last executing test programs: 10m33.607545878s ago: executing program 1 (id=1539): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103"], 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl(r0, 0x89e2, &(0x7f0000000900)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0140, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 10m32.067635905s ago: executing program 1 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x2, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0x7f00, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000088386f"], 0x34}}, 0x0) 10m31.739905936s ago: executing program 1 (id=1549): ptrace(0x10, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000012e7c820dd0407808edf0102030109024600010000000a09047ef30002060000052406000005240048000d240f01060000000300500036052406000105260009000d240f"], 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdaf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x41}}}}], 0x20}}], 0x1, 0x4880) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r12, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) 10m28.099661421s ago: executing program 1 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x2, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000088386f"], 0x34}}, 0x0) (fail_nth: 3) 10m28.052894381s ago: executing program 1 (id=1554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x800, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0xfffffffb}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482af1000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf000000}, 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) 10m27.825003749s ago: executing program 1 (id=1557): r0 = socket(0x27, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) (async) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000000)={0x8, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x1d28, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{0xec0, 0x1, [@m_mpls={0xf0, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd224e}]}, {0xb9, 0x6, "73d7579a602f0a5381aab12c158671e7d731d80810de7d069af8214b1e54b3328f090cf031ed6ba36f29f68b73f97100289bb065cb40e0221c48d986b57a268142882e045d05cd2b17f34041bd663acaa33d7395cc4a9e89f2fccf3ba5a2d4d5efa2a14d1ebaa47133c93e78339eabbea7861a5ac185e826ad1bc29e3b7bd9878482278ff953044461fccbe443a45e7c0853e78230a3279fae33b228b636267628da2a049896493f098c4ec1be422f800365b99d20"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x34, 0x1d, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xd98, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xd69, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xe54, 0x1, [@m_pedit={0xe50, 0x17, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0x5, 0x4, 0x8c6e, 0x38}, 0x1, 0x5}, [{0x6, 0x5, 0x7, 0x2, 0x71, 0x986f}, {0x6, 0x8000, 0x0, 0x5, 0x81, 0xffffffff}, {0x8, 0x4, 0x5, 0x100, 0x80, 0x1}, {0x7, 0xa, 0x5, 0x1, 0x4, 0x8}, {0x3, 0x10001, 0x9f7, 0x3, 0x8003, 0x81}, {0xea62, 0x0, 0x401, 0xfffffff4, 0x6ce99dfc, 0x364f5d41}, {0xfffffff6, 0x0, 0xdd, 0x0, 0xfffff7af, 0x5}, {0xfff, 0xfff, 0xfffffff8, 0x9, 0x1, 0x8}, {0x3, 0x9, 0x8, 0x9, 0xffffffe0}, {0x1, 0x2, 0x0, 0x6, 0x1, 0x6}, {0x7, 0xffffff40, 0x7, 0x1, 0x9, 0x8}, {0x9, 0x9, 0x58a, 0x8, 0x7fff, 0x2}, {0x400, 0x7, 0x2, 0xc, 0x2, 0x8001}, {0x6, 0xe, 0x0, 0x40000, 0x1, 0x9}, {0xd, 0xb409, 0x80, 0x7, 0x7, 0x3}, {0x8, 0x2, 0x9, 0x7, 0xfffffffe, 0xd}, {0xacb4, 0x7, 0x200, 0x7f, 0x2}, {0x80000000, 0x8, 0x7fffffff, 0x1000, 0x34, 0x2}, {0x1, 0x0, 0x3, 0x1000, 0x2400000, 0x80000000}, {0xffffffff, 0x2ae, 0x3000000, 0x6, 0xaa4, 0x7}, {0x1, 0xfffffffc, 0x8, 0x5, 0x9, 0x4b9}, {0x7f, 0xffff, 0x6, 0x3, 0xcc, 0x7f}, {0xa7f, 0x10000, 0x8, 0x80, 0x5, 0xffffffff}, {0x0, 0x6, 0x1ff, 0x0, 0xfffffff4, 0x5}, {0x2, 0x4, 0x7c07, 0x7, 0x1b, 0xffff5409}, {0x8, 0x1, 0xe, 0xffffffff, 0x7, 0x8}, {0xa, 0x3ff, 0x4, 0x1070745, 0xfff}, {0x887b, 0x8, 0x2, 0x9, 0x800, 0x1}, {0x800, 0xcec, 0x2, 0x7fff, 0x7, 0x2}, {0x800, 0x6, 0xffff, 0x7, 0x5, 0x81}, {0x4, 0x800, 0x7, 0x7, 0x1, 0x2}, {0xe, 0xfffffffc, 0xff, 0x7fffffff, 0x68, 0x3}, {0xff, 0x40, 0x0, 0x10000, 0x3, 0x1}, {0x6, 0x7ff, 0x4, 0x4, 0xffffffff, 0x3}, {0x44, 0x3, 0x1, 0xc3dd, 0x9d}, {0x0, 0x401, 0xffffffff, 0x4, 0x618, 0x4}, {0x444, 0xd, 0xffffff80, 0x76, 0x4, 0x7}, {0x80000001, 0x5, 0x2, 0x7ff, 0xa, 0x80000001}, {0x6, 0x1, 0x4, 0x8, 0x6, 0x9}, {0xe, 0xfffffff8, 0x5, 0x1, 0x4, 0xbab}, {0x0, 0x8, 0x3, 0x4, 0x659, 0x5}, {0x7fff, 0xc, 0xd3a, 0x84000000, 0x80000001}, {0x5, 0x5, 0x0, 0x800, 0x2, 0x8}, {0x2, 0x1, 0xfcd, 0x0, 0x5, 0x2}, {0x75, 0x31880769, 0xffff, 0x2, 0x9, 0x631601d6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x1, 0xfff}, {0x8, 0xf, 0xfffffffb, 0x0, 0x80, 0xa7e}, {0x1, 0xffffff7f, 0x3ff, 0x3, 0xffffffff, 0x8}, {0x2, 0x4bdc, 0x100004, 0x10001, 0x9, 0x7fffffff}, {0x2, 0x1, 0x81, 0x8, 0x400, 0x9}, {0x7f, 0x5, 0x8000, 0x1, 0xfff, 0x80000001}, {0x2, 0x8, 0xffffff28, 0xe99f, 0x4, 0x2}, {0x7, 0x1, 0xfff, 0xd325, 0x3, 0x3adf}, {0x10ac0c70, 0x9, 0x8, 0x6, 0x2, 0x8000}, {0x513c4c23, 0x6, 0x4, 0x3, 0x3, 0xbdf7}, {0x1ff, 0x101, 0x1, 0x7, 0x7, 0x8}, {0x4, 0x7, 0x80000000, 0xa, 0xfffff706}, {0x4, 0x5, 0xfff, 0x1, 0x6, 0x5e}, {0x9, 0x10001, 0x0, 0x0, 0x66}, {0x4, 0x0, 0x7, 0x400, 0x80, 0x4}, {0x81, 0xb24, 0x87d9, 0x5, 0x7f, 0x5}, {0x4, 0x3, 0x5, 0x8, 0x0, 0x10}, {0xffff, 0x511, 0x1, 0x10, 0x0, 0x9}, {0x1, 0x5, 0x3, 0xd, 0x3, 0x10001}, {0x101, 0x6, 0x67d80, 0x667, 0x5, 0x4}, {0x4, 0x5, 0x17f, 0x6, 0xffffffff, 0x81}, {0x0, 0x3, 0x7f, 0x2, 0x81, 0x1ff}, {0x80000001, 0x4, 0xd8f5, 0xffffffff, 0x0, 0x2}, {0x0, 0x6, 0x8, 0x7, 0x0, 0x6}, {0x3, 0x0, 0xfff, 0x1, 0x6, 0xe0}, {0xe8, 0x6, 0x6, 0xffffffff, 0x55e, 0x10000}, {0x9, 0x8, 0xced4, 0x7, 0x7, 0xe9}, {0x3, 0xffe4, 0xed7, 0x5, 0x7, 0x5}, {0x6, 0x80000001, 0x4d9, 0x39, 0x9, 0x4}, {0x2c, 0xb77bb4b, 0x7f, 0x40, 0x9}, {0x2d63, 0x9, 0x5, 0xca9, 0x0, 0xf}, {0x65d44f38, 0x7, 0x4, 0x60c, 0x1, 0x8d75}, {0x1, 0x1, 0x59a, 0xfff, 0x10, 0x9360}, {0x4, 0x1, 0x7, 0x400, 0x9, 0xb}, {0xffff7fff, 0x2, 0x0, 0x10, 0x4, 0x8}, {0x3e06, 0x15, 0x40, 0xffff, 0x72, 0x5}, {0x9, 0x74d, 0x1, 0xffff23c4, 0x5, 0x2}, {0xc, 0x8ee0, 0x0, 0x3, 0x3}, {0x100, 0x5, 0x9, 0xc, 0x80000001, 0x7}, {0x7, 0x0, 0x1000, 0x10001, 0x9, 0x2}, {0x4, 0x0, 0x8, 0x1, 0x2, 0x9}, {0x2, 0x200, 0xb, 0x40, 0xe, 0x7}, {0x6, 0x1, 0x861a, 0x7, 0xffff, 0x1}, {0x4, 0xff, 0x9c1, 0xff, 0x7}, {0x3, 0x2, 0x8fc0, 0x7f, 0xffffffff, 0x5}, {0x658, 0xd, 0x1, 0x1, 0x41, 0xd91}, {0x9, 0x800, 0xa2e, 0xfffffffb, 0x3, 0xf9}, {0x37c, 0xfffffffb, 0x4, 0x10001, 0x5, 0x6}, {0x0, 0x2, 0x1, 0x401, 0x2, 0x5}, {0x9, 0x4, 0x9, 0xe, 0x4, 0xffffffb7}, {0x8, 0x7, 0x1ff, 0x8, 0xa42c, 0x1}, {0x6, 0x3, 0x800000, 0x8000, 0x755, 0xffffffff}, {0x4, 0x5, 0x99, 0xf, 0x6, 0x85}, {0x6, 0x3, 0x2, 0xb, 0x80000001, 0x10000}, {0x3d0, 0x401, 0xb, 0x5, 0x7ff, 0x971}, {0xfffff8a8, 0xa0000, 0x8, 0x7fff, 0x8000, 0x80}, {0x9, 0x7, 0x80000001, 0xfffffffe, 0x2, 0x201}, {0xfff, 0x648, 0x3, 0x1680, 0x5, 0x5a0d}, {0x7ff, 0xf, 0xd42c, 0x1, 0xaf, 0x8}, {0x5, 0x554, 0x1ff, 0x80000001, 0x40, 0x7ff}, {0x2, 0xa83, 0xffffff01, 0x777a, 0x0, 0x2e92}, {0x6, 0x47, 0x40f4, 0xe8, 0x8, 0x258}, {0x5, 0xd41, 0xd3, 0x3, 0x5, 0x8}, {0x5, 0xffffffff, 0x7, 0x80000001, 0x1}, {0x6, 0x2, 0x5, 0xd, 0x0, 0x2}, {0xa5c, 0x0, 0x5, 0x100, 0x0, 0x2}, {0x5f374afb, 0x5, 0xa, 0x2, 0x6, 0x1}, {0x2, 0x9, 0xe, 0x8, 0x7ff, 0x800}, {0x5, 0x7, 0xfffffff9, 0x0, 0x7, 0x8}, {0xfffffffd, 0x2081, 0x2, 0x1, 0xd50, 0x9}, {0x1000, 0x9, 0x80000000, 0x3, 0xfff, 0x5}, {0x9, 0xa, 0x6, 0x3, 0x7, 0xffffe9fd}, {0x3, 0xd495, 0x80, 0x3, 0xb7a, 0x7}, {0x2, 0x3, 0x9, 0x6, 0x4, 0x5}, {0x2, 0x5, 0x7, 0x81, 0x1, 0xa}, {0x7d7, 0x7, 0x4a48d3ef, 0x0, 0x0, 0x8}, {0x4, 0x5, 0x6e6, 0x1, 0x3, 0x1}, {0x0, 0x0, 0x52, 0x3, 0x3, 0x7fffffff}, {0x2, 0x0, 0x1, 0xffffffff, 0x4, 0xfff}, {0x100, 0x7f, 0x1, 0x1, 0x7, 0xfffffff8}, {0x5, 0x101, 0x3, 0x8, 0x4, 0x1}, {0x452b, 0xaa07, 0x4, 0x5, 0x100, 0x5a}, {0x24f4, 0x2, 0x80000000, 0x5, 0x2, 0x80000001}], [{0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x2}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x23a1f3dae12c78c5, 0x1}}}}]}]}, 0x1d28}}, 0x20004055) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba2d23b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000800)={0x46, 0x2, 0x2, "d020000f04809256a641d2a56862be0000000000000200000000008000", 0x47524247}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r10, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f, r10}) 10m12.79772411s ago: executing program 32 (id=1557): r0 = socket(0x27, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) (async) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000000)={0x8, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x1d28, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{0xec0, 0x1, [@m_mpls={0xf0, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd224e}]}, {0xb9, 0x6, "73d7579a602f0a5381aab12c158671e7d731d80810de7d069af8214b1e54b3328f090cf031ed6ba36f29f68b73f97100289bb065cb40e0221c48d986b57a268142882e045d05cd2b17f34041bd663acaa33d7395cc4a9e89f2fccf3ba5a2d4d5efa2a14d1ebaa47133c93e78339eabbea7861a5ac185e826ad1bc29e3b7bd9878482278ff953044461fccbe443a45e7c0853e78230a3279fae33b228b636267628da2a049896493f098c4ec1be422f800365b99d20"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x34, 0x1d, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xd98, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xd69, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xe54, 0x1, [@m_pedit={0xe50, 0x17, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0x5, 0x4, 0x8c6e, 0x38}, 0x1, 0x5}, [{0x6, 0x5, 0x7, 0x2, 0x71, 0x986f}, {0x6, 0x8000, 0x0, 0x5, 0x81, 0xffffffff}, {0x8, 0x4, 0x5, 0x100, 0x80, 0x1}, {0x7, 0xa, 0x5, 0x1, 0x4, 0x8}, {0x3, 0x10001, 0x9f7, 0x3, 0x8003, 0x81}, {0xea62, 0x0, 0x401, 0xfffffff4, 0x6ce99dfc, 0x364f5d41}, {0xfffffff6, 0x0, 0xdd, 0x0, 0xfffff7af, 0x5}, {0xfff, 0xfff, 0xfffffff8, 0x9, 0x1, 0x8}, {0x3, 0x9, 0x8, 0x9, 0xffffffe0}, {0x1, 0x2, 0x0, 0x6, 0x1, 0x6}, {0x7, 0xffffff40, 0x7, 0x1, 0x9, 0x8}, {0x9, 0x9, 0x58a, 0x8, 0x7fff, 0x2}, {0x400, 0x7, 0x2, 0xc, 0x2, 0x8001}, {0x6, 0xe, 0x0, 0x40000, 0x1, 0x9}, {0xd, 0xb409, 0x80, 0x7, 0x7, 0x3}, {0x8, 0x2, 0x9, 0x7, 0xfffffffe, 0xd}, {0xacb4, 0x7, 0x200, 0x7f, 0x2}, {0x80000000, 0x8, 0x7fffffff, 0x1000, 0x34, 0x2}, {0x1, 0x0, 0x3, 0x1000, 0x2400000, 0x80000000}, {0xffffffff, 0x2ae, 0x3000000, 0x6, 0xaa4, 0x7}, {0x1, 0xfffffffc, 0x8, 0x5, 0x9, 0x4b9}, {0x7f, 0xffff, 0x6, 0x3, 0xcc, 0x7f}, {0xa7f, 0x10000, 0x8, 0x80, 0x5, 0xffffffff}, {0x0, 0x6, 0x1ff, 0x0, 0xfffffff4, 0x5}, {0x2, 0x4, 0x7c07, 0x7, 0x1b, 0xffff5409}, {0x8, 0x1, 0xe, 0xffffffff, 0x7, 0x8}, {0xa, 0x3ff, 0x4, 0x1070745, 0xfff}, {0x887b, 0x8, 0x2, 0x9, 0x800, 0x1}, {0x800, 0xcec, 0x2, 0x7fff, 0x7, 0x2}, {0x800, 0x6, 0xffff, 0x7, 0x5, 0x81}, {0x4, 0x800, 0x7, 0x7, 0x1, 0x2}, {0xe, 0xfffffffc, 0xff, 0x7fffffff, 0x68, 0x3}, {0xff, 0x40, 0x0, 0x10000, 0x3, 0x1}, {0x6, 0x7ff, 0x4, 0x4, 0xffffffff, 0x3}, {0x44, 0x3, 0x1, 0xc3dd, 0x9d}, {0x0, 0x401, 0xffffffff, 0x4, 0x618, 0x4}, {0x444, 0xd, 0xffffff80, 0x76, 0x4, 0x7}, {0x80000001, 0x5, 0x2, 0x7ff, 0xa, 0x80000001}, {0x6, 0x1, 0x4, 0x8, 0x6, 0x9}, {0xe, 0xfffffff8, 0x5, 0x1, 0x4, 0xbab}, {0x0, 0x8, 0x3, 0x4, 0x659, 0x5}, {0x7fff, 0xc, 0xd3a, 0x84000000, 0x80000001}, {0x5, 0x5, 0x0, 0x800, 0x2, 0x8}, {0x2, 0x1, 0xfcd, 0x0, 0x5, 0x2}, {0x75, 0x31880769, 0xffff, 0x2, 0x9, 0x631601d6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x1, 0xfff}, {0x8, 0xf, 0xfffffffb, 0x0, 0x80, 0xa7e}, {0x1, 0xffffff7f, 0x3ff, 0x3, 0xffffffff, 0x8}, {0x2, 0x4bdc, 0x100004, 0x10001, 0x9, 0x7fffffff}, {0x2, 0x1, 0x81, 0x8, 0x400, 0x9}, {0x7f, 0x5, 0x8000, 0x1, 0xfff, 0x80000001}, {0x2, 0x8, 0xffffff28, 0xe99f, 0x4, 0x2}, {0x7, 0x1, 0xfff, 0xd325, 0x3, 0x3adf}, {0x10ac0c70, 0x9, 0x8, 0x6, 0x2, 0x8000}, {0x513c4c23, 0x6, 0x4, 0x3, 0x3, 0xbdf7}, {0x1ff, 0x101, 0x1, 0x7, 0x7, 0x8}, {0x4, 0x7, 0x80000000, 0xa, 0xfffff706}, {0x4, 0x5, 0xfff, 0x1, 0x6, 0x5e}, {0x9, 0x10001, 0x0, 0x0, 0x66}, {0x4, 0x0, 0x7, 0x400, 0x80, 0x4}, {0x81, 0xb24, 0x87d9, 0x5, 0x7f, 0x5}, {0x4, 0x3, 0x5, 0x8, 0x0, 0x10}, {0xffff, 0x511, 0x1, 0x10, 0x0, 0x9}, {0x1, 0x5, 0x3, 0xd, 0x3, 0x10001}, {0x101, 0x6, 0x67d80, 0x667, 0x5, 0x4}, {0x4, 0x5, 0x17f, 0x6, 0xffffffff, 0x81}, {0x0, 0x3, 0x7f, 0x2, 0x81, 0x1ff}, {0x80000001, 0x4, 0xd8f5, 0xffffffff, 0x0, 0x2}, {0x0, 0x6, 0x8, 0x7, 0x0, 0x6}, {0x3, 0x0, 0xfff, 0x1, 0x6, 0xe0}, {0xe8, 0x6, 0x6, 0xffffffff, 0x55e, 0x10000}, {0x9, 0x8, 0xced4, 0x7, 0x7, 0xe9}, {0x3, 0xffe4, 0xed7, 0x5, 0x7, 0x5}, {0x6, 0x80000001, 0x4d9, 0x39, 0x9, 0x4}, {0x2c, 0xb77bb4b, 0x7f, 0x40, 0x9}, {0x2d63, 0x9, 0x5, 0xca9, 0x0, 0xf}, {0x65d44f38, 0x7, 0x4, 0x60c, 0x1, 0x8d75}, {0x1, 0x1, 0x59a, 0xfff, 0x10, 0x9360}, {0x4, 0x1, 0x7, 0x400, 0x9, 0xb}, {0xffff7fff, 0x2, 0x0, 0x10, 0x4, 0x8}, {0x3e06, 0x15, 0x40, 0xffff, 0x72, 0x5}, {0x9, 0x74d, 0x1, 0xffff23c4, 0x5, 0x2}, {0xc, 0x8ee0, 0x0, 0x3, 0x3}, {0x100, 0x5, 0x9, 0xc, 0x80000001, 0x7}, {0x7, 0x0, 0x1000, 0x10001, 0x9, 0x2}, {0x4, 0x0, 0x8, 0x1, 0x2, 0x9}, {0x2, 0x200, 0xb, 0x40, 0xe, 0x7}, {0x6, 0x1, 0x861a, 0x7, 0xffff, 0x1}, {0x4, 0xff, 0x9c1, 0xff, 0x7}, {0x3, 0x2, 0x8fc0, 0x7f, 0xffffffff, 0x5}, {0x658, 0xd, 0x1, 0x1, 0x41, 0xd91}, {0x9, 0x800, 0xa2e, 0xfffffffb, 0x3, 0xf9}, {0x37c, 0xfffffffb, 0x4, 0x10001, 0x5, 0x6}, {0x0, 0x2, 0x1, 0x401, 0x2, 0x5}, {0x9, 0x4, 0x9, 0xe, 0x4, 0xffffffb7}, {0x8, 0x7, 0x1ff, 0x8, 0xa42c, 0x1}, {0x6, 0x3, 0x800000, 0x8000, 0x755, 0xffffffff}, {0x4, 0x5, 0x99, 0xf, 0x6, 0x85}, {0x6, 0x3, 0x2, 0xb, 0x80000001, 0x10000}, {0x3d0, 0x401, 0xb, 0x5, 0x7ff, 0x971}, {0xfffff8a8, 0xa0000, 0x8, 0x7fff, 0x8000, 0x80}, {0x9, 0x7, 0x80000001, 0xfffffffe, 0x2, 0x201}, {0xfff, 0x648, 0x3, 0x1680, 0x5, 0x5a0d}, {0x7ff, 0xf, 0xd42c, 0x1, 0xaf, 0x8}, {0x5, 0x554, 0x1ff, 0x80000001, 0x40, 0x7ff}, {0x2, 0xa83, 0xffffff01, 0x777a, 0x0, 0x2e92}, {0x6, 0x47, 0x40f4, 0xe8, 0x8, 0x258}, {0x5, 0xd41, 0xd3, 0x3, 0x5, 0x8}, {0x5, 0xffffffff, 0x7, 0x80000001, 0x1}, {0x6, 0x2, 0x5, 0xd, 0x0, 0x2}, {0xa5c, 0x0, 0x5, 0x100, 0x0, 0x2}, {0x5f374afb, 0x5, 0xa, 0x2, 0x6, 0x1}, {0x2, 0x9, 0xe, 0x8, 0x7ff, 0x800}, {0x5, 0x7, 0xfffffff9, 0x0, 0x7, 0x8}, {0xfffffffd, 0x2081, 0x2, 0x1, 0xd50, 0x9}, {0x1000, 0x9, 0x80000000, 0x3, 0xfff, 0x5}, {0x9, 0xa, 0x6, 0x3, 0x7, 0xffffe9fd}, {0x3, 0xd495, 0x80, 0x3, 0xb7a, 0x7}, {0x2, 0x3, 0x9, 0x6, 0x4, 0x5}, {0x2, 0x5, 0x7, 0x81, 0x1, 0xa}, {0x7d7, 0x7, 0x4a48d3ef, 0x0, 0x0, 0x8}, {0x4, 0x5, 0x6e6, 0x1, 0x3, 0x1}, {0x0, 0x0, 0x52, 0x3, 0x3, 0x7fffffff}, {0x2, 0x0, 0x1, 0xffffffff, 0x4, 0xfff}, {0x100, 0x7f, 0x1, 0x1, 0x7, 0xfffffff8}, {0x5, 0x101, 0x3, 0x8, 0x4, 0x1}, {0x452b, 0xaa07, 0x4, 0x5, 0x100, 0x5a}, {0x24f4, 0x2, 0x80000000, 0x5, 0x2, 0x80000001}], [{0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x2}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x23a1f3dae12c78c5, 0x1}}}}]}]}, 0x1d28}}, 0x20004055) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba2d23b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000800)={0x46, 0x2, 0x2, "d020000f04809256a641d2a56862be0000000000000200000000008000", 0x47524247}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r10, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f, r10}) 12.303172092s ago: executing program 2 (id=4651): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000b00)='\n', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}}], 0x2, 0x440088d4) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x5, 0x5, 0x4, 0x1, 0x9}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x1, 0xc8fc, 0x0, 0x0, 0xe, 0xb7, 0xffffff59, 0x7, r1}, &(0x7f00000004c0)=0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103aff0000c800000000000000ffffe0000001ff0200000000000000000000000000018900907801fe000000000010feffffff"], 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r3 = socket$inet(0x2, 0x80001, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x573100) pread64(r4, &(0x7f0000001600)=""/4081, 0xff1, 0x2) writev(r0, &(0x7f0000000400), 0x100000000000017b) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r6 = memfd_create(&(0x7f0000000500)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2l?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n\x19\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000, 0x300000000000000}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x22000800) 9.836344161s ago: executing program 2 (id=4659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x20, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) 9.360147437s ago: executing program 0 (id=4662): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0000000a06010100000000000000000500000a080009400000000308000940000000080800094000000003100008800c0007800500150003000000240007800c001480080001406401010008000a40fffff1743ba1f75e0900130073797a310000000024000780060004404e2300000900120073797a32000000000900130073797a320000000005000100"], 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x20050014) (async) syz_io_uring_setup(0x48eb, &(0x7f00000004c0)={0x0, 0xd189, 0xdef8c8bd4ddf520b, 0x2, 0x135}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@delqdisc={0x8c, 0x25, 0x200, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r1, {0xfff1, 0x4}, {0xfff2, 0x2}, {0x10, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x84}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x5, 0xf, 0x2, 0xffff8001, 0xb, 0x3}}, {0xa, 0x2, [0x80, 0x7, 0x3]}}, {{0x1c, 0x1, {0x4, 0x10, 0xdc9, 0x6, 0x1, 0x4, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0x556, 0xff, 0x5, 0x3ff]}}]}, @TCA_RATE={0x6, 0x5, {0xfd, 0xf}}]}, 0x8c}}, 0x0) 9.103882259s ago: executing program 0 (id=4663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x824, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x8, 0x3, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8001, 0x0, 0x1, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) 8.100528679s ago: executing program 0 (id=4666): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x26c, 0x0, 0x8000010100000}]}) getsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x378, 0x0, 0x1b0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0x0, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x3, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xff, 0x0, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r11, 0x4048587b, &(0x7f0000002580)={{r11, &(0x7f0000000040)='-\x00', 0x101000, &(0x7f0000000080)={@align=0x8000000000000001, {0x400, 0xeb72, 0x401, 0xfffffffffffffff9}}, 0x8dcd, &(0x7f0000000100), &(0x7f0000000140)=0xe}, 0x4, &(0x7f00000024c0)=[{0x3, 0x2, &(0x7f0000000180)='bond\x00', &(0x7f00000001c0), 0x0, 0x22}, {0x2, 0x0, &(0x7f00000002c0)='bond\x00', &(0x7f0000001280)="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", 0x77f, 0x10}, {0x1, 0xc108, &(0x7f0000002280)='bond\x00', &(0x7f00000022c0)="5e2058d038e8a21005a2b188fc415705df5e950ec28259e842d0f085084ac6d4cdb73e28281cd202731518b29a71f9f54e837563852aab3bf9f78d607a0af0932df137a4267b957ea0116e22a2829f4b19b1834ffa59d247deb52b312f910358f5a32ee0bfb16dc4ef842c1bcb5fdcf68f187990849a2804e8c6aa1a92575f9903434ef99ad0281465d5ee4a521ec7ec5fa95f00b3ed99c806040c63eb7018ba2a984d0ea2b2eb2e8a308aca6f058154e23f4c2275a5", 