last executing test programs: 11.950569364s ago: executing program 4 (id=1319): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xe3900, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000340)="0f20d86635200000000f22d8baf80c66b804be948d66efbafc0cb80c00ef0f0f980100972e650f01a00010660fec0066b8008000000f23c80f21f866350c00d0000f23f866b9800000c00f326635010000000f30baf80c66b801a9368c66efbafc0cecf0f69c50f5f30f1efc", 0x6c}], 0x1, 0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x3f}, '.\x00'}) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000000)=""/120, 0x78, 0x2f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000200)={0xfffffffd, 0x778, {0x0}, {0xee00}, 0xc, 0x8}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0xa1}, 0x18) 10.213553754s ago: executing program 4 (id=1324): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], &(0x7f0000000500)='syzkaller\x00', 0xcd, 0x76, &(0x7f0000000540)=""/118, 0x41000, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0xb89, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000880)={r4, &(0x7f0000000780)='ipvlan\x00', 0x10000, &(0x7f00000007c0)={@align=0x2a, {0x1, 0x7, 0xb410, 0xfffffffffffffffc}}, 0x50, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x229f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r9, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x280, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 9.91356851s ago: executing program 0 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000ffff00005d000000010000ff0f000000", @ANYRES32=r0, @ANYBLOB='\f\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000140)='pvfs2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0xd8a5, 0x5, 0x6, 0x2}, {0x7, 0x0, 0x40, 0x3}, {0x2, 0x7, 0x16, 0x100}, {0x3, 0x4, 0x4, 0x3ff}, {0x69c, 0xa, 0x7, 0xb}, {0x3, 0x7, 0x1, 0xfff}, {0xce7a, 0x1, 0xf, 0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90) 9.294374444s ago: executing program 3 (id=1327): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) 8.743169809s ago: executing program 4 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getflags(r1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10000, &(0x7f0000002140)=ANY=[]) read$FUSE(r5, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000440007012bbd7000fddbdf25037c00001804000000000100fc00"/44], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f000011c000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001700010000007002fadbdf250a"], 0x14}}, 0x0) 8.389523977s ago: executing program 2 (id=1330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10001, 0x0, 0x111d7fff, 0x2000, &(0x7f0000ec2000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x21f}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) shmat(0x0, 0x0, 0x4000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x8, 0xb85, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x1, 0x200, 0x2440}}) sendto$packet(r2, &(0x7f0000000580)="6556dbd3147589eb8058b37dd99b0d56924a467f2b78bdcbf65020401422dc2004ed490c754de0f4d07d5fc8c4605c40a9c4d79a5956530d320bac429047dac59ee3ad48f914566322359546b51cd3034e01840a6237b5d839a5006bc68592565204afe5bbfe47e0772b5cd11ac36ea3a5e361d1d3ae3d434617b57fd4cd17489ece49f65df444baefc131032174b36ea568ce57f08ed146ee3402941a2d2d095a", 0xa1, 0x48890, &(0x7f0000000740)={0x11, 0x1, r6, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r5, 0x20, &(0x7f0000000500)={&(0x7f0000000300)=""/237, 0xed, 0x0, &(0x7f0000000400)=""/233, 0xe9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.181260416s ago: executing program 3 (id=1331): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) openat$kvm(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28048005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) msgsnd(0x0, &(0x7f0000000080)={0x0, "df5284eedfe0f36db1de469c5a32401a1744f0b9ce91bfad87f9dac4"}, 0x24, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="455d4ed3b77ccbab2da4a91cb807c66238eab08848e86f343ec6b0dc0029d011d12cb3c5990bc9ad2fe87612612f99d482ae50aa7e03839f01b1cfe0c2a549ede251dc3c3ab239c37e0d157820504735205d708f2a2c567a5b2087f4853b57607374efd0f1df0c9b63298a8a976c43e2307986a7a6d8441ff8c2c8dfdfe2600737c96194d1d01fc7f8dd96c3b62784c8aa885b2f2a736c581116c87996cdc714f3ffcb", 0xa3}], 0x2, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x60}}], 0x2, 0x8810) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @loopback}, r2, 0x40099d}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r6, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, 0x0, 0x0) syz_usb_disconnect(r0) 7.664319025s ago: executing program 1 (id=1332): creat(&(0x7f0000000040)='./file0\x00', 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3e) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = dup3(r1, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, 0x0) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0xcb2d, 0x2, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) r6 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) r7 = socket$inet(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f0000001240)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x114) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000bc0)='\x00', 0x1, 0x1000000000003}]) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ptrace$setopts(0x4206, 0x0, 0x10001, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}}) 7.199093136s ago: executing program 1 (id=1333): mkdir(&(0x7f0000000140)='./control\x00', 0x111) r0 = inotify_init1(0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r1}) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x9, 0xa, 0x0, 0x0, 0x4f}, {0x6, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000780)=0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) stat(&(0x7f0000000340)='./control\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000280)='./control\x00', 0x90020, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x0, 0x0, &(0x7f00000006c0)="34f0600dce434ed770b682b6ee208cbc48644516c1110c1bd860c61c7d152e482cbb8566c1daa84e6eaabd1872f9ff0d2be87b1a29943b129a8ede046189e7c09ae0ed756aa132a61d8ff9afcb272954521d1fec4d967f8b0d84a8045f6f5267a1") r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 7.117199231s ago: executing program 2 (id=1334): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xe3900, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000340)="0f20d86635200000000f22d8baf80c66b804be948d66efbafc0cb80c00ef0f0f980100972e650f01a00010660fec0066b8008000000f23c80f21f866350c00d0000f23f866b9800000c00f326635010000000f30baf80c66b801a9368c66efbafc0cecf0f69c50f5f30f1efc", 0x6c}], 0x1, 0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x3f}, '.\x00'}) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000000)=""/120, 0x78, 0x2f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000200)={0xfffffffd, 0x778, {0x0}, {0xee00}, 0xc, 0x8}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0xa1}, 0x18) 7.099529234s ago: executing program 3 (id=1335): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd9) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000000)=0x255374afca783ed0) 6.947143161s ago: executing program 1 (id=1336): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="c72cab3d189370e24543d3120100feffffffffffffff00083a0000b17e03114756fd660000000904"], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[@ANYBLOB="40178200000001ba43a265dec06959bff45b82c72984fe26544a6052482ac6c85d079206b5877f91c73b58f0f9b97314b251fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000013c0)={0x2c, &(0x7f0000001180)={0x40, 0x2, 0x76, {0x76, 0x6, "39ccfd2831254e756462990c935f08161cecb9a7719de99b9f99a4b2a5abb4b65d893c5aafb37be7535f5d47a68d9b4fa1f44d421528cc013b81b98d7a26ae22e76d0429afed9b0e9f685b944ebe65164bac54db10509fc5d9d0a0aafb331f7ef4534355bcbb93b100c2486363d625a07c297a05"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x186d}}, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7a, 0x3, 0x7, 0xe, 0xcf, 0x0, 0xa0}}}, &(0x7f0000001800)={0x84, 0x0, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001500)={0x20, 0x0, 0x8, {0x40, 0x4, [0xf0f]}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0xa}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "0090"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001640)={0x40, 0x13, 0x6, @local}, &(0x7f0000001680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000016c0)={0x40, 0x19, 0x2, "1ee9"}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0x6f}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0xf9}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000280)={0x0, 0x22, 0x79, {0x79, 0x22, "0afc38f69e9a4c9464ffe1c6ec1c88eb24bb8eba010bf32677917687f685a33f5a9c3140a154d351e8cbda52403acd10e7a73debd3d9a2718dd6c1e1f2e62f0616cf3baf433374b476121d852865fdb0c3fc22ee5a9adf4d41cfe8d29636395f743eece8521a246c9e5750a67c4af74fdb7964d89e5dcc"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0xb893ad7f863c3d83}}, &(0x7f0000000b00), &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa91e, 0x2a, 0x1, {0x22, 0xda3}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x11, 0xbe, "1f1f45ef418ac53618fd86a4750b26da7cb926dbcd7e7a9ef3ef9b56a00082e876e5d9776136bc4b12784c09edb922fad4f9cb198ed4c8ba74b46dfc99caa951bd4a0a78d2ea07fa407e5c9b5ecd43d24ffc13d7bacb9cd7f69be0f96492c89a9851548fc05db0678d78ab8c1364af6051bf5c1b77c6355fae93402868b8b8b1da6b785f70ed3d10f4aa150a26e5b8a37caaf1985c0d8c34fa3da45c3e2f18e01b08120e751f526c7f1f7326e00197c44edd4d2378a55819439be4b1dabd"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000bc0)={0x20, 0x1, 0x39, "7b7790ea5abefd4a81002cf143871f2a3a1fe02864b7501afd750355dca8d518a531c85960d8690b2c069f0248890ef5fe6b0634d515c7cb66"}, &(0x7f0000000ac0)={0x20, 0x3, 0xd, 0x1}}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r3}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) socket(0x10, 0x803, 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @multicast1}}, 0x14, 0x2, 0xffff, 0x7, 0x0, 0x17e3}, 0x9c) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000001c0)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000080)=@multiplanar_overlay={0xffffff85, 0x1, 0x4, 0x10, 0x42, {}, {0x4, 0x8, 0xbe, 0x5, 0x9, 0x6, "b5430185"}, 0x6, 0x3, {0x0}, 0x1}) r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xff84, 0x0, 0x53}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x10001, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'caif0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x6, 0x1, 0x3, 0x3, 0x4}) 6.794048183s ago: executing program 0 (id=1337): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) pivot_root(0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) gettid() socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=ANY=[@ANYBLOB="30340800080211000001ffffffffffff505050"], 0x3a) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) rmdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) 6.693753669s ago: executing program 4 (id=1338): syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0xfffffffffffffffd, 0x1d4d953e, 0x1, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="8b", 0x1}], 0x1}}], 0x2, 0x50) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000a80)={0x0, 0x1}, &(0x7f0000000ac0)=0x8) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) r8 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 5.441984634s ago: executing program 2 (id=1339): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$kcm(0x11, 0x0, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf25027c00000c002d1ba784a2804be78992"], 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0xc000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0xa8, 0x25, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0xc, 0x7}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x0, 0x6, 0x1, 0x110, 0x1, 0x8}}, {0x14, 0x2, [0xfffe, 0x9, 0x0, 0xfe3, 0x2, 0x0, 0x3, 0x8]}}, {{0x1c, 0x1, {0x3, 0xc4, 0x3, 0x5, 0x1, 0x2, 0xffff, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x1ff, 0x101, 0x2, 0x2, 0x1, 0x6]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'nicvf0\x00', @remote}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001114230927bd702a9f5a6557bd87b1156ad0a61a0764571c75cfc94b19a7501a9489ff383dbee481e8eba22b5b99bbc46de4a35bfdc4152433c3525cb8504dc80e744625feb72c07067ef907fa2fe9e3785078a6fbaa66e1a261c84bf73943e2a84d476de779"], 0x10}, 0x1, 0x0, 0x0, 0x400e0c5}, 0x40084) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r12, 0x40a0ae49, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x10, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x0) 5.195209974s ago: executing program 3 (id=1340): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x60cd894) unshare(0x40200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) r4 = semget(0x1, 0x4, 0x39c) semop(r4, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) 4.77226709s ago: executing program 1 (id=1341): unshare(0x60000000) r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x2, @broadcast}, 0x10) io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 4.26455925s ago: executing program 0 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) r2 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_EPOLL_WAIT={0x3b, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000008c0)={0x0, 0x200}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r8, 0x1000) r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r10, 0x8000004, 0x1) getdents64(r10, 0x0, 0x0) fsync(r10) r11 = signalfd(r0, &(0x7f00000002c0)={[0xc80]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, 0x0, 0x4000880) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000200)={0x71c, 0x2fd, 0x1, 'queue1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x18}}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000001c0)={'syzkaller1\x00', @remote}) 3.597120559s ago: executing program 2 (id=1343): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = epoll_create1(0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec779000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0028010}) futex(&(0x7f000000cffc), 0xc, 0x2, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) 3.543277922s ago: executing program 4 (id=1344): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 3.371861202s ago: executing program 3 (id=1345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) listen(r0, 0x37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="d3000000410000e40600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x1, 0x8ff, 0x0, 0x8, 0x2}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c"], 0x60}}, 0x200040c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0xeed4, 0x80000, 0x6, 0x7}, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000280)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, 0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000140)={'ipvlan1\x00'}) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="200027ff030000dbdf250d00000008"], 0x1c}, 0x1, 0x0, 0x0, 0x40865}, 0x10000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x12, 0x0) 3.173317129s ago: executing program 0 (id=1346): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x3, 0x9, 0x1, 0x0, 0x9, 0x8, 0x9, 0x5, 0x6, 0x12, 0x81, 0xff, 0x0, 0x10001, 0x3ff, 0xfe, 0x7, 0x0, 0x1c, '\x00', 0x0, 0x7fff}) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a0000000002000023000800000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, r4, 0x0) 3.09176542s ago: executing program 1 (id=1347): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0xc, 0x2, 0x86cb}, 0x30, 0x1) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r7, 0xc4fc9e906872338b, 0xfffffffd, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0xd}, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x73, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@local, 0x8}, {@loopback, 0x5}, {@local, 0x8}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000440)={0x11, {{0x29, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}}}, 0x88) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x400000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x804) 2.67198187s ago: executing program 2 (id=1348): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, 0x0, 0x2000007ff) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) 