last executing test programs: 2m47.477154448s ago: executing program 4 (id=12234): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000003c0)=@generic={0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/326], 0x140) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x494, &(0x7f00000008c0)=ANY=[]) 2m44.310170608s ago: executing program 4 (id=12243): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_unlink(&(0x7f0000000000)='[!^{\x00') mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x29d2, 0x200, 0x3, 0x20f}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda86, 0x10000, 0x2, 0x26}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7eb5, 0x40, 0x3, 0xe9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2999, 0x4000, 0x0, 0x220}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2a1, 0x80000, 0x3, 0x20e}}], 0x4, &(0x7f0000001980)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x0, 0xe0b, 0x0, &(0x7f0000000980)=@buf_max_buf="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"}}, &(0x7f0000001a00)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000001a40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f) 2m43.584626929s ago: executing program 4 (id=12247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x2, 0x4) r4 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0xed06, r8, 0x12, {0x7fffffff, 0x7c86}, 0x8}, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="f30f2dde663e2ce83e0f00172e260f01d166b97f09000066b8b8d9d78b66ba000000000f30660f38829d0500b863098ee8440f20c0663505000000440f22c0360f01df66b9800000c00f326635000100000f30", 0x53}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m41.689563193s ago: executing program 4 (id=12251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x3}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x8}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000380)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/19, 0x13}], 0x4) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a0103b7360000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r11 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/15], 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = pidfd_getfd(r9, r9, 0x0) ioctl$sock_SIOCINQ(r12, 0x541b, 0x0) 2m37.50674744s ago: executing program 4 (id=12261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304004000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) 2m37.32373464s ago: executing program 4 (id=12263): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000206d0498c200000000000109022400010000300909040000fe0300000087672b28fc01221500090581032000038102"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20091500000015e783efb930f01869297ff0478f010061a54607"], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendfile(r0, r2, 0x0, 0x7ffff004) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000440)={{0x81}, 'port1\x00', 0x0, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x642203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xb, 0x4, 0x0, 0x55a}) 2m33.146782451s ago: executing program 1 (id=12276): r0 = io_uring_setup(0x4188, &(0x7f0000000240)={0x0, 0x7de2, 0x50, 0x3, 0x112}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0xa, 0x103, 0x6, {0x6f, 0x1, 0x2, 0x5}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c45, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) flock(r2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.455927932s ago: executing program 1 (id=12292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRESHEX=0x0, @ANYBLOB="0001000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="ece53b9ee6000000000000000000000000556ad8c6a061025b127b2b77fab4d2f57ab86bf79771195faba26c75c2303be60ffe35940566b2b06f43b03a36f420dd9f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x1170, 0x1398, 0x130, 0x1170, 0x220, 0x1398, 0x1398, 0x220, 0x1398, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0xff000000], [0xff, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0xfffffffe, 0x2, 0x0, 0xf}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x243, 0x29}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x2000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x42000, 0xc3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x7b9, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r14 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000080)={0x1}) 2m21.744773316s ago: executing program 32 (id=12263): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000206d0498c200000000000109022400010000300909040000fe0300000087672b28fc01221500090581032000038102"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20091500000015e783efb930f01869297ff0478f010061a54607"], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendfile(r0, r2, 0x0, 0x7ffff004) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000440)={{0x81}, 'port1\x00', 0x0, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x642203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xb, 0x4, 0x0, 0x55a}) 2m20.278756075s ago: executing program 1 (id=12304): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffe31, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000002000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x4040050) 2m19.955284864s ago: executing program 1 (id=12306): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145042, 0x1ca) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000963000/0x2000)=nil, 0x2000, &(0x7f0000000040)='+\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000700)="cf", 0x1}, {&(0x7f0000000c40)="b1a981609296c611678d43eb9074385554a445c7953729865353505610c2a950c1c719f4c887eebfee3f6ab9e613b365d690afaff584ea26b08aec2aa02c4f1aa2c4ffffc2642e198f32eacf6de57eb57b20ebc25e4124871b5c984bb1377fdcef3cde40cba83461dc28f5bf71597dd329654eb62543c10413f2d49fcd24e485533ddfbda18b4354d50fcb41b3e8f2f4", 0x90}, {&(0x7f0000002c40)="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", 0x500}, {&(0x7f0000003c40)="6e192937060b66b3e7ec5040c66135b2d2b423d196432e7d830f281164ee6cb5b48ccc73848e0f7963cb0a9b78f79135bbef35b36afb78af25309837dd7ecbd7d6f69ee03ae38f83067061da65a7d23f76f455", 0x53}, {&(0x7f0000003d00)="f444b6666e3140104161b85bffe3a30aba13a9c2e7", 0x15}], 0x5}}], 0x1, 0x40020) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x103302) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f00000009c0)=""/124, 0x7c}, {&(0x7f0000000a40)=""/217, 0xd9}], 0x8}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xdf) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003b2000000b203520ae4408a7d30f3eea7371b703b9de56a9f8a642221fc5bbc973fa3ce5faa8a2945fdb8a2ae78dce5990ebf7b806368fab65dd8b21d2ac3576a12abb7192d3c9f9b25f1109a0f3a49f34378e13bc809645019dba3cfeafeb9f26456520860af7fc6441de9a23214358485ccb867cf5a6080b4217f9e66c5cd8aaf70596f46709920186bb7f8acb7309092256aecdae7bd47687dd71fb76355ba62b84d223359a2ad"], &(0x7f0000000900)=ANY=[@ANYBLOB="00220b000000800000000000000002161b94ad15c7c051ee9de749ae56a5a134be5ea6823d1b786bd71ad5650592f3150bbc8d72fec66b373245becca70350ca80755299de0526f8be30d6df942ecb17a9930d1550a3b4263bfd3718d671b13c7f1111d9df0bf97815c6c1d337fe2b74e226e4a93173f5996eac46391b51ed779ae0c2694b00a27ba25f"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x3, 0x1, {0x22, 0x69e}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x60, "a5add5e3f447dc2dfab36341086fa9eb94e6d3d116f34ce238a844d0a7410b1c88f9e38aa3c777412fc95d458c4078d7681a1acb2e4484178ca73cf050c47e4b1162a7266825a37e48991d74b15713dbdca5b70a16ef826276665d804276f225"}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x1, 0xd9, "a79df1bef99a63be5fb584ee6a6b31bed5d8632c0e6e783d0e1e4ec3b03c370137aee95b5ab4699b5d68d29e241e03b380211226844a30be8b27e19920bef9fd78bc24e669e43df7964a23a7828d60b01f2171f2cf03998fb18bed3bff739ce570b1ab86fd5d79057276bdd8b8c2e9949c6e511b20d2b7d0d9c6680405aee0450ccd2a7436bed15f6a4b7df346491e9dff3de31e1438d8e0e80fcc9b65dda46c060ff5c40db04b3aaf8f905386182cf457a2f8ea67a4abfce4223a05da6b8503ea6790172df8b9622973e7135cebc5fbfdce9d4ef4f3c9a4a1"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}}) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000300)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00171f000000cfcf88acea32aed27bafa14f7a8a9dc9fdcd"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x9e0d}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "0f1b9471b911a4b9580c72d48899f8aded09ee5a0e38deb5f7aa31e8c7804d046d90a63a540614aa0478ef48bde43a"}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) 2m13.726147345s ago: executing program 1 (id=12313): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100021de24a20830434128552010000010902120001000000000904"], 0x0) memfd_secret(0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000096e000/0x400000)=nil) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x1, 0x20002f9}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getgroups(0x0, &(0x7f0000000680)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x2b, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000006600)={0x8, 0x1, 0x20, "d06d8b3ea23c1dcab6fe41f40e2797173cd2dc8d6d4c903d209fec2da6a33f9d", 0x49433553}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201e10000000040050be01700000000000109022400010000000009040200010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\n', @ANYRES64=r0], 0x0}, 0x0) 2m2.448335343s ago: executing program 1 (id=12341): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb47, 0x10000000d, 0x4, 0x7, 0x3}, 0x0) r6 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(r9, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000d000000181100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b00000018010000646c6c2500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000000000005600000006000000850000001f0000002c93000000000000b50300000000000085000000f2000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef12}, 0x94) 1m46.963782138s ago: executing program 33 (id=12341): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb47, 0x10000000d, 0x4, 0x7, 0x3}, 0x0) r6 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(r9, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000d000000181100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b00000018010000646c6c2500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000000000005600000006000000850000001f0000002c93000000000000b50300000000000085000000f2000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef12}, 0x94) 12.934530918s ago: executing program 0 (id=12580): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) (fail_nth: 3) 10.288928995s ago: executing program 5 (id=12586): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x0, 0x7, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0xb, 0xfffffffe, 0x9, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a41080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) sendmsg$nl_crypto(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@getstat={0xe0, 0x15, 0x800, 0x70bd27, 0x25dfdbfc, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x400, 0x2000}, ["", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000044) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x1}) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) rt_sigqueueinfo(0xffffffffffffffff, 0xc, &(0x7f0000000180)={0x26, 0x820, 0x4}) syz_ublk_setup_queues(r3, r7, &(0x7f0000000740)={0x0, 0x1460, 0x420, 0x1, 0xb2, 0x0, r3}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x2a9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000003, 0x2a3, 0x0, r3}}], 0x4, 0x0, 0x0) 9.835026972s ago: executing program 0 (id=12588): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa0172ffff93010014", 0x21) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xbd, 0x6, 0xf, 0x0, 0x5, 0x5, 0x1, 0x7, 0x2, 0x81, 0x5, 0x2, 0x0, 0x800, 0x4d8, 0x6, 0x7f, 0xc0, 0xe, '\x00', 0x6, 0x8}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100)="8524aec415200879ab3d71092c4a8126b10ac304507a57fa108244207212d9e556cc68c1868cb5c576b70feca74979756ca2cfa0f73efe19815b740b869fe4e6df48", &(0x7f0000000180)="3e37ba18aedba0d3e4006b74b1ddb0db42122af4c4d944e30e9ba82c2e41f61341dc97ebf6638109a67380c55e837171951ce5d79bea7c7f95d9dd2e6af76340504384e46593c1885412aa2154a6039fd8522a7a2528b569e8917e2b8fbfe0f96913afa81fa70baaa757223452add298e913"}}, &(0x7f0000bbdffc)) r8 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000240)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x80000000, 0x1000, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8000002, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0xffffffffffffbffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4, 0x6, 0xfffffffffffffffc, 0x1, 0x0, 0x10000, 0x8, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xc20, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x800, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x7, 0x9, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, 0x40000000002, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x801075, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xb, 0x20, 0x2006, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x200, 0x1, 0x17, 0x3, 0x6}, &(0x7f0000000040)={0x40, 0x5, 0x2, 0x2, 0x6, 0x80000000, 0x2, 0x4}, &(0x7f0000000080)={0x0, 0x80000001, 0x7, 0x3, 0x2, 0xffff, 0x7ff, 0xffffffffffffffc6}, &(0x7f00000000c0)={0x77359400}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r11, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) 9.797299684s ago: executing program 5 (id=12589): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x0, 0xd}, {0x6, 0x67, 0x9d, 0x19}]}) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) r6 = dup(r2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="79100f202566ba210066b8009066efb9f60b00000f3266b8ee008ed8b90d0b0000b800000000ba000000000f300f201e0f00560066b8db000f00d867dfa97a61", 0x40}], 0x1, 0x0, &(0x7f0000000340)=[@cstype3={0x5, 0x4}, @efer={0x2, 0x5800}], 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x714, 0x15) syz_emit_ethernet(0x36, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 9.643321927s ago: executing program 2 (id=12592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x1100, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.164672352s ago: executing program 2 (id=12595): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)=""/42, &(0x7f0000000040)=0x2a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x1170, 0x1398, 0x130, 0x1170, 0x220, 0x1398, 0x1398, 0x220, 0x1398, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0xff000000], [0xff, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0xfffffffe, 0x2, 0x0, 0xf}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x243, 0x29}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x2000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 8.571248092s ago: executing program 5 (id=12596): syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x9, 0x1e, 0x8e, 0x20, 0x17ef, 0x304f, 0xed2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x20, 0xb, "", [{{0x9, 0x4, 0xc4, 0x5, 0x0, 0xca, 0xe6, 0x59, 0x40}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x10a01, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7}) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x7fffffffffffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) move_mount(r8, 0x0, r9, 0x0, 0x46) 7.578562487s ago: executing program 0 (id=12597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x820}, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d657", @ANYRES16=r0], 0x0) 6.431043733s ago: executing program 3 (id=12599): r0 = io_uring_setup(0x4188, &(0x7f0000000240)={0x0, 0x7de2, 0x50, 0x3, 0x112}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c45, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0x7, 0xffff, 0x403, 0x3}}]}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) flock(r2, 0x1) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.812322342s ago: executing program 3 (id=12600): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x20000010) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b7d0510"], 0xe) 5.764825239s ago: executing program 6 (id=12601): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x360, 0xf00, 0x800, 0xbbba, 0x4000, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000, 0xffffffff}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4000004, 0x0, 0x80000000, 0xd70c90556ebfe688, 0x100}) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000020000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 5.633913041s ago: executing program 0 (id=12602): socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="bc62a60a6e1b", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x40}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) 5.479020408s ago: executing program 3 (id=12603): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0xcd, 0x76, &(0x7f0000000540)=""/118, 0x41000, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0xb89, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000880)={r4, &(0x7f0000000780)='ipvlan\x00', 0x5c9082, &(0x7f00000007c0)={@align=0x2a, {0x1, 0x7, 0xb410, 0xfffffffffffffff8}}, 0x50, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x229f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r9, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 5.43604817s ago: executing program 2 (id=12604): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x3b, 0x0, @val=@perf_event={0x1}}, 0x18) r0 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x80010, r0, 0x15b77000) 5.354630626s ago: executing program 6 (id=12605): rseq(&(0x7f0000000000), 0x6c, 0x2000000000000000, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xffffff6e, 0x4000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) read$dsp(r1, &(0x7f0000000100)=""/195, 0xc3) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x8080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20) 5.346623565s ago: executing program 5 (id=12606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x80000) ioctl$I2C_RETRIES(r1, 0x701, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) io_setup(0x6, &(0x7f0000000680)=0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x40002000}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) epoll_pwait(r5, &(0x7f00000001c0)=[{}], 0x1, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0) 4.671583936s