0xb6, 0xa}, {0x3, 0x9, &(0x7f0000002380)='bond\x00', &(0x7f00000023c0)="19ac97ca9d1fa1e16c772c9f349b979f343a2eecb0172207895cc4fd50157895a782d34f9442515309ae2b91670942c22e1a6dafa88287c94398b802be2f8bb9f9e5eef692993456cf61bb77f56bf721125b15aad9175fa708cc07b8e744191ba67cb3b475925ca5639136e681aa4c77fd720b6ab70c881d38f94034e80221fe6f675722d8cb26d39f73367e983462825777fe788b4f7cb9f572b14a5f91afd56b410c4c342c1b47c16b457ebff50472504ea9d646b5f2b21ec964ed56d9d18d00dc8077c54132916d0e5d9115a3fe17eb09b13cbe12f3d7f762ebaa923cfe8a71fcdcd75ec4a4dc01", 0xe9, 0x3a}]}) getsockopt$inet6_mreq(r12, 0x29, 0x1b, 0x0, &(0x7f0000002640)) writev(r11, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') 5.994605272s ago: executing program 0 (id=4672): syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x280a1) r0 = epoll_create(0xffd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x0, 0x0, 0x32315659, 0x7, 0x9, 0xfffffffe, 0x9, 0xffffff81, 0x0, 0x0, 0x1, 0x7}}) unshare(0x22020400) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r3, 0x5, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 5.868549625s ago: executing program 0 (id=4673): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x6, 0x102, 0x4, {0x0, 0x8, 0x52, 0xd363}}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x3ff, 0x4, 0x4, 0x40, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x4, 0xee, 0x3, 0x7, "e0b2ddd2"}, 0x7fff, 0x3, {&(0x7f0000000100)=[{0x2, 0x4, {0x6}, 0x8}, {0xa, 0x25db, {0x7}}]}, 0x40, 0x0, 0xffffffffffffffff}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000340)={0x0, r0, 0x5e3, 0x7, 0x80000000, 0x10001}) (async, rerun: 32) syz_usb_connect(0x2, 0xc7, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224170101020000000000000000030000000924030201010003000c24050300ee0002", @ANYBLOB="64be45a443"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) r3 = socket(0xa, 0x5, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x1ff}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) listen(r3, 0x100) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x40, r12, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r11) (async) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00030000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 4.845994517s ago: executing program 4 (id=4680): socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x280a1) r1 = epoll_create(0xffd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 3.966850664s ago: executing program 4 (id=4684): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}]}, 0x40}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmmsg$sock(r3, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000000c0)=0x6cb) 3.692777146s ago: executing program 2 (id=4685): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0502ecffffff00dcdf251200000018000180140002006475696d793000000000000000000000080009000500000018000180140002006e657464657673696d30"], 0x4c}}, 0x4c000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000cc0)={{r0, &(0x7f00000000c0)='/dev/kvm\x00', 0x410000, &(0x7f0000000440)={@align=0x81, {0xfff8, 0x57b, 0xa, 0xfffffffffffffff9}}, 0x8, &(0x7f0000000480), &(0x7f00000004c0)}, 0x6, &(0x7f0000000c00)=[{0x1, 0xb, &(0x7f0000000500)='[\xe5!^+)\x00', &(0x7f0000000600)="8c5113832de280aa6f55655b1f11d0a88ffc6674ff2e24773653005657e992c13d525ee31c8a062c5bb61b82215427e23888c36ac6d745d29adef21ef4268aba13153b7e9b40d3d13502dca3ceca3162d47602d07be20620d15dfd1a7f37cd60dee62e36f50062109ce357c432e3e511a3911ccd677def796ce9662738e65b180dd49a2266c2d6e7c221d3375de681de873eb2040eec59445519fa8ecae06950725fc05c4368dd8167d0c4c67426bed836", 0xb1}, {0x2, 0x1, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="777068f7f793d7bee90501614bb03615cc9697ac570aea11f839b4c23a3cfe2fd0ed9a06743162114df8300dbc522b6ac4403505d85382a86002bc1c63314641ecc1606f77eeed5a9541447ac53c79854b14f8462f0518223b201f2c043aed45973af7459d78704ce2c6b410aa7d357c57d6aaf9b645603e2fea190dd074c42e7cfa0667e2fb978e8c7218aad3bdcf9b8ab2e1c156a49a6cd3101ec21d0cd663d86347c8397db65598aee48f164b361688f3b535efe95c45d45db5450d8bef07e92d8210294b04fd4bee16d392c4fcd108bf665a3a", 0xd5, 0x32}, {0x3, 0x8, &(0x7f0000000800)='-/[}\\.\x00', &(0x7f0000000840)="2871642e85d74e15d5d74051f9bd9a0d01b287bfdca0ea6c42c58001ad579f522d8b70555c60ba34fa42293fd8a218d9f37c70396040e563866d3f787437f4d1554a014dcd6a04dfd62a236b6a507c0e1dce13cccd950aadfab53c1b8172f6c1b47d68799e2dff5a62e0dffca7348650746f2f6b2c080b69ea094b19ea10dd1738fbc77e", 0x84}, {0x2, 0x101, &(0x7f0000000900)='[{[{\xbc][)y\x00', &(0x7f0000000940)="176e3ca86402b279c2fc43be8fc58bd7ce81f0f376608f2e33dc36692ab66c00e314f0041f7c000d6b12ac0b8c3256daac24360b0f6d79bbadaaa1fc243f4dc1bf039de5d7f7356a5e3148ed27bb4886d583fcda2a91931e92b699a510823d98c87d8a5fbd50b8b765483700ad3c25788e69834b8651c7a84578ed82bc648bcff00912ebd64555f38972bfa84e", 0x8d, 0x10}, {0x1, 0x2f1d, &(0x7f0000000a00)='tls', &(0x7f0000000a40)="e48b24cbca98c49b97e5b8502adde653308c929d734af82b4b78c208d86a73597d758dbb80781bb43b60de4d4e770edf0336685906bb8da31b5a541e1ca2ea8336040f7d47b5f734a3ba32befff4f08c307c0d1c28312e73c86426b92753174ae72cc4b045fb19e0159d8c0ec423401002d60e11f6dfd870b3dbe5894287ee8990b34d56458402ae63df91e58084211f7548ab70c6fe1e98e04171382cb89475ec568e", 0xa3, 0x2}, {0x3, 0x8, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="aa21836fb9d239e48b7966db77142efe7267badb79e5d1c6ef45b8c7fad7894acf1e4e3b8431244c1955a8b5becf3810616328cf916deef338079f1a966a08ed37b1cf2a39e78485fe9206c4d6be5a6803d062c46aecd383d7d0656bc4ecfafcaabfbd5acb42f7bf5f4e45d7a6ca2eca5d95dcf2d003fd63b3b643e037dcc614dd5668ecafa23d7ca217d714a062", 0x8e}]}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r4, &(0x7f0000000080)={0xb, 0x75, 0x2}, 0xb) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0) sendfile(r5, r4, 0x0, 0x100000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000840)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b00010104800d090400000100000000052406000005240001000d240f01000800000600ff0f0009058202000207cc00090503020004060102"], &(0x7f0000000d40)={0x0, 0x0, 0xc, &(0x7f0000000940)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0xa, 0x483c}]}}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES16=0x0, @ANYRESDEC], 0x22) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r9, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) 3.042929273s ago: executing program 4 (id=4690): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/173, 0xad}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) syncfs(r0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) (async) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x3, 0x4, 0x3, 0x4}}, 0x2e) (async) creat(&(0x7f0000000000)='./file0\x00', 0x5a) 2.952726247s ago: executing program 5 (id=4691): socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 2.95237529s ago: executing program 4 (id=4692): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.841925562s ago: executing program 4 (id=4693): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./mnt\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x40408d1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) rt_sigsuspend(&(0x7f0000001000)={[0x7fffffffffffffff]}, 0x8) 2.766517046s ago: executing program 0 (id=4694): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f00000001c0)={0x40, 0xe, 0x5c, {0x5c, 0xc, "c5745a7f16e8bae43c9bc805008df1557d792e07faffe04795c92eabd8db0bc5b1feabed097fe5adf604071da372a73ce0deed1db4e6c1afc7de667656eaccf85a477f7827fb50b91d9bea6203943f47169919e3b5707d1ff2da"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="0003c9000000c9039b5fa8a909d82f2bb962e61f07298fa117583723de1e589820a2ae3283ae13d4d34d0928511d1520c9e80d34ee6b54283c4f34ac477776f5fa3885de795adfadda1deef0ef488c73a503060ac8b4bf96c85e50d1e2e24c592a1465dc9d9de8390021d04080f7d4e8f0d083bce0eb5932cf1a9e900136db7b08e60b4de283557c708c67f51a594ae624003045f6f43c355c38aa57a70048dcd18f899e2b27ad8d949a51007525e8bc86e972e4ac480e5496f1f70b70e930ddc8c32132b19492e74d30851f6fd0f0d03c40", @ANYBLOB="dbf4fcd2abd6d7ab7a37c2c10cec9c6f9d7c5df998d870d59fa60c2a5e77fdac7a25bcbb567b7e6bea5e6f7ba6be2cb2f93f406b75fdefe1b9c9d976367f4d1ae89812ee11db867a3c3616fa42cb387cfc6202728aa5510cb030ce03cb79dd61616a11459136b249e1dae5826e97d796181f"], &(0x7f0000000140)={0x0, 0x22, 0x1e, {[@global=@item_4={0x3, 0x1, 0x1, "a63e2727"}, @global=@item_4={0x3, 0x1, 0x5, "6cb1cc4b"}, @global=@item_4={0x3, 0x1, 0x1, "a112eecc"}, @main=@item_4={0x3, 0x0, 0xa, "2f7aeeea"}, @main=@item_4={0x3, 0x0, 0x8, "27abc53c"}, @local=@item_4={0x3, 0x2, 0x8, "7e3424a2"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xa9b}}}}, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)={0x0, 0x13, 0x84, "7dcbada18a89bb2536fff2c0679437de8e44d907256c37eb0c84ed76e0fc1b90478c909364522bfb072e2a8535938cf88c688fb918afbb011425a7d9243f00c34f1c1ceec3cc78024cef3fffe4d41cdd68a211408bcd18df2f7a6b3dcd58e67506e1d261fc498499f55dfd4d82ff6943e7551aaabde7fb7e250e5d32526d67c98d534758"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x47}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000680)=ANY=[@ANYBLOB="2001e0000000495d0a98fcd83d7fbb527be4d58edfa8a83923e0c4cf10efe209e20cf822b3881819bd9a46b12eef57e433c4b0e6914d8d229b4d48f5299acbab0eba4b052cff107d88ab662af2ce1dd2ff8a475b35485315b544220b8b3b7e71db95c0bd5ae48c152fd362ea8e42bf4e7c456c5d932ee553c9f8836b8085a0d3cfd1f3c5e147bb6d3f2ca355f1e5074fd23fdb29a381b12f456616c6e6d396e800aa315ee5c8b64271849428d1d9b8b941a0cd60b699e16accd021de0eb40d13aa55ec8b6c519a0a44eef84727c4de5e2efc8b43bfff30fe721ee5394320fd632045c6d7c4b5"], &(0x7f0000000780)={0x20, 0x3, 0x1, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @local, r4}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, 0x0, 0x0, 0x0}, 0x0) 2.741045381s ago: executing program 3 (id=4695): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 2.233134397s ago: executing program 3 (id=4696): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) (async) close(r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB="0a0f00"/12], 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 2.138229843s ago: executing program 2 (id=4697): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x26, &(0x7f0000000b00)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000627395b41b47ae08000000b703000000010000850000000600001c18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018330000030000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000184700000600"/120], &(0x7f0000000680)='syzkaller\x00', 0x401, 0x2f, &(0x7f00000006c0)=""/47, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000700)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x6, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x2, 0x1, 0xc, 0x9}, {0x1, 0x4, 0x8, 0xb}, {0x3, 0x5, 0x6, 0x6}, {0x1, 0x2, 0x0, 0xa}], 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x1b, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004000) r3 = io_uring_setup(0x7d3, &(0x7f0000000280)={0x0, 0xb1e1, 0x2, 0xfffffffe, 0x181}) close_range(r3, r3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) userfaultfd(0x80001) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000040)=0x8, 0x4) 2.024041268s ago: executing program 2 (id=4698): syz_usb_connect(0x2, 0x59, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003dae3587cc112276bad48010203010902470003020f30810900fb0000ff05340009040304014bbde45209058001ff03f8d806080b1cff8a2ca8a50904f48001843a410309050b1c4000470102090be2a70000cbdab6"], &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) 2.022319807s ago: executing program 3 (id=4699): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xe00, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x4}}}, &(0x7f0000000480)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000480)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 2.022053642s ago: executing program 5 (id=4700): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x4000011, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x401, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x4, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8005, 0x3, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x1005, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0xeb4b, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x203, 0xb, 0xfff]}, 0x45c) unshare(0x2a020400) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = epoll_create(0xeb5) r4 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x10000000}) sendfile(r1, r2, 0x0, 0x20000023896) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.891272716s ago: executing program 4 (id=4701): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x280a1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4080805) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x4, 0x1, 0x0, "2bc2e5e90305f7039755f3a0c982942b3bea91e54e20866b70dc1a0bed5f403a", 0x2036315a}) syz_usb_control_io(r8, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xe2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x1f, {0x9, 0x21, 0xe4, 0x1, 0x1, {0x22, 0x42e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xf9, 0x2}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x301, 0xd3, 0x5, 0x6, 0x10, 0x9}, 0x51, &(0x7f0000000900)={0x5, 0xf, 0x51, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x6, 0xe}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x944, 0xf0f, 0xffff, [0x3f0f, 0xf, 0xff0017, 0xf, 0x30, 0x3ff0]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x4, 0xf00f, 0x0, [0xc060, 0xff3f00, 0xff0030]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x95, &(0x7f0000000980)=@string={0x95, 0x3, "a2645536f3238f5fd3b524940f44620ccb691a806c61606f6cad49ece14a586eb2d24ef028f45b87c0919c2fcdcb80cda41aa4749321014669c46537db67a59daec7b4444961678a5b9f585d29019471fa1a99d6016cdc97ba2d32e209fe65e49cf98a8da1d2555802a0f93da59236dc00381f517d6ac4b052c3245b563af3218ca48878d9f4929a936a9e6d2bd036541c710f"}}, {0x3b, &(0x7f0000000a40)=@string={0x3b, 0x3, "142c720a33cde8ae41e06a2fa300386e9d080b8e0d2ca4e24dc5cc1d588db0ea6e59433a07702f05921a0bef4e7c016723b1ed9c4aa6e625fd"}}]}) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c8001800a00010071756f74610000001c0002800c00014000000000000000f60c1100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r11 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r11, 0x80085617, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc0105b08, &(0x7f0000000040)) r13 = epoll_create(0xffd) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 1.853569523s ago: executing program 5 (id=4702): r0 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000300)=[{0x2, 0x0, 0x0}, {0xfffffffd, 0x0, 0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107e0000000000170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.679954777s ago: executing program 5 (id=4703): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x0, 0x800) read(r0, &(0x7f0000000300)=""/4096, 0x1000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x3, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0x4c, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000800)=""/212, &(0x7f0000000700)=0xd4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f00000001c0)={0x180, 0x6, 0x9, 0x8001, 0xd}, 0x14) close(r14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, 0x0, 0x4000000) syz_ublk_setup_queues(r12, r10, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7fb, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x6d, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r9, '\x00', {0x2, 0xfffd, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) 1.049713143s ago: executing program 3 (id=4704): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000206050005000400010000000900020073797a320000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) 658.329848ms ago: executing program 3 (id=4705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x80000000000000, 0xa, 0x10001, 0x101000, 0x5, 0x8000000000000000, 0x8, 0x3, 0x88, 0x2, 0x6, 0x8bda, 0x7f, 0x0, 0x7ff], 0x54000, 0xd0347}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 328.493455ms ago: executing program 3 (id=4706): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000000)='\x00') pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000002c0)=0xd) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x4}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) 88.196069ms ago: executing program 5 (id=4707): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_vif\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/-:-^:', 0x3a, '1\xaf', 0x3a, './file0'}, 0x2f) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) 0s ago: executing program 5 (id=4708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) ioctl(r1, 0x4048aecb, &(0x7f0000000200)="01000000000000000900"/72) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f000000b000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x1, 0x0, 0x9000, 0x1000, &(0x7f000000c000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0xc0c4) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000040), 0x50) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000600)={&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000000540)=""/136, 0x88}, &(0x7f0000000640)=0x40) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x4, "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"}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000300)="0000000000000000001000"/72) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 365'. [ 986.913422][T22319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4365'. [ 987.348253][ C1] net_ratelimit: 5 callbacks suppressed [ 987.348265][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 987.348307][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 987.428298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 987.428592][T12996] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 987.578786][T12996] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 987.579909][T12996] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.579944][T12996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 987.579964][T12996] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 987.582860][T12996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 987.582882][T12996] usb 5-1: Product: syz [ 987.582896][T12996] usb 5-1: Manufacturer: syz [ 987.582909][T12996] usb 5-1: SerialNumber: syz [ 987.661321][T12996] usb 5-1: config 0 descriptor?? [ 987.706508][T12996] usb 5-1: no audio or video endpoints found [ 988.125404][ T5678] usb 5-1: USB disconnect, device number 96 [ 988.309404][T22337] binder: BINDER_SET_CONTEXT_MGR already set [ 988.309414][T22337] binder: 22336:22337 ioctl 4018620d 200000004a80 returned -16 [ 988.398320][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 988.398402][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 988.468143][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 989.126430][T22349] netlink: 'syz.2.4373': attribute type 4 