1.802737056s ago: executing program 0 (id=1349): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000500)='syzkaller\x00', 0xcd, 0x76, &(0x7f0000000540)=""/118, 0x41000, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0xb89, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000003c0)=[{0x4, 0xa, 0xc, 0x2}, {0x3, 0x4, 0x3, 0xe}, {0x1, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xd, 0x6}, {0x5, 0x4, 0x40000d, 0x9}, {0x2, 0x4, 0xd, 0x8}, {0x1, 0x4, 0x4}, {0x2, 0x3, 0x4, 0x8}, {0x0, 0x3, 0x8}], 0x10, 0x2}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000880)={r4, &(0x7f0000000780)='ipvlan\x00', 0x10000, &(0x7f00000007c0)={@align=0x2a, {0x1, 0x7, 0xb410, 0xfffffffffffffffc}}, 0x50, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x229f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000004a0001002dbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0f0000001400010000000002000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r8, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 1.60549476s ago: executing program 1 (id=1350): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0xfff, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0xff}) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fanotify_mark(r4, 0x200, 0x40000867, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000280), 0x8) syz_usb_connect$cdc_ecm(0x5, 0x67, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020002083c05a1a440000102030109025501010181d001090400800202060002000000000000000006000d240f0104000000010003007205241300e01524120700a317a88b045e4f01a607c0ffcb7e392a0905820200027f03ff090503020800030d0ce86e07e61e2358d7fd9089b238c1e8ba80da16f8925e0466723dccc45ed5dba243055a5cd117183ecf343115c85a21ab3cad2b28"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 1.23610318s ago: executing program 2 (id=1351): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="c72cab3d189370e24543d3120100feffffffffffffff00083a0000b17e03114756fd660000000904"], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[@ANYBLOB="40178200000001ba43a265dec06959bff45b82c72984fe26544a6052482ac6c85d079206b5877f91c73b58f0f9b97314b251fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000013c0)={0x2c, &(0x7f0000001180)={0x40, 0x2, 0x76, {0x76, 0x6, "39ccfd2831254e756462990c935f08161cecb9a7719de99b9f99a4b2a5abb4b65d893c5aafb37be7535f5d47a68d9b4fa1f44d421528cc013b81b98d7a26ae22e76d0429afed9b0e9f685b944ebe65164bac54db10509fc5d9d0a0aafb331f7ef4534355bcbb93b100c2486363d625a07c297a05"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x186d}}, &(0x7f00000012c0)=ANY=[@ANYBLOB="000f4a000000050f4a000614100a0da20000000fff02000000002835ffb352678e540f2000"], 0x0, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7a, 0x3, 0x7, 0xe, 0xcf, 0x0, 0xa0}}}, &(0x7f0000001800)={0x84, 0x0, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001500)={0x20, 0x0, 0x8, {0x40, 0x4, [0xf0f]}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0xa}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "0090"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001640)={0x40, 0x13, 0x6, @local}, &(0x7f0000001680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000016c0)={0x40, 0x19, 0x2, "1ee9"}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0x6f}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0xf9}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000280)={0x0, 0x22, 0x79, {0x79, 0x22, "0afc38f69e9a4c9464ffe1c6ec1c88eb24bb8eba010bf32677917687f685a33f5a9c3140a154d351e8cbda52403acd10e7a73debd3d9a2718dd6c1e1f2e62f0616cf3baf433374b476121d852865fdb0c3fc22ee5a9adf4d41cfe8d29636395f743eece8521a246c9e5750a67c4af74fdb7964d89e5dcc"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0xb893ad7f863c3d83}}, &(0x7f0000000b00), &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa91e, 0x2a, 0x1, {0x22, 0xda3}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x11, 0xbe, "1f1f45ef418ac53618fd86a4750b26da7cb926dbcd7e7a9ef3ef9b56a00082e876e5d9776136bc4b12784c09edb922fad4f9cb198ed4c8ba74b46dfc99caa951bd4a0a78d2ea07fa407e5c9b5ecd43d24ffc13d7bacb9cd7f69be0f96492c89a9851548fc05db0678d78ab8c1364af6051bf5c1b77c6355fae93402868b8b8b1da6b785f70ed3d10f4aa150a26e5b8a37caaf1985c0d8c34fa3da45c3e2f18e01b08120e751f526c7f1f7326e00197c44edd4d2378a55819439be4b1dabd"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000bc0)={0x20, 0x1, 0x39, "7b7790ea5abefd4a81002cf143871f2a3a1fe02864b7501afd750355dca8d518a531c85960d8690b2c069f0248890ef5fe6b0634d515c7cb66"}, &(0x7f0000000ac0)={0x20, 0x3, 0xd, 0x1}}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r3}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) socket(0x10, 0x803, 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @multicast1}}, 0x14, 0x2, 0xffff, 0x7, 0x0, 0x17e3}, 0x9c) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000001c0)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000080)=@multiplanar_overlay={0xffffff85, 0x1, 0x4, 0x10, 0x42, {}, {0x4, 0x8, 0xbe, 0x5, 0x9, 0x6, "b5430185"}, 0x6, 0x3, {0x0}, 0x1}) r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xff84, 0x0, 0x53}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x10001, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'caif0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x6, 0x1, 0x3, 0x3, 0x4}) 404.612481ms ago: executing program 4 (id=1352): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='mountproto\x00', &(0x7f0000000180)='udp\xae\xce\xff\xff\x00\x00\x00\x00\x00\x00K\xa8', 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x40884) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, 0x0) r6 = socket$inet6_sctp(0xa, 0xe, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r8, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000004c0)={r8, 0x10}, &(0x7f0000000540)=0x8) r9 = signalfd(r3, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r9, 0x80503d01, &(0x7f0000000200)) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r11, 0x319709907201cb24, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {&(0x7f0000000780)="6144c338abfb60e94f608498bd0e32960c945aed3bc143d3f34fdbc3a3105cce44aa66696ef36edf4b8c25d7b3c8c3043d7f8028d026744b475b8bdd6abc194e74e30f789f6aa9fb3f91c2834187309b03813bd071b84dc58d6fb09360a845326960d8415c09d1d96109006569d7f5a557e906c41bb3910b63", 0x79}], 0x2, 0x0, 0x0, 0x2663}, 0x50000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 183.846398ms ago: executing program 3 (id=1353): r0 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000240)='\\\xf3p\x19\xaa^', 0x2000, &(0x7f0000000280)={@align=0x9, {0x2, 0xf4, 0x3, 0xf0f5}}, 0xac14, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000600)=0x3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES32], 0x40}}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x42804}, 0x84) keyctl$set_reqkey_keyring(0xe, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x9, 0x20000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00e5ff06000000040000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r5}, 0x20) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=1354): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_NAME(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6, 0xe}]}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x20080000) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={0x0}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) rt_sigprocmask(0x1, &(0x7f0000000080)={[0x3]}, &(0x7f0000000200), 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x1, 0x9], [0x6, 0x7, 0x1, 0x9, 0x8000, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x800005, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x7, 0x931, 0x101, 0x3, 0x8001, 0x8000020000000000, 0x7, 0x1, 0x8000000000000000, 0x1, 0x4, 0x8, 0x1, 0x83, 0x538a, 0x6, 0xfffffffffffffffa, 0x0, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x1, 0x7, 0x8, 0x9, 0x82b, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x200000000c, 0x8, 0x0, 0x6, 0xfffffffffffffff8, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0x7bcd, 0x0, 0x0, 0x100000005, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x80000001, 0x40, 0x7fffffff, 0x7, 0xf9, 0x9]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) signalfd4(r5, &(0x7f0000000400), 0x8, 0x80800) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000440)={0x13, &(0x7f0000000480)=[{0x29, '\x00', @data=0xfffffffa, 0x1}, {0x9, '\x00', @data=0x5}]}) io_uring_setup(0x654e, &(0x7f0000000200)={0x0, 0xca4a, 0x4, 0x3, 0x6, 0x0, r5}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) close(r6) connect$can_bcm(r0, &(0x7f0000000140), 0x10) kernel console output (not intermixed with test programs): T42] usb 2-1: SerialNumber: syz [ 367.127917][ T42] usb 2-1: config 0 descriptor?? [ 367.383175][ T42] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 367.457176][ T42] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.481232][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 367.503184][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.511664][ T42] usb 2-1: media controller created [ 367.514530][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.530469][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.663363][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.664153][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.918921][ T9568] syzkaller0: entered promiscuous mode [ 367.933081][ T9568] syzkaller0: entered allmulticast mode [ 368.307667][ T9575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.318878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.496235][ T9578] syzkaller0: entered promiscuous mode [ 368.503268][ T9578] syzkaller0: entered allmulticast mode [ 368.723534][ T42] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 368.821939][ T9580] syzkaller0: entered promiscuous mode [ 368.841464][ T9580] syzkaller0: entered allmulticast mode [ 368.865735][ T42] usb 2-1: USB disconnect, device number 54 [ 369.189559][ T9588] netlink: 'syz.4.1040': attribute type 13 has an invalid length. [ 369.576986][ T9598] KVM: debugfs: duplicate directory 9598-4 [ 370.029052][ T9600] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 370.153048][ T5675] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 370.263558][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 370.323708][ T5675] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 370.360815][ T5675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.401224][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.450988][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.505760][ T5675] usb 2-1: config 0 descriptor?? [ 370.516249][ T5675] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 370.526168][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.552292][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.748251][ T5675] usb 2-1: USB disconnect, device number 55 [ 371.174874][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.190477][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.236231][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.310066][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.623006][ T5675] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 371.663555][ T42] net_ratelimit: 31 callbacks suppressed [ 371.663574][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.785477][ T5675] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 371.808805][ T5675] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 371.823517][ T5675] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 371.849536][ T5675] usb 2-1: config 0 has no interface number 0 [ 371.870940][ T5675] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.928574][ T5675] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.975029][ T5675] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 372.031575][ T5675] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 372.045725][ T5675] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 372.055974][ T5675] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 372.069402][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.080828][ T5675] usb 2-1: config 0 descriptor?? [ 372.087455][ T9628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.095804][ T9628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.135308][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.157323][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.369167][ T5675] usb 2-1: string descriptor 0 read error: -71 [ 372.395959][ T5675] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 372.417600][ T5675] earthmate ttyUSB0: required endpoint is missing [ 372.446077][ T5675] usb 2-1: USB disconnect, device number 56 [ 372.471486][ T5675] cypress_m8 2-1:0.244: device disconnected [ 372.709014][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.717208][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.783278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.792191][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.110525][ T9650] tipc: Started in network mode [ 373.137897][ T9650] tipc: Node identity 4aca6fddee69, cluster identity 4711 [ 373.159731][ T9650] tipc: Enabled bearer , priority 0 [ 373.211179][ T9652] syzkaller0: entered promiscuous mode [ 373.242107][ T9652] syzkaller0: entered allmulticast mode [ 373.314647][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.346205][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.399882][ T9655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.415749][ T9650] tipc: Resetting bearer [ 373.434283][ T9655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.455818][ T9649] tipc: Resetting bearer [ 373.473069][ T42] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 373.519354][ T9655] fuse: Invalid rootmode [ 373.535801][ T9649] tipc: Disabling bearer [ 373.743192][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.883281][ T5683] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 374.053004][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 374.061600][ T5683] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 374.078771][ T5683] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 374.099957][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 374.125360][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 374.140084][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.144193][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.170626][ T42] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 374.200049][ T42] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 374.202199][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.241050][ T42] usb 2-1: can't read configurations, error -71 [ 374.249933][ T5683] usb 1-1: Product: syz [ 374.254894][ T5683] usb 1-1: Manufacturer: syz [ 374.260380][ T5683] usb 1-1: SerialNumber: syz [ 374.275448][ T5683] usb 1-1: config 0 descriptor?? [ 374.371302][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.387996][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.390748][ T9671] autofs4:pid:9671:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 374.795617][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1065'. [ 374.815447][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1065'. [ 374.911272][ T9678] syzkaller0: entered promiscuous mode [ 374.926799][ T9678] syzkaller0: entered allmulticast mode [ 375.707012][ T29] audit: type=1326 audit(1786378833.844:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 375.777359][ T29] audit: type=1326 audit(1786378833.844:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 375.840920][ T29] audit: type=1326 audit(1786378833.904:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 375.921598][ T29] audit: type=1326 audit(1786378833.904:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.002782][ T29] audit: type=1326 audit(1786378833.904:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.096697][ T29] audit: type=1326 audit(1786378833.904:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.169055][ T29] audit: type=1326 audit(1786378833.904:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.243217][ T9700] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 376.260410][ T29] audit: type=1326 audit(1786378833.904:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.323022][ T29] audit: type=1326 audit(1786378833.904:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.359035][ T29] audit: type=1326 audit(1786378833.904:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.4.