ago: executing program 5 (id=12607): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa0172ffff93010014", 0x21) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xbd, 0x6, 0xf, 0x0, 0x5, 0x5, 0x1, 0x7, 0x2, 0x81, 0x5, 0x2, 0x0, 0x800, 0x4d8, 0x6, 0x7f, 0xc0, 0xe, '\x00', 0x6, 0x8}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100)="8524aec415200879ab3d71092c4a8126b10ac304507a57fa108244207212d9e556cc68c1868cb5c576b70feca74979756ca2cfa0f73efe19815b740b869fe4e6df48", &(0x7f0000000180)="3e37ba18aedba0d3e4006b74b1ddb0db42122af4c4d944e30e9ba82c2e41f61341dc97ebf6638109a67380c55e837171951ce5d79bea7c7f95d9dd2e6af76340504384e46593c1885412aa2154a6039fd8522a7a2528b569e8917e2b8fbfe0f96913afa81fa70baaa757223452add298e913"}}, &(0x7f0000bbdffc)) r8 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000240)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x80000000, 0x1000, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8000002, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0xffffffffffffbffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4, 0x6, 0xfffffffffffffffc, 0x1, 0x0, 0x10000, 0x8, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xc20, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x800, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x7, 0x9, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, 0x40000000002, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x801075, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xb, 0x20, 0x2006, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x200, 0x1, 0x17, 0x3, 0x6}, &(0x7f0000000040)={0x40, 0x5, 0x2, 0x2, 0x6, 0x80000000, 0x2, 0x4}, &(0x7f0000000080)={0x0, 0x80000001, 0x7, 0x3, 0x2, 0xffff, 0x7ff, 0xffffffffffffffc6}, &(0x7f00000000c0)={0x77359400}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r11, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) 4.320615596s ago: executing program 6 (id=12608): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x8000000, &(0x7f00008b5000/0x1000)=nil) 4.288706007s ago: executing program 2 (id=12609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x20000000000000ae, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='syzkaller\x00', 0x10000, 0xc3, &(0x7f0000000680)=""/211, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0064e0cbc7453edbf43600003c0002802c0001801400000000000065acbe6f2f0a25af593da54000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002cf07f6b930e1147abe592a179d6d00ebcdeace4fd020000000000000000000000000001140004002001000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x20008048) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002060000000000001800000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46ea1a25056060b852a7e3fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x0, 0x0, 0x6, 0x99, 0x8, 0x38d, 0x4, [0x9, 0xb, 0x0, 0x2, 0xacf, 0x6, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff000, 0x200, 0x8]}) r6 = dup(r0) getpid() r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000000000000a00000000000002ff010000000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e24000000010000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e247fffffff000000000000000000000000000000009e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000007000000000000000000000000000000000500"/528], 0x210) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000036c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="342300001d00000128bd7000fbdbdf250c001c00", @ANYRES32=r9, @ANYBLOB="0300000008001f0003000000ac00070064010100000000000000000000000000ff0200000000000000000000000000014e2400004e2038e90a00a0001d000000", @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="81000000000000000000000000000000ffff0000000000000600000000000500ec000000000000000002000000000000ff010000000000000a00009d9000000009000000000000000b00000000000000efc80000000900004000000000000000040000000000000002000100000000000800160001000000e4000600fc010000800000000000000000000001fe8800000000000000000000000001014e2201014e2400030a00a0a02f000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x2334}, 0x1, 0x0, 0x0, 0x81}, 0x48890) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.871226718s ago: executing program 6 (id=12610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084026004000064000402000304"], 0x30}, 0x0) 3.631473621s ago: executing program 6 (id=12611): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r1, 0x5421, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40110) r5 = syz_ublk_setup_io_uring(0x7ec0, &(0x7f00000003c0)={0x0, 0x4478, 0x20000, 0x3, 0xe1}, &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000500)) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 2.064909617s ago: executing program 5 (id=12612): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0xf8, 0x30, 0x81, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xaa, 0xfcf0, 0xb}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x8, 0x7, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0xfffc, 0xf, 0x6, 0x200, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xc8a8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x28, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x8, 0x80}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x0, 0xee, 0x20, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "51d2e4a8cfc7f5a2e8ddadc3dafb8e33"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0xf00f, 0x4, [0xff3f0f, 0xffc0f0, 0x3f00, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0xb, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x27, 0x3, 0x100}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x42, 0x3, 0x7, 0xfd}]}, 0x4, [{0x9, &(0x7f0000000200)=@string={0x9, 0x3, "7b7020b2a24788"}}, {0xff, &(0x7f0000000340)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x100c}}, {0xd7, &(0x7f0000000480)=@string={0xd7, 0x3, "277343a365c5f2b4254a671465ee062fc953faa94ff18e3d54e9cad3ff50522e4be5056922cf6713e80edce0613b01aaf295519e5fa6ee10c4e6b8ca6e640c59fe8a3ff3a2a32459b27795cf803ccde657cc06202694202c2f1b1b2debc2189be4fa4ea52b75a7c2e60bd28d6f5f1a68e70731101ff7920190481dccbb811f27e0514f55179a4992105c173c905b9f21c9b98e8ca7811bc3eabf8e8a3a1bb1a4ef4a514fe8e313fa2651230e1cae40afe2d01837e8d2528288eabfc0edd1fb90e4c0ca2b727173af96232f82d0aef857758d2f5818"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, &(0x7f00000006c0)={0x0, 0xa, 0xdb, {0xdb, 0xb, "a40e88b8c70aebb5ace78acb4b0e749a7c7908d832e8b804b581f2b21a6abcec3e9339eaa5b21763c11ef6efe16963aebca7f02fe72b3e6a0f681620d6ac843461a425d81b8806d1b15675dd9f714930de105ab88e4350ee2c6d061b46a7aec86a291d5d81397fdf7d7ab12c867bdd273c3e54a2c3fa2e4ed43843d20e2d8b76a1d33ddc444cb171f10f5c217143fc0a2fd882724e5bc07dd50ee4c3847e8ab9d194892e2b4c0cd924c50cc88d49bcbd749bece6f88405714a398b75fd1661a39723fa4e8ee62a086b2d74d25b60cea01eed45fe162e06a47c"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x31, 0xa, "b6beac9e3030e9886610"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b40)={0x20, 0x80, 0x1c, {0xfff, 0x3ff, 0x0, 0x5f, 0x1, 0x4, 0x202, 0x2, 0x9, 0x8, 0x7f, 0xb}}, &(0x7f0000000b80)={0x20, 0x85, 0x4, 0x80}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0xc}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="0833de00000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x20, 0x15}, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.043624804s ago: executing program 3 (id=12613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd700084298fc200000000", @ANYRES32=0x0, @ANYBLOB="15330200000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)={0x20, 0x5e, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x5, 0x45, 0x0, 0x1, [@generic="97"]}]}, 0x20}], 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x1, 0x2, 0x3, 0x9, 0x1}, &(0x7f00000000c0)=0x20) 1.579189143s ago: executing program 2 (id=12614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x6c}, 0x1, 0x24000000}, 0x0) 1.534987902s ago: executing program 3 (id=12615): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x6, 0x3, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x80000000, 0x4, 0x7, 0x23b, 0x3, 0x6, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000002101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x40000000000009, 0xe8, 0x80000000, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061e, 0x5, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x22933329, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x8, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) close_range(r2, 0xffffffffffffffff, 0x0) 1.264332048s ago: executing program 2 (id=12616): syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x9, 0x1e, 0x8e, 0x20, 0x17ef, 0x304f, 0xed2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x20, 0xb, "", [{{0x9, 0x4, 0xc4, 0x5, 0x0, 0xca, 0xe6, 0x59, 0x40}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x10a01, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) move_mount(r7, 0x0, r8, 0x0, 0x46) 935.251865ms ago: executing program 3 (id=12617): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@remote, @empty}, &(0x7f0000000340)=0xc) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x40, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xae}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x8a, 0xfffff238}]}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_pressure(r12, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) close(r13) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@loopback, @private}, &(0x7f0000000400)=0xc) 909.421991ms ago: executing program 0 (id=12618): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x1d5, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4) mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000013, 0x13, r0, 0x0) 686.115123ms ago: executing program 0 (id=12619): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x101, 0x0) getdents(r2, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808001910b748c883e6b241", 0x59}], 0x1) syz_emit_ethernet(0x269, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x58, 0x4, 0x1, 0x16, 0x25b, 0x65, 0x0, 0xe, 0x2, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0x5, [{@multicast1, 0x7}, {@multicast1, 0x2}, {@multicast1, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0xfffffffb}, {@multicast1, 0x2}, {@private=0xa010101, 0x95b}]}, @timestamp={0x44, 0x14, 0xd6, 0x0, 0x2, [0x4, 0x2, 0x24, 0x7]}, @cipso={0x86, 0x4f, 0x3, [{0x1, 0x11, "991de6327e66708bcdb74fa9a565fc"}, {0x7, 0x6, "e876f2cc"}, {0x6, 0x9, "f61e28338c18e5"}, {0x6, 0x6, "b21ee1ce"}, {0x1, 0x3, "a5"}, {0x0, 0x10, "9a65a77297757d1a2e16eed12923"}, {0x1, 0x10, "ebeea0210aca907ad16f2367bec4"}]}, @end, @end, @cipso={0x86, 0x4d, 0x3, [{0x7, 0xc, "cb7c1bef97c3ea952e77"}, {0x1, 0xb, "bec9a2b82288d08144"}, {0x1, 0x8, "05c50bbe6406"}, {0x7, 0x8, "1dbc1b00d922"}, {0x1, 0x12, "a2431fe2a594d7c53244140234154bba"}, {0x6, 0xe, "642b4b31c65fd15a67660db9"}]}, @noop, @rr={0x7, 0x2b, 0x9a, [@rand_addr=0x64010100, @loopback, @loopback, @loopback, @remote, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0x1, [{@multicast2, 0x6}, {@broadcast, 0x7}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x6}]}]}}, {0x22, 0xc9, 0x0, @multicast2, "84b6a33bfdab1f5a76c0edc18df83e9db36bfdf0b70e435dd2744b62e4a6c8544da6b3a99317be9a4c043bd8ba55290ed11b5b4e0ac972999ebedc14794fa73feea9ac5ee0f92eda0a2a6d5869f01e309405a72e9e325514812b1adc572fc9aef9592b84a9a43ed903150218726d9d14bf34bf0f88d7a0fd29c9127750eedf2d5ea126e4d92b5dd656f3b76da6f4add32ad3229f2fe790ad49663ace31ed7eb20e6d657f42bb457c854e0c95231af6ef9086acbb9eec6406ac03f12013d0c72bbe9d39947faf29d540e7de653f9e9b81f8ce69473e591e1c686e262ab25a76edd020e2667644e93701ea85ef26abf22a380c8b"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)=""/67, 0x43}], 0x2}, 0x4}], 0x1, 0x2, 0x0) 0s ago: executing program 6 (id=12620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x942, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf5, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x46, {0x46, 0xa, "883433ce478fa22a61a5039a47e7a9b81178737c17aa92526221c10acc05000000000000008ce628f8a2d76bf4ba0000000000054d82e05154626da1551f60d346ae86c5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): s failed with error -110 [ 2904.693669][T26693] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2904.714966][T26693] usb 7-1: USB disconnect, device number 12 [ 2904.733240][ T5707] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2904.795046][ T2633] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2904.914663][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 2904.933501][ T5707] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 2904.951979][ T5707] usb 3-1: config 0 has no interface number 0 [ 2904.959829][ T5707] usb 3-1: too many endpoints for config 0 interface 197 altsetting 232: 146, using maximum allowed: 30 [ 2904.971032][ T2633] usb 6-1: Using ep0 maxpacket: 16 [ 2904.977568][ T2633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2904.993565][ T5707] usb 3-1: config 0 interface 197 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 2905.009403][ T2633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2905.020690][ T5707] usb 3-1: config 0 interface 197 has no altsetting 0 [ 2905.032825][ T2633] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2905.058319][ T5707] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2905.063230][ T2633] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2905.082411][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.100966][ T5707] usb 3-1: Product: syz [ 2905.111385][ T5707] usb 3-1: Manufacturer: syz [ 2905.121301][ T5707] usb 3-1: SerialNumber: syz [ 2905.140157][T26693] usb 4-1: USB disconnect, device number 39 [ 2905.142772][ T5707] usb 3-1: config 0 descriptor?? [ 2905.148684][ T2633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.192490][ T2633] usb 6-1: config 0 descriptor?? [ 2905.586069][T13464] syzkaller0: entered promiscuous mode [ 2905.604416][T13464] syzkaller0: entered allmulticast mode [ 2905.685772][ T2633] microsoft 0003:045E:07DA.0143: unknown main item tag 0x0 [ 2905.686049][T17110] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2905.730937][ T5707] ssu100 3-1:0.197: Quatech SSU-100 USB to Serial Driver converter detected [ 2905.731252][ T2633] microsoft 0003:045E:07DA.0143: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2905.771082][ T5707] ssu100 3-1:0.197: probe with driver ssu100 failed with error -71 [ 2905.794422][ T2633] microsoft 0003:045E:07DA.0143: no inputs found [ 2905.810188][ T2633] microsoft 0003:045E:07DA.0143: could not initialize ff, continuing anyway [ 2905.832574][ T5707] usb 3-1: USB disconnect, device number 83 [ 2905.928150][T17110] usb 7-1: Using ep0 maxpacket: 32 [ 2905.956454][T17110] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2905.976519][T17110] usb 7-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 2905.989979][T17110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.003037][T17110] usb 7-1: Product: syz [ 2906.012275][T31858] usb 6-1: USB disconnect, device number 21 [ 2906.024262][T17110] usb 7-1: Manufacturer: syz [ 2906.038677][T17110] usb 7-1: SerialNumber: syz [ 2906.041709][ T2633] net_ratelimit: 2 callbacks suppressed [ 2906.041725][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2906.113897][T26693] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 2906.298052][T26693] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2906.319377][T26693] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2906.357947][T26693] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 2906.402015][T26693] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2906.445355][T26693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.505202][T13468] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2906.699980][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.724384][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2906.940887][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.967306][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2907.042228][T13462] vti0: entered promiscuous mode [ 2907.052540][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2907.061323][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.061657][T13462] vti0: entered allmulticast mode [ 2907.083762][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2907.144362][T17110] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input387 [ 2907.166023][ T4977] bcm5974 7-1:1.0: could not read from device [ 2907.207734][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.216247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.650029][ T4992] Dev loop5: unable to read RDB block 7 [ 2907.666272][ T4992] loop5: unable to read partition table [ 2907.696739][ T4992] loop5: partition table beyond EOD, truncated [ 2907.919380][T17110] usb 7-1: USB disconnect, device number 13 [ 2908.125058][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.191610][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.235530][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.256377][ T5707] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2908.297434][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.433299][T31858] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2908.449967][ T5707] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2908.461240][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.477434][ T5707] usb 6-1: Product: syz [ 2908.488870][ T5707] usb 6-1: Manufacturer: syz [ 2908.502007][ T5707] usb 6-1: SerialNumber: syz [ 2908.582234][T11305] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2908.603318][T31858] usb 1-1: Using ep0 maxpacket: 16 [ 2908.620457][T31858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2908.656934][T31858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2908.687693][T31858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2908.722659][T31858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2908.751373][T31858] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2908.787927][T31858] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2908.830097][T31858] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2908.850505][T31858] usb 1-1: Manufacturer: syz [ 2908.875298][T31858] usb 1-1: config 0 descriptor?? [ 2908.919529][T26693] usb 4-1: string descriptor 