has an invalid length. [ 989.442618][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 989.442694][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 989.508026][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 990.079268][ T25] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 990.265371][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.265423][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.266526][ T25] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 990.266548][ T25] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 990.266560][ T25] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.266573][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 990.351282][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.351308][ T25] usb 6-1: Product: syz [ 990.351322][ T25] usb 6-1: Manufacturer: syz [ 990.351335][ T25] usb 6-1: SerialNumber: syz [ 990.391054][T22369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 990.391189][T22369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 990.478293][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 990.527068][T22387] input: syz1 as /devices/virtual/input/input111 [ 990.608726][ T25] cdc_ether 6-1:1.0: Descriptor too short [ 990.660817][ T25] usb 6-1: USB disconnect, device number 56 [ 991.518978][ T25] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 991.687943][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 991.688825][ T25] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 991.693455][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.693477][ T25] usb 6-1: Product: syz [ 991.693490][ T25] usb 6-1: Manufacturer: syz [ 991.693545][ T25] usb 6-1: SerialNumber: syz [ 991.708389][ T25] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 992.421620][T22429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 992.421647][T22429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.421723][T22429] vhci_hcd vhci_hcd.0: Device attached [ 992.548704][ C1] net_ratelimit: 5 callbacks suppressed [ 992.548725][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 992.548813][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 992.628031][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 992.657966][T12999] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 992.702132][ T5678] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 992.859046][ T5678] usb 3-1: Using ep0 maxpacket: 8 [ 992.860228][ T5678] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 992.861361][ T5678] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 992.861391][ T5678] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 992.861408][ T5678] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 992.861439][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.908191][ T5671] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 993.086658][T22430] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 993.114698][ T7081] vhci_hcd vhci_hcd.2: stop threads [ 993.114717][ T7081] vhci_hcd vhci_hcd.2: release socket [ 993.114769][ T7081] vhci_hcd vhci_hcd.2: disconnect device [ 993.139270][ T5671] usb 5-1: not running at top speed; connect to a high speed hub [ 993.139303][ T5671] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.142883][ T5671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 993.142909][ T5671] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 993.144831][ T5671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.144845][ T5671] usb 5-1: Product: 㴇잵쩓菻ꔲ쥚맞㢿៊﷌粱炍퟿蹢즗㕡숧テ禢䞍捑롏 [ 993.144854][ T5671] usb 5-1: Manufacturer: ఇ [ 993.144861][ T5671] usb 5-1: SerialNumber: syz [ 993.213969][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.214005][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.243096][T22445] netlink: 'syz.0.4398': attribute type 10 has an invalid length. [ 993.243110][T22445] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4398'. [ 993.243416][T22445] vlan1: entered promiscuous mode [ 993.258087][T22436] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 993.306624][T22445] team0: Port device vlan1 added [ 993.598410][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 993.598505][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 993.668191][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 993.762099][ T5678] usb 3-1: USB disconnect, device number 43 [ 994.074184][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 994.076028][T22458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4403'. [ 994.111346][T22458] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4403'. [ 994.393267][ T25] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 994.465816][T22465] input: syz1 as /devices/virtual/input/input112 [ 994.550798][ T25] usb 6-1: USB disconnect, device number 57 [ 994.616639][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.633270][T22463] syz.0.4404 (22463): drop_caches: 2 [ 994.645110][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 994.645237][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 994.659326][T22462] x_tables: ip_tables: osf match: only valid for protocol 6 [ 994.708502][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 995.044576][T22471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4406'. [ 995.047561][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4406'. [ 995.110437][T22470] loop5: detected capacity change from 0 to 7 [ 995.113218][T22470] Dev loop5: unable to read RDB block 7 [ 995.113260][T22470] loop5: unable to read partition table [ 995.113514][T22470] loop5: partition table beyond EOD, truncated [ 995.114348][T22470] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 995.615838][T22487] syzkaller1: entered promiscuous mode [ 995.615883][T22487] syzkaller1: entered allmulticast mode [ 995.648660][T22487] netlink: 'syz.3.4414': attribute type 12 has an invalid length. [ 995.679247][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 995.699226][T22481] loop5: detected capacity change from 0 to 7 [ 995.719273][T22481] Dev loop5: unable to read RDB block 7 [ 995.719302][T22481] loop5: unable to read partition table [ 995.719445][T22481] loop5: partition table beyond EOD, truncated [ 995.719466][T22481] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 995.744540][ T5671] cdc_ncm 5-1:1.0: bind() failure [ 995.781016][ T5671] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 995.781065][ T5671] cdc_ncm 5-1:1.1: bind() failure [ 995.815850][ T5671] usb 5-1: USB disconnect, device number 97 [ 995.935698][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4416'. [ 995.986590][T22499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4416'. [ 996.593438][ T31] audit: type=1326 audit(1789997010.769:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.594451][ T31] audit: type=1326 audit(1789997010.769:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.595499][ T31] audit: type=1326 audit(1789997010.769:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.682151][ T31] audit: type=1326 audit(1789997010.859:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.682512][ T31] audit: type=1326 audit(1789997010.859:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.713780][ T31] audit: type=1326 audit(1789997010.869:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.713819][ T31] audit: type=1326 audit(1789997010.869:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.713841][ T31] audit: type=1326 audit(1789997010.869:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.714719][ T31] audit: type=1326 audit(1789997010.889:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 996.718542][ T31] audit: type=1326 audit(1789997010.889:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22509 comm="syz.3.4419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 997.353167][T22520] tipc: Started in network mode [ 997.353186][T22520] tipc: Node identity ac1414aa, cluster identity 4711 [ 997.353328][T22520] tipc: New replicast peer: 172.20.20.187 [ 997.357682][T22520] tipc: Enabled bearer , priority 10 [ 997.576767][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4427'. [ 997.597014][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'. [ 997.738005][T12999] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 997.748691][ C1] net_ratelimit: 5 callbacks suppressed [ 997.748709][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 997.748798][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 997.786659][T22532] loop5: detected capacity change from 0 to 7 [ 997.795046][T22532] Dev loop5: unable to read RDB block 7 [ 997.795076][T22532] loop5: unable to read partition table [ 997.795190][T22532] loop5: partition table beyond EOD, truncated [ 997.795201][T22532] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 997.828015][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 997.898165][ T25] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 998.050177][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 998.053458][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 998.053489][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 998.053526][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.061620][ T25] usb 5-1: config 0 descriptor?? [ 998.248107][ T5671] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 998.380937][T13004] tipc: Node number set to 2886997162 [ 998.408022][ T5671] usb 4-1: Using ep0 maxpacket: 8 [ 998.409134][ T5671] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 998.410584][ T5671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.410630][ T5671] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 998.410677][ T5671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 998.470869][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 998.470926][ T5671] usb 4-1: Product: syz [ 998.470941][ T5671] usb 4-1: Manufacturer: syz [ 998.470955][ T5671] usb 4-1: SerialNumber: syz [ 998.488335][ T5671] usb 4-1: config 0 descriptor?? [ 998.608085][ T5671] rc_core: IR keymap rc-imon-rsc not found [ 998.608104][ T5671] Registered IR keymap rc-empty [ 998.609401][ T5671] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 998.615447][ T5671] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input113 [ 998.649614][ T25] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 998.773134][T22549] program syz.2.4431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.798384][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 998.798441][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 998.867999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 999.658105][T12996] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 999.808781][T12996] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 999.809745][T12996] usb 6-1: config 2 has an invalid interface number: 228 but max is 0 [ 999.809768][T12996] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 999.809786][T12996] usb 6-1: config 2 has no interface number 0 [ 999.809823][T12996] usb 6-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.809846][T12996] usb 6-1: config 2 interface 228 has no altsetting 0 [ 999.812034][T12996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.812055][T12996] usb 6-1: Product: syz [ 999.812069][T12996] usb 6-1: Manufacturer: syz [ 999.812083][T12996] usb 6-1: SerialNumber: syz [ 999.828159][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 999.828230][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 999.913451][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1000.868509][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1001.065955][ T5671] usb 4-1: USB disconnect, device number 21 [ 1001.401058][T22562] FAULT_INJECTION: forcing a failure. [ 1001.401058][T22562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.401093][T22562] CPU: 0 UID: 0 PID: 22562 Comm: syz.0.4436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.401125][T22562] Tainted: [L]=SOFTLOCKUP [ 1001.401132][T22562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.401145][T22562] Call Trace: [ 1001.401152][T22562] [ 1001.401161][T22562] dump_stack_lvl+0xe8/0x150 [ 1001.401197][T22562] should_fail_ex+0x410/0x560 [ 1001.401225][T22562] _copy_from_user+0x2d/0xb0 [ 1001.401250][T22562] do_sock_getsockopt+0x200/0x7e0 [ 1001.401283][T22562] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1001.401324][T22562] ? __fget_files+0x3a2/0x420 [ 1001.401348][T22562] ? __fget_files+0x2a/0x420 [ 1001.401380][T22562] __x64_sys_getsockopt+0x1a4/0x240 [ 1001.401414][T22562] do_syscall_64+0x166/0x520 [ 1001.401438][T22562] ? trace_irq_disable+0x3b/0x140 [ 1001.401457][T22562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.401476][T22562] ? clear_bhb_loop+0x70/0xc0 [ 1001.401498][T22562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.401516][T22562] RIP: 0033:0x7f0931f9e159 [ 1001.401533][T22562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.401548][T22562] RSP: 002b:00007f0932ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1001.401568][T22562] RAX: ffffffffffffffda RBX: 00007f0932225fa0 RCX: 00007f0931f9e159 [ 1001.401582][T22562] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 1001.401593][T22562] RBP: 00007f0932ef7090 R08: 00002000000002c0 R09: 0000000000000000 [ 1001.401606][T22562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.401617][T22562] R13: 00007f0932226038 R14: 00007f0932225fa0 R15: 00007f093234fa48 [ 1001.401645][T22562] [ 1001.792689][T22564] sctp: [Deprecated]: syz.3.4437 (pid 22564) Use of int in max_burst socket option deprecated. [ 1001.792689][T22564] Use struct sctp_assoc_value instead [ 1001.971919][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1001.977173][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1002.453936][T22577] FAULT_INJECTION: forcing a failure. [ 1002.453936][T22577] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.453969][T22577] CPU: 0 UID: 0 PID: 22577 Comm: syz.3.4442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.453995][T22577] Tainted: [L]=SOFTLOCKUP [ 1002.454002][T22577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.454013][T22577] Call Trace: [ 1002.454021][T22577] [ 1002.454029][T22577] dump_stack_lvl+0xe8/0x150 [ 1002.454069][T22577] should_fail_ex+0x410/0x560 [ 1002.454093][T22577] ? __alloc_skb+0x1db/0x7a0 [ 1002.454117][T22577] should_failslab+0xa8/0x100 [ 1002.454142][T22577] ? __alloc_skb+0x1db/0x7a0 [ 1002.454162][T22577] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1002.454190][T22577] ? __alloc_skb+0x18d/0x7a0 [ 1002.454211][T22577] ? __alloc_skb+0x1db/0x7a0 [ 1002.454239][T22577] __alloc_skb+0x1db/0x7a0 [ 1002.454265][T22577] netlink_ack+0x136/0xb30 [ 1002.454290][T22577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1002.454314][T22577] ? __lock_acquire+0x747/0x2de0 [ 1002.454345][T22577] netlink_rcv_skb+0x2a4/0x4a0 [ 1002.454371][T22577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1002.454396][T22577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1002.454435][T22577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.454463][T22577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.454495][T22577] netlink_unicast+0x7bd/0x940 [ 1002.454530][T22577] netlink_sendmsg+0x813/0xb40 [ 1002.454556][T22577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.454582][T22577] ? apparmor_socket_sendmsg+0x98/0x360 [ 1002.454605][T22577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.454622][T22577] sock_sendmsg_nosec+0x13a/0x180 [ 1002.454644][T22577] ____sys_sendmsg+0x54e/0x850 [ 1002.454674][T22577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.454708][T22577] ? import_iovec+0x73/0xa0 [ 1002.454735][T22577] ___sys_sendmsg+0x2a5/0x360 [ 1002.454759][T22577] ? __lock_acquire+0x747/0x2de0 [ 1002.454781][T22577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.454834][T22577] ? __fget_files+0x2a/0x420 [ 1002.454857][T22577] ? __fget_files+0x3a2/0x420 [ 1002.454889][T22577] __x64_sys_sendmsg+0x1b1/0x290 [ 1002.454916][T22577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.454958][T22577] do_syscall_64+0x166/0x520 [ 1002.454980][T22577] ? trace_irq_disable+0x3b/0x140 [ 1002.454999][T22577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.455018][T22577] ? clear_bhb_loop+0x70/0xc0 [ 1002.455049][T22577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.455068][T22577] RIP: 0033:0x7f16f999e159 [ 1002.455086][T22577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.455100][T22577] RSP: 002b:00007f16fa8be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.455121][T22577] RAX: ffffffffffffffda RBX: 00007f16f9c25fa0 RCX: 00007f16f999e159 [ 1002.455136][T22577] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1002.455147][T22577] RBP: 00007f16fa8be090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.455159][T22577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.455171][T22577] R13: 00007f16f9c26038 R14: 00007f16f9c25fa0 R15: 00007f16f9d4fa48 [ 1002.455200][T22577] [ 1002.958202][ C1] net_ratelimit: 5 callbacks suppressed [ 1002.958222][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1002.958295][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1003.028312][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1003.418862][T12997] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1003.559521][T12996] ims_pcu 6-1:2.228: probe with driver ims_pcu failed with error -22 [ 1003.567992][T12997] usb 4-1: Using ep0 maxpacket: 8 [ 1003.584420][T12997] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1003.584470][T12997] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.587406][T12996] usb 6-1: USB disconnect, device number 58 [ 1003.613620][T12997] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1003.613649][T12997] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1003.633703][T12997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.633729][T12997] usb 4-1: Product: syz [ 1003.633742][T12997] usb 4-1: Manufacturer: syz [ 1003.633756][T12997] usb 4-1: SerialNumber: syz [ 1003.856986][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1003.917074][T12997] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1003.917108][T12997] cdc_ncm 4-1:1.0: bind() failure [ 1003.945921][T12997] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1003.945969][T12997] cdc_ncm 4-1:1.1: bind() failure [ 1003.967039][T12997] usb 4-1: USB disconnect, device number 22 [ 1003.998523][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1003.998591][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1004.068091][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1004.897053][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1004.897100][T22601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1005.028298][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1005.028378][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1005.080192][T22607] FAULT_INJECTION: forcing a failure. [ 1005.080192][T22607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.080225][T22607] CPU: 