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 376.699119][ T5683] usb 1-1: USB disconnect, device number 46 [ 376.714626][ T5675] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 376.843865][ T13] net_ratelimit: 6 callbacks suppressed [ 376.843881][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.863822][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.874874][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.892999][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 376.909018][ T5675] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 376.950764][ T5675] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 376.966929][ T5675] usb 5-1: config 0 has no interface number 0 [ 377.008343][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.017028][ T5609] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 377.039252][ T5675] usb 5-1: Product: syz [ 377.062654][ T5675] usb 5-1: Manufacturer: syz [ 377.078025][ T5675] usb 5-1: SerialNumber: syz [ 377.112182][ T5675] usb 5-1: config 0 descriptor?? [ 377.133045][ T5683] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 377.194002][ T5609] usb 2-1: Using ep0 maxpacket: 16 [ 377.209905][ T5609] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.244443][ T5609] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.275871][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.308208][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.332936][ T5683] usb 1-1: Using ep0 maxpacket: 16 [ 377.360372][ T5683] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 377.367733][ T5609] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.387284][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.407474][ T5683] usb 1-1: Product: syz [ 377.414452][ T5609] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.416595][ T5683] usb 1-1: Manufacturer: syz [ 377.440720][ T9701] syz.2.1074 (9701): drop_caches: 2 [ 377.448057][ T5683] usb 1-1: SerialNumber: syz [ 377.467606][ T5683] usb 1-1: config 0 descriptor?? [ 377.479557][ T5609] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.500063][ T5609] usb 2-1: Manufacturer: syz [ 377.531853][ T5609] usb 2-1: config 0 descriptor?? [ 377.558536][ T5675] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 377.581239][ T5675] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 377.782573][ T9719] autofs4:pid:9719:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 377.893354][ T5683] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 377.903128][ T5609] rc_core: IR keymap rc-hauppauge not found [ 377.914701][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.915805][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.923253][ T5609] Registered IR keymap rc-empty [ 377.923716][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.956682][ T5683] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 377.965252][ T5683] usb 1-1: media controller created [ 377.965381][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.006747][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.017345][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.029251][ T5609] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 378.041338][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.061539][ T5609] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 378.089394][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.102787][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.113238][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.117904][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.145219][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.157617][ T5683] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 378.177548][ T5683] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 378.193098][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.213139][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.233489][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.283267][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.313146][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.354691][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.383363][ T5609] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 378.417841][ T9713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.437626][ T9] usb 1-1: USB disconnect, device number 47 [ 378.456719][ T5609] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 378.494414][ T5609] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 378.539751][ T5609] usb 2-1: USB disconnect, device number 59 [ 378.554699][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.555050][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.561409][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.570372][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.606019][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.702262][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 378.943237][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.343404][ T5609] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 379.412828][ T5675] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 379.434857][ T5675] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.454870][ T5675] usb 5-1: USB disconnect, device number 51 [ 379.504084][ T5609] usb 2-1: Using ep0 maxpacket: 16 [ 379.510243][ T5609] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 379.533029][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.544223][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.554511][ T5609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.567738][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.580538][ T5609] usb 2-1: config 0 descriptor?? [ 379.926725][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 379.992306][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 380.093647][ T5609] usbhid 2-1:0.0: can't add hid device: -71 [ 380.099742][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 380.131577][ T5609] usb 2-1: USB disconnect, device number 60 [ 380.276409][ T9723] syz.1.1081 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 380.312484][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.1.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.312504][ T9723] Tainted: [L]=SOFTLOCKUP [ 380.312507][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.312521][ T9723] Call Trace: [ 380.312596][ T9723] [ 380.312657][ T9723] dump_stack_lvl+0xe8/0x150 [ 380.312789][ T9723] dump_header+0xd3/0x4b0 [ 380.312810][ T9723] oom_kill_process+0x3ab/0x970 [ 380.312837][ T9723] out_of_memory+0x1064/0x1480 [ 380.312845][ T9723] ? try_charge_memcg+0xbca/0x1590 [ 380.312898][ T9723] ? __pfx_out_of_memory+0x10/0x10 [ 380.312917][ T9723] ? do_raw_spin_unlock+0xf5/0x210 [ 380.312958][ T9723] try_charge_memcg+0xc74/0x1590 [ 380.312991][ T9723] ? __pfx_try_charge_memcg+0x10/0x10 [ 380.313018][ T9723] ? percpu_ref_tryget+0x15/0x180 [ 380.313048][ T9723] ? __memcg_kmem_charge_page+0x159/0x510 [ 380.313068][ T9723] __memcg_kmem_charge_page+0x31b/0x510 [ 380.313084][ T9723] ? __memcg_kmem_charge_page+0x159/0x510 [ 380.313104][ T9723] __alloc_frozen_pages_noprof+0x1be/0x380 [ 380.313138][ T9723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.313156][ T9723] ? __pfx_policy_nodemask+0x10/0x10 [ 380.313170][ T9723] ? __lock_acquire+0x683/0x2cf0 [ 380.313187][ T9723] alloc_pages_mpol+0x212/0x380 [ 380.313203][ T9723] alloc_pages_noprof+0xac/0x2a0 [ 380.313218][ T9723] pte_alloc_one+0x22/0x370 [ 380.313236][ T9723] do_pte_missing+0x13c8/0x34b0 [ 380.313257][ T9723] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 380.313274][ T9723] ? lock_vma_under_rcu+0x1d1/0x500 [ 380.313289][ T9723] handle_mm_fault+0x1b36/0x3080 [ 380.313306][ T9723] ? handle_mm_fault+0xec/0x3080 [ 380.313320][ T9723] ? __pfx_handle_mm_fault+0x10/0x10 [ 380.313328][ T9723] ? lock_vma_under_rcu+0x45a/0x500 [ 380.313345][ T9723] ? sched_clock_cpu+0x74/0x440 [ 380.313366][ T9723] do_user_addr_fault+0xa4d/0x1340 [ 380.313386][ T9723] ? trace_page_fault_user+0x84/0x1e0 [ 380.313400][ T9723] exc_page_fault+0x6a/0xc0 [ 380.313496][ T9723] asm_exc_page_fault+0x26/0x30 [ 380.313516][ T9723] RIP: 0033:0x7f8958272900 [ 380.313552][ T9723] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 380.313560][ T9723] RSP: 002b:00007f895874fad0 EFLAGS: 00010202 [ 380.313574][ T9723] RAX: 000000110c468000 RBX: ffffffff853337da RCX: 0000000000000003 [ 380.313581][ T9723] RDX: 00000000000017da RSI: 0000000000000cdf RDI: 0000000000000008 [ 380.313587][ T9723] RBP: 0000000000000000 R08: 00007f8958610000 R09: 00007f8958612000 [ 380.313594][ T9723] R10: 00000000853337de R11: 00000000000000ff R12: 00007f8958625f40 [ 380.313603][ T9723] R13: 00000000000185e5 R14: ffffffff85333ccd R15: 00007f8959155720 [ 380.313614][ T9723] ? is_acpi_device_node+0xd/0x70 [ 380.313715][ T9723] ? acpi_graph_get_remote_endpoint+0x18a/0x3b0 [ 380.313731][ T9723] [ 380.623269][ T9723] memory: usage 4kB, limit 4kB, failcnt 19 [ 380.633499][ T9723] memory+swap: usage 24kB, limit 9007199254740988kB, failcnt 0 [ 380.653058][ T9723] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 380.707133][ T9723] Memory cgroup stats for /syz1/syz2: [ 380.707584][ T9723] cache 0 [ 380.707649][ T5697] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 380.714416][ T984] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 380.732355][ T9723] rss 0 [ 380.735612][ T9723] rss_huge 0 [ 380.738882][ T9723] shmem 0 [ 380.742041][ T9723] mapped_file 0 [ 380.745826][ T9723] dirty 0 [ 380.784996][ T9723] writeback 0 [ 380.798767][ T9723] workingset_refault_anon 0 [ 380.809929][ T9723] workingset_refault_file 0 [ 380.814572][ T9723] swap 20480 [ 380.817836][ T9723] swapcached 20480 [ 380.821588][ T9723] pgpgin 2 [ 380.843158][ T9723] pgpgout 1024 [ 380.846632][ T9723] pgfault 3 [ 380.849766][ T9723] pgmajfault 0 [ 380.853199][ T9723] inactive_anon 0 [ 380.856842][ T9723] active_anon 0 [ 380.860295][ T9723] inactive_file 0 [ 380.864068][ T9723] active_file 0 [ 380.867542][ T9723] unevictable 0 [ 380.870986][ T9723] hierarchical_memory_limit 4096 [ 380.875998][ T9723] hierarchical_memsw_limit 9223372036854771712 [ 380.882136][ T9723] total_cache 0 [ 380.885854][ T9723] total_rss 0 [ 380.889269][ T9723] total_rss_huge 0 [ 380.893132][ T9723] total_shmem 0 [ 380.898211][ T9723] total_mapped_file 0 [ 380.902224][ T9723] total_dirty 0 [ 380.905767][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 380.911624][ T5697] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 380.922306][ T9723] total_writeback 0 [ 380.926863][ T9723] total_workingset_refault_anon 0 [ 380.932202][ T9723] total_workingset_refault_file 0 [ 380.934037][ T984] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 380.937631][ T5697] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.957461][ T9723] total_swap 20480 [ 380.961251][ T9723] total_swapcached 20480 [ 380.965596][ T5697] usb 5-1: config 0 has no interface number 0 [ 380.971733][ T9723] total_pgpgin 2 [ 380.975334][ T9723] total_pgpgout 1024 [ 380.979271][ T5697] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 380.990092][ T9723] total_pgfault 3 [ 380.993916][ T9723] total_pgmajfault 0 [ 380.997838][ T9723] total_inactive_anon 0 [ 381.002029][ T5697] usb 5-1: config 0 interface 1 has no altsetting 0 [ 381.008820][ T9723] total_active_anon 0 [ 381.011539][ T984] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 381.012977][ T9723] total_inactive_file 0 [ 381.029943][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.038635][ T5697] usb 5-1: Product: syz [ 381.041562][ T984] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 381.043320][ T9723] total_active_file 0 [ 381.057302][ T5697] usb 5-1: Manufacturer: syz [ 381.061906][ T5697] usb 5-1: SerialNumber: syz [ 381.077782][ T9723] total_unevictable 0 [ 381.082657][ T5697] usb 5-1: config 0 descriptor?? [ 381.090063][ T9723] anon_cost 0 [ 381.092005][ T984] usb 1-1: config 0 has no interface number 0 [ 381.095917][ T9723] file_cost 0 [ 381.106967][ T9723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.1081,pid=9723,uid=0 [ 381.125736][ T9723] Memory cgroup out of memory: Killed process 9723 (syz.1.1081) total-vm:102384kB, anon-rss:1456kB, file-rss:23028kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 381.159399][ T984] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.191109][ T984] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.223107][ T984] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 381.272122][ T984] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 381.305173][ T5697] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 381.341623][ T984] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 381.348312][ T5697] cx231xx 5-1:0.1: Failed to read PCB config [ 381.378848][ T5697] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 381.393703][ T984] usb 1-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 381.427167][ T5697] usb 5-1: USB disconnect, device number 52 [ 381.453399][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.500473][ T984] usb 1-1: config 0 descriptor?? [ 381.519713][ T9754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.527701][ T9754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.668507][ T9763] autofs4:pid:9763:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 381.723551][ T5683] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 381.797463][ T984] usb 1-1: string descriptor 0 read error: -71 [ 381.809800][ T984] cypress_m8 1-1:0.244: DeLorme Earthmate USB converter detected [ 381.828717][ T984] earthmate ttyUSB0: required endpoint is missing [ 381.862249][ T984] usb 1-1: USB disconnect, device number 48 [ 381.872057][ T984] cypress_m8 1-1:0.244: device disconnected [ 381.953258][ T5697] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 381.971862][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.989455][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.063200][ T24] net_ratelimit: 8 callbacks suppressed [ 382.063219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.123099][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 382.132946][ T5697] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 382.166566][ T5697] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.186572][ T5697] usb 5-1: config 0 has no interface number 0 [ 382.201079][ T5697] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 382.241608][ T5697] usb 5-1: config 0 interface 1 has no altsetting 0 [ 382.260502][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.275025][ T5697] usb 5-1: Product: syz [ 382.284338][ T5697] usb 5-1: Manufacturer: syz [ 382.291455][ T5697] usb 5-1: SerialNumber: syz [ 382.308742][ T5697] usb 5-1: config 0 descriptor?? [ 382.331910][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 382.354774][ T5683] usb 2-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 382.402663][ T5683] usb 2-1: no configurations [ 382.439513][ T5683] usb 2-1: can't read configurations, error -22 [ 382.473662][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1096'. [ 382.555019][ T5697] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 382.580284][ T5697] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 382.705795][ T5697] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 382.729111][ T5697] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 382.750366][ T5697] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 382.773585][ T5697] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 382.798420][ T5697] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 382.822245][ T5697] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71 [ 382.853764][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.891673][ T5697] i2c i2c-2: Added multiplexed i2c bus 4 [ 382.909523][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.944118][ T5697] i2c i2c-2: Added multiplexed i2c bus 5 [ 383.019387][ T5697] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 383.062373][ T5697] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 383.113162][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.442126][ T5697] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 383.523176][ T5697] usb 5-1: USB disconnect, device number 53 [ 383.666711][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.708279][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.709799][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 383.709814][ T29] audit: type=1326 audit(1786378841.844:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x0 [ 383.719305][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.957415][ T29] audit: type=1326 audit(1786378842.094:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.048379][ T29] audit: type=1326 audit(1786378842.124:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.114171][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.140453][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.153345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.168071][ T29] audit: type=1326 audit(1786378842.124:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.291109][ T29] audit: type=1326 audit(1786378842.124:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.410163][ T29] audit: type=1326 audit(1786378842.124:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.534789][ T29] audit: type=1326 audit(1786378842.124:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.647677][ T29] audit: type=1326 audit(1786378842.124:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.760273][ T29] audit: type=1326 audit(1786378842.124:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 384.858253][ T29] audit: type=1326 audit(1786378842.124:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 385.306905][ T9802] loop5: detected capacity change from 0 to 7 [ 385.350608][ T9802] Dev loop5: unable to read RDB block 7 [ 385.379269][ T9802] loop5: AHDI p1 [ 385.398067][ T9802] loop5: partition table partially beyond EOD, truncated [ 387.263160][ T24] net_ratelimit: 8 callbacks suppressed [ 387.263176][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.523512][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.552112][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.873194][ T24] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 387.973050][ T5697] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 388.048332][ T24] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 388.103381][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 388.152100][ T24] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 388.228432][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.262175][ T24] usb 3-1: Product: syz [ 388.280187][ T24] usb 3-1: Manufacturer: syz [ 388.303589][ T24] usb 3-1: SerialNumber: syz [ 388.308372][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.696241][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.740905][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.865608][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.875677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.888266][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.965933][ T9847] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.1116'. [ 389.088071][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 389.344446][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.418574][ T9853] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.1118'. [ 389.553865][ T9855] batman_adv: batadv0: Adding interface: dummy0 [ 389.560355][ T9855] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.608819][ T9855] batman_adv: batadv0: Interface activated: dummy0 [ 389.663061][ T5697] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 389.692827][ T5697] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 389.731400][ T5697] usb 2-1: can't read configurations, error -71 [ 389.750676][ T9858] kvm: kvm [9857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 390.083003][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 390.234031][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.253028][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.271007][ T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 390.290847][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.311715][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.327847][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 390.348142][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 390.372295][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.386150][ T9] usb 5-1: Product: syz [ 390.394741][ T9] usb 5-1: Manufacturer: syz [ 390.408423][ T9862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 390.428228][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 390.471701][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 390.497557][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 390.508098][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 390.639277][ T9] usb 3-1: USB disconnect, device number 43 [ 390.684956][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.691769][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.699044][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.705658][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.712453][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.719081][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.726092][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.732700][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.740030][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.746652][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.753235][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.759849][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.766950][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.773557][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.780035][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.786654][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.794976][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.801586][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.807985][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.814590][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.860985][ T9872] syzkaller0: entered promiscuous mode [ 390.878466][ T9872] syzkaller0: entered allmulticast mode [ 390.898661][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 390.964893][ T9] usb 5-1: USB disconnect, device number 54 [ 390.964962][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 390.977663][ T9862] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 391.013725][ T9877] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 391.163092][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 391.322966][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 391.338458][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 391.356094][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.374650][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.399397][ T24] usb 3-1: config 0 descriptor?? [ 391.414157][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 392.213148][ T24] gspca_vc032x: reg_w err -71 [ 392.237070][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 392.275712][ T24] usb 3-1: USB disconnect, device number 44 [ 392.341906][ T9890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 392.463522][ T984] net_ratelimit: 30 callbacks suppressed [ 392.463536][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.668985][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.689166][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.722397][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.741265][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.184471][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 393.314688][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.341049][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.383914][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 393.402018][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.427267][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.450187][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.484042][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.494189][ T984] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 393.510285][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.527377][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.546462][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.581996][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.592794][ T24] usb 1-1: Manufacturer: syz [ 393.627781][ T24] usb 1-1: config 0 descriptor?? [ 393.675332][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 393.682439][ T984] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 393.709204][ T984] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 393.728721][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.739825][ T984] usb 2-1: Product: syz [ 393.760621][ T984] usb 2-1: Manufacturer: syz [ 393.776464][ T984] usb 2-1: SerialNumber: syz [ 393.828850][ T984] snd-ua101 2-1:1.1: sample format descriptor not found [ 393.879456][ T984] snd-ua101 2-1:1.0: invalid num_altsetting [ 393.983278][ T24] rc_core: IR keymap rc-hauppauge not found [ 393.998300][ T24] Registered IR keymap rc-empty [ 394.014826][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.043071][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.068716][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.087153][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.105142][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 394.147658][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40 [ 394.197093][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.240913][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.284717][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.324559][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.363385][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.408270][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.459493][ T5697] usb 2-1: USB disconnect, device number 65 [ 394.475775][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.513756][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.529395][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.545171][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.565202][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.583468][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.603153][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 394.637448][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 394.648723][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.679570][ T24] usb 1-1: USB disconnect, device number 49 [ 394.971573][ T9921] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 395.193487][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.241870][ T9923] veth3: entered allmulticast mode [ 395.267541][ T9923] bond2: (slave veth3): Enslaving as an active interface with a down link [ 395.327654][ T9924] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 395.422306][ T9923] macvlan2: entered promiscuous mode [ 395.443095][ T9923] macvlan2: entered allmulticast mode [ 395.498857][ T9923] bond2: entered promiscuous mode [ 395.543257][ T9923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.554574][ T9937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 395.561115][ T9937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.581056][ T9923] bond2: left promiscuous mode [ 395.586397][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.595302][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 395.620040][ T9937] vhci_hcd vhci_hcd.0: Device attached [ 395.703162][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.722698][ T9938] vhci_hcd: connection closed [ 395.725099][ T13] vhci_hcd vhci_hcd.2: stop threads [ 395.747280][ T13] vhci_hcd vhci_hcd.2: release socket [ 395.760340][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 395.774641][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 395.793125][ T5697] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 395.801902][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.857870][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 395.902171][ T24] usb 1-1: config 0 has no interface number 0 [ 395.937249][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.962502][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 395.978934][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.013888][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.031995][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.057056][ T24] usb 1-1: config 0 descriptor?? [ 396.076963][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 396.163001][ T5609] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 396.323254][ T5609] usb 5-1: Using ep0 maxpacket: 32 [ 396.342516][ T5609] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 396.361440][ T5609] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 396.384814][ T5609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.414956][ T5609] usb 5-1: config 0 has no interface number 0 [ 396.415085][ T9] usb 1-1: USB disconnect, device number 50 [ 396.421171][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 396.428519][ T5609] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 396.479392][ T5609] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 396.512478][ T5609] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 396.547304][ T5609] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 396.561288][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 396.571829][ T9960] macvlan2: entered allmulticast mode [ 396.600200][ T9960] batadv0: entered allmulticast mode [ 396.610401][ T5609] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 396.642707][ T9960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.652015][ T5609] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 396.685499][ T9960] team0: Port device macvlan2 added [ 396.704996][ T5609] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 252, changing to 11 [ 396.733110][ T5609] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 396.755361][ T5609] usb 5-1: config 0 interface 239 has no altsetting 0 [ 396.810902][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.829655][ T5609] usb 5-1: Product: syz [ 396.839547][ T5609] usb 5-1: Manufacturer: syz [ 396.859553][ T5609] usb 5-1: SerialNumber: syz [ 396.909425][ T5609] usb 5-1: config 0 descriptor?? [ 396.934569][ T9950] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 396.944562][ T9950] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.074218][ T5615] Bluetooth: hci5: urb ffff888076137300 submission failed (90) [ 397.595617][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1144'. [ 397.623002][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 397.663651][ T5609] net_ratelimit: 4 callbacks suppressed [ 397.663665][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.843765][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.880842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.965278][ T9] usb 1-1: Product: syz [ 397.970832][ T9] usb 1-1: Manufacturer: syz [ 397.978817][ T9] usb 1-1: SerialNumber: syz [ 398.030448][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.064632][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.290928][ T5697] usb 5-1: USB disconnect, device number 55 [ 398.435516][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 398.467579][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 398.704100][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.810529][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1150'. [ 399.187055][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.217844][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.743369][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.773162][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 399.867147][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1153'. [ 