0 read error: -71 [ 2909.014134][T13479] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2909.131759][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.140226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.427277][T26693] usb 4-1: USB disconnect, device number 40 [ 2909.513578][T31858] rc_core: IR keymap rc-hauppauge not found [ 2909.532918][T31858] Registered IR keymap rc-empty [ 2909.565873][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.624968][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.687637][T11305] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2909.700027][T31858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2909.723599][T11305] ath9k_htc: Failed to initialize the device [ 2909.755833][T31858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input388 [ 2909.813595][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.865238][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.890399][T11305] usb 6-1: ath9k_htc: USB layer deinitialized [ 2909.890726][T26693] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2909.905030][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.949070][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2909.990106][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.043592][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.062052][ T2633] usb 6-1: USB disconnect, device number 22 [ 2910.086960][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.099512][T26693] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2910.127158][T26693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2910.145043][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.174502][T26693] usb 4-1: config 0 descriptor?? [ 2910.186553][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.208299][T26693] pwc: Samsung MPC-C10 USB webcam detected. [ 2910.235531][T31858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2910.278718][T31858] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2910.319390][T31858] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2910.368461][T31858] usb 1-1: USB disconnect, device number 84 [ 2910.476072][T13506] netlink: 'syz.3.12505': attribute type 1 has an invalid length. [ 2910.543588][ T2633] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2910.725202][ T2633] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2910.756485][ T2633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2910.789313][ T4992] Dev loop5: unable to read RDB block 7 [ 2910.795203][ T2633] usb 7-1: Product: syz [ 2910.813916][ T2633] usb 7-1: Manufacturer: syz [ 2910.821011][ T4992] loop5: unable to read partition table [ 2910.836383][ T2633] usb 7-1: SerialNumber: syz [ 2910.843774][ T4992] loop5: partition table beyond EOD, truncated [ 2910.860096][ T2633] usb 7-1: config 0 descriptor?? [ 2910.891806][ T2633] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2910.918276][T13512] loop9: detected capacity change from 0 to 524287936 [ 2911.043892][T11406] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2911.216841][T11406] usb 1-1: Using ep0 maxpacket: 32 [ 2911.260240][T11406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2911.317289][ T4992] Dev loop5: unable to read RDB block 7 [ 2911.355148][ T4992] loop5: unable to read partition table [ 2911.361159][T11406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2911.394838][ T4992] loop5: partition table beyond EOD, truncated [ 2911.408781][T11406] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2911.426040][T13506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2911.444376][T13201] net_ratelimit: 2 callbacks suppressed [ 2911.444395][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2911.469265][T11406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2911.528844][T11406] usb 1-1: config 0 descriptor?? [ 2911.561755][T11406] hub 1-1:0.0: USB hub found [ 2911.566897][T26693] pwc: send_video_command error -71 [ 2911.590610][T26693] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2911.602929][T26693] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2911.671761][T26693] usb 4-1: USB disconnect, device number 41 [ 2911.689812][T31858] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2911.767856][ T2633] gspca_sunplus: reg_w_riv err -71 [ 2911.773315][T11406] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2911.785702][ T2633] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 2911.805049][ T2633] usb 7-1: USB disconnect, device number 14 [ 2911.866458][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12511'. [ 2911.877464][T31858] usb 6-1: Using ep0 maxpacket: 16 [ 2911.895292][T31858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2911.934694][T31858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2911.963382][T31858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2911.996900][T31858] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2912.013333][T31858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.036280][T31858] usb 6-1: config 0 descriptor?? [ 2912.053446][T26693] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2912.187981][T11406] hid-generic 0003:046D:C31C.0144: unknown main item tag 0x0 [ 2912.214624][T26693] usb 4-1: Using ep0 maxpacket: 16 [ 2912.225882][T11406] hid-generic 0003:046D:C31C.0144: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 2912.246489][T26693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2912.271844][T26693] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2912.294657][T26693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.326138][T26693] usb 4-1: Product: syz [ 2912.340561][T26693] usb 4-1: Manufacturer: syz [ 2912.355438][T26693] usb 4-1: SerialNumber: syz [ 2912.387356][T26693] usb 4-1: config 0 descriptor?? [ 2912.431485][T26693] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2912.466781][T26693] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2912.483964][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.490949][T31858] microsoft 0003:045E:07DA.0145: unknown main item tag 0x0 [ 2912.521790][ T5707] usb 1-1: USB disconnect, device number 85 [ 2912.543253][ T2633] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2912.550895][T31858] microsoft 0003:045E:07DA.0145: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2912.550930][T31858] microsoft 0003:045E:07DA.0145: no inputs found [ 2912.550947][T31858] microsoft 0003:045E:07DA.0145: could not initialize ff, continuing anyway [ 2912.803671][ T2633] usb 3-1: Using ep0 maxpacket: 32 [ 2912.837316][ T2633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2912.864157][ T2633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 2912.888400][T11406] usb 6-1: USB disconnect, device number 23 [ 2912.902101][ T2633] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2912.946289][ T2633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.954720][T13201] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2912.981646][T30707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.990131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.009289][ T2633] usb 3-1: config 0 descriptor?? [ 2913.039644][T13520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2913.062340][T26693] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2913.092001][ T2633] hub 3-1:0.0: USB hub found [ 2913.103403][T13201] usb 7-1: device descriptor read/64, error -71 [ 2913.308338][ T2633] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2913.363793][T13201] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2913.483695][T26693] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2913.505613][T13201] usb 7-1: device descriptor read/64, error -71 [ 2913.519653][T26693] em28xx 4-1:0.0: board has no eeprom [ 2913.534717][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.609067][T13529] syzkaller0: entered promiscuous mode [ 2913.620651][T13529] syzkaller0: entered allmulticast mode [ 2913.653717][T13201] usb usb7-port1: attempt power cycle [ 2913.723351][ T2633] hid-generic 0003:046D:C31C.0146: unknown main item tag 0x0 [ 2913.767433][ T2633] hid-generic 0003:046D:C31C.0146: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 2913.810369][T13532] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 2914.023417][T13201] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2914.077259][T13201] usb 7-1: device descriptor read/8, error -71 [ 2914.333594][T13201] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2914.375855][T13201] usb 7-1: device descriptor read/8, error -71 [ 2914.496576][T13201] usb usb7-port1: unable to enumerate USB device [ 2914.566003][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.609125][T13201] usb 3-1: USB disconnect, device number 84 [ 2914.650361][T13518] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 2914.716914][T26693] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2914.745029][T26693] em28xx 4-1:0.0: dvb set to bulk mode. [ 2914.774520][ T2633] em28xx 4-1:0.0: Binding DVB extension [ 2914.800724][T26693] usb 4-1: USB disconnect, device number 42 [ 2914.853413][T26693] em28xx 4-1:0.0: Disconnecting em28xx [ 2914.887593][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.896097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.914507][ T4992] Dev loop5: unable to read RDB block 7 [ 2914.925095][ T4992] loop5: unable to read partition table [ 2914.949863][ T4992] loop5: partition table beyond EOD, truncated [ 2914.978267][ T2633] em28xx 4-1:0.0: Registering input extension [ 2914.996094][T26693] em28xx 4-1:0.0: Closing input extension [ 2915.094169][T26693] em28xx 4-1:0.0: Freeing device [ 2915.628834][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2915.755095][T26693] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2915.865351][T13546] program syz.6.12519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2915.940208][T26693] usb 4-1: Using ep0 maxpacket: 16 [ 2915.964563][T26693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2916.004951][T26693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2916.020011][T26693] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2916.030626][ T4992] Dev loop5: unable to read RDB block 7 [ 2916.047918][ T4992] loop5: unable to read partition table [ 2916.052561][T26693] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 2916.069939][ T4992] loop5: partition table beyond EOD, truncated [ 2916.087841][T26693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.104721][T26693] usb 4-1: Product: syz [ 2916.129885][T26693] usb 4-1: Manufacturer: syz [ 2916.141441][T26693] usb 4-1: SerialNumber: syz [ 2916.222319][T26693] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 2916.234817][ T2633] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2916.265790][T26693] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 2916.273345][T26693] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 2916.280963][T26693] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 2916.393825][ T2633] usb 7-1: Using ep0 maxpacket: 16 [ 2916.404926][ T4992] Dev loop5: unable to read RDB block 7 [ 2916.405741][ T2633] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2916.422407][ T4992] loop5: unable to read partition table [ 2916.444839][ T4992] loop5: partition table beyond EOD, truncated [ 2916.460914][ T2633] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2916.477088][ T2633] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2916.518971][ T2633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2916.538178][ T2633] usb 7-1: config 0 descriptor?? [ 2916.683362][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2917.775999][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2918.804168][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2919.856179][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.185627][T10548] Bluetooth: hci2: command 0x0406 tx timeout [ 2920.643776][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.652131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.883648][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2921.923930][T31858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2921.934157][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2922.086595][ T2633] usbhid 7-1:0.0: can't add hid device: -32 [ 2922.092688][ T2633] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 2922.963441][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2924.008576][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2924.330888][T13556] syzkaller0: entered promiscuous mode [ 2924.339207][T13556] syzkaller0: entered allmulticast mode [ 2924.376142][T11305] usb 4-1: USB disconnect, device number 43 [ 2924.456528][T26693] usb 7-1: USB disconnect, device number 19 [ 2924.813254][T31858] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2924.967381][T31858] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2924.983301][T31858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.991412][T11305] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2925.013304][ T5707] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2925.021036][T31858] usb 1-1: Product: syz [ 2925.029678][T31858] usb 1-1: Manufacturer: syz [ 2925.043210][T31858] usb 1-1: SerialNumber: syz [ 2925.050181][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2925.056269][T31858] usb 1-1: config 0 descriptor?? [ 2925.076384][T31858] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2925.173468][ T5707] usb 7-1: Using ep0 maxpacket: 16 [ 2925.183620][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2925.204394][T11305] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2925.221873][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2925.231754][T11305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.249156][ T5707] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2925.262234][T11305] usb 4-1: Product: syz [ 2925.273231][T11305] usb 4-1: Manufacturer: syz [ 2925.293287][T11305] usb 4-1: SerialNumber: syz [ 2925.298025][ T5707] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2925.354803][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.384148][ T5707] usb 7-1: config 0 descriptor?? [ 2925.904633][ T5707] microsoft 0003:045E:07DA.0147: unknown main item tag 0x0 [ 2925.913033][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2925.940086][ T5707] microsoft 0003:045E:07DA.0147: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2925.958691][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2925.995526][T31858] gspca_sunplus: reg_w_riv err -71 [ 2926.002697][ T5707] microsoft 0003:045E:07DA.0147: no inputs found [ 2926.023115][T31858] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2926.031219][ T5707] microsoft 0003:045E:07DA.0147: could not initialize ff, continuing anyway [ 2926.055821][T31858] usb 1-1: USB disconnect, device number 86 [ 2926.083568][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2926.332899][T26693] usb 7-1: USB disconnect, device number 20 [ 2926.413874][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2926.422206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2927.046203][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2927.054610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2927.125164][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2927.183285][T31858] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 2927.219707][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2927.365213][T31858] usb 1-1: device descriptor read/64, error -71 [ 2927.404971][ T4992] Dev loop5: unable to read RDB block 7 [ 2927.417119][ T4992] loop5: unable to read partition table [ 2927.465166][ T4992] loop5: partition table beyond EOD, truncated [ 2927.613423][T31858] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 2927.730730][T13581] fuse: Unknown parameter 'f1' [ 2927.741650][T13580] fuse: Unknown parameter 'f1' [ 2927.747108][ T4992] Dev loop5: unable to read RDB block 7 [ 2927.753373][T31858] usb 1-1: device descriptor read/64, error -71 [ 2927.768264][ T4992] loop5: unable to read partition table [ 2927.800703][T13580] syzkaller0: entered promiscuous mode [ 2927.807665][ T4992] loop5: partition table beyond EOD, truncated [ 2927.841827][T13580] syzkaller0: entered allmulticast mode [ 2927.862212][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 2927.888513][T31858] usb usb1-port1: attempt power cycle [ 2927.914525][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2927.964077][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2927.996561][T11305] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2928.042430][T11305] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2928.094233][T11305] usb 4-1: USB disconnect, device number 44 [ 2928.163452][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2928.173415][ T5707] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2928.243883][T31858] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 2928.277702][T31858] usb 1-1: device descriptor read/8, error -71 [ 2928.335013][ T5707] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2928.353708][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.394894][ T5707] usb 6-1: config 0 descriptor?? [ 2928.526344][T31858] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 2928.576030][T31858] usb 1-1: device descriptor read/8, error -71 [ 2928.714123][T31858] usb usb1-port1: unable to enumerate USB device [ 2929.064885][T30960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.213672][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2929.552076][T13607] syzkaller0: entered promiscuous mode [ 2929.566660][T13607] syzkaller0: entered allmulticast mode [ 2929.825442][T30960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.936550][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12536'. [ 2930.254103][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2930.333267][ T2633] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2930.523806][ T2633] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2930.556128][ T2633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.594486][ T2633] usb 1-1: Product: syz [ 2930.618571][ T2633] usb 1-1: Manufacturer: syz [ 2930.641698][ T2633] usb 1-1: SerialNumber: syz [ 2930.679332][ T2633] usb 1-1: config 0 descriptor?? [ 2930.746433][ T2633] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2931.305616][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2931.444415][ T5707] usb 6-1: string descriptor 0 read error: -71 [ 2931.495973][ T4992] Dev loop5: unable to read RDB block 7 [ 2931.498871][ T5707] cp210x 6-1:0.0: cp210x converter detected [ 2931.563225][ T4992] loop5: unable to read partition table [ 2931.580543][ T4992] loop5: partition table beyond EOD, truncated [ 2931.585107][ T5707] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2931.659169][ T5707] cp210x 6-1:0.0: querying part number failed [ 2931.681174][ T2633] gspca_sunplus: reg_w_riv err -71 [ 2931.712762][ T2633] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2931.770258][ T5707] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2931.780116][ T2633] usb 1-1: USB disconnect, device number 91 [ 2931.881248][ T5707] usb 6-1: USB disconnect, device number 24 [ 2931.918957][ T5707] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2931.940774][ T5707] cp210x 6-1:0.0: device disconnected [ 2932.193636][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.201911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.327090][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.354094][ T9457] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2932.364796][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2932.364832][ T9457] Tainted: [L]=SOFTLOCKUP [ 2932.364839][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2932.364855][ T9457] Workqueue: hci2 hci_rx_work [ 2932.364959][ T9457] Call Trace: [ 2932.364969][ T9457] [ 2932.364979][ T9457] dump_stack_lvl+0xe8/0x150 [ 2932.365014][ T9457] sysfs_create_dir_ns+0x271/0x2a0 [ 2932.365065][ T9457] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2932.365098][ T9457] ? do_raw_spin_unlock+0xf5/0x210 [ 2932.365128][ T9457] kobject_add_internal+0x622/0xcd0 [ 2932.365168][ T9457] kobject_add+0x163/0x240 [ 2932.365202][ T9457] ? __pfx_kobject_add+0x10/0x10 [ 2932.365237][ T9457] ? get_device_parent+0x366/0x3a0 [ 2932.365295][ T9457] device_add+0x3fa/0xb80 [ 2932.365321][ T9457] hci_conn_add_sysfs+0xd5/0x210 [ 2932.365369][ T9457] le_conn_complete_evt+0xfef/0x1580 [ 2932.365430][ T9457] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2932.365463][ T9457] ? __mutex_unlock_slowpath+0x731/0x900 [ 2932.365493][ T9457] ? skb_pull_data+0xf0/0x200 [ 2932.365533][ T9457] hci_le_enh_conn_complete_evt+0x189/0x490 [ 2932.365565][ T9457] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2932.365600][ T9457] hci_event_packet+0x67a/0xf10 [ 2932.365654][ T9457] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2932.365681][ T9457] ? __pfx_hci_event_packet+0x10/0x10 [ 2932.365712][ T9457] ? audit_tree_freeing_mark+0x9e0/0xb20 [ 2932.365742][ T9457] ? hci_send_to_monitor+0xe2/0x590 [ 2932.365799][ T9457] hci_rx_work+0x3ee/0x1020 [ 2932.365833][ T9457] ? process_scheduled_works+0xa20/0x14e0 [ 2932.365860][ T9457] process_scheduled_works+0xa8e/0x14e0 [ 2932.365916][ T9457] ? __pfx_process_scheduled_works+0x10/0x10 [ 2932.365950][ T9457] ? assign_work+0x3cf/0x5d0 [ 2932.365980][ T9457] worker_thread+0xa47/0xfb0 [ 2932.366035][ T9457] kthread+0x388/0x470 [ 2932.366067][ T9457] ? __pfx_worker_thread+0x10/0x10 [ 2932.366090][ T9457] ? __pfx_kthread+0x10/0x10 [ 2932.366122][ T9457] ret_from_fork+0x514/0xb70 [ 2932.366157][ T9457] ? __pfx_ret_from_fork+0x10/0x10 [ 2932.366188][ T9457] ? __switch_to+0xc89/0x1420 [ 2932.366218][ T9457] ? __pfx_kthread+0x10/0x10 [ 2932.366248][ T9457] ret_from_fork_asm+0x1a/0x30 [ 2932.366285][ T9457] [ 2932.366427][ T9457] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2932.607926][ T9457] Bluetooth: hci2: failed to register connection device [ 2932.804535][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.812801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2933.373261][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2934.403683][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2935.463760][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2936.503687][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2937.524121][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2937.931400][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2937.939798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2938.566624][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2938.574836][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2938.583258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2939.605654][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2940.643461][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2941.123528][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2941.704866][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.672605][T13628] bridge_slave_0: left allmulticast mode [ 2942.694939][T13628] bridge_slave_0: left promiscuous mode [ 2942.722105][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2942.730209][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.781553][T13628] bridge_slave_1: left allmulticast mode [ 2942.801611][T13628] bridge_slave_1: left promiscuous mode [ 2942.817046][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2942.850262][T13628] bond0: (slave bond_slave_0): Releasing backup interface [ 2942.875119][T13628] bond0: (slave bond_slave_1): Releasing backup interface [ 2942.905910][T13628] team0: Port device team_slave_0 removed [ 2942.929636][T13628] team0: Port device team_slave_1 removed [ 2942.944698][T13628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2942.968906][T13628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2942.992464][T13628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2943.011523][T13628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2943.027314][T13628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2943.045260][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.053706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.125922][T13632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2943.136882][T13632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2943.141808][T13639] vlan4: entered promiscuous mode [ 2943.148217][ T4992] Dev loop5: unable to read RDB block 7 [ 2943.154209][T13632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2943.160202][ T4992] loop5: unable to read partition table [ 2943.169759][T13632] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2943.177606][T13639] bond_slave_1: entered promiscuous mode [ 2943.184270][ T4992] loop5: partition table beyond EOD, truncated [ 2943.205241][T13632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2943.226499][T13632] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2943.304632][T13632] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2943.320615][T13632] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2943.359689][T13632] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2943.390940][ T4992] Dev loop5: unable to read RDB block 7 [ 2943.410600][ T4992] loop5: unable to read partition table [ 2943.422362][T13632] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2943.442021][ T4992] loop5: partition table beyond EOD, truncated [ 2943.527235][T13632] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2943.537847][T30960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.542407][T13632] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2943.570340][T13632] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2943.644073][T13651] tipc: Started in network mode [ 2943.653544][T13651] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2943.670585][T13651] FAULT_INJECTION: forcing a failure. [ 2943.670585][T13651] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.685481][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.685700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.721931][T13651] CPU: 1 UID: 0 PID: 13651 Comm: syz.5.12547 Tainted: G L syzkaller #0 PREEMPT(full) [ 2943.721964][T13651] Tainted: [L]=SOFTLOCKUP [ 2943.721971][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2943.721984][T13651] Call Trace: [ 2943.721993][T13651] [ 2943.722002][T13651] dump_stack_lvl+0xe8/0x150 [ 2943.722039][T13651] should_fail_ex+0x40c/0x560 [ 2943.722070][T13651] should_failslab+0xa8/0x100 [ 2943.722115][T13651] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 2943.722144][T13651] ? sock_alloc_inode+0x2c/0x1a0 [ 2943.722171][T13651] ? sock_alloc_inode+0x2c/0x1a0 [ 2943.722203][T13651] ? __lock_acquire+0x683/0x2cf0 [ 2943.722235][T13651] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2943.722261][T13651] sock_alloc_inode+0x2c/0x1a0 [ 2943.722288][T13651] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2943.722313][T13651] alloc_inode+0x6a/0x1b0 [ 2943.722341][T13651] __sock_create+0x12d/0x9d0 [ 2943.722381][T13651] udp_sock_create6+0xd2/0x650 [ 2943.722413][T13651] ? __pfx_udp_sock_create6+0x10/0x10 [ 2943.722440][T13651] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 2943.722463][T13651] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 2943.722487][T13651] ? tipc_udp_enable+0x7d6/0xca0 [ 2943.722612][T13651] tipc_udp_enable+0x96c/0xca0 [ 2943.722645][T13651] ? __pfx_tipc_udp_enable+0x10/0x10 [ 2943.722667][T13651] ? genl_family_rcv_msg_doit+0x233/0x340 [ 2943.722761][T13651] ? __kasan_kmalloc+0x93/0xb0 [ 2943.722800][T13651] ? __kmalloc_cache_noprof+0x32d/0x660 [ 2943.722833][T13651] ? __kmalloc_cache_noprof+0x150/0x660 [ 2943.722859][T13651] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 2943.722882][T13651] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 2943.722914][T13651] __tipc_nl_bearer_enable+0xcd9/0x1480 [ 2943.722949][T13651] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 2943.722983][T13651] ? __mutex_lock+0x5d4/0x1550 [ 2943.723015][T13651] ? __pfx___mutex_lock+0x10/0x10 [ 2943.723045][T13651] ? __nla_parse+0x40/0x60 [ 2943.723079][T13651] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2943.723107][T13651] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2943.723140][T13651] tipc_nl_bearer_enable+0x22/0x40 [ 2943.723164][T13651] genl_family_rcv_msg_doit+0x233/0x340 [ 2943.723199][T13651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2943.723240][T13651] ? bpf_lsm_capable+0x9/0x20 [ 2943.723266][T13651] ? security_capable+0x7e/0x2c0 [ 2943.723293][T13651] genl_rcv_msg+0x614/0x7a0 [ 2943.723328][T13651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2943.723356][T13651] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 2943.723381][T13651] ? __pfx_ref_tracker_free+0x10/0x10 [ 2943.723420][T13651] netlink_rcv_skb+0x226/0x4a0 [ 2943.723446][T13651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2943.723477][T13651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2943.723516][T13651] ? down_read+0x2be/0x330 [ 2943.723543][T13651] genl_rcv+0x28/0x40 [ 2943.723568][T13651] netlink_unicast+0x7bb/0x940 [ 2943.723599][T13651] netlink_sendmsg+0x813/0xb40 [ 2943.723632][T13651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2943.723662][T13651] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2943.723691][T13651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2943.723715][T13651] sock_sendmsg_nosec+0x13a/0x180 [ 2943.723746][T13651] ____sys_sendmsg+0x54e/0x850 [ 2943.723778][T13651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2943.723812][T13651] ? import_iovec+0x73/0xa0 [ 2943.723845][T13651] ___sys_sendmsg+0x2a5/0x360 [ 2943.723866][T13651] ? __lock_acquire+0x683/0x2cf0 [ 2943.723900][T13651] ? __pfx____sys_sendmsg+0x10/0x10 [ 2943.723961][T13651] ? __fget_files+0x2a/0x420 [ 2943.723987][T13651] ? __fget_files+0x3a2/0x420 [ 2943.724025][T13651] __x64_sys_sendmsg+0x1b1/0x290 [ 2943.724050][T13651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2943.724091][T13651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2943.724115][T13651] do_syscall_64+0x174/0x580 [ 2943.724137][T13651] ? trace_irq_disable+0x3b/0x140 [ 2943.724164][T13651] ? clear_bhb_loop+0x40/0x90 [ 2943.724190][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2943.724211][T13651] RIP: 0033:0x7fb510f9de99 [ 2943.724232][T13651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2943.724250][T13651] RSP: 002b:00007fb511ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2943.724273][T13651] RAX: ffffffffffffffda RBX: 00007fb511225fa0 RCX: 00007fb510f9de99 [ 2943.724289][T13651] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 2943.724302][T13651] RBP: 00007fb511ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 2943.724314][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2943.724326][T13651] R13: 00007fb511226038 R14: 00007fb511225fa0 R15: 00007fb51134fa48 [ 2943.724361][T13651] [ 2943.786643][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.799088][T13651] socket: no more sockets [ 2944.207447][T31858] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2944.215192][ T5707] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2944.224481][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2944.234156][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2944.235901][T13651] tipc: Enabling of bearer rejected, failed to enable media [ 2944.347255][ T4992] Dev loop5: unable to read RDB block 7 [ 2944.376446][ T4992] loop5: unable to read partition table [ 2944.393356][ T5707] usb 7-1: Using ep0 maxpacket: 32 [ 2944.401875][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2944.415036][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2944.426534][T31858] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2944.436481][T31858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.455001][ T4992] loop5: partition table beyond EOD, truncated [ 2944.464262][T30960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.475830][ T5707] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2944.485341][T31858] usb 4-1: Product: syz [ 2944.494932][T31858] usb 4-1: Manufacturer: syz [ 2944.507500][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2944.521964][T31858] usb 4-1: SerialNumber: syz [ 2944.543016][ T4992] Dev loop5: unable to read RDB block 7 [ 2944.566514][ T5707] usb 7-1: config 0 descriptor?? [ 2944.571583][ T4992] loop5: unable to read partition table [ 2944.582159][ T5707] hub 7-1:0.0: USB hub found [ 2944.589216][ T4992] loop5: partition table beyond EOD, truncated [ 2944.629612][T13668] FAULT_INJECTION: forcing a failure. [ 2944.629612][T13668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2944.643320][ T2633] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2944.696771][T13668] CPU: 1 UID: 0 PID: 13668 Comm: syz.5.12554 Tainted: G L syzkaller #0 PREEMPT(full) [ 2944.696804][T13668] Tainted: [L]=SOFTLOCKUP [ 2944.696812][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2944.696828][T13668] Call Trace: [ 2944.696837][T13668] [ 2944.696846][T13668] dump_stack_lvl+0xe8/0x150 [ 2944.696883][T13668] should_fail_ex+0x40c/0x560 [ 2944.696916][T13668] _copy_to_user+0x31/0xb0 [ 2944.696939][T13668] sg_read_oxfer+0x269/0x4f0 [ 2944.696982][T13668] sg_read+0x10c3/0x14d0 [ 2944.697017][T13668] ? io_prep_read+0x33/0x110 [ 2944.697045][T13668] ? io_submit_sqes+0xbde/0x2310 [ 2944.697075][T13668] ? __pfx_sg_read+0x10/0x10 [ 2944.697119][T13668] loop_rw_iter+0x426/0x690 [ 2944.697164][T13668] __io_read+0x1339/0x14f0 [ 2944.697205][T13668] ? __kmalloc_noprof+0x396/0x720 [ 2944.697231][T13668] ? percpu_ref_get_many+0x21/0x1e0 [ 2944.697254][T13668] ? __kmalloc_noprof+0x1ad/0x720 [ 2944.697281][T13668] ? __fget_files+0x2a/0x420 [ 2944.697310][T13668] ? __pfx___io_read+0x10/0x10 [ 2944.697350][T13668] io_read+0x4a/0x1e0 [ 2944.697377][T13668] ? __fget_files+0x2a/0x420 [ 2944.697410][T13668] __io_issue_sqe+0x188/0x4d0 [ 2944.697442][T13668] io_issue_sqe+0x16d/0x1020 [ 2944.697478][T13668] io_submit_sqes+0xd26/0x2310 [ 2944.697539][T13668] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 2944.697578][T13668] ? __fget_files+0x3a2/0x420 [ 2944.697610][T13668] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2944.697641][T13668] ? fput+0xa0/0xd0 [ 2944.697667][T13668] ? ksys_write+0x242/0x270 [ 2944.697690][T13668] ? __pfx_ksys_write+0x10/0x10 [ 2944.697715][T13668] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2944.697753][T13668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2944.697776][T13668] do_syscall_64+0x174/0x580 [ 2944.697801][T13668] ? clear_bhb_loop+0x40/0x90 [ 2944.697825][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2944.697846][T13668] RIP: 0033:0x7fb510f9de99 [ 2944.697865][T13668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2944.697883][T13668] RSP: 002b:00007fb511ee6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2944.697904][T13668] RAX: ffffffffffffffda RBX: 00007fb511225fa0 RCX: 00007fb510f9de99 [ 2944.697919][T13668] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 2944.697932][T13668] RBP: 00007fb511ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 2944.697944][T13668] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 2944.697957][T13668] R13: 00007fb511226038 R14: 00007fb511225fa0 R15: 00007fb51134fa48 [ 2944.697990][T13668] [ 2945.195775][ T2633] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2945.210855][ T9457] Bluetooth: hci0: command 0x0406 tx timeout [ 2945.221548][ T9457] Bluetooth: hci3: command 0x0c1a tx timeout [ 2945.230480][ T9457] Bluetooth: hci4: command 0x0406 tx timeout [ 2945.262272][ T2633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2945.284145][T10548] Bluetooth: hci2: command 0x0406 tx timeout [ 2945.288337][ T5707] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 2945.291101][ T2633] usb 1-1: Product: syz [ 2945.302558][ T2633] usb 1-1: Manufacturer: syz [ 2945.309015][ T2633] usb 1-1: SerialNumber: syz [ 2945.364015][T10548] Bluetooth: hci5: command 0x0c1a tx timeout [ 2945.390642][ T4992] Dev loop5: unable to read RDB block 7 [ 2945.396488][ T4992] loop5: unable to read partition table [ 2945.408267][ T2633] usb 1-1: config 0 descriptor?? [ 2945.417209][ T2633] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2945.438774][T31858] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2945.455203][ T4992] loop5: partition table beyond EOD, truncated [ 2945.557323][ T5707] usbhid 7-1:0.0: can't add hid device: -71 [ 2945.591648][ T4992] Dev loop5: unable to read RDB block 7 [ 2945.599182][ T5707] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2945.607523][T10548] Bluetooth: hci6: command 0x0c1a tx timeout [ 2945.630782][ T4992] loop5: unable to read partition table [ 2945.657201][ T4992] loop5: partition table beyond EOD, truncated [ 2945.697049][ T5707] usb 7-1: USB disconnect, device number 21 [ 2945.800420][T30960] dvmrp8: left allmulticast mode [ 2946.105209][ T3654] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2946.303585][ T3654] usb 6-1: Using ep0 maxpacket: 16 [ 2946.332534][ T3654] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2946.379556][ T3654] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2946.401859][ T2633] gspca_sunplus: reg_w_riv err -71 [ 2946.418445][ T2633] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2946.429083][ T3654] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2946.446915][ T3654] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2946.462611][ T2633] usb 1-1: USB disconnect, device number 92 [ 2946.480057][ T3654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2946.542191][ T3654] usb 6-1: config 0 descriptor?? [ 2946.896735][T30960] bond2 (unregistering): (slave geneve2): Releasing active interface [ 2947.283295][T10548] Bluetooth: hci0: command 0x0406 tx timeout [ 2947.301968][T30960] bond0 (unregistering): Released all slaves [ 2947.338410][T31858] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2947.352902][T31858] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2947.363485][T10548] Bluetooth: hci2: command 0x0406 tx timeout [ 2947.376076][T13693] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12558'. [ 2947.443582][T10548] Bluetooth: hci5: command 0x0c1a tx timeout [ 2947.459574][T30960] bond1 (unregistering): Released all slaves [ 2947.477394][T31858] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2947.592432][T31858] usb 4-1: USB disconnect, device number 45 [ 2947.614177][T30960] bond2 (unregistering): Released all slaves [ 2947.623090][ T3654] usbhid 6-1:0.0: can't add hid device: -71 [ 2947.659780][ T3654] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2947.683281][T10548] Bluetooth: hci6: command 0x0c1a tx timeout [ 2947.732980][ T3654] usb 6-1: USB disconnect, device number 25 [ 2947.804466][T30960] bond3 (unregistering): Released all slaves [ 2947.936787][T30960] bond4 (unregistering): Released all slaves [ 2948.019392][T30960] bond5 (unregistering): Released all slaves [ 2948.395498][T30960] tipc: Disabling bearer [ 2948.405868][ T3654] net_ratelimit: 7 callbacks suppressed [ 2948.405886][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2948.453840][T30960] tipc: Left network mode [ 2948.626039][ T4992] Dev loop5: unable to read RDB block 7 [ 2948.638431][ T4992] loop5: unable to read partition table [ 2948.671088][ T4992] loop5: partition table beyond EOD, truncated [ 2948.677508][T11305] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2948.883257][T11305] usb 1-1: Using ep0 maxpacket: 32 [ 2948.900558][T11305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 2948.911849][T31858] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2948.965012][T11305] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 2949.005139][T11305] usb 1-1: string descriptor 0 read error: -22 [ 2949.011881][T11305] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2949.056656][ T2633] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2949.069294][T11305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.080328][T31858] usb 7-1: too many configurations: 127, using maximum allowed: 8 [ 2949.094639][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12563'. [ 2949.108693][T31858] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2949.171287][T31858] usb 7-1: can't read configurations, error -61 [ 2949.185496][T13702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2949.203393][ T2633] usb 6-1: device descriptor read/64, error -71 [ 2949.217632][T11305] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2949.236265][T11305] usb 1-1: MIDIStreaming interface descriptor not found [ 2949.343808][T31858] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2949.443580][T10548] Bluetooth: hci2: command 0x0406 tx timeout [ 2949.446334][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2949.457751][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2949.465899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2949.523870][T10548] Bluetooth: hci5: command 0x0c1a tx timeout [ 2949.526522][T31858] usb 7-1: too many configurations: 127, using maximum allowed: 8 [ 2949.538827][ T2633] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2949.625978][T31858] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2949.655934][T31858] usb 7-1: can't read configurations, error -61 [ 2949.681464][T11305] usb 1-1: USB disconnect, device number 93 [ 2949.702313][T31858] usb usb7-port1: attempt power cycle [ 2949.743867][ T2633] usb 6-1: device descriptor read/64, error -71 [ 2949.764240][T10548] Bluetooth: hci6: command 0x0c1a tx timeout [ 2949.906584][ T2633] usb usb6-port1: attempt power cycle [ 2950.073296][T31858] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2950.089888][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.098337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.156173][T31858] usb 7-1: too many configurations: 127, using maximum allowed: 8 [ 2950.190830][T31858] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2950.263941][T31858] usb 7-1: can't read configurations, error -61 [ 2950.276887][ T2633] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2950.324520][ T2633] usb 6-1: device descriptor read/8, error -71 [ 2950.334873][T30960] hsr_slave_0: left promiscuous mode [ 2950.367531][T30960] hsr_slave_1: left promiscuous mode [ 2950.428392][T30960] veth1_macvtap: left promiscuous mode [ 2950.435046][T31858] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2950.456205][T30960] veth0_macvtap: left promiscuous mode [ 2950.483742][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.486233][T31858] usb 7-1: too many configurations: 127, using maximum allowed: 8 [ 2950.547620][T31858] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2950.562563][T31858] usb 7-1: can't read configurations, error -61 [ 2950.601653][T31858] usb usb7-port1: unable to enumerate USB device [ 2950.615504][ T2633] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2950.682797][ T2633] usb 6-1: device descriptor read/8, error -71 [ 2950.823684][ T2633] usb usb6-port1: unable to enumerate USB device [ 2950.923224][T31858] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2950.993607][T17110] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2951.083493][T31858] usb 4-1: Using ep0 maxpacket: 32 [ 2951.132614][T31858] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2951.145493][T31858] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2951.157268][T31858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2951.170221][T31858] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2951.180189][T17110] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2951.189507][T17110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.197836][T31858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.223417][T17110] usb 3-1: Product: syz [ 2951.227693][T31858] usb 4-1: Product: syz [ 2951.240909][T17110] usb 3-1: Manufacturer: syz [ 2951.245899][T31858] usb 4-1: Manufacturer: syz [ 2951.252256][T17110] usb 3-1: SerialNumber: syz [ 2951.260808][T31858] usb 4-1: SerialNumber: syz [ 2951.286427][T31858] usb 4-1: config 0 descriptor?? [ 2951.293341][T17110] usb 3-1: config 0 descriptor?? [ 2951.326698][T17110] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2951.523380][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2951.717669][T31858] gs_usb 4-1:0.0: Configuring for 256 interfaces [ 2951.750764][T31858] gs_usb 4-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 2951.807101][T31858] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 2951.855786][ T4992] Dev loop5: unable to read RDB block 7 [ 2951.885792][ T4992] loop5: unable to read partition table [ 2951.901746][ T4992] loop5: partition table beyond EOD, truncated [ 2951.957313][T31858] usb 4-1: USB disconnect, device number 46 [ 2952.316111][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2952.343262][ T2633] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2952.378660][ T4992] Dev loop5: unable to read RDB block 7 [ 2952.398313][ T4992] loop5: unable to read partition table [ 2952.405742][T13756] FAULT_INJECTION: forcing a failure. [ 2952.405742][T13756] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.429919][ T4992] loop5: partition table beyond EOD, truncated [ 2952.437655][T11305] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2952.456235][T13756] CPU: 1 UID: 0 PID: 13756 Comm: syz.5.12575 Tainted: G L syzkaller #0 PREEMPT(full) [ 2952.456268][T13756] Tainted: [L]=SOFTLOCKUP [ 2952.456275][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2952.456288][T13756] Call Trace: [ 2952.456296][T13756] [ 2952.456305][T13756] dump_stack_lvl+0xe8/0x150 [ 2952.456344][T13756] should_fail_ex+0x40c/0x560 [ 2952.456373][T13756] ? traverse+0xf1/0x620 [ 2952.456397][T13756] should_failslab+0xa8/0x100 [ 2952.456429][T13756] __kvmalloc_node_noprof+0x176/0x860 [ 2952.456461][T13756] ? aa_file_perm+0x18b/0x15f0 [ 2952.456485][T13756] ? traverse+0xf1/0x620 [ 2952.456513][T13756] traverse+0xf1/0x620 [ 2952.456534][T13756] ? aa_file_perm+0x18b/0x15f0 [ 2952.456563][T13756] ? aa_file_perm+0x4ed/0x15f0 [ 2952.456591][T13756] seq_read_iter+0xb6a/0xca0 [ 2952.456630][T13756] seq_read+0x367/0x480 [ 2952.456651][T13756] ? kstrtoull+0x12f/0x1d0 [ 2952.456684][T13756] ? __pfx_seq_read+0x10/0x10 [ 2952.456716][T13756] ? apparmor_file_permission+0x1f4/0x300 [ 2952.456754][T13756] ? __pfx_seq_read+0x10/0x10 [ 2952.456774][T13756] proc_reg_read+0x1e9/0x2e0 [ 2952.456801][T13756] vfs_readv+0x57c/0x850 [ 2952.456829][T13756] ? __pfx_proc_reg_read+0x10/0x10 [ 2952.456854][T13756] ? __pfx_vfs_readv+0x10/0x10 [ 2952.456895][T13756] ? __fget_files+0x2a/0x420 [ 2952.456929][T13756] ? __fget_files+0x3a2/0x420 [ 2952.456955][T13756] ? __fget_files+0x2a/0x420 [ 2952.456992][T13756] __x64_sys_preadv+0x19c/0x2b0 [ 2952.457019][T13756] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2952.457052][T13756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2952.457074][T13756] do_syscall_64+0x174/0x580 [ 2952.457098][T13756] ? trace_irq_disable+0x3b/0x140 [ 2952.457126][T13756] ? clear_bhb_loop+0x40/0x90 [ 2952.457152][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2952.457173][T13756] RIP: 0033:0x7fb510f9de99 [ 2952.457192][T13756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2952.457209][T13756] RSP: 002b:00007fb511ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2952.457240][T13756] RAX: ffffffffffffffda RBX: 00007fb511225fa0 RCX: 00007fb510f9de99 [ 2952.457256][T13756] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000004 [ 2952.457269][T13756] RBP: 00007fb511ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 2952.457281][T13756] R10: 0000000006000ffe R11: 0000000000000246 R12: 0000000000000001 [ 2952.457293][T13756] R13: 00007fb511226038 R14: 00007fb511225fa0 R15: 00007fb51134fa48 [ 2952.457326][T13756] [ 2952.722367][ T2633] usb 7-1: Using ep0 maxpacket: 8 [ 2952.741169][ T2633] usb 7-1: config 105 has an invalid interface number: 127 but max is 2 [ 2952.752498][ T2633] usb 7-1: config 105 has an invalid interface number: 90 but max is 2 [ 2952.761498][ T2633] usb 7-1: config 105 has an invalid descriptor of length 171, skipping remainder of the config [ 2952.772315][ T2633] usb 7-1: config 105 has 2 interfaces, different from the descriptor's value: 3 [ 2952.790747][ T4992] Dev loop5: unable to read RDB block 7 [ 2952.817538][ T4992] loop5: unable to read partition table [ 2952.847979][ T4992] loop5: partition table beyond EOD, truncated [ 2952.978084][ T2633] usb 7-1: config 105 has no interface number 0 [ 2953.003410][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2953.010235][T17110] gspca_sunplus: reg_w_riv err -71 [ 2953.021123][T17110] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2953.031693][T17110] usb 3-1: USB disconnect, device number 85 [ 2953.090293][ T2633] usb 7-1: config 105 has no interface number 1 [ 2953.118926][ T2633] usb 7-1: config 105 interface 127 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 2953.183344][T11305] usb 1-1: Using ep0 maxpacket: 32 [ 2953.186916][ T2633] usb 7-1: config 105 interface 90 altsetting 0 endpoint 0x6 has invalid maxpacket 35662, setting to 64 [ 2953.223473][T11305] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2953.233172][T11305] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2953.274117][T11305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2953.317676][ T2633] usb 7-1: config 105 interface 90 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 2953.328756][ T2633] usb 7-1: config 105 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 2953.339006][T11305] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 2953.342093][ T2633] usb 7-1: config 105 interface 127 has no altsetting 0 [ 2953.422678][ T2633] usb 7-1: New USB device found, idVendor=0c52, idProduct=a02b, bcdDevice=e5.13 [ 2953.448924][ T2633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.450911][T11305] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2953.528294][T11305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.547995][ T2633] usb 7-1: Product: 忴잃鿧ꞕ￫顃ో解찎⮀烁쌑頜蘘쾰엦Ꮧ켻믃訇攇佞顷掺෮ꍾ⮲㶝ㇵ᠂゙饸訊螠톒纰錔パ겋⍢ᒐ捇㦟哐饦狱㣔떞࿂옻돓⋺〟祉➝⨜㤎ꇵ쵟﹋㑀飉棻ꈧ怎 [ 2953.658022][ T2633] usb 7-1: Manufacturer: 遏쾈坝反൛稿ି젲뗮ᯖ㻱櫵 [ 2953.672413][T30960] IPVS: stop unused estimator thread 0... [ 2953.724200][ T2633] usb 7-1: SerialNumber: 懯珚⌽剈∲뙕窾䠋㡱켈鑘蘆ା큕怪䱑푌캗㢹탪敞⛿獣얋䡲뼅곅禧毬錾귻燤稆揳륆ʹ㕮ꭳ꤫⓻飛⾡︂㘩饽ᄅ⑓䖼鸙澐㛺愍ᧀᢠ莫㵓醞态ᴇꋬ淂ꚭ튕ᴕ豴䁝ﱡằꩩ෻쾽컲멪祽璐綠Ἑ଼ວ듗戀둹ᰣꓠ㚏㇋楽퉮녰겇쮲䷮춾턬쀰┬䰸뼹脆㰓흯 [ 2953.844358][ T4992] Dev loop5: unable to read RDB block 7 [ 2953.865320][ T4992] loop5: unable to read partition table [ 2953.916921][ T4992] loop5: partition table beyond EOD, truncated [ 2953.985912][T26693] usb 1-1: USB disconnect, device number 94 [ 2954.135608][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2954.152545][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12578'. [ 2954.224694][T11422] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2954.276896][T13765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2954.372841][T13765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2954.415308][T11422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2954.428910][T11422] usb 6-1: not running at top speed; connect to a high speed hub [ 2954.454276][T11422] usb 6-1: config 6 has an invalid interface number: 196 but max is 0 [ 2954.472714][T11422] usb 6-1: config 6 has no interface number 0 [ 2954.512853][T11422] usb 6-1: config 6 interface 196 has no altsetting 0 [ 2954.542647][T11422] usb 6-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=ed.2e [ 2954.558843][T11422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2954.587991][T11422] usb 6-1: Product: syz [ 2954.614115][T11422] usb 6-1: Manufacturer: syz [ 2954.627090][T11422] usb 6-1: SerialNumber: syz [ 2954.665567][T11422] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2955.093247][T11305] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2955.121097][ T2633] ftdi_sio 7-1:105.127: FTDI USB Serial Device converter detected [ 2955.144627][ T3654] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2955.167699][ T2633] ftdi_sio ttyUSB0: unknown device type: 0xe513 [ 2955.203768][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.217739][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.226113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.232247][ T2633] ftdi_sio 7-1:105.90: FTDI USB Serial Device converter detected [ 2955.247725][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.255994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.341969][ T2633] ftdi_sio ttyUSB1: unknown device type: 0xe513 [ 2955.356331][ T3654] usb 1-1: Using ep0 maxpacket: 32 [ 2955.375527][T11305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2955.415292][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2955.457992][ T2633] usb 7-1: USB disconnect, device number 26 [ 2955.485167][T11305] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2955.515950][ T3654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2955.541762][ T2633] ftdi_sio 7-1:105.127: device disconnected [ 2955.581190][T11305] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2955.594451][ T3654] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2955.616550][ T2633] ftdi_sio 7-1:105.90: device disconnected [ 2955.637629][ T3654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2955.680535][T11305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2955.722877][ T3654] usb 1-1: config 0 descriptor?? [ 2955.774002][ T3654] hub 1-1:0.0: USB hub found [ 2955.780892][T11305] usb 4-1: config 0 descriptor?? [ 2955.846330][T11305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2955.971809][ T3654] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2956.235336][T13789] syzkaller0: entered promiscuous mode [ 2956.246196][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2956.274983][T13789] syzkaller0: entered allmulticast mode [ 2956.395996][ T3654] hid-generic 0003:046D:C31C.0148: unknown main item tag 0x0 [ 2956.492619][ T3654] hid-generic 0003:046D:C31C.0148: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 2956.572304][T13777] FAULT_INJECTION: forcing a failure. [ 2956.572304][T13777] name failslab, interval 1, probability 0, space 0, times 0 [ 2956.671525][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.0.12580 Tainted: G L syzkaller #0 PREEMPT(full) [ 2956.671561][T13777] Tainted: [L]=SOFTLOCKUP [ 2956.671569][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2956.671582][T13777] Call Trace: [ 2956.671589][T13777] [ 2956.671598][T13777] dump_stack_lvl+0xe8/0x150 [ 2956.671636][T13777] should_fail_ex+0x40c/0x560 [ 2956.671669][T13777] should_failslab+0xa8/0x100 [ 2956.671701][T13777] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2956.671729][T13777] ? alloc_empty_file+0x5b/0x1d0 [ 2956.671753][T13777] ? alloc_empty_file+0x5b/0x1d0 [ 2956.671779][T13777] ? stack_trace_save+0xa9/0x100 [ 2956.671809][T13777] alloc_empty_file+0x5b/0x1d0 [ 2956.671836][T13777] path_openat+0x8f/0x3830 [ 2956.671862][T13777] ? kasan_save_track+0x4f/0x80 [ 2956.671886][T13777] ? kasan_save_track+0x3e/0x80 [ 2956.671910][T13777] ? __kasan_slab_alloc+0x6c/0x80 [ 2956.671936][T13777] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 2956.671958][T13777] ? do_getname+0x2e/0x250 [ 2956.671980][T13777] ? do_sys_openat2+0xcc/0x200 [ 2956.672003][T13777] ? __x64_sys_openat+0x138/0x170 [ 2956.672027][T13777] ? do_syscall_64+0x174/0x580 [ 2956.672067][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2956.672107][T13777] ? __lock_acquire+0x683/0x2cf0 [ 2956.672147][T13777] do_file_open+0x23e/0x4a0 [ 2956.672173][T13777] ? __pfx_do_file_open+0x10/0x10 [ 2956.672214][T13777] ? _raw_spin_unlock+0x28/0x50 [ 2956.672242][T13777] ? alloc_fd+0x651/0x6c0 [ 2956.672279][T13777] do_sys_openat2+0x115/0x200 [ 2956.672309][T13777] ? __pfx_do_sys_openat2+0x10/0x10 [ 2956.672337][T13777] ? ksys_write+0x242/0x270 [ 2956.672357][T13777] ? __pfx_ksys_write+0x10/0x10 [ 2956.672381][T13777] __x64_sys_openat+0x138/0x170 [ 2956.672411][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2956.672432][T13777] do_syscall_64+0x174/0x580 [ 2956.672455][T13777] ? clear_bhb_loop+0x40/0x90 [ 2956.672480][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2956.672499][T13777] RIP: 0033:0x7f3f2c35e6ce [ 2956.672519][T13777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2956.672536][T13777] RSP: 002b:00007f3f2a5f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2956.672558][T13777] RAX: ffffffffffffffda RBX: 00007f3f2a5f66c0 RCX: 00007f3f2c35e6ce [ 2956.672573][T13777] RDX: 0000000000000800 RSI: 00007f3f2a5f5c00 RDI: ffffffffffffff9c [ 2956.672587][T13777] RBP: 00007f3f2a5f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 2956.672599][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2956.672612][T13777] R13: 00007f3f2c626038 R14: 00007f3f2c625fa0 R15: 00007f3f2c74fa48 [ 2956.672644][T13777] [ 2957.283688][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2957.360500][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2957.376860][ T3654] usb 1-1: USB disconnect, device number 95 [ 2957.385403][T11422] hub 6-1:6.196: bad descriptor, ignoring hub [ 2957.409016][T11422] hub 6-1:6.196: probe with driver hub failed with error -5 [ 2957.466618][ T4992] Dev loop5: unable to read RDB block 7 [ 2957.497587][T11422] r8152-cfgselector 6-1: USB disconnect, device number 30 [ 2957.508406][ T4992] loop5: unable to read partition table [ 2957.516707][ T4992] loop5: partition table beyond EOD, truncated [ 2957.607007][T11406] usb 4-1: USB disconnect, device number 47 [ 2957.917564][ T4992] Dev loop5: unable to read RDB block 7 [ 2957.952687][ T4992] loop5: unable to read partition table [ 2957.992153][ T4992] loop5: partition table beyond EOD, truncated [ 2958.042488][T13811] trusted_key: encrypted_key: master key parameter is missing [ 2958.135536][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 2958.135557][ T30] audit: type=1326 audit(1785043751.069:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.5.12589" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb510f9de99 code=0x0 [ 2958.225584][T11406] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2958.327282][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.418277][T11406] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2958.427808][T11406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.455184][T11406] usb 1-1: Product: syz [ 2958.473498][T11406] usb 1-1: Manufacturer: syz [ 2958.502225][T11406] usb 1-1: SerialNumber: syz [ 2958.553702][T11406] usb 1-1: config 0 descriptor?? [ 2958.577806][T11406] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2958.633342][T13201] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2958.888035][T13201] usb 4-1: Using ep0 maxpacket: 32 [ 2958.943802][T13835] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 2958.944346][T13201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2959.040325][T13201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2959.054806][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.061280][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.115400][ T4992] Dev loop5: unable to read RDB block 7 [ 2959.134547][ T4992] loop5: unable to read partition table [ 2959.141538][T13201] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2959.157609][ T4992] loop5: partition table beyond EOD, truncated [ 2959.216258][T13201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.263333][T11422] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2959.328788][T13201] usb 4-1: config 0 descriptor?? [ 2959.360741][T13201] hub 4-1:0.0: USB hub found [ 2959.367377][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2959.468529][T11406] gspca_sunplus: reg_w_riv err -71 [ 2959.480058][T11406] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2959.501175][T11422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2959.535482][T26693] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2959.545498][T11406] usb 1-1: USB disconnect, device number 96 [ 2959.582847][T11422] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2959.587129][T13201] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2959.668982][T11422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2959.720715][T26693] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2959.734180][T11422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2959.747064][T26693] usb 6-1: not running at top speed; connect to a high speed hub [ 2959.784660][T26693] usb 6-1: config 6 has an invalid interface number: 196 but max is 0 [ 2959.819852][T26693] usb 6-1: config 6 has no interface number 0 [ 2959.830349][T11422] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2959.852988][T26693] usb 6-1: config 6 interface 196 has no altsetting 0 [ 2959.876266][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2959.891609][T26693] usb 6-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=ed.2e [ 2959.921115][T11422] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2959.950355][T26693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.971668][T26693] usb 6-1: Product: syz [ 2959.989699][T11422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2960.005559][T26693] usb 6-1: Manufacturer: syz [ 2960.010696][T13201] hid-generic 0003:046D:C31C.0149: unknown main item tag 0x0 [ 2960.030772][T26693] usb 6-1: SerialNumber: syz [ 2960.060140][T11422] usb 3-1: Product: syz [ 2960.076810][T13201] hid-generic 0003:046D:C31C.0149: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 2960.090203][T26693] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2960.138372][T11422] usb 3-1: Manufacturer: syz [ 2960.170874][T11422] usb 3-1: SerialNumber: syz [ 2960.252108][T11422] usb 3-1: config 0 descriptor?? [ 2960.329249][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.374010][T11406] usb 4-1: USB disconnect, device number 48 [ 2960.390931][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.459137][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.470780][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.489244][T11305] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 2960.517979][T11422] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2960.555342][T11422] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2960.585958][T13846] fido_id[13846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2960.707544][T11305] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 2960.725315][T11422] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 2960.768122][T11422] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2960.788061][T11305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 2960.828676][T11422] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2960.861686][T11305] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 2960.890915][T11305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2960.923357][T11422] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 2960.945145][T11305] usb 1-1: Product: syz [ 2960.964665][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.972830][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.980990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.989130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.999066][T11305] usb 1-1: Manufacturer: syz [ 2961.083583][T11305] usb 1-1: SerialNumber: syz [ 2961.117718][T11305] usb 1-1: config 0 descriptor?? [ 2961.338928][T11422] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2961.385167][T11422] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 2961.399483][T11305] powermate: unknown product id 0240 [ 2961.462756][T11305] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input392 [ 2961.518003][T11422] usb 3-1: USB disconnect, device number 86 [ 2961.526938][T13859] kvm: apic: phys broadcast and lowest prio [ 2961.550087][ C1] powermate: config urb returned -71 [ 2961.555655][ C1] powermate: config urb returned -71 [ 2961.563993][ C1] powermate: config urb returned -71 [ 2961.570973][ C1] powermate: config urb returned -71 [ 2961.615040][T11406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2961.635227][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2961.645194][T11305] usb 1-1: USB disconnect, device number 97 [ 2962.060787][T10548] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 2962.341971][T26693] hub 6-1:6.196: bad descriptor, ignoring hub [ 2962.376517][T26693] hub 6-1:6.196: probe with driver hub failed with error -5 [ 2962.456144][T26693] r8152-cfgselector 6-1: USB disconnect, device number 31 [ 2962.549057][ T4992] Dev loop5: unable to read RDB block 7 [ 2962.568257][ T4992] loop5: unable to read partition table [ 2962.598641][ T4992] loop5: partition table beyond EOD, truncated [ 2962.760820][T13882] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2962.801457][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2962.818408][T13884] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13884 comm: syz.2.12604) [ 2963.011364][ T4992] Dev loop5: unable to read RDB block 7 [ 2963.048318][ T30] audit: type=1800 audit(1785043755.979:18036): pid=13884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12604" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=276054 res=0 errno=0 [ 2963.055034][ T4992] loop5: unable to read partition table [ 2963.266196][ T4992] loop5: partition table beyond EOD, truncated [ 2963.453655][ T3654] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2963.657954][ T3654] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2963.714723][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.770896][ T3654] usb 6-1: Product: syz [ 2963.811420][ T3654] usb 6-1: Manufacturer: syz [ 2963.857792][T13896] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12609'. [ 2963.890695][ T3654] usb 6-1: SerialNumber: syz [ 2963.943249][T11305] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2963.969143][ T3654] usb 6-1: config 0 descriptor?? [ 2964.001622][ T3654] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2964.186975][T11305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2964.265998][T11305] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2964.280751][T17110] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2964.330472][T11305] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2964.377538][T11305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.441554][T11305] usb 1-1: config 0 descriptor?? [ 2964.463227][T17110] usb 3-1: Using ep0 maxpacket: 32 [ 2964.499040][T17110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2964.511182][T11305] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2964.577138][T17110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2964.667884][T17110] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2964.722745][T17110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.798130][T17110] usb 3-1: config 0 descriptor?? [ 2964.814593][T13201] net_ratelimit: 2 callbacks suppressed [ 2964.814612][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2964.961702][T17110] hub 3-1:0.0: USB hub found [ 2965.008813][ T3654] gspca_sunplus: reg_w_riv err -71 [ 2965.037742][ T3654] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2965.112007][ T3654] usb 6-1: USB disconnect, device number 32 [ 2965.251261][T17110] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2965.518280][T17110] usbhid 3-1:0.0: can't add hid device: -71 [ 2965.581525][T17110] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2965.675340][ T4992] Dev loop5: unable to read RDB block 7 [ 2965.700414][ T4992] loop5: unable to read partition table [ 2965.736001][ T4992] loop5: partition table beyond EOD, truncated [ 2965.773236][T17110] usb 3-1: USB disconnect, device number 87 [ 2965.824101][T13910] vlan2: entered promiscuous mode [ 2965.844832][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2965.860726][ T5707] usb 1-1: USB disconnect, device number 98 [ 2965.882512][T13910] syz_tun: entered promiscuous mode [ 2965.904595][T13910] vlan2: entered allmulticast mode [ 2965.928277][T13910] syz_tun: entered allmulticast mode [ 2966.215193][ T3654] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2966.405738][ T3654] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2966.468447][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2966.519250][ T3654] usb 6-1: Product: syz [ 2966.582092][ T3654] usb 6-1: Manufacturer: syz [ 2966.613602][ T3654] usb 6-1: SerialNumber: syz [ 2966.724463][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.732619][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.741114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.749496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.884261][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.927702][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12617'. [ 2967.033296][T13201] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2967.076214][T13923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2967.150875][ T3654] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2967.175454][ T3654] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2967.257829][T13201] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2967.285193][T13201] usb 3-1: not running at top speed; connect to a high speed hub [ 2967.333221][T13201] usb 3-1: config 6 has an invalid interface number: 196 but max is 0 [ 2967.368347][T13201] usb 3-1: config 6 has no interface number 0 [ 2967.405079][T13201] usb 3-1: config 6 interface 196 has no altsetting 0 [ 2967.446401][T13201] usb 3-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=ed.2e [ 2967.463492][ T5707] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2967.514513][T13201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.563959][T13201] usb 3-1: Product: syz [ 2967.579615][T13201] usb 3-1: Manufacturer: syz [ 2967.621114][T13201] usb 3-1: SerialNumber: syz [ 2967.656967][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2967.688260][T13201] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2967.722589][ T5707] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2967.769151][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2967.859268][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2967.922417][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.943147][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.966865][ T5707] usb 4-1: Product: syz [ 2967.985350][ T5707] usb 4-1: Manufacturer: syz [ 2968.007949][ T5707] usb 4-1: SerialNumber: syz [ 2968.053679][ T5707] hub 4-1:1.0: bad descriptor, ignoring hub [ 2968.082354][ T5707] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2968.153246][T17110] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 2968.214564][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2968.239334][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.273349][ T5707] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2968.346165][T17110] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2968.378083][T17110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2968.427223][T17110] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2968.481799][T17110] usb 7-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2968.493022][ T3654] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2968.507806][T11305] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 2968.539716][T17110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.584294][T17110] usb 7-1: config 0 descriptor?? [ 2968.615972][T13935] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 2968.705973][T11305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2968.748445][T11305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2968.783952][T11305] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2968.805913][T11305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2968.829035][T11305] usb 1-1: SerialNumber: syz [ 2968.887818][T11305] usb 1-1: 0:2 : does not exist [ 2969.091376][T17110] usbhid 7-1:0.0: can't add hid device: -71 [ 2969.139510][T17110] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2969.191519][T17110] usb 7-1: USB disconnect, device number 27 [ 2969.194245][ T3654] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2969.275471][ T3654] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2969.344392][ T3654] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2969.400197][ T3654] usb 6-1: USB disconnect, device number 33 [ 2969.454260][T13930] loop4: detected capacity change from 0 to 7 [ 2969.521990][T13930] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 2969.537886][T13930] loop4: partition table partially beyond EOD, truncated [ 2969.556863][T13930] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 2969.903279][ T4992] Dev loop5: unable to read RDB block 7 [ 2969.938300][T13201] hub 3-1:6.196: bad descriptor, ignoring hub [ 2969.942026][ T4992] loop5: unable to read partition table [ 2969.956944][T13201] hub 3-1:6.196: probe with driver hub failed with error -5 [ 2969.987650][ T4992] loop5: partition table beyond EOD, truncated [ 2970.015573][ T3654] net_ratelimit: 3 callbacks suppressed [ 2970.015592][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2970.059092][T13201] r8152-cfgselector 