0 UID: 0 PID: 22607 Comm: syz.5.4453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.080250][T22607] Tainted: [L]=SOFTLOCKUP [ 1005.080257][T22607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.080268][T22607] Call Trace: [ 1005.080275][T22607] [ 1005.080283][T22607] dump_stack_lvl+0xe8/0x150 [ 1005.080314][T22607] should_fail_ex+0x410/0x560 [ 1005.080341][T22607] _copy_to_user+0x31/0xb0 [ 1005.080369][T22607] simple_read_from_buffer+0xe1/0x170 [ 1005.080401][T22607] proc_fail_nth_read+0x1bb/0x230 [ 1005.080419][T22607] ? common_file_perm+0x20e/0x2b0 [ 1005.080447][T22607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.080480][T22607] ? rw_verify_area+0x24a/0x4c0 [ 1005.080508][T22607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.080535][T22607] vfs_read+0x213/0xa80 [ 1005.080566][T22607] ? __pfx___mutex_lock+0x10/0x10 [ 1005.080592][T22607] ? __pfx_vfs_read+0x10/0x10 [ 1005.080620][T22607] ? __fget_files+0x2a/0x420 [ 1005.080649][T22607] ? __fget_files+0x3a2/0x420 [ 1005.080672][T22607] ? __fget_files+0x2a/0x420 [ 1005.080714][T22607] ksys_read+0x150/0x270 [ 1005.080742][T22607] ? __pfx_ksys_read+0x10/0x10 [ 1005.080779][T22607] do_syscall_64+0x166/0x520 [ 1005.080802][T22607] ? trace_irq_disable+0x3b/0x140 [ 1005.080821][T22607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.080841][T22607] ? clear_bhb_loop+0x70/0xc0 [ 1005.080863][T22607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.080882][T22607] RIP: 0033:0x7f9e68d5e98e [ 1005.080899][T22607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1005.080914][T22607] RSP: 002b:00007f9e69c64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1005.080934][T22607] RAX: ffffffffffffffda RBX: 00007f9e69c656c0 RCX: 00007f9e68d5e98e [ 1005.080948][T22607] RDX: 000000000000000f RSI: 00007f9e69c650a0 RDI: 0000000000000004 [ 1005.080960][T22607] RBP: 00007f9e69c65090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.080971][T22607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.080982][T22607] R13: 00007f9e69026038 R14: 00007f9e69025fa0 R15: 00007f9e6914fa48 [ 1005.081014][T22607] [ 1005.112672][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1005.358857][ T5671] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1005.409961][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1005.413495][T22609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1005.508370][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1005.560911][ T5671] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1005.560984][ T5671] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1005.571488][ T5671] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 1005.571514][ T5671] usb 3-1: config 12 has no interface number 0 [ 1005.571550][ T5671] usb 3-1: config 12 interface 99 altsetting 14 has an endpoint descriptor with address 0x39, changing to 0x9 [ 1005.571595][ T5671] usb 3-1: config 12 interface 99 altsetting 14 endpoint 0x9 has invalid maxpacket 1848, setting to 1024 [ 1005.571620][ T5671] usb 3-1: config 12 interface 99 has no altsetting 0 [ 1005.577755][ T5671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.577779][ T5671] usb 3-1: Product: syz [ 1005.577792][ T5671] usb 3-1: Manufacturer: syz [ 1005.577805][ T5671] usb 3-1: SerialNumber: syz [ 1005.585865][T22593] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.687410][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1005.687443][ T25] usb 4-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 1005.710761][ T25] usb 4-1: config 8 has an invalid interface number: 129 but max is 1 [ 1005.710787][ T25] usb 4-1: config 8 has an invalid interface number: 158 but max is 1 [ 1005.710806][ T25] usb 4-1: config 8 has no interface number 0 [ 1005.710843][ T25] usb 4-1: config 8 has no interface number 1 [ 1005.710915][ T25] usb 4-1: config 8 interface 158 has no altsetting 0 [ 1005.715461][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.715485][ T25] usb 4-1: Product: syz [ 1005.715498][ T25] usb 4-1: Manufacturer: syz [ 1005.715511][ T25] usb 4-1: SerialNumber: syz [ 1005.945947][ T25] cxacru 4-1:8.129: cxacru_bind: interface has incorrect endpoints [ 1005.946127][ T25] cxacru 4-1:8.129: usbatm_usb_probe: bind failed: -19! [ 1005.972910][ T25] cxacru 4-1:8.158: cxacru_bind: interface has incorrect endpoints [ 1005.973038][ T25] cxacru 4-1:8.158: usbatm_usb_probe: bind failed: -19! [ 1006.003324][ T25] usb 4-1: USB disconnect, device number 23 [ 1006.078439][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1006.493274][ T5671] usb 3-1: no audio or video endpoints found [ 1006.507288][ T5671] usb 3-1: USB disconnect, device number 44 [ 1007.517057][T22636] sock: sock_timestamping_bind_phc: sock not bind to device [ 1007.518105][T22636] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1007.576256][T22638] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1008.148285][ C1] net_ratelimit: 5 callbacks suppressed [ 1008.148299][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1008.148349][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1008.228002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1008.384568][T22636] ip6tnl3: entered allmulticast mode [ 1008.682640][ T25] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1008.716777][T22645] blktrace: Concurrent blktraces are not allowed on sg0 [ 1008.749609][T22653] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.778865][ T7081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1008.779027][ T7081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1008.808482][ T5671] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1008.819650][ T25] usb 6-1: device descriptor read/64, error -71 [ 1008.882416][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 1008.882458][ T31] audit: type=1326 audit(1789997023.049:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.882507][ T31] audit: type=1326 audit(1789997023.049:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.882545][ T31] audit: type=1326 audit(1789997023.049:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.882603][ T31] audit: type=1326 audit(1789997023.049:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.882641][ T31] audit: type=1326 audit(1789997023.049:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.882681][ T31] audit: type=1326 audit(1789997023.059:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.884516][ T31] audit: type=1326 audit(1789997023.059:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.884561][ T31] audit: type=1326 audit(1789997023.059:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.884601][ T31] audit: type=1326 audit(1789997023.059:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.884665][ T31] audit: type=1326 audit(1789997023.059:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.3.4471" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f999e159 code=0x7ffc0000 [ 1008.978173][ T5671] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1009.058029][ T25] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1009.068294][ T5671] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1009.188442][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1009.188488][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1009.191517][T22526] plantronics 0003:047F:FFFF.0052: timeout initializing reports [ 1009.231589][ T25] usb 6-1: device descriptor read/64, error -71 [ 1009.252975][T12996] usb 5-1: USB disconnect, device number 98 [ 1009.267999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1009.333122][T22662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1009.338605][ T25] usb usb6-port1: attempt power cycle [ 1009.685499][ T25] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1009.698567][ T25] usb 6-1: device descriptor read/8, error -71 [ 1009.937996][ T25] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1009.958704][ T25] usb 6-1: device descriptor read/8, error -71 [ 1010.068581][ T25] usb usb6-port1: unable to enumerate USB device [ 1010.228586][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1010.228678][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1010.308009][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1010.475747][T22672] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 1011.276815][T22688] IPVS: set_ctl: invalid protocol: 98 172.20.20.11:1 [ 1011.287971][T12996] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1011.439003][T12996] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1011.440391][T12996] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 1011.440415][T12996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.440432][T12996] usb 3-1: config 0 has no interface number 0 [ 1011.440471][T12996] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1011.440493][T12996] usb 3-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.443554][T12996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.443577][T12996] usb 3-1: Product: syz [ 1011.443599][T12996] usb 3-1: Manufacturer: syz [ 1011.443612][T12996] usb 3-1: SerialNumber: syz [ 1011.537749][T12996] usb 3-1: config 0 descriptor?? [ 1011.543589][T22685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1011.563672][T12996] hdpvr 3-1:0.33: Could not find bulk-in endpoint [ 1011.563756][T12996] hdpvr 3-1:0.33: probe with driver hdpvr failed with error -12 [ 1011.600716][T22690] ALSA: seq fatal error: cannot create timer (-16) [ 1012.378178][T12997] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1012.449339][ T5671] usb 3-1: USB disconnect, device number 45 [ 1012.468248][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1012.528740][T12997] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1012.530124][T12997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.530151][T12997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.530185][T12997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.578386][T12997] usb 5-1: config 0 descriptor?? [ 1013.211902][T12997] usbhid 5-1:0.0: can't add hid device: -71 [ 1013.212018][T12997] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1013.239360][T12997] usb 5-1: USB disconnect, device number 99 [ 1013.348144][ C1] net_ratelimit: 6 callbacks suppressed [ 1013.348163][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1013.348233][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1013.428032][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1013.468494][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.468691][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.468775][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.468849][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.468948][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.469022][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.469097][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.469172][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.469275][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.469349][T22719] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 1013.535244][T22712] dummy0 (unregistering): left promiscuous mode [ 1013.578040][ T5671] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1013.668156][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1013.707995][ T5671] usb 3-1: device descriptor read/64, error -71 [ 1013.958256][ T5671] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1014.098018][ T5671] usb 3-1: device descriptor read/64, error -71 [ 1014.218316][ T5671] usb usb3-port1: attempt power cycle [ 1014.277937][T12996] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1014.388131][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1014.388179][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1014.428697][T12996] usb 5-1: Using ep0 maxpacket: 16 [ 1014.429766][T12996] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1014.432241][T12996] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1014.432255][T12996] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.433595][T12996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1014.433617][T12996] usb 5-1: SerialNumber: syz [ 1014.468097][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1014.488760][T12997] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1014.518689][T12996] usb 5-1: 0:2 : does not exist [ 1014.522001][T22734] batman_adv: batadv0: Adding interface: macvlan2 [ 1014.522014][T22734] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.522038][T22734] batman_adv: batadv0: Interface activated: macvlan2 [ 1014.545265][T22734] program syz.3.4496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1014.580991][ T5671] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1014.608578][ T5671] usb 3-1: device descriptor read/8, error -71 [ 1014.637924][T12997] usb 6-1: Using ep0 maxpacket: 16 [ 1014.638693][T12997] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1014.639674][T12997] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.639732][T12997] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.639752][T12997] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1014.639774][T12997] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1014.639803][T12997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.641775][T12997] usb 6-1: config 0 descriptor?? [ 1014.724513][T22730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.724945][T22730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.851552][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.851822][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.851959][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.852088][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.855335][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.855485][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.855618][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.855748][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.855869][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.856000][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1014.863702][T22732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.867641][T22732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.879270][ T5671] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1014.953414][ T5671] usb 3-1: device descriptor read/8, error -71 [ 1015.042337][T22747] nvme_rdma: malformed src address passed: 1270.0.1 [ 1015.059892][ T5671] usb usb3-port1: unable to enumerate USB device [ 1015.074792][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1015.084674][T12997] hid (null): report_id 44715 is invalid [ 1015.208245][ T25] usb 4-1: device descriptor read/64, error -71 [ 1015.290875][T12997] usb 6-1: USB disconnect, device number 63 [ 1015.405615][T12996] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1015.421600][T12996] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1015.427541][T12996] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1015.428167][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1015.428240][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1015.438070][T12996] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1015.456761][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1015.484026][T12996] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1015.508208][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1015.540981][T12996] usb 5-1: USB disconnect, device number 100 [ 1015.599240][ T25] usb 4-1: device descriptor read/64, error -71 [ 1015.708215][ T25] usb usb4-port1: attempt power cycle [ 1016.007801][T22770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.018817][T22770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.057992][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1016.079923][ T25] usb 4-1: device descriptor read/8, error -71 [ 1016.095425][T22775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.095544][T22775] bridge0: port 1(bridge_slave_0) entered listening state [ 1016.098299][T22775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.098416][T22775] bridge0: port 2(bridge_slave_1) entered listening state [ 1016.120679][T22775] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1016.167636][T22770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.169309][T22770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.211170][T22777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.211290][T22777] bridge0: port 1(bridge_slave_0) entered listening state [ 1016.219740][T22777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.219854][T22777] bridge0: port 2(bridge_slave_1) entered listening state [ 1016.225191][T12996] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1016.289620][T22782] syzkaller0: entered promiscuous mode [ 1016.289636][T22782] syzkaller0: entered allmulticast mode [ 1016.350489][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1016.379099][ T25] usb 4-1: device descriptor read/8, error -71 [ 1016.388039][T12996] usb 6-1: Using ep0 maxpacket: 32 [ 1016.394942][T12996] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1016.411668][T12996] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1016.411708][T12996] usb 6-1: config 0 has no interface number 0 [ 1016.414175][T12996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.414199][T12996] usb 6-1: Product: syz [ 1016.414213][T12996] usb 6-1: Manufacturer: syz [ 1016.414227][T12996] usb 6-1: SerialNumber: syz [ 1016.418282][T12996] usb 6-1: config 0 descriptor?? [ 1016.498290][ T25] usb usb4-port1: unable to enumerate USB device [ 1016.854081][T22794] input: syz0 as /devices/virtual/input/input114 [ 1016.883468][T12996] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1016.883498][T12996] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1016.887010][T12996] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1016.887320][T12996] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1016.937791][T12996] usb 6-1: USB disconnect, device number 64 [ 1017.207801][T22801] syzkaller1: entered allmulticast mode [ 1017.488465][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1017.488483][ T31] audit: type=1326 audit(1789997031.659:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22806 comm="syz.5.4517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e68d9e159 code=0x0 [ 1017.597995][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1017.604286][T22810] fuse: Bad value for 'fd' [ 1017.761028][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1017.764458][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.764484][ T25] usb 3-1: Product: syz [ 1017.764498][ T25] usb 3-1: Manufacturer: syz [ 1017.764512][ T25] usb 3-1: SerialNumber: syz [ 1017.871203][ T25] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1017.891503][T22810] dvmrp0: entered allmulticast mode [ 1018.072467][T22813] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1018.343542][ T5678] usb 3-1: USB disconnect, device number 50 [ 