399.954112][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.977862][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.354780][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.610101][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.685112][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.760860][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 400.823488][ T9] usb 1-1: USB disconnect, device number 51 [ 401.095797][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 401.136295][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 402.864400][ T5675] net_ratelimit: 11 callbacks suppressed [ 402.864414][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.913179][ T5697] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 403.087832][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 403.115014][ T5697] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.149068][T10050] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 403.186074][ T5697] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 403.210055][ T5697] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 403.240530][ T5697] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 403.267375][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.452445][ T9933] syz.1.1138 (9933) used greatest stack depth: 19136 bytes left [ 403.774247][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.797789][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.903210][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.754594][T10073] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 404.783388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.913100][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.942062][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.952091][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.011289][T10077] syzkaller0: entered promiscuous mode [ 405.063148][T10077] syzkaller0: entered allmulticast mode [ 405.713405][ T5675] usb 1-1: USB disconnect, device number 52 [ 405.984147][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.064145][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.545283][T10089] syzkaller0: entered promiscuous mode [ 406.566260][T10089] syzkaller0: entered allmulticast mode [ 406.593454][T10089] tipc: Started in network mode [ 406.608397][T10089] tipc: Node identity 6e98cf99d1a6, cluster identity 4711 [ 406.644987][T10089] tipc: Enabled bearer , priority 0 [ 406.685757][T10090] tipc: Resetting bearer [ 406.734199][T10088] tipc: Resetting bearer [ 406.861320][T10088] tipc: Disabling bearer [ 407.184490][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.227517][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.403001][ T5675] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 407.566719][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 407.611186][ T5675] usb 3-1: Using ep0 maxpacket: 32 [ 407.620536][ T5675] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 407.638922][ T5675] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.673474][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.694032][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.712419][ T5675] usb 3-1: Product: syz [ 407.728884][ T5675] usb 3-1: Manufacturer: syz [ 407.745680][ T5675] usb 3-1: SerialNumber: syz [ 407.771123][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 407.784238][ T5675] usb 3-1: config 0 descriptor?? [ 407.806037][ T5675] gs_usb 3-1:0.0: Required endpoints not found [ 408.025816][T10110] netlink: 'syz.3.1181': attribute type 11 has an invalid length. [ 408.063148][ T5609] net_ratelimit: 6 callbacks suppressed [ 408.063160][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.268232][T10116] tipc: Enabled bearer , priority 0 [ 408.292735][T10116] syzkaller0: entered promiscuous mode [ 408.309976][T10116] syzkaller0: entered allmulticast mode [ 408.323551][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.339476][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.348891][T10116] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.398426][T10116] tipc: Resetting bearer [ 408.416040][T10115] tipc: Resetting bearer [ 408.465369][T10115] tipc: Disabling bearer [ 408.487738][T10120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 408.852419][T10123] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 408.952974][ T5698] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 409.113135][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 409.113320][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.133793][ T5698] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 409.155483][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 409.185925][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 409.218798][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 409.248426][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 409.280077][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.302728][ T5698] usb 2-1: Product: syz [ 409.315781][ T5698] usb 2-1: Manufacturer: syz [ 409.324834][ T5698] usb 2-1: SerialNumber: syz [ 409.341089][ T5698] usb 2-1: config 0 descriptor?? [ 409.373844][ T5698] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 409.483558][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.522463][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.630457][T10144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.952156][T10132] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1188'. [ 410.143142][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.197865][ T5698] usb 3-1: USB disconnect, device number 45 [ 410.493333][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.616346][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.626607][T10155] autofs4:pid:10155:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 410.659435][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.679311][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.720755][T10151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.797672][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 410.798168][ T29] audit: type=1326 audit(1786378868.934:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.831904][ T29] audit: type=1326 audit(1786378868.944:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.859395][ T29] audit: type=1326 audit(1786378868.944:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.888377][ T29] audit: type=1326 audit(1786378868.944:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.915895][ T29] audit: type=1326 audit(1786378868.944:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.970594][ T29] audit: type=1326 audit(1786378868.944:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 410.997824][ T29] audit: type=1326 audit(1786378868.944:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 411.057194][ T29] audit: type=1326 audit(1786378868.944:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 411.085001][ T29] audit: type=1326 audit(1786378868.944:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 411.112363][ T29] audit: type=1326 audit(1786378868.944:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.3.1194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ad39e0d9 code=0x7ffc0000 [ 411.186728][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.715235][ T5697] usb 2-1: USB disconnect, device number 66 [ 412.733498][ T5609] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 412.932958][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 412.946063][ T5609] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 412.972225][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 412.999119][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 413.027147][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.051220][ T5609] usb 2-1: config 0 descriptor?? [ 413.064011][T10178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.273194][ T5675] net_ratelimit: 7 callbacks suppressed [ 413.273207][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.304960][T10191] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 413.692133][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.721835][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.772818][ T5609] usbhid 2-1:0.0: can't add hid device: -71 [ 413.786418][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 413.816679][ T5609] usb 2-1: USB disconnect, device number 67 [ 413.952254][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 414.105101][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.130380][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.313129][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.683014][ T5697] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 414.873635][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 414.914676][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 414.946353][ T5697] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 415.003160][ T5697] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 415.049718][ T5697] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 415.106452][ T5697] usb 1-1: config 14 has no interface number 0 [ 415.212176][ T5697] usb 1-1: config 14 has no interface number 1 [ 415.218967][ T5697] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 415.230183][ T5697] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 415.265575][ T5697] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 415.305783][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.346145][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.505561][ T5697] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 415.575813][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.584195][ T5697] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 415.596314][ T5697] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.609995][ T5697] usb 1-1: config 14 interface 57 has no altsetting 0 [ 415.617017][ T5697] usb 1-1: config 14 interface 228 has no altsetting 0 [ 415.626550][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.635785][ T5697] usb 1-1: Product: syz [ 415.640498][ T5697] usb 1-1: Manufacturer: syz [ 415.647539][ T5697] usb 1-1: SerialNumber: syz [ 415.730304][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.747047][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.241048][ T5697] legousbtower 1-1:14.57: interrupt endpoints not found [ 416.383255][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.505872][ T5697] legousbtower 1-1:14.228: get version request failed: -71 [ 416.524149][ T5697] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 416.562317][ T5697] usb 1-1: USB disconnect, device number 53 [ 416.600395][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.600651][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.694008][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.710472][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.222331][T10234] trusted_key: encrypted_key: key user:syz not found [ 417.474598][T10241] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1218'. [ 417.801499][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 417.801516][ T29] audit: type=1800 audit(1786378875.934:557): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1219" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1205 res=0 errno=0 [ 417.838819][T10246] netlink: 'syz.1.1219': attribute type 8 has an invalid length. [ 417.859050][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 417.998126][T10250] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 418.464810][ T24] net_ratelimit: 5 callbacks suppressed [ 418.464822][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.654565][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 418.676176][ T5609] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 418.833010][ T5609] usb 3-1: Using ep0 maxpacket: 16 [ 418.843378][ T5609] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 418.865456][ T5609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.882954][ T5609] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.916650][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.948580][ T5609] usb 3-1: Product: syz [ 418.953992][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.971626][ T5609] usb 3-1: Manufacturer: syz [ 418.985561][ T5609] usb 3-1: SerialNumber: syz [ 418.985737][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.020214][ T5609] usb 3-1: config 0 descriptor?? [ 419.333716][ T5697] usb 3-1: USB disconnect, device number 46 [ 419.508663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.752987][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 419.914244][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 419.934466][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.967720][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 419.986705][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.001115][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.012016][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.026724][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.133151][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.149368][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.315361][ T9] usb 5-1: usb_control_msg returned -71 [ 420.332971][ T9] usbtmc 5-1:16.0: can't read capabilities [ 420.360063][ T9] usb 5-1: USB disconnect, device number 56 [ 420.372943][ T5697] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 420.543800][ T5697] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 420.553186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.568286][ T5697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.585999][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.594725][ T5697] usb 3-1: Product: syz [ 420.600103][ T5697] usb 3-1: Manufacturer: syz [ 420.617577][ T5697] usb 3-1: SerialNumber: syz [ 420.630528][ T5697] usb 3-1: config 0 descriptor?? [ 420.762038][ T5697] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 421.003006][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 421.193753][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 421.268957][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.280281][ T24] usb 2-1: Product: syz [ 421.284219][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.305578][ T24] usb 2-1: Manufacturer: syz [ 421.319670][ T24] usb 2-1: SerialNumber: syz [ 421.324761][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.349233][ T24] usb 2-1: config 0 descriptor?? [ 421.586140][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.783677][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.800366][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.829111][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 421.851509][ T24] usb 2-1: Please update to version 0.2 or newer [ 421.879607][T10282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.024392][ T24] usb 2-1: USB disconnect, device number 68 [ 422.122463][ T5698] usb 3-1: USB disconnect, device number 47 [ 422.333050][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 422.495723][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.530246][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.557110][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.567512][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.580710][T10293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.608391][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.865786][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 422.913157][T10293] tunl0: Caught tx_queue_len zero misconfig [ 423.033450][ T9] usb 5-1: USB disconnect, device number 57 [ 423.435601][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1236'. [ 423.563310][ T13] net_ratelimit: 5 callbacks suppressed [ 423.563328][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.625547][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.667608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.053477][T10314] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 424.713251][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.773126][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.799340][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.316637][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 425.611250][T10347] netlink: NAT attribute has 1 unknown bytes [ 