T5966] syz.1.26 (5966) used greatest stack depth: 19664 bytes left [ 96.446347][ T5982] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 96.602026][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 96.645056][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.0.30'. [ 99.525753][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.736295][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 99.754514][ T5830] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.773186][ T5830] usb 3-1: config 0 has no interface number 0 [ 99.793484][ T5830] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 99.865612][ T5830] usb 3-1: config 0 interface 184 has no altsetting 0 [ 99.876062][ T5830] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.888323][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.905685][ T5830] usb 3-1: Product: syz [ 99.910180][ T5830] usb 3-1: Manufacturer: syz [ 99.914786][ T5830] usb 3-1: SerialNumber: syz [ 99.933301][ T5830] usb 3-1: config 0 descriptor?? [ 99.946515][ T6055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.956601][ T5830] smsc75xx v1.0.0 [ 100.189810][ T6055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.618321][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.656670][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.321519][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 102.342455][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 102.363085][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 102.395560][ T5830] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 102.516144][ T5830] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 102.532613][ T5830] usb 3-1: USB disconnect, device number 4 [ 102.897887][ T5811] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 103.174521][ T5811] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.205563][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.228765][ T5811] usb 2-1: Product: syz [ 103.238918][ T5811] usb 2-1: Manufacturer: syz [ 103.243771][ T5811] usb 2-1: SerialNumber: syz [ 103.276999][ T5811] usb 2-1: config 0 descriptor?? [ 103.514842][ T5811] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.616557][ T174] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 104.028862][ T174] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 104.049980][ T174] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 104.150081][ T174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.213768][ T174] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.230043][ T174] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.239479][ T174] usb 3-1: Product: syz [ 104.243764][ T174] usb 3-1: Manufacturer: syz [ 104.248576][ T174] usb 3-1: SerialNumber: syz [ 104.257507][ T174] usb 3-1: config 0 descriptor?? [ 104.290269][ T174] usb 3-1: selecting invalid altsetting 0 [ 104.571204][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.672712][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.741389][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.771723][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.794470][ T174] usb 3-1: USB disconnect, device number 5 [ 105.016697][ T5811] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 105.038618][ T5811] usb 2-1: USB disconnect, device number 4 [ 106.409272][ T6161] syzkaller0: entered promiscuous mode [ 106.464658][ T6161] syzkaller0: entered allmulticast mode [ 106.502560][ T6161] tipc: Started in network mode [ 106.522523][ T6161] tipc: Node identity 1e3035a3526f, cluster identity 4711 [ 106.542533][ T6161] tipc: Enabled bearer , priority 0 [ 106.598094][ T6159] tipc: Resetting bearer [ 106.731362][ T6159] tipc: Disabling bearer [ 106.939381][ T6125] syz.2.68 (6125): drop_caches: 2 [ 110.068137][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.266869][ T6202] Cannot find add_set index 2 as target [ 110.337410][ T5811] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 110.349197][ T5811] usb 3-1: config 1 has no interface number 0 [ 110.358560][ T5811] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 110.369912][ T5811] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.392101][ T5811] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 110.423503][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.443019][ T5811] usb 3-1: Product: syz [ 110.464143][ T5811] usb 3-1: Manufacturer: syz [ 110.483467][ T5811] usb 3-1: SerialNumber: syz [ 110.502047][ T6195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.538184][ T5811] usb 3-1: Expected 3 endpoints, found: 2 [ 110.586853][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.802403][ T5830] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 110.847992][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.868186][ T5830] usb 2-1: Product: syz [ 110.872429][ T5830] usb 2-1: Manufacturer: syz [ 110.880138][ T5830] usb 2-1: SerialNumber: syz [ 110.908211][ T5830] usb 2-1: config 0 descriptor?? [ 111.106685][ T6218] netlink: 76 bytes leftover after parsing attributes in process `syz.2.92'. [ 111.161140][ T5830] usb 2-1: USB disconnect, device number 5 [ 112.871470][ T6155] Set syz1 is full, maxelem 65536 reached [ 112.946052][ T174] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 113.018604][ T6241] Cannot find add_set index 2 as target [ 113.166308][ T174] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.185663][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.202231][ T174] usb 4-1: Product: syz [ 113.208415][ T174] usb 4-1: Manufacturer: syz [ 113.213078][ T174] usb 4-1: SerialNumber: syz [ 113.236538][ T174] usb 4-1: config 0 descriptor?? [ 113.415228][ T6246] kvm: kvm [6245]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 113.425163][ T6246] kvm: kvm [6245]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 113.458862][ T174] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.714203][ T6255] Cannot find add_set index 2 as target [ 113.789251][ T5830] usb 3-1: USB disconnect, device number 6 [ 114.378768][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.422766][ T6273] Cannot find add_set index 2 as target [ 114.619997][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 114.631658][ T5830] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 114.655531][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.686596][ T5830] usb 2-1: config 0 has no interface number 0 [ 114.703938][ T5830] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 114.735657][ T5830] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 114.770113][ T5830] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 114.799516][ T5830] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 114.841723][ T5830] usb 2-1: config 0 interface 239 has no altsetting 0 [ 114.853175][ T5830] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 114.865463][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.894040][ T5830] usb 2-1: Product: syz [ 114.898905][ T5830] usb 2-1: Manufacturer: syz [ 114.903603][ T5830] usb 2-1: SerialNumber: syz [ 114.925741][ T5830] usb 2-1: config 0 descriptor?? [ 114.931983][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 114.939347][ T174] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 114.954211][ T6261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.973370][ T174] usb 4-1: USB disconnect, device number 2 [ 114.983607][ T6261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.238424][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 115.254849][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.309702][ T6297] Cannot find add_set index 2 as target [ 115.448296][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.366567][ T5810] usb 2-1: USB disconnect, device number 6 [ 116.583866][ T6326] Cannot find add_set index 2 as target [ 117.005578][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.156919][ T5811] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.237248][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.247242][ T5810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.287931][ T5810] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 117.306147][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.314214][ T5810] usb 1-1: Product: syz [ 117.325501][ T5810] usb 1-1: Manufacturer: syz [ 117.330175][ T5810] usb 1-1: SerialNumber: syz [ 117.377731][ T5811] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.405545][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.425501][ T5811] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 