1018.378281][T22820] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1018.398465][T12997] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1018.548158][ C1] net_ratelimit: 7 callbacks suppressed [ 1018.548182][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1018.548242][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1018.573374][T12997] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1018.592366][T12997] usb 4-1: config 239 has an invalid interface number: 83 but max is 0 [ 1018.592382][T12997] usb 4-1: config 239 has no interface number 0 [ 1018.612827][T12997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.612854][T12997] usb 4-1: Product: syz [ 1018.612867][T12997] usb 4-1: Manufacturer: syz [ 1018.612881][T12997] usb 4-1: SerialNumber: syz [ 1018.630472][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1018.953887][ T25] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1018.954116][ T25] ath9k_htc: Failed to initialize the device [ 1018.954848][ T5678] usb 3-1: ath9k_htc: USB layer deinitialized [ 1019.277315][T22839] FAULT_INJECTION: forcing a failure. [ 1019.277315][T22839] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.277381][T22839] CPU: 0 UID: 0 PID: 22839 Comm: syz.4.4522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.277406][T22839] Tainted: [L]=SOFTLOCKUP [ 1019.277414][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.277425][T22839] Call Trace: [ 1019.277433][T22839] [ 1019.277441][T22839] dump_stack_lvl+0xe8/0x150 [ 1019.277473][T22839] should_fail_ex+0x410/0x560 [ 1019.277502][T22839] should_failslab+0xa8/0x100 [ 1019.277526][T22839] __kmalloc_noprof+0xfe/0x720 [ 1019.277546][T22839] ? io_cache_alloc_new+0x40/0x100 [ 1019.277643][T22839] ? io_cache_alloc_new+0x40/0x100 [ 1019.277665][T22839] io_cache_alloc_new+0x40/0x100 [ 1019.277686][T22839] io_uring_cmd_prep+0x39a/0x600 [ 1019.277781][T22839] io_submit_sqes+0xbde/0x2310 [ 1019.277852][T22839] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1019.277880][T22839] ? __fget_files+0x3a2/0x420 [ 1019.277908][T22839] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1019.277930][T22839] ? fput+0xa0/0xd0 [ 1019.277952][T22839] ? ksys_write+0x242/0x270 [ 1019.277980][T22839] ? __pfx_ksys_write+0x10/0x10 [ 1019.278012][T22839] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1019.278036][T22839] do_syscall_64+0x166/0x520 [ 1019.278060][T22839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.278081][T22839] ? clear_bhb_loop+0x70/0xc0 [ 1019.278105][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.278124][T22839] RIP: 0033:0x7f5ba999e159 [ 1019.278141][T22839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.278157][T22839] RSP: 002b:00007f5ba7bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1019.278177][T22839] RAX: ffffffffffffffda RBX: 00007f5ba9c25fa0 RCX: 00007f5ba999e159 [ 1019.278190][T22839] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1019.278201][T22839] RBP: 00007f5ba7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.278213][T22839] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1019.278224][T22839] R13: 00007f5ba9c26038 R14: 00007f5ba9c25fa0 R15: 00007f5ba9d4fa48 [ 1019.278255][T22839] [ 1019.377922][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1019.468242][ T5678] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1019.548717][ T25] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1019.549967][ T25] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1019.549992][ T25] usb 3-1: config 0 has no interface number 0 [ 1019.550028][ T25] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.550051][ T25] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1019.550073][ T25] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1019.550112][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.555904][ T25] usb 3-1: config 0 descriptor?? [ 1019.556647][T22835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1019.590413][ T25] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input115 [ 1019.598322][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1019.598402][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1019.645988][ T5678] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1019.646093][ T5678] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 1019.648656][ T5678] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 198, changing to 7 [ 1019.648684][ T5678] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42684, setting to 1024 [ 1019.654477][ T5678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.654500][ T5678] usb 6-1: Product: syz [ 1019.654539][ T5678] usb 6-1: Manufacturer: syz [ 1019.654553][ T5678] usb 6-1: SerialNumber: syz [ 1019.672993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1019.925069][ T5678] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1020.071718][ T5678] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1020.078109][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1020.102525][ T5678] usb 6-1: USB disconnect, device number 65 [ 1020.157431][T17520] udevd[17520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.303733][T22848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3180803677 (6361607354 ns) > initial count (3843831572 ns). Using initial count to start timer. [ 1020.304024][T22848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3180803677 (6361607354 ns) > initial count (3843831572 ns). Using initial count to start timer. [ 1020.589669][T22852] __nla_validate_parse: 12 callbacks suppressed [ 1020.589728][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1020.613362][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1020.638850][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1020.638942][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1020.677169][T22854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1020.708112][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1021.219841][T12997] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1021.243857][T12997] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1021.270104][T12997] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1021.289490][T12997] usb 4-1: USB disconnect, device number 28 [ 1021.390395][T22856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.446290][T22859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1021.668468][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1021.702251][T22874] FAULT_INJECTION: forcing a failure. [ 1021.702251][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.702285][T22874] CPU: 0 UID: 0 PID: 22874 Comm: syz.5.4538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.702310][T22874] Tainted: [L]=SOFTLOCKUP [ 1021.702317][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.702328][T22874] Call Trace: [ 1021.702336][T22874] [ 1021.702344][T22874] dump_stack_lvl+0xe8/0x150 [ 1021.702375][T22874] should_fail_ex+0x410/0x560 [ 1021.702402][T22874] should_failslab+0xa8/0x100 [ 1021.702428][T22874] __kmalloc_noprof+0xfe/0x720 [ 1021.702448][T22874] ? io_cache_alloc_new+0x40/0x100 [ 1021.702466][T22874] ? io_cache_alloc_new+0x40/0x100 [ 1021.702491][T22874] io_cache_alloc_new+0x40/0x100 [ 1021.702512][T22874] io_uring_cmd_prep+0x39a/0x600 [ 1021.702541][T22874] io_submit_sqes+0xbde/0x2310 [ 1021.702587][T22874] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1021.702618][T22874] ? __fget_files+0x3a2/0x420 [ 1021.702649][T22874] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1021.702685][T22874] ? fput+0xa0/0xd0 [ 1021.702711][T22874] ? ksys_write+0x242/0x270 [ 1021.702742][T22874] ? __pfx_ksys_write+0x10/0x10 [ 1021.702775][T22874] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1021.702802][T22874] do_syscall_64+0x166/0x520 [ 1021.702827][T22874] ? trace_irq_disable+0x3b/0x140 [ 1021.702849][T22874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.702868][T22874] ? clear_bhb_loop+0x70/0xc0 [ 1021.702890][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.702908][T22874] RIP: 0033:0x7f9e68d9e159 [ 1021.702926][T22874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.702940][T22874] RSP: 002b:00007f9e69c65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1021.702960][T22874] RAX: ffffffffffffffda RBX: 00007f9e69025fa0 RCX: 00007f9e68d9e159 [ 1021.702975][T22874] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1021.702987][T22874] RBP: 00007f9e69c65090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.702999][T22874] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1021.703012][T22874] R13: 00007f9e69026038 R14: 00007f9e69025fa0 R15: 00007f9e6914fa48 [ 1021.703044][T22874] [ 1022.038917][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1022.044090][T22884] vlan2: entered promiscuous mode [ 1022.044110][T22884] bridge0: entered promiscuous mode [ 1022.188865][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1022.189815][ T25] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1022.189844][ T25] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1022.189856][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1022.191539][ T25] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1022.191553][ T25] usb 4-1: Product: syz [ 1022.191561][ T25] usb 4-1: Manufacturer: syz [ 1022.191568][ T25] usb 4-1: SerialNumber: syz [ 1022.195342][ T25] usb 4-1: config 0 descriptor?? [ 1022.204592][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 1022.204616][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1022.226553][ T25] usb 4-1: selecting invalid altsetting 0 [ 1022.310272][ T5678] usb 3-1: USB disconnect, device number 51 [ 1022.483140][ T25] usb 4-1: USB disconnect, device number 29 [ 1022.588643][T22894] loop5: detected capacity change from 0 to 7 [ 1022.592934][T22894] Dev loop5: unable to read RDB block 7 [ 1022.592976][T22894] loop5: unable to read partition table [ 1022.593175][T22894] loop5: partition table beyond EOD, truncated [ 1022.593192][T22894] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1022.741837][T22900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.764301][T22876] validate_nla: 32 callbacks suppressed [ 1022.764321][T22876] netlink: 'syz.3.4537': attribute type 2 has an invalid length. [ 1022.764336][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1023.044889][ T31] audit: type=1326 audit(1789997037.219:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.044942][ T31] audit: type=1326 audit(1789997037.219:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.045883][ T31] audit: type=1326 audit(1789997037.219:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.045954][ T31] audit: type=1326 audit(1789997037.219:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.047690][ T31] audit: type=1326 audit(1789997037.219:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.047721][ T31] audit: type=1326 audit(1789997037.219:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.047742][ T31] audit: type=1326 audit(1789997037.219:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.048878][ T31] audit: type=1326 audit(1789997037.229:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.050989][ T31] audit: type=1326 audit(1789997037.229:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.051175][ T31] audit: type=1326 audit(1789997037.229:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22906 comm="syz.2.4548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f63d6d9e159 code=0x7ffc0000 [ 1023.758280][ C1] net_ratelimit: 7 callbacks suppressed [ 1023.758302][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1023.758361][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1023.828017][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1024.389760][T22935] loop5: detected capacity change from 0 to 7 [ 1024.393000][T22935] Dev loop5: unable to read RDB block 7 [ 1024.393057][T22935] loop5: unable to read partition table [ 1024.394366][T22935] loop5: partition table beyond EOD, truncated [ 1024.394410][T22935] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1024.481590][T22934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1024.798264][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1024.798344][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1024.868003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1025.287943][T12997] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1025.438781][T12997] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=56.e7 [ 1025.440134][T12997] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 1025.440159][T12997] usb 3-1: config 8 has no interface number 0 [ 1025.440199][T12997] usb 3-1: config 8 interface 35 altsetting 91 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1025.440583][T12997] usb 3-1: config 8 interface 35 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1025.440604][T12997] usb 3-1: config 8 interface 35 altsetting 91 has a duplicate endpoint with address 0x4, skipping [ 1025.440624][T12997] usb 3-1: config 8 interface 35 altsetting 91 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1025.440647][T12997] usb 3-1: config 8 interface 35 altsetting 91 endpoint 0xF has invalid wMaxPacketSize 0 [ 1025.440743][T12997] usb 3-1: config 8 interface 35 altsetting 91 has a duplicate endpoint with address 0x3, skipping [ 1025.440775][T12997] usb 3-1: config 8 interface 35 has no altsetting 0 [ 1025.443481][T12997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.443503][T12997] usb 3-1: Product: 䀊 [ 1025.443517][T12997] usb 3-1: Manufacturer: 眠᝝ᅁ甃ᔯ쏉ᬱ陶ᭉ蜍緧実⥼뜂눡몚봊ᖹ妪댾䛌唡㨯〵ⵟ贖돢췓⟱밗㡺쩣ᐤἣꦶ浆율桝ﮗ檷שׂ䂹랤硶蓂잃귔笤뫑쪸ుࡾ [ 1025.443701][T12997] usb 3-1: SerialNumber: ц [ 1025.838269][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1025.838355][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1025.908035][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1026.213418][ T25] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1026.358502][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1026.366269][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.366294][ T25] usb 5-1: Product: syz [ 1026.366308][ T25] usb 5-1: Manufacturer: syz [ 1026.366321][ T25] usb 5-1: SerialNumber: syz [ 1026.459118][T22972] loop5: detected capacity change from 0 to 7 [ 1026.463745][T22972] Dev loop5: unable to read RDB block 7 [ 1026.463793][T22972] loop5: unable to read partition table [ 1026.464037][T22972] loop5: partition table beyond EOD, truncated [ 1026.464053][T22972] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1026.820911][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1026.820971][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1027.434466][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.435771][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.656981][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1027.657689][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1027.662199][ T25] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1028.041412][T12997] cypress_m8 3-1:8.35: DeLorme Earthmate USB converter detected [ 1028.044736][T12997] earthmate ttyUSB0: required endpoint is missing [ 1028.092403][T12997] usb 3-1: USB disconnect, device number 52 [ 1028.110938][T12997] cypress_m8 3-1:8.35: device disconnected [ 1028.458050][T12997] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1028.608629][T12997] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1028.609588][T12997] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.609617][T12997] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 1028.611211][T12997] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1028.611234][T12997] usb 3-1: Manufacturer: syz [ 1028.611247][T12997] usb 3-1: SerialNumber: syz [ 1028.616329][T23005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1028.644752][T23011] syzkaller0: entered promiscuous mode [ 1028.644772][T23011] syzkaller0: entered allmulticast mode [ 1028.945650][T23005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.946058][T23005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.948164][ C1] net_ratelimit: 10 callbacks suppressed [ 1028.948178][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1028.948252][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1028.980377][T23017] netlink: 'syz.3.4587': attribute type 1 has an invalid length. [ 1029.020639][T23017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1029.029254][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1029.055480][T12997] yealink 3-1:36.0: invalid payload size 64, expected 16 [ 1029.068404][T12997] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input116 [ 1029.070917][T23017] bond4: (slave gretap1): making interface the new active one [ 1029.074792][T23017] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1029.121078][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.121332][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.121569][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.121818][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.122056][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.122289][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.123505][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.123744][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.123952][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.123976][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.135468][ T25] usb 5-1: USB disconnect, device number 101 [ 