425.651481][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.743757][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.754505][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 425.963130][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.524683][T10367] autofs4:pid:10367:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 426.569973][ T5698] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 426.588373][T10365] syzkaller0: entered promiscuous mode [ 426.599735][T10365] syzkaller0: entered allmulticast mode [ 426.781744][ T5698] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 426.824475][ T5698] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 426.837015][ T5698] usb 5-1: Product: syz [ 426.841273][ T5698] usb 5-1: Manufacturer: syz [ 426.848640][ T5698] usb 5-1: SerialNumber: syz [ 426.907068][ T5698] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 426.923671][ T5698] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.936013][ T5698] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 426.951607][ T5698] usb 5-1: media controller created [ 426.990711][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.077473][ T5698] usb 5-1: selecting invalid altsetting 1 [ 427.084074][ T5698] set interface failed [ 427.084500][ T5698] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 427.103305][ T5698] error writing reg: 0xff, val: 0x00 [ 427.197031][ T5698] dvb_usb_mxl111sf 5-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 427.251536][ T5698] usb 5-1: USB disconnect, device number 58 [ 427.692956][ T5697] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 427.864813][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 427.879248][ T5697] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 427.903819][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.927988][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 427.960531][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 427.990400][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.019076][ T5697] usb 3-1: config 0 descriptor?? [ 428.037460][T10375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.061384][ T5697] hub 3-1:0.0: USB hub found [ 428.102777][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1252'. [ 428.255322][ T5697] hub 3-1:0.0: 2 ports detected [ 428.293669][ T5698] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 428.445482][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.456841][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 428.472229][ T5698] usb 2-1: not running at top speed; connect to a high speed hub [ 428.484700][ T5698] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 428.499978][ T5698] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 428.512141][ T5698] usb 2-1: config 5 interface 0 has no altsetting 1 [ 428.523013][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.534205][ T5698] usb 2-1: Product: syz [ 428.543533][ T5698] usb 2-1: Manufacturer: syz [ 428.548891][ T5698] usb 2-1: SerialNumber: syz [ 428.597819][ T5697] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 428.612475][ T5697] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 428.631706][ T5697] usbhid 3-1:0.0: can't add hid device: -71 [ 428.645464][ T5697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.685479][ T5697] usb 3-1: USB disconnect, device number 48 [ 428.775525][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.796910][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.867893][ T29] audit: type=1326 audit(1786378887.004:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 428.904228][ T5675] net_ratelimit: 8 callbacks suppressed [ 428.904245][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.934973][ T29] audit: type=1326 audit(1786378887.004:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 428.960677][ T29] audit: type=1326 audit(1786378887.004:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 428.986193][ T29] audit: type=1326 audit(1786378887.004:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.029157][ T29] audit: type=1326 audit(1786378887.004:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.058215][ T29] audit: type=1326 audit(1786378887.004:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.085548][ T29] audit: type=1326 audit(1786378887.004:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.103383][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.138695][ T29] audit: type=1326 audit(1786378887.004:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.182820][ T29] audit: type=1326 audit(1786378887.044:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.241012][T10388] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1255'. [ 429.269091][ T29] audit: type=1326 audit(1786378887.044:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895839e0d9 code=0x7ffc0000 [ 429.332989][ T5698] usb 2-1: USB disconnect, device number 69 [ 429.347555][T10394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1256'. [ 429.365725][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.383645][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.435193][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.795327][T10406] binder: 10405:10406 ioctl c0306201 0 returned -14 [ 429.983209][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.053313][ T5698] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 430.224227][ T5698] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 430.247229][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.262191][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.287346][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 430.298481][ T5698] usb 2-1: SerialNumber: syz [ 430.339287][ T5698] usb 2-1: 0:2 : does not exist [ 430.503305][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.513204][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.546583][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.572412][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.790953][ T5698] usb 2-1: USB disconnect, device number 70 [ 431.023163][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.076455][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 431.261803][T10421] autofs4:pid:10421:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 431.310506][T10425] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 431.363187][ T5698] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 431.534854][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 431.568906][ T5698] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 431.595570][T10432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1266'. [ 431.625532][ T5698] usb 5-1: config index 0 descriptor too short (expected 1821, got 853) [ 431.642534][ T5698] usb 5-1: config 0 has an invalid interface number: 103 but max is 2 [ 431.669393][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.685236][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.703020][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.723210][ T5698] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 431.753410][ T5698] usb 5-1: config 0 has no interface number 0 [ 431.779400][ T5698] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 431.811517][ T5698] usb 5-1: config 0 interface 103 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.848886][ T5698] usb 5-1: config 0 interface 103 has no altsetting 0 [ 431.881538][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.915854][ T5698] usb 5-1: Product: syz [ 431.932820][ T5698] usb 5-1: Manufacturer: syz [ 431.947575][ T5698] usb 5-1: SerialNumber: syz [ 431.971722][ T5698] usb 5-1: config 0 descriptor?? [ 432.221584][ T5698] usb 5-1: USB disconnect, device number 59 [ 433.153033][ T5698] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 433.288176][T10447] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 433.366272][ T5698] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 433.425586][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.444838][ T5698] usb 5-1: Product: syz [ 433.455498][ T5698] usb 5-1: Manufacturer: syz [ 433.475778][ T5698] usb 5-1: SerialNumber: syz [ 433.490433][ T5698] usb 5-1: config 0 descriptor?? [ 433.512444][ T5698] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 434.013670][ T12] net_ratelimit: 7 callbacks suppressed [ 434.013692][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.061873][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.143130][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.716505][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.747619][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.183148][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.193950][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.216381][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.343483][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 435.525897][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 435.533373][ T5683] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 435.548083][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 435.572669][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.592901][ T24] usb 2-1: Product: syz [ 435.599477][ T24] usb 2-1: Manufacturer: syz [ 435.607720][ T24] usb 2-1: SerialNumber: syz [ 435.626440][ T24] usb 2-1: config 0 descriptor?? [ 435.697581][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.714448][ T5683] usb 3-1: not running at top speed; connect to a high speed hub [ 435.725752][ T5683] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 435.742739][ T5683] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 435.754742][ T5683] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 435.778534][ T5683] usb 3-1: config 5 has no interface number 0 [ 435.795515][ T5683] usb 3-1: config 5 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 435.818383][ T5683] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.853366][ T5683] usb 3-1: config 5 interface 246 has no altsetting 0 [ 435.877690][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.898225][ T5683] usb 3-1: Product: syz [ 435.908188][ T5683] usb 3-1: Manufacturer: syz [ 435.918390][ T5683] usb 3-1: SerialNumber: syz [ 435.940130][T10465] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 436.071230][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 436.085021][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.095935][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 436.109300][ T24] usb 2-1: media controller created [ 436.128439][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.141218][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.150197][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.151638][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.217963][ T5683] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 436.230998][ T13] usb 3-1: Failed to submit usb control message: -71 [ 436.242689][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.281981][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.296830][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 436.306696][ T5683] usb 3-1: USB disconnect, device number 49 [ 436.335955][ T13] usb 3-1: unable to get target info from device [ 436.343382][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.347438][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.365424][ T13] usb 3-1: could not get target info (-71) [ 436.365544][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.402693][ T13] usb 3-1: could not probe fw (-71) [ 436.415008][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 436.426167][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 436.435517][ T5698] gspca_stk1135: reg_w 0x350 err -110 [ 436.445554][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.474244][ T5698] gspca_stk1135: Sensor write failed [ 436.479738][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.514039][ T5698] gspca_stk1135: Sensor write failed [ 436.532686][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.560470][ T5698] gspca_stk1135: Sensor read failed [ 436.576756][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.586587][ T5698] gspca_stk1135: Sensor read failed [ 436.595830][ T5698] gspca_stk1135: Detected sensor type unknown (0x0) [ 436.604524][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.616354][ T5698] gspca_stk1135: Sensor read failed [ 436.630851][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.647760][ T5698] gspca_stk1135: Sensor read failed [ 436.660346][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.668496][T10468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.672060][ T5683] usb 2-1: USB disconnect, device number 71 [ 436.692940][ T5698] gspca_stk1135: Sensor write failed [ 436.704544][ T5698] gspca_stk1135: serial bus timeout: status=0x00 [ 436.737670][ T5698] gspca_stk1135: Sensor write failed [ 436.756900][ T5698] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 436.777393][ T5683] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 436.800582][ T5698] usb 5-1: USB disconnect, device number 60 [ 437.038474][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 437.297044][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 437.512994][ T5609] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 437.685052][ T5609] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 437.714800][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.746372][ T5609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.788595][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.814144][ T5609] usb 2-1: Product: syz [ 437.826958][ T5609] usb 2-1: Manufacturer: syz [ 437.842341][ T5609] usb 2-1: SerialNumber: syz [ 438.179517][ T5683] usb 2-1: USB disconnect, device number 72 [ 438.562437][T10506] bond0: entered promiscuous mode [ 438.567674][T10506] bond0: entered allmulticast mode [ 439.160283][T10518] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 439.250296][T10521] veth3: entered allmulticast mode [ 439.268291][T10521] bond1: (slave veth3): Enslaving as an active interface with a down link [ 439.308156][T10518] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 439.329202][T10518] macvlan3: entered promiscuous mode [ 439.338512][T10518] macvlan3: entered allmulticast mode [ 439.345786][ T5609] net_ratelimit: 6 callbacks suppressed [ 439.345798][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.360432][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.375114][T10518] bond1: entered promiscuous mode [ 439.386266][T10518] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 439.405809][T10518] bond1: left promiscuous mode [ 439.724100][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.735014][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.795328][T10531] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 439.952973][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 439.990974][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.997695][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.114107][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 440.121957][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 440.162334][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.171223][ T24] usb 2-1: Product: syz [ 440.180883][ T24] usb 2-1: Manufacturer: syz [ 440.238994][ T24] usb 2-1: SerialNumber: syz [ 440.254126][ T24] usb 2-1: config 0 descriptor?? [ 440.383472][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.670757][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 440.687358][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.721029][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 440.739384][ T24] usb 2-1: media controller created [ 440.790014][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.873179][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.883361][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.898850][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.913361][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.943453][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 440.961481][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 441.166280][T10530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.169098][ T24] usb 2-1: USB disconnect, device number 73 [ 441.258205][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 441.273723][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.316505][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 441.423130][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.539357][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 441.539373][ T29] audit: type=1326 audit(1786378899.674:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.600932][ T29] audit: type=1326 audit(1786378899.674:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.656927][ T29] audit: type=1326 audit(1786378899.674:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.711965][ T29] audit: type=1326 audit(1786378899.674:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.781818][ T29] audit: type=1326 audit(1786378899.714:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.858007][ T29] audit: type=1326 audit(1786378899.714:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.914789][ T29] audit: type=1326 audit(1786378899.714:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 441.966965][ T29] audit: type=1326 audit(1786378899.714:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 442.016554][ T29] audit: type=1326 audit(1786378899.714:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 442.073963][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.092703][ T29] audit: type=1326 audit(1786378899.714:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0379e0d9 code=0x7ffc0000 [ 442.133025][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 442.314695][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 442.330205][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 442.350269][ T24] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 442.373217][ T24] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 442.409961][ T24] usb 2-1: config 166 has no interface number 0 [ 442.426695][ T24] usb 2-1: config 166 has no interface number 1 [ 442.447037][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 442.479624][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 442.512535][ T24] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 442.542210][ T24] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 442.568120][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 442.586628][ T24] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 442.604279][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 442.619762][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 442.632936][ T5698] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 442.633154][ T24] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 442.654630][ T24] usb 2-1: config 166 interface 177 has no altsetting 0 [ 442.673058][ T24] usb 2-1: config 166 interface 34 has no altsetting 0 [ 442.687544][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.721813][ T24] usb 2-1: Product: syz [ 442.727633][ T24] usb 2-1: Manufacturer: syz [ 442.732299][ T24] usb 2-1: SerialNumber: syz [ 442.832921][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 442.841218][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.857242][ T5698] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 442.876139][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 442.902986][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 442.912730][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 442.927690][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 442.952898][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 442.962716][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 442.984869][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.993376][ T5698] usb 5-1: Product: syz [ 443.000096][ T5698] usb 5-1: Manufacturer: syz [ 443.000718][ T24] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 443.007059][ T5698] usb 5-1: SerialNumber: syz [ 443.049288][ T5698] usb 5-1: config 0 descriptor?? [ 443.056402][T10553] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.087029][ T5698] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.178720][ T5698] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 443.196621][ T24] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 443.249542][ T7409] udevd[7409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.273538][ T5683] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 443.317610][ T24] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 443.340163][ T24] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 443.361427][ T24] uvcvideo 2-1:166.34: No valid video chain found. [ 443.380098][ T24] usb 2-1: USB disconnect, device number 74 [ 443.453317][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 443.471749][ T5683] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 443.493601][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 443.512483][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 443.548705][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.561850][ T5683] usb 3-1: Product: syz [ 443.570681][ T5683] usb 3-1: Manufacturer: syz [ 443.582124][ T5683] usb 3-1: SerialNumber: syz [ 443.601220][ T5683] usb 3-1: config 0 descriptor?? [ 443.615815][ T5683] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 443.777198][T10571] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 443.811486][T10573] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 443.845356][ T24] usb 3-1: USB disconnect, device number 50 [ 444.011742][T10574] veth3: entered allmulticast mode [ 444.043790][T10574] bond2: (slave veth3): Enslaving as an active interface with a down link [ 444.069540][T10576] bond2: (slave veth0_to_bond): making interface the new active one [ 444.083582][T10576] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 444.171782][T10573] macvlan0: entered promiscuous mode [ 444.187154][T10573] macvlan0: entered allmulticast mode [ 444.204820][T10573] bond2: entered promiscuous mode [ 444.219479][T10573] veth0_to_bond: entered promiscuous mode [ 444.234493][T10573] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 444.251717][T10573] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 444.267727][T10573] bond2: left promiscuous mode [ 444.272566][T10573] veth0_to_bond: left promiscuous mode [ 444.363086][ T13] net_ratelimit: 5 callbacks suppressed [ 444.363100][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.416757][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.543618][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.887435][T10588] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 445.418056][ T5675] usb 5-1: USB disconnect, device number 61 [ 445.565360][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.574270][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.588316][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.606121][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.615638][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.626703][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.855446][ T5675] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 446.033936][ T5675] usb 5-1: Using ep0 maxpacket: 16 [ 446.050276][ T5675] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 446.075416][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.087057][ T5675] usb 5-1: Product: syz [ 446.094491][ T5675] usb 5-1: Manufacturer: syz [ 446.101383][ T5675] usb 5-1: SerialNumber: syz [ 446.118532][ T5675] usb 5-1: config 0 descriptor?? [ 446.282972][ T5609] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 446.434198][ T5609] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 446.452580][ T5609] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 446.470182][ T5609] usb 2-1: config 2 has no interface number 0 [ 446.481790][ T5609] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 446.503058][ T5609] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 446.521823][ T5609] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 446.538713][ T5675] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 446.549741][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.563402][ T5609] usb 2-1: Product: syz [ 446.569539][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.580471][ T5609] usb 2-1: Manufacturer: syz [ 446.588680][ T5609] usb 2-1: SerialNumber: syz [ 446.596522][ T5675] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 446.605588][ T5675] usb 5-1: media controller created [ 446.612238][T10601] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 446.628990][T10601] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 446.640885][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.703204][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.740267][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.768962][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.793153][ T5675] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 446.801576][ T5675] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 446.902592][T10601] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 446.928657][T10601] kvm: pic: level sensitive irq not supported [ 446.929182][T10601] kvm: pic: non byte read [ 446.941012][T10601] kvm: pic: level sensitive irq not supported [ 446.941248][T10601] kvm: pic: non byte read [ 446.953670][T10601] kvm: pic: level sensitive irq not supported [ 446.953807][T10601] kvm: pic: non byte read [ 447.017618][T10594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.017987][T10607] fuse: Unknown parameter '' [ 447.036099][ T5675] usb 5-1: USB disconnect, device number 62 [ 447.116691][ T5675] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 447.167028][ T5609] usb 2-1: probing VID:PID(0424:012C) [ 447.185561][ T5609] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 447.194647][ T5609] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 447.208316][ T5609] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 447.225893][ T5609] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 447.278167][ T5609] usb 2-1: USB disconnect, device number 75 [ 447.663622][ T5683] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 447.826137][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 447.835316][ T5683] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.848201][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.853065][ T5609] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 447.861195][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.905008][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.915385][ T5683] usb 3-1: Product: syz [ 447.922696][ T5683] usb 3-1: Manufacturer: syz [ 447.929579][ T5683] usb 3-1: SerialNumber: syz [ 447.960098][ T5683] usb 3-1: 0:2 : does not exist [ 448.063051][ T5609] usb 5-1: Using ep0 maxpacket: 32 [ 448.076241][ T5609] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 448.106479][ T5609] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 448.138048][ T5609] usb 5-1: config 255 has an invalid descriptor of length 232, skipping remainder of the config [ 448.171041][ T5609] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 448.199648][ T5609] usb 5-1: config 255 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 448.223047][ T5697] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 448.250874][ T5609] usb 5-1: config 255 interface 0 has no altsetting 0 [ 448.257076][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.269809][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.271124][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.350127][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.379023][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.413174][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 448.423304][ T5697] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.438345][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.450698][ T5697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.465467][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.476723][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 448.496725][ T5683] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 448.519280][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.557503][ T5697] usb 2-1: config 0 descriptor?? [ 448.591165][ T5697] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 448.638022][ T5683] usb 3-1: USB disconnect, device number 51 [ 448.666804][ T5870] udevd[5870]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 448.698025][ T5870] udevd[5870]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 448.794803][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.808786][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.823278][ T984] net_ratelimit: 9 callbacks suppressed [ 449.823291][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.063464][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.081546][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.369643][T10639] tipc: Started in network mode [ 450.378741][T10639] tipc: Node identity 7f000001, cluster identity 4711 [ 450.397229][T10639] tipc: New replicast peer: 127.0.0.2 [ 450.417321][T10639] tipc: Enabled bearer , priority 10 [ 450.631942][ T5609] usb 5-1: string descriptor 0 read error: -71 [ 450.672677][ T5609] usbhid 5-1:255.0: couldn't find an input interrupt endpoint [ 450.704421][ T5609] usb 5-1: USB disconnect, device number 63 [ 450.865683][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.884851][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.893869][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.923672][T10651] autofs4:pid:10651:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 450.969420][ T984] usb 2-1: USB disconnect, device number 76 [ 451.002529][T10652] capability: warning: `syz.3.1320' uses deprecated v2 capabilities in a way that may be insecure [ 451.213080][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.232325][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.374772][ T984] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 451.535701][ T5675] tipc: Node number set to 2130706433 [ 451.584981][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 451.591060][ T984] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 451.609219][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.618244][ T984] usb 2-1: Product: syz [ 451.626285][ T984] usb 2-1: Manufacturer: syz [ 451.629446][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'. [ 451.674777][ T984] usb 2-1: SerialNumber: syz [ 451.695821][ T984] usb 2-1: config 0 descriptor?? [ 451.903355][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.117223][ T984] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 452.143490][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.159281][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.194275][ T984] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 452.225072][ T984] usb 2-1: media controller created [ 452.271945][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.317379][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.359615][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.397352][ T984] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 452.419827][ T984] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 452.624728][T10654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.631495][ T5683] usb 2-1: USB disconnect, device number 77 [ 452.767993][ T5683] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 452.979369][T10672] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 453.553192][ T5683] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 453.746610][ T5683] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 453.776599][ T5683] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 453.802368][ T5683] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 453.839493][ T5683] usb 2-1: config 0 has no interface number 0 [ 453.866576][ T5683] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.889174][ T5683] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.917660][ T5683] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 453.958964][ T5683] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 453.990055][ T5683] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 454.024122][ T5683] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 454.062084][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.097198][ T5683] usb 2-1: config 0 descriptor?? [ 454.108427][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 454.125644][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 454.411798][ T5683] usb 2-1: string descriptor 0 read error: -71 [ 454.446783][ T5683] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 454.496501][ T5683] earthmate ttyUSB0: required endpoint is missing [ 454.562275][ T5683] usb 2-1: USB disconnect, device number 78 [ 454.574333][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.607208][ T5683] cypress_m8 2-1:0.244: device disconnected [ 454.626432][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.724764][T10698] fuse: Bad value for 'fd' [ 454.804960][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1329'. [ 455.023276][ T5675] net_ratelimit: 9 callbacks suppressed [ 455.023299][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.075050][T10704] input: syz1 as /devices/virtual/input/input43 [ 455.148268][T10704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.207239][T10704] netlink: 'syz.1.1332': attribute type 4 has an invalid length. [ 455.226385][T10704] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1332'. [ 455.282105][T10704] .