3-1: USB disconnect, device number 88 [ 2970.293272][T17110] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2970.588390][T17110] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2970.746229][T17110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.758463][ T3654] usb 4-1: USB disconnect, device number 49 [ 2970.828474][ T3654] usblp0: removed [ 2970.841157][T17110] usb 6-1: Product: syz [ 2970.899720][T13201] usb 1-1: USB disconnect, device number 99 [ 2970.939117][T17110] usb 6-1: Manufacturer: syz [ 2971.054304][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2971.104076][T17110] usb 6-1: SerialNumber: syz [ 2971.256870][T17110] usb 6-1: config 0 descriptor?? [ 2971.348325][T17110] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2971.752473][T13972] vlan2: entered promiscuous mode [ 2971.857490][T13972] bond_slave_1: entered promiscuous mode [ 2972.066811][T11422] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 2972.128210][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.227552][T17110] gspca_sunplus: reg_w_riv err -71 [ 2972.242700][T17110] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2972.275170][T11422] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 2972.289539][T17110] usb 6-1: USB disconnect, device number 34 [ 2972.312315][T11422] usb 1-1: config 0 has no interface number 0 [ 2972.339077][T11422] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2972.378592][T11422] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 2972.414918][T11422] usb 1-1: config 0 interface 113 has no altsetting 0 [ 2972.451506][T11422] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2972.482085][T11422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2972.492089][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.500473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.523479][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.523585][ T3654] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2972.531882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.554654][T11422] usb 1-1: Product: syz [ 2972.569304][T11422] usb 1-1: Manufacturer: syz [ 2972.588928][T11422] usb 1-1: SerialNumber: syz [ 2972.616535][T11422] usb 1-1: config 0 descriptor?? [ 2972.629087][T13974] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2972.665380][ C1] usb 1-1: NFC: Urb failure (status -71) [ 2972.688125][ C1] usb 1-1: NFC: Urb failure (status -71) [ 2972.698715][T11422] usb 1-1: NFC: Unable to get FW version [ 2972.726452][T11422] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 2972.873070][ T4992] Dev loop5: unable to read RDB block 7 [ 2972.954396][T13974] kvm: kvm [13973]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 2972.995843][T11422] usb 1-1: USB disconnect, device number 100 [ 2973.005981][ T4992] loop5: unable to read partition table [ 2973.012695][ T3654] usb 4-1: Using ep0 maxpacket: 8 [ 2973.110666][ T4992] loop5: partition table beyond EOD, truncated [ 2973.119681][ T3654] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2973.204218][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2973.241615][ T3654] usb 4-1: config 0 has no interface number 0 [ 2973.323476][T17110] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2973.422868][ T3654] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2973.498095][T17110] usb 6-1: Using ep0 maxpacket: 32 [ 2973.522494][T17110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2973.561503][T17110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2973.573827][ T3654] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2973.622075][T17110] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2973.649347][ T3654] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2973.680947][T17110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.682572][ T3654] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2973.736961][T17110] usb 6-1: config 0 descriptor?? [ 2973.779682][ T3654] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2973.811597][ T3654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.864063][ T3654] usb 4-1: config 0 descriptor?? [ 2973.902339][ T3654] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2974.244102][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2974.274534][T11305] usb 4-1: USB disconnect, device number 50 [ 2974.274626][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 2974.415715][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2974.474958][T17110] savu 0003:1E7D:2D5A.014A: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 2974.492625][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.630341][T17110] usb 6-1: USB disconnect, device number 35 [ 2974.897875][ T30] audit: type=1326 audit(1785043767.799:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.3.12628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3cd99de99 code=0x0 [ 2975.040570][T13990] fido_id[13990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2975.284079][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2975.396177][ T4992] Dev loop5: unable to read RDB block 7 [ 2975.418227][ T4992] loop5: unable to read partition table [ 2975.430979][ T4992] loop5: partition table beyond EOD, truncated [ 2976.126559][T11305] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2976.328034][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2977.371764][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.254190][T31099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.262551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.270715][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.279120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.407796][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2979.444349][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2979.523822][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2980.484112][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2981.526314][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2982.563986][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2983.363991][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2983.372372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2983.605342][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.004643][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.012991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.646625][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.684154][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2986.726439][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.764094][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2988.804124][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.123891][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.132273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.766080][T31099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.774626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.849801][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2990.894566][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2991.924014][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2992.967084][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.004582][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.244373][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.252740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2995.045660][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2995.524495][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2995.532862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.084478][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2997.124068][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.164515][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.723682][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.203971][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.363705][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.372085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3000.244639][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.284033][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.292782][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.301198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3002.324080][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3003.364184][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.404095][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.483848][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.492192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3005.443861][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.484055][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.043778][T31099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.052177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.525062][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3008.564140][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.604003][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.612520][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.620951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3010.644012][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.683965][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3012.726835][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3012.804094][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3012.812466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3013.763913][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.804137][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.364632][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.373008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.844169][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.886363][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.923990][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.932156][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3018.563871][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3018.572231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3018.964078][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.004175][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.408350][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.416736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.485319][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.491705][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.044180][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3022.083948][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.123971][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.684760][T31099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.695639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3024.164110][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.213525][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.603923][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.612291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3026.243947][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.284047][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3028.323988][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3029.364055][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3029.443759][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3029.452129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.405142][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.363680][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.372035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.444237][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3032.483921][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3033.524176][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3034.567285][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3035.206098][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3035.214703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3035.603879][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.643816][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3037.123974][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3037.685070][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3038.723832][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.764145][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.806138][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.966404][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.974848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.844414][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.884032][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3043.923773][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3044.964086][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3045.445931][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3045.454296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.003840][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.724022][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.732401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.044048][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3048.083858][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3049.125784][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.164121][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3051.205631][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3051.214187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3051.222567][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.244076][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.486611][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.495109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3053.283842][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.323841][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3055.363993][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3056.324310][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3056.403811][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3056.964142][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3056.972497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3057.444159][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3058.244857][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3058.253291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3058.484007][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3059.525321][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3060.563963][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3061.604103][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3062.644302][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3062.731902][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3062.740395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3063.686445][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.723893][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.743723][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.752692][T31858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.761531][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3065.286229][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3065.294914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3065.763917][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3066.803953][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3067.843876][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3068.883930][ T2633] net_ratelimit: 2 callbacks suppressed [ 3068.883954][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3069.923623][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.404582][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.416217][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.426475][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3071.047271][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3071.055664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3071.443708][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3072.483874][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3073.523408][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.563760][ T3654] net_ratelimit: 2 callbacks suppressed [ 3074.563782][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.523773][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.533601][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.543608][T31858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.564856][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.165283][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.173814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.643901][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3077.683491][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3078.723865][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3079.763389][ T3654] net_ratelimit: 2 callbacks suppressed [ 3079.763413][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3080.803890][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.283746][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.292825][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.302557][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.928063][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.928799][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.936417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.942568][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.327019][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3083.363589][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3084.403466][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3085.443623][ T3654] net_ratelimit: 2 callbacks suppressed [ 3085.443645][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3086.484219][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.047334][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.056587][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.067586][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.685459][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.693886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3088.084232][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3089.123987][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3089.523676][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3091.203426][ T2633] net_ratelimit: 2 callbacks suppressed [ 3091.203449][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.256048][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.804093][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.816185][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.829049][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3093.449292][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3093.457718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3093.843854][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3094.723528][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3094.743552][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3096.963647][ T3654] net_ratelimit: 6 callbacks suppressed [ 3096.963669][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.003971][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.564348][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.583881][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.592686][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.204252][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.212610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.603519][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3100.643603][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3101.124213][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3102.723336][ T2633] net_ratelimit: 2 callbacks suppressed [ 3102.723357][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3103.763491][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3104.323740][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3104.332109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3104.803658][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.843608][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3106.883950][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3106.892101][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3106.900520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.923518][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3108.963545][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3110.006269][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3110.084220][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3110.092583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3111.043403][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3112.003955][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3112.012329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3112.085096][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3113.123470][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3113.923467][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3114.163519][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.205896][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.845191][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.853633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3116.243539][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3117.283521][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3117.767683][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3117.776222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3118.323479][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3119.363375][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3120.403581][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.443759][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.604377][T30749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.612742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3122.483544][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3123.523440][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3123.532144][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3123.540546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3124.563484][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3125.603465][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3126.643516][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.364154][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.372521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.683496][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3128.723536][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3129.283873][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3129.292254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3129.763509][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3130.803631][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3131.848272][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3132.883779][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.125332][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.135012][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.143391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.923972][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3134.963821][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3135.046503][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3135.055012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3136.003630][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3137.043596][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3138.084164][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3138.883842][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3138.892196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3139.124777][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.163481][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.171650][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.180170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3141.204932][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3142.243643][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3143.283630][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3143.365593][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.372016][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.323537][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3144.644004][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3144.652373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3145.363568][ T2633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3145.924626][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3145.933015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3146.403571][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3147.443497][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3148.484967][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3149.523566][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3149.769075][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3149.777562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3150.563313][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3151.604585][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3151.683795][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3151.692149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3152.323772][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3152.643514][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3153.683928][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3154.723412][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.532233][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.540688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.764847][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3156.803650][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.843522][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3158.884714][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3159.923500][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3160.963957][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.286523][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.295072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.003592][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3163.043610][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.083490][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.123481][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.763821][T15461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.772191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3166.163536][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.044271][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.052640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.203374][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3168.243630][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3169.283329][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.323542][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.363357][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.524017][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.532667][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.541122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3172.163958][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3172.172333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3172.403530][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3173.444215][T26693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.093896][T12677] ------------[ cut here ]------------ [ 3174.099430][T12677] time_after(jiffies, warn_timeout) [ 3174.099446][T12677] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x736/0xaa0, CPU#0: syz.4.12263/12677 [ 3174.115054][T12677] Modules linked in: [ 3174.119004][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.4.12263 Tainted: G L syzkaller #0 PREEMPT(full) [ 3174.130264][T12677] Tainted: [L]=SOFTLOCKUP [ 3174.134638][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3174.145588][T12677] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 3174.152059][T12677] Code: 78 22 e8 cd f4 f8 fc 4c 89 e7 4c 89 fe e8 b2 fe 03 07 48 85 c0 75 18 e8 b8 f4 f8 fc 80 3c 2b 00 75 bb eb c5 e8 ab f4 f8 fc 90 <0f> 0b 90 eb d8 e8 a0 f4 f8 fc 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 3174.171864][T12677] RSP: 0018:ffffc900038ef838 EFLAGS: 00010293 [ 3174.178052][T12677] RAX: ffffffff84ce0cd5 RBX: 1ffffffff1d01e50 RCX: ffff8880331c5d00 [ 3174.186252][T12677] RDX: 0000000000000000 RSI: ffffffffffffe897 RDI: 0000000000000000 [ 3174.194417][T12677] RBP: dffffc0000000000 R08: ffffffff90578d37 R09: 1ffffffff20af1a6 [ 3174.202414][T12677] R10: dffffc0000000000 R11: fffffbfff20af1a7 R12: ffff8880226b4018 [ 3174.210640][T12677] R13: 0000000100044a98 R14: 0000000100046201 R15: 0000000000001b58 [ 3174.218705][T12677] FS: 00007fcf971f96c0(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 3174.227774][T12677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3174.234446][T12677] CR2: 0000200001000000 CR3: 0000000079cbc000 CR4: 00000000003526f0 [ 3174.243331][T12677] Call Trace: [ 3174.247365][T12677] [ 3174.250330][T12677] ? io_wq_put_and_exit+0x15a/0xaa0 [ 3174.255663][T12677] io_uring_clean_tctx+0x12e/0x1b0 [ 3174.260809][T12677] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 3174.266558][T12677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3174.272413][T12677] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 3174.278151][T12677] io_uring_cancel_generic+0x6c0/0x7d0 [ 3174.283710][T12677] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 3174.289730][T12677] ? __fput_deferred+0x216/0x380 [ 3174.294778][T12677] ? __pfx___fput_deferred+0x10/0x10 [ 3174.300100][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 3174.305201][T12677] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3174.311302][T12677] ? io_uring_unreg_ringfd+0x531/0x540 [ 3174.316900][T12677] do_exit+0x39f/0x2360 [ 3174.321094][T12677] ? cgroup1_freezing+0x20/0x350 [ 3174.326437][T12677] ? __pfx_do_exit+0x10/0x10 [ 3174.331103][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 3174.336223][T12677] do_group_exit+0x22d/0x2f0 [ 3174.341686][T12677] ? _raw_spin_unlock_irq+0x23/0x50 [ 3174.347601][T12677] get_signal+0x121b/0x12c0 [ 3174.352220][T12677] arch_do_signal_or_restart+0xbb/0x860 [ 3174.357892][T12677] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3174.364145][T12677] exit_to_user_mode_loop+0x104/0x730 [ 3174.369548][T12677] ? rcu_is_watching+0x15/0xb0 [ 3174.374398][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3174.380493][T12677] do_syscall_64+0x353/0x580 [ 3174.385172][T12677] ? clear_bhb_loop+0x40/0x90 [ 3174.389880][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3174.395870][T12677] RIP: 0033:0x7fcf9639de99 [ 3174.400333][T12677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3174.420229][T12677] RSP: 002b:00007fcf971f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3174.428868][T12677] RAX: fffffffffffffe00 RBX: 00007fcf96626188 RCX: 00007fcf9639de99 [ 3174.436899][T12677] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf96626188 [ 3174.445752][T12677] RBP: 00007fcf96626180 R08: 0000000000000000 R09: 0000000000000000 [ 3174.454412][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.462416][T12677] R13: 00007fcf96626218 R14: 00007fcf9674f960 R15: 00007fcf9674fa48 [ 3174.470498][T12677] [ 3174.473611][T12677] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3174.480913][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.4.12263 Tainted: G L syzkaller #0 PREEMPT(full) [ 3174.491966][T12677] Tainted: [L]=SOFTLOCKUP [ 3174.496298][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3174.506358][T12677] Call Trace: [ 3174.509639][T12677] [ 3174.512572][T12677] vpanic+0x56c/0xa60 [ 3174.516570][T12677] ? __pfx__printk+0x10/0x10 [ 3174.521164][T12677] ? __pfx_vpanic+0x10/0x10 [ 3174.525674][T12677] ? is_bpf_text_address+0x292/0x2b0 [ 3174.530969][T12677] ? is_bpf_text_address+0x26/0x2b0 [ 3174.536181][T12677] panic+0xc5/0xd0 [ 3174.539911][T12677] ? __pfx_panic+0x10/0x10 [ 3174.544348][T12677] __warn+0x315/0x4c0 [ 3174.548337][T12677] ? io_wq_put_and_exit+0x736/0xaa0 [ 3174.553555][T12677] ? io_wq_put_and_exit+0x736/0xaa0 [ 3174.558757][T12677] __report_bug+0x276/0x570 [ 3174.563339][T12677] ? io_wq_put_and_exit+0x736/0xaa0 [ 3174.568543][T12677] ? __pfx___report_bug+0x10/0x10 [ 3174.573570][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 3174.578609][T12677] ? _raw_spin_unlock_irq+0x23/0x50 [ 3174.583822][T12677] ? lockdep_hardirqs_on+0x7a/0x110 [ 3174.589024][T12677] ? io_wq_put_and_exit+0x736/0xaa0 [ 3174.594224][T12677] report_bug+0x16a/0x220 [ 3174.598558][T12677] ? io_wq_put_and_exit+0x736/0xaa0 [ 3174.603755][T12677] ? io_wq_put_and_exit+0x738/0xaa0 [ 3174.608952][T12677] handle_bug+0x9c/0x200 [ 3174.613199][T12677] exc_invalid_op+0x1a/0x50 [ 3174.617710][T12677] asm_exc_invalid_op+0x1a/0x20 [ 3174.622559][T12677] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 3174.628370][T12677] Code: 78 22 e8 cd f4 f8 fc 4c 89 e7 4c 89 fe e8 b2 fe 03 07 48 85 c0 75 18 e8 b8 f4 f8 fc 80 3c 2b 00 75 bb eb c5 e8 ab f4 f8 fc 90 <0f> 0b 90 eb d8 e8 a0 f4 f8 fc 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 3174.647985][T12677] RSP: 0018:ffffc900038ef838 EFLAGS: 00010293 [ 3174.654073][T12677] RAX: ffffffff84ce0cd5 RBX: 1ffffffff1d01e50 RCX: ffff8880331c5d00 [ 3174.662047][T12677] RDX: 0000000000000000 RSI: ffffffffffffe897 RDI: 0000000000000000 [ 3174.670018][T12677] RBP: dffffc0000000000 R08: ffffffff90578d37 R09: 1ffffffff20af1a6 [ 3174.677991][T12677] R10: dffffc0000000000 R11: fffffbfff20af1a7 R12: ffff8880226b4018 [ 3174.685964][T12677] R13: 0000000100044a98 R14: 0000000100046201 R15: 0000000000001b58 [ 3174.693942][T12677] ? io_wq_put_and_exit+0x735/0xaa0 [ 3174.699148][T12677] ? io_wq_put_and_exit+0x735/0xaa0 [ 3174.704349][T12677] ? io_wq_put_and_exit+0x15a/0xaa0 [ 3174.709552][T12677] io_uring_clean_tctx+0x12e/0x1b0 [ 3174.714668][T12677] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 3174.720304][T12677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3174.726128][T12677] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 3174.731770][T12677] io_uring_cancel_generic+0x6c0/0x7d0 [ 3174.737242][T12677] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 3174.743223][T12677] ? __fput_deferred+0x216/0x380 [ 3174.748166][T12677] ? __pfx___fput_deferred+0x10/0x10 [ 3174.753459][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 3174.758504][T12677] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3174.764580][T12677] ? io_uring_unreg_ringfd+0x531/0x540 [ 3174.770051][T12677] do_exit+0x39f/0x2360 [ 3174.774219][T12677] ? cgroup1_freezing+0x20/0x350 [ 3174.779159][T12677] ? __pfx_do_exit+0x10/0x10 [ 3174.783763][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 3174.788802][T12677] do_group_exit+0x22d/0x2f0 [ 3174.793396][T12677] ? _raw_spin_unlock_irq+0x23/0x50 [ 3174.798605][T12677] get_signal+0x121b/0x12c0 [ 3174.803132][T12677] arch_do_signal_or_restart+0xbb/0x860 [ 3174.808688][T12677] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3174.814865][T12677] exit_to_user_mode_loop+0x104/0x730 [ 3174.820242][T12677] ? rcu_is_watching+0x15/0xb0 [ 3174.825007][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3174.831079][T12677] do_syscall_64+0x353/0x580 [ 3174.835673][T12677] ? clear_bhb_loop+0x40/0x90 [ 3174.840355][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3174.846253][T12677] RIP: 0033:0x7fcf9639de99 [ 3174.850671][T12677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3174.870280][T12677] RSP: 002b:00007fcf971f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3174.878700][T12677] RAX: fffffffffffffe00 RBX: 00007fcf96626188 RCX: 00007fcf9639de99 [ 3174.886674][T12677] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf96626188 [ 3174.894648][T12677] RBP: 00007fcf96626180 R08: 0000000000000000 R09: 0000000000000000 [ 3174.902619][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.910594][T12677] R13: 00007fcf96626218 R14: 00007fcf9674f960 R15: 00007fcf9674fa48 [ 3174.918580][T12677] [ 3174.921864][T12677] Kernel Offset: disabled [ 3174.926181][T12677] Rebooting in 86400 seconds..