1029.143831][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.145706][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.145729][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.145931][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.146132][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.146149][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.146343][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.146539][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.146558][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.146753][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.146953][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.146975][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.147177][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.147382][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.147402][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.147606][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.147806][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.147828][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.148064][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.148301][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.148318][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.148547][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.148764][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.148783][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.148982][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.149175][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.149191][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.149388][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.149617][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.149638][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.149835][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.150041][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.150061][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.150271][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.150473][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.150492][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.150690][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.150888][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.150907][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.151104][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.151309][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.151328][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.151528][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.151724][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.151738][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.151916][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.152097][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.152110][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.152288][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.152466][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.152478][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.152655][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.152833][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.152847][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.153027][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.153208][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.153221][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.153399][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.153590][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.153604][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.153785][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.153966][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.153980][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.154173][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.154376][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.154395][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.154605][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.154803][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.154821][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.155018][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.155221][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.155239][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.155454][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.155657][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.155677][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.155884][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.156081][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.156101][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.156305][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.156509][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.156528][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.156733][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.156930][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.156947][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.157143][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.157341][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.157361][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.157558][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.157759][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.157779][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.164758][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.171652][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.171676][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.178716][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.178950][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.178970][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.179201][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.179435][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.179455][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.180050][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.187006][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.187031][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.194071][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.194290][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.201260][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.201479][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.208445][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.208467][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.208681][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.208909][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.208931][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.209159][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.209391][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.209421][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.209641][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.209871][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.209894][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.210127][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.210356][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.210377][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.210606][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.210831][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.210850][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.211067][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.218030][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.218054][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.218253][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.218471][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.218496][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.218712][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.218924][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.218945][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.219150][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.219354][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.219372][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.219588][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.219797][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.219817][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.220023][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.226953][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.226982][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.232940][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.233154][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.233175][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.233376][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.239508][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.239532][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.246491][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.253424][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.253448][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.259374][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.259779][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.259801][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.260051][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.260264][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.260286][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.260502][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1029.260599][T12997] usb 3-1: USB disconnect, device number 53 [ 1029.260717][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1029.260735][ C0] yealink 3-1:36.0: unexpected response 0 [ 1029.260751][ C0] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 1029.547973][ T5671] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1029.721175][ T5671] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1029.726307][ T5671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.747074][ T5671] usb 6-1: config 0 descriptor?? [ 1029.967248][ T5671] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1029.998121][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1029.998197][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1030.068158][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1030.257263][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1030.310514][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1030.445298][ T5671] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1030.445324][ T5671] [drm] Initialized udl on minor 1 [ 1030.449627][ T5671] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1030.450054][ T5671] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1030.477796][ T5671] usb 6-1: USB disconnect, device number 66 [ 1030.483817][ T5678] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1030.499894][ T5678] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1030.936988][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1030.937184][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1031.028779][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1031.028872][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1031.108079][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1031.599076][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1031.600197][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1031.637076][T23067] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1031.685052][T23071] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 1032.068174][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1032.408647][T12999] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1032.558961][T12999] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1032.562862][T12999] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1032.562880][T12999] usb 3-1: Product: syz [ 1032.562888][T12999] usb 3-1: SerialNumber: syz [ 1032.567401][T12999] usb 3-1: config 0 descriptor?? [ 1032.610847][T23081] ip6gretap1: entered allmulticast mode [ 1032.845217][ T8809] IPVS: starting estimator thread 0... [ 1032.876465][T23089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4603'. [ 1032.902876][T12999] usb 3-1: USB disconnect, device number 54 [ 1032.929183][ T5767] udevd[5767]: setting owner of /dev/bus/usb/003/054 to uid=0, gid=0 failed: No such file or directory [ 1032.949170][T23105] IPVS: using max 33 ests per chain, 79200 per kthread [ 1033.220369][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.228035][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.243283][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.244636][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.247801][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.390543][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1033.742836][T23114] netlink: 'syz.4.4607': attribute type 1 has an invalid length. [ 1034.152796][ C1] net_ratelimit: 5 callbacks suppressed [ 1034.152819][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1034.152898][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1034.228152][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1034.468428][T19330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.518279][ T25] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1034.683717][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1034.708637][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 1034.778289][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.778316][ T25] usb 3-1: Product: syz [ 1034.778327][ T25] usb 3-1: Manufacturer: syz [ 1034.778335][ T25] usb 3-1: SerialNumber: syz [ 1034.788157][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1034.816466][ T25] usb 3-1: config 0 descriptor?? [ 1034.854284][T19330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.077728][T23110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.085531][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.085664][T23110] bridge_slave_0: entered allmulticast mode [ 1035.104624][T23110] bridge_slave_0: entered promiscuous mode [ 1035.159312][T19330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.190529][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1035.190613][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1035.259987][T19330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.268097][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1035.317877][T23110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.320903][T23110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.321017][T23110] bridge_slave_1: entered allmulticast mode [ 1035.322232][T23110] bridge_slave_1: entered promiscuous mode [ 1035.350368][ T4933] Bluetooth: hci1: command tx timeout [ 1035.451016][ T25] usb 3-1: USB disconnect, device number 55 [ 1035.491179][T23110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.537201][T23110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.640451][T23140] fuse: Unknown parameter 'ԯ?m7user_id' [ 1035.698203][T23110] team0: Port device team_slave_0 added [ 1035.705798][T23110] team0: Port device team_slave_1 added [ 1035.797353][T23110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.797368][T23110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.797385][T23110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.837568][T23110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.837584][T23110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.837606][T23110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.109104][T23110] hsr_slave_0: entered promiscuous mode [ 1036.163243][T23110] hsr_slave_1: entered promiscuous mode [ 1036.169485][T23110] debugfs: 'hsr0' already exists in 'hsr' [ 1036.169506][T23110] Cannot create hsr debugfs directory [ 1036.228644][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1036.228723][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1036.308261][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1036.688340][T12996] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1036.746282][T19330] bridge_slave_1: left allmulticast mode [ 1036.746522][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.781463][T19330] bridge_slave_0: left allmulticast mode [ 1036.781629][T19330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.828102][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1036.834959][T19330] dvmrp0: left allmulticast mode [ 1036.835041][T19330] pimreg: left allmulticast mode [ 1036.835090][T19330] dvmrp12: left allmulticast mode [ 1036.857989][T12996] usb 3-1: Using ep0 maxpacket: 16 [ 1036.861746][T12996] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1036.879060][T12996] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1036.879086][T12996] usb 3-1: config 252 has no interface number 0 [ 1036.879126][T12996] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1036.897436][T19330] tipc: Resetting bearer [ 1036.943114][T12996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.943140][T12996] usb 3-1: Product: syz [ 1036.943154][T12996] usb 3-1: Manufacturer: syz [ 1036.943168][T12996] usb 3-1: SerialNumber: syz [ 1036.989232][ T25] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1036.990209][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1036.990230][ T25] usb 4-1: config 0 has no interface number 0 [ 1036.992319][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.992340][ T25] usb 4-1: Product: syz [ 1036.992354][ T25] usb 4-1: Manufacturer: syz [ 1036.992368][ T25] usb 4-1: SerialNumber: syz [ 1037.048717][ T25] usb 4-1: config 0 descriptor?? [ 1037.085404][T12996] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1037.268230][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1037.284677][ T25] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1037.298500][ T25] usb 4-1: USB disconnect, device number 30 [ 1037.428240][ T4933] Bluetooth: hci1: command tx timeout [ 1037.948066][T19330] gretap0 (unregistering): left promiscuous mode [ 1038.141840][T19330] bond3 (unregistering): (slave gre2): Releasing backup interface [ 1038.141858][T19330] gre2 (unregistering): left promiscuous mode [ 1038.230286][ T7079] usb 3-1: Failed to submit usb control message: -110 [ 1038.230323][ T7079] usb 3-1: unable to send the bmi data to the device: -110 [ 1038.230340][ T7079] usb 3-1: unable to get target info from device [ 1038.230355][ T7079] usb 3-1: could not get target info (-110) [ 1038.230386][ T7079] usb 3-1: could not probe fw (-110) [ 1038.486441][T19330] tipc: Disabling bearer [ 1038.617914][ T5693] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1038.710796][T19330] bond1 (unregistering): Released all slaves [ 1038.720521][T12996] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1038.735790][T19330] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1038.736585][T19330] bond2 (unregistering): Released all slaves [ 1038.753511][T19330] bond3 (unregistering): Released all slaves [ 1038.757988][ T5693] usb 5-1: device descriptor read/64, error -71 [ 1038.763939][T19330] bond4 (unregistering): Released all slaves [ 1038.778340][T19330]  (unregistering): Released all slaves [ 1038.806068][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1038.827822][T12997] usb 3-1: USB disconnect, device number 56 [ 1038.868453][T12996] usb 4-1: device descriptor read/64, error -71 [ 1039.008843][ T5693] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1039.056495][T19330] tipc: Left network mode [ 1039.109701][T12996] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1039.144163][T19330] IPVS: stopping backup sync thread 22820 ... [ 1039.149613][ T5693] usb 5-1: device descriptor read/64, error -71 [ 1039.239409][T12996] usb 4-1: device descriptor read/64, error -71 [ 1039.262324][ T5693] usb usb5-port1: attempt power cycle [ 1039.349617][ C1] net_ratelimit: 5 callbacks suppressed [ 1039.349638][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1039.349709][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1039.349862][T12996] usb usb4-port1: attempt power cycle [ 1039.438045][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1039.508385][ T4933] Bluetooth: hci1: command tx timeout [ 1039.610059][ T5693] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1039.643506][ T5693] usb 5-1: device descriptor read/8, error -71 [ 