117.448808][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.482578][ T5811] usb 3-1: config 0 descriptor?? [ 117.563054][ T5810] usb 1-1: Limiting number of CPorts to U8_MAX [ 117.886372][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.910815][ T5811] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 117.920323][ T5811] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 117.928009][ T5811] itetech 0003:048D:8595.0001: collection stack underflow [ 117.935329][ T5811] itetech 0003:048D:8595.0001: item 0 0 0 12 parsing failed [ 117.944149][ T5811] itetech: probe of 0003:048D:8595.0001 failed with error -22 [ 117.961815][ T5810] usb 1-1: failed to send ARPC request 1: -71 [ 118.001096][ T5810] usb 1-1: failed to execute ARPC: -71 [ 118.035768][ T5810] usb 1-1: failed to set connected state for cport 0: -71 [ 118.045207][ T5810] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 118.055553][ T5810] usb 1-1: failed to send ARPC request 3: -71 [ 118.061838][ T5810] usb 1-1: failed to execute ARPC: -71 [ 118.068499][ T5810] usb 1-1: failed to clear cport 0: -71 [ 118.074498][ T5810] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 118.096117][ C1] usb 1-1: failed to resubmit arpc in-urb: -1 [ 118.105572][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 118.121257][ T5810] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 118.133756][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.133989][ T5810] usb 1-1: USB disconnect, device number 3 [ 118.156153][ T6354] ------------[ cut here ]------------ [ 118.161949][ T6354] WARNING: CPU: 1 PID: 6354 at kernel/softirq.c:386 __local_bh_enable_ip+0x186/0x1c0 [ 118.171489][ T6354] Modules linked in: [ 118.175458][ T6354] CPU: 1 PID: 6354 Comm: krxrpcio/20000 Not tainted syzkaller #0 [ 118.183230][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.193350][ T6354] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 118.199395][ T6354] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 118.219056][ T6354] RSP: 0018:ffffc900033876e0 EFLAGS: 00010046 [ 118.225352][ T6354] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 118.233348][ T6354] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 118.241340][ T6354] RBP: ffffc90003387760 R08: ffff8880b8f3dc83 R09: 1ffff110171e7b90 [ 118.249334][ T6354] R10: dffffc0000000000 R11: ffffed10171e7b91 R12: ffff888077a5d678 [ 118.257331][ T6354] R13: ffff888077a5d670 R14: dffffc0000000000 R15: 1ffff92000670edc [ 118.265324][ T6354] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 118.274281][ T6354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.280887][ T6354] CR2: 00007fae9e1ced58 CR3: 00000000192f8000 CR4: 00000000003526e0 [ 118.288886][ T6354] Call Trace: [ 118.292190][ T6354] [ 118.295143][ T6354] ? _local_bh_enable+0xa0/0xa0 [ 118.300026][ T6354] ? do_raw_spin_unlock+0x121/0x230 [ 118.305255][ T6354] ? rt_cache_route+0x21f/0x280 [ 118.310143][ T6354] rt_cache_route+0x21f/0x280 [ 118.314852][ T6354] rt_set_nexthop+0x48b/0xa10 [ 118.319571][ T6354] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 118.325851][ T6354] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 118.331952][ T6354] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 118.338230][ T6354] ? ip_route_output_key_hash+0x13d/0x330 [ 118.343986][ T6354] ip_route_output_key_hash+0x1f3/0x330 [ 118.349570][ T6354] ? ip_route_input_rcu+0x3120/0x3120 [ 118.354988][ T6354] ? make_kuid+0x1db/0x680 [ 118.359441][ T6354] ? __put_user_ns+0x50/0x50 [ 118.364069][ T6354] ip_route_output_flow+0x2a/0x150 [ 118.369216][ T6354] rxrpc_init_peer+0x2da/0x740 [ 118.374013][ T6354] ? rxrpc_new_incoming_peer+0x590/0x590 [ 118.379690][ T6354] ? do_raw_spin_lock+0x11f/0x2b0 [ 118.384747][ T6354] ? __rwlock_init+0x150/0x150 [ 118.389640][ T6354] rxrpc_new_incoming_peer+0x27a/0x590 [ 118.395145][ T6354] rxrpc_new_incoming_call+0x62a/0x1450 [ 118.400736][ T6354] ? rxrpc_io_thread+0x12b5/0x24b0 [ 118.405879][ T6354] rxrpc_io_thread+0x1b3e/0x24b0 [ 118.410845][ T6354] ? rxrpc_io_thread+0x12b5/0x24b0 [ 118.416006][ T6354] ? rxrpc_direct_abort+0x330/0x330 [ 118.421238][ T6354] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.427249][ T6354] ? __lock_acquire+0x7d80/0x7d80 [ 118.432309][ T6354] ? lockdep_hardirqs_on+0x98/0x150 [ 118.437547][ T6354] ? _raw_spin_unlock+0x40/0x40 [ 118.442433][ T6354] ? __kthread_parkme+0x71/0x1c0 [ 118.447402][ T6354] ? __kthread_parkme+0x15b/0x1c0 [ 118.452454][ T6354] kthread+0x2fa/0x390 [ 118.456550][ T6354] ? rxrpc_direct_abort+0x330/0x330 [ 118.461790][ T6354] ? kthread_blkcg+0xd0/0xd0 [ 118.466411][ T6354] ret_from_fork+0x48/0x80 [ 118.470891][ T6354] ? kthread_blkcg+0xd0/0xd0 [ 118.475519][ T6354] ret_from_fork_asm+0x11/0x20 [ 118.480349][ T6354] [ 118.483412][ T6354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.490793][ T6354] CPU: 1 PID: 6354 Comm: krxrpcio/20000 Not tainted syzkaller #0 [ 118.498531][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.508620][ T6354] Call Trace: [ 118.511935][ T6354] [ 118.514901][ T6354] dump_stack_lvl+0x18c/0x250 [ 118.519640][ T6354] ? show_regs_print_info+0x20/0x20 [ 118.524896][ T6354] ? load_image+0x420/0x420 [ 118.529461][ T6354] panic+0x2ca/0x720 [ 118.533406][ T6354] ? bpf_jit_dump+0xd0/0xd0 [ 118.537963][ T6354] ? ret_from_fork_asm+0x11/0x20 [ 118.542997][ T6354] __warn+0x2e0/0x470 [ 118.547015][ T6354] ? __local_bh_enable_ip+0x186/0x1c0 [ 118.552421][ T6354] ? __local_bh_enable_ip+0x186/0x1c0 [ 118.557819][ T6354] report_bug+0x2be/0x4f0 [ 118.562185][ T6354] ? __local_bh_enable_ip+0x186/0x1c0 [ 118.567601][ T6354] ? __local_bh_enable_ip+0x186/0x1c0 [ 118.573048][ T6354] ? __local_bh_enable_ip+0x188/0x1c0 [ 118.578472][ T6354] handle_bug+0xcf/0x120 [ 118.582754][ T6354] exc_invalid_op+0x1a/0x50 [ 118.587298][ T6354] asm_exc_invalid_op+0x1a/0x20 [ 118.592179][ T6354] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 118.598192][ T6354] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 118.617820][ T6354] RSP: 0018:ffffc900033876e0 EFLAGS: 00010046 [ 118.623910][ T6354] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 118.631900][ T6354] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 118.639901][ T6354] RBP: ffffc90003387760 R08: ffff8880b8f3dc83 R09: 1ffff110171e7b90 [ 118.647905][ T6354] R10: dffffc0000000000 R11: ffffed10171e7b91 R12: ffff888077a5d678 [ 118.655922][ T6354] R13: ffff888077a5d670 R14: dffffc0000000000 R15: 1ffff92000670edc [ 118.663925][ T6354] ? rt_cache_route+0x21f/0x280 [ 118.668828][ T6354] ? _local_bh_enable+0xa0/0xa0 [ 118.673703][ T6354] ? do_raw_spin_unlock+0x121/0x230 [ 118.678927][ T6354] ? rt_cache_route+0x21f/0x280 [ 118.683808][ T6354] rt_cache_route+0x21f/0x280 [ 118.688519][ T6354] rt_set_nexthop+0x48b/0xa10 [ 118.693229][ T6354] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 118.699514][ T6354] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 118.705627][ T6354] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 118.711921][ T6354] ? ip_route_output_key_hash+0x13d/0x330 [ 118.717694][ T6354] ip_route_output_key_hash+0x1f3/0x330 [ 118.723280][ T6354] ? ip_route_input_rcu+0x3120/0x3120 [ 118.728699][ T6354] ? make_kuid+0x1db/0x680 [ 118.733196][ T6354] ? __put_user_ns+0x50/0x50 [ 118.737907][ T6354] ip_route_output_flow+0x2a/0x150 [ 118.743054][ T6354] rxrpc_init_peer+0x2da/0x740 [ 118.747858][ T6354] ? rxrpc_new_incoming_peer+0x590/0x590 [ 118.753617][ T6354] ? do_raw_spin_lock+0x11f/0x2b0 [ 118.758677][ T6354] ? __rwlock_init+0x150/0x150 [ 118.763496][ T6354] rxrpc_new_incoming_peer+0x27a/0x590 [ 118.768996][ T6354] rxrpc_new_incoming_call+0x62a/0x1450 [ 118.774578][ T6354] ? rxrpc_io_thread+0x12b5/0x24b0 [ 118.779752][ T6354] rxrpc_io_thread+0x1b3e/0x24b0 [ 118.784723][ T6354] ? rxrpc_io_thread+0x12b5/0x24b0 [ 118.789901][ T6354] ? rxrpc_direct_abort+0x330/0x330 [ 118.795139][ T6354] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.801155][ T6354] ? __lock_acquire+0x7d80/0x7d80 [ 118.806229][ T6354] ? lockdep_hardirqs_on+0x98/0x150 [ 118.811467][ T6354] ? _raw_spin_unlock+0x40/0x40 [ 118.816350][ T6354] ? __kthread_parkme+0x71/0x1c0 [ 118.821311][ T6354] ? __kthread_parkme+0x15b/0x1c0 [ 118.826361][ T6354] kthread+0x2fa/0x390 [ 118.830456][ T6354] ? rxrpc_direct_abort+0x330/0x330 [ 118.835688][ T6354] ? kthread_blkcg+0xd0/0xd0 [ 118.840302][ T6354] ret_from_fork+0x48/0x80 [ 118.844749][ T6354] ? kthread_blkcg+0xd0/0xd0 [ 118.849382][ T6354] ret_from_fork_asm+0x11/0x20 [ 118.854194][ T6354] [ 118.857849][ T6354] Kernel Offset: disabled [ 118.862282][ T6354] Rebooting in 86400 seconds..