`: renamed from bond0 (while UP) [ 455.687061][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.719837][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.731229][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.744883][T10714] autofs4:pid:10714:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 455.772063][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.063021][ T5697] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 456.092126][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.231844][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.256880][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 456.275697][ T5697] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 456.305006][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.327259][ T5697] usb 2-1: Product: syz [ 456.343055][ T5697] usb 2-1: Manufacturer: syz [ 456.356818][ T5697] usb 2-1: SerialNumber: syz [ 456.382251][ T5697] usb 2-1: config 0 descriptor?? [ 456.817480][ T5697] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 456.882986][ T5697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 456.937486][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.966792][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.978414][ T5697] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 457.022684][ T5697] usb 2-1: media controller created [ 457.038467][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.056581][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.067073][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.103197][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.114284][ T5697] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 457.123481][ T5697] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 457.329789][T10716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.331804][ T5697] usb 2-1: USB disconnect, device number 79 [ 457.387526][ T5697] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 457.493036][ T5609] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 457.665294][ T5609] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 457.693552][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.718634][ T5609] usb 3-1: config 0 descriptor?? [ 457.741971][ T5609] cp210x 3-1:0.0: cp210x converter detected [ 457.917195][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.946369][ T5609] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 457.986080][ T5609] cp210x 3-1:0.0: querying part number failed [ 458.036622][T10738] batadv_slave_1: entered promiscuous mode [ 458.130231][ T5609] usb 3-1: cp210x converter now attached to ttyUSB0 [ 458.144812][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.174546][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.249783][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 458.468411][ T5609] usb 3-1: USB disconnect, device number 52 [ 458.501069][ T5609] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.537075][ T5609] cp210x 3-1:0.0: device disconnected [ 458.555407][ T5698] hid-generic 0000:0200:0000.001F: unknown main item tag 0x0 [ 458.573264][ T5698] hid-generic 0000:0200:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 459.318427][T10736] batadv_slave_1: left promiscuous mode [ 459.326567][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 459.326579][ T29] audit: type=1326 audit(1786378917.464:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10749 comm="syz.2.1343" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f362859e0d9 code=0x0 [ 459.416909][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.448291][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.575836][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 459.631204][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 460.303179][ T5675] net_ratelimit: 5 callbacks suppressed [ 460.303209][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.443872][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.468251][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.311528][T10782] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 461.343197][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.513190][ T5697] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 461.593730][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.617076][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.692988][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 461.708244][ T5697] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.722213][ T5675] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 461.741880][ T5697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.765010][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 461.796243][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.819767][ T5697] usb 2-1: config 0 descriptor?? [ 461.847155][ T5697] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 461.883007][ T5675] usb 3-1: Using ep0 maxpacket: 16 [ 461.888845][ T5675] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 461.907249][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.916332][ T5675] usb 3-1: Product: syz [ 461.925649][ T5675] usb 3-1: Manufacturer: syz [ 461.935576][ T5675] usb 3-1: SerialNumber: syz [ 461.951826][ T5675] usb 3-1: config 0 descriptor?? [ 462.106617][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.125126][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.372683][ T5675] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 462.383811][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.409214][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.441772][ T5675] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 462.454060][ T5675] usb 3-1: media controller created [ 462.495707][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.581857][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.590418][ T5609] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 462.603587][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.624364][ T5675] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 462.634185][ T5675] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 462.688384][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.721380][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.754373][ T5609] usb 5-1: Using ep0 maxpacket: 8 [ 462.764381][ T5609] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.779808][ T5609] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 462.783847][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.805627][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.814712][T10795] ------------[ cut here ]------------ [ 462.821910][T10795] usb 3-1: BOGUS control dir, pipe 80003580 doesn't match bRequestType c0 [ 462.830621][T10795] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.3.1353/10795 [ 462.841357][T10795] Modules linked in: [ 462.845856][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.857081][T10795] Tainted: [L]=SOFTLOCKUP [ 462.862352][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.872543][T10795] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 462.878285][T10795] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 462.898156][T10795] RSP: 0018:ffffc9000586f698 EFLAGS: 00010246 [ 462.904639][T10795] RAX: 0000000000000000 RBX: ffff888035563100 RCX: 0000000080003580 [ 462.912620][T10795] RDX: ffff88807a361ca0 RSI: ffffffff8ca2d4e0 RDI: ffffffff90653c70 [ 462.920712][T10795] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 462.928725][T10795] R10: ffffc9000586f780 R11: fffff52000b0defc R12: 1ffff1100377b754 [ 462.936828][T10795] R13: ffff88801bbdbaa0 R14: ffff88807a361ca0 R15: 0000000080003580 [ 462.944881][T10795] FS: 00007f34ae1c36c0(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 462.950013][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.953887][T10795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.953930][T10795] CR2: 0000001b3371dff8 CR3: 000000004ea32000 CR4: 00000000003526f0 [ 462.953948][T10795] Call Trace: [ 462.953957][T10795] [ 462.953975][T10795] usb_start_wait_urb+0x13f/0x5b0 [ 462.954007][T10795] ? rcu_is_watching+0x15/0xb0 [ 462.992905][T10795] ? trace_kmalloc+0x2a/0xf0 [ 462.997535][T10795] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 463.003156][T10795] usb_control_msg+0x234/0x3e0 [ 463.007956][T10795] dtv5100_i2c_msg+0x231/0x2f0 [ 463.012911][T10795] dtv5100_i2c_xfer+0x1a5/0x610 [ 463.017788][T10795] ? kasan_save_track+0x4f/0x80 [ 463.022647][T10795] ? kasan_save_free_info+0x40/0x50 [ 463.028368][T10795] ? security_file_ioctl+0xc3/0x2a0 [ 463.033699][T10795] ? __se_sys_ioctl+0x47/0x170 [ 463.038478][T10795] __i2c_transfer+0x7be/0x1fe0 [ 463.043394][T10795] __i2c_smbus_xfer+0x1584/0x27d0 [ 463.048421][T10795] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 463.053862][T10795] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.059070][T10795] ? rt_mutex_lock_nested+0x156/0x1c0 [ 463.064560][T10795] i2c_smbus_xfer+0x1f4/0x310 [ 463.069233][T10795] i2cdev_ioctl_smbus+0x407/0x700 [ 463.074374][T10795] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 463.079935][T10795] i2cdev_ioctl+0x615/0x880 [ 463.084520][T10795] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 463.089620][T10795] ? rcu_is_watching+0x15/0xb0 [ 463.094464][T10795] ? bpf_lsm_file_ioctl+0x9/0x20 [ 463.099460][T10795] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 463.105090][T10795] __se_sys_ioctl+0xfc/0x170 [ 463.109677][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.115909][T10795] do_syscall_64+0x174/0x580 [ 463.120532][T10795] ? trace_irq_disable+0x3b/0x140 [ 463.125624][T10795] ? clear_bhb_loop+0x70/0xc0 [ 463.130307][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.136281][T10795] RIP: 0033:0x7f34ad39e0d9 [ 463.140694][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.160358][T10795] RSP: 002b:00007f34ae1c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.168818][T10795] RAX: ffffffffffffffda RBX: 00007f34ad626090 RCX: 00007f34ad39e0d9 [ 463.176822][T10795] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007 [ 463.184904][T10795] RBP: 00007f34ad435024 R08: 0000000000000000 R09: 0000000000000000 [ 463.192964][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.200955][T10795] R13: 00007f34ad626128 R14: 00007f34ad626090 R15: 00007f34ad74fa48 [ 463.209011][T10795] [ 463.212042][T10795] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 463.219317][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.230244][T10795] Tainted: [L]=SOFTLOCKUP [ 463.234562][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.244629][T10795] Call Trace: [ 463.247899][T10795] [ 463.250829][T10795] vpanic+0x56c/0xa60 [ 463.254805][T10795] ? __pfx__printk+0x10/0x10 [ 463.259379][T10795] ? __pfx_vpanic+0x10/0x10 [ 463.263876][T10795] ? is_bpf_text_address+0x292/0x2b0 [ 463.269157][T10795] ? is_bpf_text_address+0x26/0x2b0 [ 463.274344][T10795] panic+0xc5/0xd0 [ 463.278059][T10795] ? __pfx_panic+0x10/0x10 [ 463.282472][T10795] __warn+0x315/0x4c0 [ 463.286444][T10795] ? usb_submit_urb+0x1057/0x18b0 [ 463.291480][T10795] ? usb_submit_urb+0x1057/0x18b0 [ 463.296515][T10795] __report_bug+0x276/0x570 [ 463.301103][T10795] ? usb_submit_urb+0x1057/0x18b0 [ 463.306120][T10795] ? __pfx___report_bug+0x10/0x10 [ 463.311139][T10795] ? __kmalloc_noprof+0x1ad/0x720 [ 463.316158][T10795] ? kasan_save_track+0x4f/0x80 [ 463.321091][T10795] ? kasan_save_track+0x3e/0x80 [ 463.325940][T10795] ? __kasan_kmalloc+0x93/0xb0 [ 463.330701][T10795] report_bug_entry+0x19a/0x290 [ 463.335542][T10795] ? usb_submit_urb+0x1100/0x18b0 [ 463.340569][T10795] ? usb_submit_urb+0x1105/0x18b0 [ 463.345588][T10795] handle_bug+0xce/0x200 [ 463.349832][T10795] exc_invalid_op+0x1a/0x50 [ 463.354348][T10795] asm_exc_invalid_op+0x1a/0x20 [ 463.359187][T10795] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 463.364907][T10795] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 463.384526][T10795] RSP: 0018:ffffc9000586f698 EFLAGS: 00010246 [ 463.390620][T10795] RAX: 0000000000000000 RBX: ffff888035563100 RCX: 0000000080003580 [ 463.398586][T10795] RDX: ffff88807a361ca0 RSI: ffffffff8ca2d4e0 RDI: ffffffff90653c70 [ 463.406563][T10795] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 463.414546][T10795] R10: ffffc9000586f780 R11: fffff52000b0defc R12: 1ffff1100377b754 [ 463.422539][T10795] R13: ffff88801bbdbaa0 R14: ffff88807a361ca0 R15: 0000000080003580 [ 463.430533][T10795] ? usb_submit_urb+0x1091/0x18b0 [ 463.435559][T10795] usb_start_wait_urb+0x13f/0x5b0 [ 463.440590][T10795] ? rcu_is_watching+0x15/0xb0 [ 463.445353][T10795] ? trace_kmalloc+0x2a/0xf0 [ 463.449938][T10795] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 463.455482][T10795] usb_control_msg+0x234/0x3e0 [ 463.460245][T10795] dtv5100_i2c_msg+0x231/0x2f0 [ 463.465045][T10795] dtv5100_i2c_xfer+0x1a5/0x610 [ 463.469934][T10795] ? kasan_save_track+0x4f/0x80 [ 463.474781][T10795] ? kasan_save_free_info+0x40/0x50 [ 463.479986][T10795] ? security_file_ioctl+0xc3/0x2a0 [ 463.485175][T10795] ? __se_sys_ioctl+0x47/0x170 [ 463.489932][T10795] __i2c_transfer+0x7be/0x1fe0 [ 463.494700][T10795] __i2c_smbus_xfer+0x1584/0x27d0 [ 463.499714][T10795] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 463.505117][T10795] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.510312][T10795] ? rt_mutex_lock_nested+0x156/0x1c0 [ 463.515678][T10795] i2c_smbus_xfer+0x1f4/0x310 [ 463.520347][T10795] i2cdev_ioctl_smbus+0x407/0x700 [ 463.525383][T10795] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 463.531008][T10795] i2cdev_ioctl+0x615/0x880 [ 463.535500][T10795] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 463.540511][T10795] ? rcu_is_watching+0x15/0xb0 [ 463.545263][T10795] ? bpf_lsm_file_ioctl+0x9/0x20 [ 463.550184][T10795] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 463.555197][T10795] __se_sys_ioctl+0xfc/0x170 [ 463.559776][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.565827][T10795] do_syscall_64+0x174/0x580 [ 463.570421][T10795] ? trace_irq_disable+0x3b/0x140 [ 463.575431][T10795] ? clear_bhb_loop+0x70/0xc0 [ 463.580098][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.585982][T10795] RIP: 0033:0x7f34ad39e0d9 [ 463.590401][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.609996][T10795] RSP: 002b:00007f34ae1c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.618403][T10795] RAX: ffffffffffffffda RBX: 00007f34ad626090 RCX: 00007f34ad39e0d9 [ 463.626370][T10795] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007 [ 463.634339][T10795] RBP: 00007f34ad435024 R08: 0000000000000000 R09: 0000000000000000 [ 463.642297][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.650332][T10795] R13: 00007f34ad626128 R14: 00007f34ad626090 R15: 00007f34ad74fa48 [ 463.658332][T10795] [ 463.661652][T10795] Kernel Offset: disabled [ 463.665973][T10795] Rebooting in 86400 seconds..