1039.702952][T12996] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1039.718906][T12996] usb 4-1: device descriptor read/8, error -71 [ 1039.727053][T19330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.730072][T19330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.898720][ T5693] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1039.929624][ T5693] usb 5-1: device descriptor read/8, error -71 [ 1039.979175][T12996] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1039.998093][T12996] usb 4-1: device descriptor read/8, error -71 [ 1039.998498][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1040.051867][ T5693] usb usb5-port1: unable to enumerate USB device [ 1040.091127][T19330] team0 (unregistering): Port device team_slave_1 removed [ 1040.111717][T19330] team0 (unregistering): Port device team_slave_0 removed [ 1040.121653][T12996] usb usb4-port1: unable to enumerate USB device [ 1040.148031][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1040.148764][ T25] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1040.154039][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.183660][ T25] usb 3-1: config 0 descriptor?? [ 1040.196879][ T25] as10x_usb: device has been detected [ 1040.203854][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1040.228970][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1040.232450][ T25] as10x_usb: error during firmware upload part1 [ 1040.233123][ T25] Registered device nBox DVB-T Dongle [ 1040.389181][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1040.389248][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1040.468206][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1040.648751][T23228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1040.651226][T23228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1040.651621][T23228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.656915][T23228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.657054][T23228] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1040.771599][T23228] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1040.944997][T19330] IPVS: stop unused estimator thread 0... [ 1041.037145][ T5693] usb 3-1: USB disconnect, device number 57 [ 1041.088965][ T5693] Unregistered device nBox DVB-T Dongle [ 1041.093661][ T5693] as10x_usb: device has been disconnected [ 1041.146206][T23110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1041.158626][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.159497][T23110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1041.165591][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.166679][T23110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1041.205542][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.207643][T23110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1041.231458][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.424186][T23110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.428555][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1041.428633][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1041.508034][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1041.522362][T23110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.544454][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.544549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.567474][T19330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.567574][T19330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.871940][T23110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.025035][T23110] veth0_vlan: entered promiscuous mode [ 1042.066706][T23110] veth1_vlan: entered promiscuous mode [ 1042.143841][T23280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4633'. [ 1042.201734][T23110] veth0_macvtap: entered promiscuous mode [ 1042.222097][T23110] veth1_macvtap: entered promiscuous mode [ 1042.286480][T23110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.297716][ T25] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1042.314655][T23110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.348102][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.348145][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.348176][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.348205][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.448022][ T25] usb 5-1: device descriptor read/64, error -71 [ 1042.478836][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1042.692036][ T7079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.692051][ T7079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.700793][ T25] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 1042.708365][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 1042.708416][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 1042.708441][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.708466][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 1042.835825][T23280] syz.3.4633 (23280): drop_caches: 2 [ 1042.835969][ T7079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.835984][ T7079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.843870][ T25] usb 5-1: device descriptor read/64, error -71 [ 1042.948441][ T25] usb usb5-port1: attempt power cycle [ 1043.165874][ T5678] logitech-hidpp-device 0003:046D:C082.0054: hidraw0: USB HID vfa0000.00 Device [syz0] on syz0 [ 1043.238164][T13004] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1043.242220][T23301] team0: Device vlan1 failed to change mtu [ 1043.298119][ T25] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 1043.322893][ T25] usb 5-1: device descriptor read/8, error -71 [ 1043.354095][T23308] fido_id[23308]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1043.388473][T13004] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1043.389580][T13004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.389601][T13004] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1043.389645][T13004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.442572][T13004] cdc_phonet 4-1:1.0: skipping garbage [ 1043.568033][ T25] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 1043.605062][ T25] usb 5-1: device descriptor read/8, error -71 [ 1043.650579][ T5678] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1043.652839][T13004] usb 4-1: USB disconnect, device number 35 [ 1043.710102][ T25] usb usb5-port1: unable to enumerate USB device [ 1043.808904][ T5678] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1043.809783][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.809799][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.809820][ T5678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.811564][ T5678] usb 6-1: config 0 descriptor?? [ 1044.225176][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.225212][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.225237][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.225262][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.225286][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.272770][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.272801][ T5678] pyra 0003:1E7D:2CF6.0055: unknown main item tag 0x0 [ 1044.291943][ T5678] pyra 0003:1E7D:2CF6.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1044.390539][ C0] net_ratelimit: 5 callbacks suppressed [ 1044.390559][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1044.390608][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1044.548632][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1044.548710][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1044.628310][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1044.657612][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1044.657630][ T31] audit: type=1800 audit(1789997058.829:4726): pid=23333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4646" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1044.702858][ T5678] pyra 0003:1E7D:2CF6.0055: couldn't init struct pyra_device [ 1044.702913][ T5678] pyra 0003:1E7D:2CF6.0055: couldn't install mouse [ 1044.724300][ T5678] pyra 0003:1E7D:2CF6.0055: probe with driver pyra failed with error -71 [ 1044.741846][ T5678] usb 6-1: USB disconnect, device number 67 [ 1044.746999][T23338] batadv_slave_1: entered promiscuous mode [ 1044.788568][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1045.338080][T23353] loop8: detected capacity change from 0 to 16384 [ 1045.370318][T23329] batadv_slave_1: left promiscuous mode [ 1045.588367][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1045.588449][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1045.669518][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1045.669605][T23358] loop8: detected capacity change from 16384 to 16383 [ 1045.986849][T23366] syz.3.4654: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1045.986974][T23366] CPU: 0 UID: 0 PID: 23366 Comm: syz.3.4654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.987023][T23366] Tainted: [L]=SOFTLOCKUP [ 1045.987030][T23366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1045.987041][T23366] Call Trace: [ 1045.987048][T23366] [ 1045.987057][T23366] dump_stack_lvl+0xe8/0x150 [ 1045.987090][T23366] warn_alloc+0x24d/0x270 [ 1045.987111][T23366] ? kasan_save_track+0x4f/0x80 [ 1045.987130][T23366] ? kasan_save_track+0x3e/0x80 [ 1045.987151][T23366] ? __pfx_warn_alloc+0x10/0x10 [ 1045.987168][T23366] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1045.987195][T23366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.987234][T23366] __vmalloc_node_range_noprof+0x127/0x1540 [ 1045.987284][T23366] ? rcu_is_watching+0x16/0xb0 [ 1045.987314][T23366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1045.987342][T23366] ? __kmalloc_cache_noprof+0x321/0x600 [ 1045.987362][T23366] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1045.987380][T23366] ? xskq_create+0x56/0x220 [ 1045.987512][T23366] xskq_create+0x148/0x220 [ 1045.987533][T23366] ? xsk_init_queue+0x8a/0xe0 [ 1045.987556][T23366] xsk_init_queue+0x8a/0xe0 [ 1045.987579][T23366] xsk_setsockopt+0x52a/0x960 [ 1045.987602][T23366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1045.987622][T23366] ? __pfx_aa_sk_perm+0x10/0x10 [ 1045.987657][T23366] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1045.987681][T23366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1045.987703][T23366] do_sock_setsockopt+0x17c/0x1b0 [ 1045.987733][T23366] __x64_sys_setsockopt+0x13d/0x1b0 [ 1045.987763][T23366] do_syscall_64+0x166/0x520 [ 1045.987786][T23366] ? trace_irq_disable+0x3b/0x140 [ 1045.987806][T23366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.987825][T23366] ? clear_bhb_loop+0x70/0xc0 [ 1045.987845][T23366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.987863][T23366] RIP: 0033:0x7f16f999e159 [ 1045.987880][T23366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.987895][T23366] RSP: 002b:00007f16fa89d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1045.987913][T23366] RAX: ffffffffffffffda RBX: 00007f16f9c26090 RCX: 00007f16f999e159 [ 1045.987927][T23366] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1045.987939][T23366] RBP: 00007f16f9a3506b R08: 0000000000000029 R09: 0000000000000000 [ 1045.987951][T23366] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.987963][T23366] R13: 00007f16f9c26128 R14: 00007f16f9c26090 R15: 00007f16f9d4fa48 [ 1045.988001][T23366] [ 1045.999198][T23366] Mem-Info: [ 1045.999215][T23366] active_anon:7956 inactive_anon:88 isolated_anon:0 [ 1045.999215][T23366] active_file:9950 inactive_file:49641 isolated_file:0 [ 1045.999215][T23366] unevictable:0 dirty:299 writeback:0 [ 1045.999215][T23366] slab_reclaimable:7772 slab_unreclaimable:108776 [ 1045.999215][T23366] mapped:36847 shmem:932 pagetables:1892 [ 1045.999215][T23366] sec_pagetables:0 bounce:0 [ 1045.999215][T23366] kernel_misc_reclaimable:0 [ 1045.999215][T23366] free:1242326 free_pcp:9915 free_cma:0 [ 1045.999263][T23366] Node 0 active_anon:31824kB inactive_anon:352kB active_file:39800kB inactive_file:198304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147336kB dirty:1192kB writeback:0kB shmem:3728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15332kB pagetables:7424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1045.999313][T23366] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1046.003688][T23366] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.003743][T23366] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1046.003776][T23366] Node 0 DMA32 free:1020920kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31824kB inactive_anon:352kB active_file:39800kB inactive_file:198304kB unevictable:0kB writepending:1192kB zspages:784kB present:3129332kB managed:2546952kB mlocked:0kB bounce:0kB free_pcp:37544kB local_pcp:11180kB free_cma:0kB [ 1046.003829][T23366] lowmem_reserve[]: 0 0 0 0 0 [ 1046.003860][T23366] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.003908][T23366] lowmem_reserve[]: 0 0 0 0 0 [ 1046.003939][T23366] Node 1 Normal free:3933024kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2112kB local_pcp:2112kB free_cma:0kB [ 1046.004071][T23366] lowmem_reserve[]: 0 0 0 0 0 [ 1046.004102][T23366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1046.004204][T23366] Node 0 DMA32: 840*4kB (ME) 1354*8kB (UME) 998*16kB (ME) 696*32kB (UME) 418*64kB (UME) 195*128kB (UME) 99*256kB (UME) 53*512kB (UME) 26*1024kB (UME) 23*2048kB (UME) 193*4096kB (UM) = 1020880kB [ 1046.004344][T23366] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1046.004430][T23366] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 7*16kB (UM) 7*32kB (UM) 9*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 2*1024kB (UM) 1*2048kB (M) 958*4096kB (UM) = 3933024kB [ 1046.004568][T23366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.004583][T23366] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1046.004602][T23366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.004616][T23366] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1046.004628][T23366] 60577 total pagecache pages [ 1046.004638][T23366] 14 pages in swap cache [ 1046.004644][T23366] Free swap = 124548kB [ 1046.004651][T23366] Total swap = 124996kB [ 1046.004658][T23366] 2097051 pages RAM [ 1046.004664][T23366] 0 pages HighMem/MovableOnly [ 1046.004671][T23366] 428697 pages reserved [ 1046.004677][T23366] 0 pages cma reserved [ 1046.359011][T12999] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1046.519570][T12999] usb 4-1: unable to get BOS descriptor set [ 1046.520115][T12999] usb 4-1: not running at top speed; connect to a high speed hub [ 1046.520145][T12999] usb 4-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 1046.521145][T12999] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 4 [ 1046.521183][T12999] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 4 [ 1046.523225][T12999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.523247][T12999] usb 4-1: Product: 慸벞⁃䅪댏邁⹍〼蓩ꩥ按鸁婷淄〼鏎흜ꇸ讼䔠鶊髚⽷暖妀땲墾춟棻᷈檉џ맄犤몄㝀驘昴Ꮙ䝅䗛쳿˖쯲Ꝛﳨ焍臜톣作滈蚘⻑遇똊▁栲렿䞢恳฻፮뗶埖泹컱ꠀ傠慔䡜⟽㢧੥똋鴖ꇧᲜ㐥欰禔筂脹桤ꆓ곣ⱑꗵ闈⟃᙮째ꮻ銇냓䰕ˀꏛꗿঝ櫐 [ 1046.523275][T12999] usb 4-1: Manufacturer: 猋뱲䀧ᵽ꭯넓槑裏蝾ꠉ⪓䪒뮣典䯑퉷潟艐畎ᔏ蒁왖댍썏䯣䟜歇抖Ԩ胏䶘רּ壓뺻峙뷍✇狁ꀍ擮Е拾˪辝⻳驯휠ⷡව袢痾窍ተ鰾䩷建荎དྷ刺⪗滙ৢ㍗鎪̌먺鱓泜쁍ᰂ诋雦剮삘 [ 1046.523300][T12999] usb 4-1: SerialNumber: Њ [ 1046.642452][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1046.642519][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1046.846555][T23367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.846828][T23367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.868884][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1046.898886][T23365] hsr0: left promiscuous mode [ 1046.898908][T23365] hsr0: left allmulticast mode [ 1046.898920][T23365] hsr_slave_0: left allmulticast mode [ 1046.898959][T23365] hsr_slave_1: left allmulticast mode [ 1046.933557][T23365] hsr_slave_0: left promiscuous mode [ 1046.940651][T23365] hsr_slave_1: left promiscuous mode [ 1046.951071][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.951092][ C1] bridge0: topology change detected, propagating [ 1046.951407][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.951426][ C1] bridge0: topology change detected, propagating [ 1046.972822][T23375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.061391][T12999] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1047.119846][T12999] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1047.120428][T12999] usb 4-1: can't set first interface for hiFace device. [ 1047.120446][T12999] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1047.125387][T12999] usb 4-1: can't set first interface for hiFace device. [ 1047.125402][T12999] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1047.130699][T12999] usb 4-1: can't set first interface for hiFace device. [ 1047.130722][T12999] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1047.141303][T12999] usb 4-1: USB disconnect, device number 36 [ 1047.201718][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.308176][T12997] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1047.458682][T12997] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1047.462299][T12997] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1047.462315][T12997] usb 5-1: Product: syz [ 1047.462323][T12997] usb 5-1: SerialNumber: syz [ 1047.466003][T12997] usb 5-1: config 0 descriptor?? [ 1047.715260][T12997] usb 5-1: USB disconnect, device number 110 [ 1047.908836][ T5693] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1048.064619][ T5693] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1048.078535][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.084889][ T5693] usb 3-1: config 0 descriptor?? [ 1048.244117][T23393] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4662'. [ 1048.320895][ T5693] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1048.522960][T23397] syzkaller0: entered promiscuous mode [ 1048.523925][T23397] syzkaller0: entered allmulticast mode [ 1048.543232][T19316] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.543352][T19316] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.543385][T19316] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.557358][T19316] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.594902][ T5693] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1048.594918][ T5693] [drm] Initialized udl on minor 1 [ 1049.630852][T23409] SET target dimension over the limit! [ 1049.643840][T23409] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4666'. [ 1049.655789][T23409] 0: renamed from hsr0 (while UP) [ 1049.704439][T23409] 0: entered allmulticast mode [ 1049.704457][T23409] hsr_slave_0: entered allmulticast mode [ 1049.704467][T23409] hsr_slave_1: entered allmulticast mode [ 1049.704812][T23409] net_ratelimit: 7 callbacks suppressed [ 1049.704820][T23409] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1049.748118][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1049.748222][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1049.828028][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1050.111974][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1050.132319][T23414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1050.798369][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1050.798461][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1050.868044][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1051.163144][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1051.188428][T23420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1051.220809][T23421] kvm: Disabled LAPIC found during irq injection [ 1051.339376][T23416] batman_adv: batadv0: Adding interface: syzkaller0 [ 1051.339419][T23416] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.339448][T23416] batman_adv: batadv0: Interface activated: syzkaller0 [ 1051.415907][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1051.431835][T12997] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1051.448135][T23424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1051.584504][T23415] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1051.600044][T12997] usb 5-1: not running at top speed; connect to a high speed hub [ 1051.600076][T12997] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=48.94 [ 1051.601404][T12997] usb 5-1: config 9 has an invalid interface number: 33 but max is 0 [ 1051.601427][T12997] usb 5-1: config 9 has no interface number 0 [ 1051.601497][T12997] usb 5-1: config 9 interface 33 has no altsetting 0 [ 1051.603714][T12997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.603735][T12997] usb 5-1: Product: syz [ 1051.603749][T12997] usb 5-1: Manufacturer: syz [ 1051.603788][T12997] usb 5-1: SerialNumber: syz [ 1051.742125][T23415] batman_adv: batadv0: Removing interface: syzkaller0 [ 1051.797711][ T52] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1051.803798][T23437] syzkaller0: left allmulticast mode [ 1051.828284][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1051.828358][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1051.836890][T23438] tipc: Enabled bearer , priority 0 [ 1051.836997][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.843305][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.865423][T23429] netlink: 'syz.0.4673': attribute type 2 has an invalid length. [ 1051.887072][T12997] asix 5-1:9.33: probe with driver asix failed with error -22 [ 1051.902482][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.902822][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.903091][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.903353][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.903635][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.908034][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1051.959996][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.960350][T23438] tipc: Enabling of bearer rejected, already enabled [ 1051.985195][T12997] usb 5-1: USB disconnect, device number 111 [ 1052.005112][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.005637][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.019769][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.020252][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.020764][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.027123][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.027648][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.031607][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.032122][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.037455][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.055708][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.056229][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.066183][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.073777][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.074282][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.078614][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.083152][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.083639][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.108517][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.115895][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.116376][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.116862][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.180044][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.188213][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.188718][T23438] tipc: Enabling of bearer rejected, already enabled [ 1052.594078][T23453] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4679'. [ 1053.214945][ T31] audit: type=1400 audit(1789997067.389:4727): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=23456 comm="syz.5.4681" [ 1053.310551][T23460] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1053.647986][T12999] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1053.668376][ T5693] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1053.668624][ T5693] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1053.677672][ T5693] usb 3-1: USB disconnect, device number 58 [ 1053.681707][T12997] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1053.682272][T12997] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1053.798652][T12999] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1053.799592][T12999] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1053.799615][T12999] usb 4-1: config 0 has no interface number 0 [ 1053.799654][T12999] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.801595][T12999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.801619][T12999] usb 4-1: Product: syz [ 1053.801632][T12999] usb 4-1: Manufacturer: syz [ 1053.801645][T12999] usb 4-1: SerialNumber: syz [ 1053.803609][T12999] usb 4-1: config 0 descriptor?? [ 1053.833388][T12999] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1054.066879][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 1054.067307][ T5671] usb 4-1: USB disconnect, device number 37 [ 1054.095722][ T5671] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1054.157991][ T5693] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1054.194446][T23477] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.194456][T23477] binder: 23474:23477 ioctl 4018620d 200000000040 returned -16 [ 1054.205905][T23475] syz.5.4687 (23475): drop_caches: 2 [ 1054.312050][ T5693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.312932][ T5693] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1054.314843][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.314867][ T5693] usb 3-1: Product: syz [ 1054.314880][ T5693] usb 3-1: Manufacturer: syz [ 1054.314894][ T5693] usb 3-1: SerialNumber: syz [ 1054.319144][T23469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1054.575850][T23490] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1054.589302][T23469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.589630][T23469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1054.589844][T23469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1054.590017][T23469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1054.629532][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.629580][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.731646][ T5693] usb 3-1: USB disconnect, device number 59 [ 1054.948194][ C1] net_ratelimit: 6 callbacks suppressed [ 1054.948217][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1054.948321][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1055.028053][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1055.673728][T23519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1055.675841][T23519] ip_tables: iptables: counters copy to user failed while replacing table [ 1055.708222][ T5671] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1055.848018][ T5671] usb 3-1: device descriptor read/64, error -71 [ 1055.928020][T12999] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1055.988319][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1055.988400][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1056.068030][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1056.086006][T12999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1056.087126][T12999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.087151][T12999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.087190][T12999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.106263][ T5671] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1056.248020][ T5671] usb 3-1: device descriptor read/64, error -71 [ 1056.344840][T12999] usb 5-1: usb_control_msg returned -32 [ 1056.344872][T12999] usbtmc 5-1:16.0: can't read capabilities [ 1056.359853][ T5671] usb usb3-port1: attempt power cycle [ 1056.628209][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 1056.628275][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 1056.628309][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 1056.628363][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1056.725081][T23539] loop5: detected capacity change from 0 to 7 [ 1056.727749][T23539] Dev loop5: unable to read RDB block 7 [ 1056.727801][T23539] loop5: unable to read partition table [ 1056.727959][ T5671] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1056.728251][T23539] loop5: partition table beyond EOD, truncated [ 1056.728306][T23539] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1056.769747][ T5671] usb 3-1: device descriptor read/8, error -71 [ 1057.007928][ T5671] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1057.028219][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1057.028313][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1057.029529][ T5671] usb 3-1: device descriptor read/8, error -71 [ 1057.108047][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1057.138231][ T5671] usb usb3-port1: unable to enumerate USB device [ 1057.208257][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 1057.535476][T23550] ------------[ cut here ]------------ [ 1057.535486][T23550] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 1057.535496][T23550] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.5.4708/23550 [ 1057.560003][T23550] Modules linked in: [ 1057.563946][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.5.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.575033][T23550] Tainted: [L]=SOFTLOCKUP [ 1057.579522][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.590068][T23550] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1057.596033][T23550] Code: c6 05 8b e1 22 0f 01 48 c7 c7 46 aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1057.615746][T23550] RSP: 0018:ffffc90003c0f580 EFLAGS: 00010283 [ 1057.621910][T23550] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 1057.629996][T23550] RDX: ffffc9000f0b1000 RSI: 0000000000001631 RDI: 0000000000001632 [ 1057.638061][T23550] RBP: ffffc90003c0f710 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 1057.646077][T23550] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: 1ffff92000781ec4 [ 1057.654234][T23550] R13: ffff888061885d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 1057.662299][T23550] FS: 00007f558ec196c0(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 1057.671791][T23550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.678513][T23550] CR2: 00007f558dd88fc0 CR3: 000000004bbb4000 CR4: 00000000003526f0 [ 1057.686504][T23550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 1057.694548][T23550] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1057.702580][T23550] Call Trace: [ 1057.705892][T23550] [ 1057.708903][T23550] ? lock_acquire+0x115/0x350 [ 1057.713617][T23550] ? kvm_gpc_refresh+0x31/0x110 [ 1057.718589][T23550] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1057.724122][T23550] ? lock_acquire+0x115/0x350 [ 1057.729086][T23550] kvm_gpc_refresh+0xe1/0x110 [ 1057.733827][T23550] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1057.739203][T23550] kvm_xen_set_evtchn+0x14f/0x220 [ 1057.744293][T23550] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 1057.750191][T23550] vcpu_run+0x920/0x79b0 [ 1057.754515][T23550] ? vcpu_run+0x28fd/0x79b0 [ 1057.759162][T23550] ? __pfx_vcpu_run+0x10/0x10 [ 1057.763885][T23550] ? lock_acquire+0x115/0x350 [ 1057.768675][T23550] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1057.774283][T23550] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1057.780091][T23550] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1057.784973][T23550] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1057.789763][T23550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1057.794989][T23550] ? hook_file_ioctl+0x1f2/0x600 [ 1057.800030][T23550] ? __fget_files+0x2a/0x420 [ 1057.804654][T23550] ? __fget_files+0x2a/0x420 [ 1057.809340][T23550] ? __fget_files+0x3a2/0x420 [ 1057.814055][T23550] ? __fget_files+0x2a/0x420 [ 1057.818729][T23550] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1057.823723][T23550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1057.829178][T23550] __se_sys_ioctl+0xfc/0x170 [ 1057.833810][T23550] do_syscall_64+0x166/0x520 [ 1057.838489][T23550] ? trace_irq_disable+0x3b/0x140 [ 1057.843547][T23550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.849705][T23550] ? clear_bhb_loop+0x70/0xc0 [ 1057.854418][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.860413][T23550] RIP: 0033:0x7f558dd9e159 [ 1057.864855][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.884538][T23550] RSP: 002b:00007f558ec19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.893068][T23550] RAX: ffffffffffffffda RBX: 00007f558e025fa0 RCX: 00007f558dd9e159 [ 1057.901129][T23550] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1057.909257][T23550] RBP: 00007f558de3506b R08: 0000000000000000 R09: 0000000000000000 [ 1057.917277][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.925370][T23550] R13: 00007f558e026038 R14: 00007f558e025fa0 R15: 00007f558e14fa48 [ 1057.933423][T23550] [ 1057.936485][T23550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1057.943766][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.5.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.954685][T23550] Tainted: [L]=SOFTLOCKUP [ 1057.958993][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.969031][T23550] Call Trace: [ 1057.972302][T23550] [ 1057.975223][T23550] vpanic+0x56d/0xa60 [ 1057.979224][T23550] ? __pfx__printk+0x10/0x10 [ 1057.983820][T23550] ? __pfx_vpanic+0x10/0x10 [ 1057.988317][T23550] ? is_bpf_text_address+0x292/0x2b0 [ 1057.993608][T23550] ? is_bpf_text_address+0x26/0x2b0 [ 1057.998802][T23550] panic+0xc5/0xd0 [ 1058.002521][T23550] ? __pfx_panic+0x10/0x10 [ 1058.006963][T23550] __warn+0x315/0x4c0 [ 1058.010939][T23550] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1058.016217][T23550] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1058.021501][T23550] __report_bug+0x276/0x570 [ 1058.026098][T23550] ? check_path+0x21/0x40 [ 1058.030431][T23550] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1058.035727][T23550] ? __pfx___report_bug+0x10/0x10 [ 1058.040777][T23550] ? lockdep_unlock+0x5c/0xd0 [ 1058.045473][T23550] ? __lock_acquire+0x1511/0x2de0 [ 1058.050501][T23550] ? irqentry_exit+0x218/0x910 [ 1058.055262][T23550] ? lockdep_hardirqs_on+0x7b/0x110 [ 1058.060457][T23550] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1058.065749][T23550] report_bug+0x16b/0x220 [ 1058.070077][T23550] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1058.075362][T23550] ? __kvm_gpc_refresh+0x1512/0x1710 [ 1058.080647][T23550] handle_bug+0x9c/0x200 [ 1058.084893][T23550] exc_invalid_op+0x1a/0x50 [ 1058.089423][T23550] asm_exc_invalid_op+0x1a/0x20 [ 1058.094273][T23550] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1058.100166][T23550] Code: c6 05 8b e1 22 0f 01 48 c7 c7 46 aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1058.119771][T23550] RSP: 0018:ffffc90003c0f580 EFLAGS: 00010283 [ 1058.125837][T23550] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 1058.133802][T23550] RDX: ffffc9000f0b1000 RSI: 0000000000001631 RDI: 0000000000001632 [ 1058.141767][T23550] RBP: ffffc90003c0f710 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 1058.149746][T23550] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: 1ffff92000781ec4 [ 1058.157712][T23550] R13: ffff888061885d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 1058.165692][T23550] ? __kvm_gpc_refresh+0x150f/0x1710 [ 1058.171011][T23550] ? lock_acquire+0x115/0x350 [ 1058.175688][T23550] ? kvm_gpc_refresh+0x31/0x110 [ 1058.180550][T23550] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1058.186013][T23550] ? lock_acquire+0x115/0x350 [ 1058.190699][T23550] kvm_gpc_refresh+0xe1/0x110 [ 1058.195391][T23550] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1058.200603][T23550] kvm_xen_set_evtchn+0x14f/0x220 [ 1058.205635][T23550] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 1058.211186][T23550] vcpu_run+0x920/0x79b0 [ 1058.215450][T23550] ? vcpu_run+0x28fd/0x79b0 [ 1058.219977][T23550] ? __pfx_vcpu_run+0x10/0x10 [ 1058.224646][T23550] ? lock_acquire+0x115/0x350 [ 1058.229331][T23550] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1058.234883][T23550] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1058.240614][T23550] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1058.245474][T23550] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1058.250160][T23550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1058.255355][T23550] ? hook_file_ioctl+0x1f2/0x600 [ 1058.260309][T23550] ? __fget_files+0x2a/0x420 [ 1058.264905][T23550] ? __fget_files+0x2a/0x420 [ 1058.269504][T23550] ? __fget_files+0x3a2/0x420 [ 1058.274197][T23550] ? __fget_files+0x2a/0x420 [ 1058.278794][T23550] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1058.283739][T23550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1058.288948][T23550] __se_sys_ioctl+0xfc/0x170 [ 1058.293550][T23550] do_syscall_64+0x166/0x520 [ 1058.298145][T23550] ? trace_irq_disable+0x3b/0x140 [ 1058.303168][T23550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.309233][T23550] ? clear_bhb_loop+0x70/0xc0 [ 1058.313914][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.319803][T23550] RIP: 0033:0x7f558dd9e159 [ 1058.324212][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.343820][T23550] RSP: 002b:00007f558ec19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.352242][T23550] RAX: ffffffffffffffda RBX: 00007f558e025fa0 RCX: 00007f558dd9e159 [ 1058.360216][T23550] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1058.368181][T23550] RBP: 00007f558de3506b R08: 0000000000000000 R09: 0000000000000000 [ 1058.376141][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.384098][T23550] R13: 00007f558e026038 R14: 00007f558e025fa0 R15: 00007f558e14fa48 [ 1058.392075][T23550] [ 1058.395370][T23550] Kernel Offset: disabled [ 1058.399695][T23550] Rebooting in 86400 seconds..