last executing test programs: 39m55.363972009s ago: executing program 0 (id=2014): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xe) r2 = memfd_secret(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r4 = fanotify_init(0x10, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0x87f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f00000003c0)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x40043, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x7c2, 0x7b2, 0xf}) r8 = syz_open_dev$dmmidi(&(0x7f0000000480), 0xa, 0x8800) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r11 = getegid() r12 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r12}, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) r14 = getgid() ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r16 = geteuid() r17 = getgid() r18 = syz_open_dev$swradio(&(0x7f0000000780), 0x1, 0x2) r19 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x245ebcae, 0x800) r20 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000980)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)="1821b2058d2cf0403d21ae5a6dc2dbd2c44342b43801ce3d8d1b1de50671d1b6b9a4f653be7604a6d1ec7cb0833c3b9641c3857f4408e2fa7f716cb996fb2a1123281ed79b71375174bca5d9e57363797504cb612eb21795d3be2e7932814c43a4c14e0489b3ced99df5e2d118e2ee72b87b7096bdeadb6e3fd047f060736cc56565765fb20ddb04f9134123669e7aaa42b14c6f5da562efcf67f5f60a941458d768499c37e18acf2527f8c488b8baec66af16edc7b9ecad", 0xb8}, {&(0x7f0000000200)="9568d2b1dac16009d1bed6db1d174b28499e3ebe9b26be46f97fa398ab8a778e8e159c", 0x23}, {&(0x7f0000000240)="dbf540b071b3014d6767eb43880b189c185984e9286d1840e57a380a4bf918c652fc90b06271edc694ef87dba23fe54eec5e2a76449d6c137970447b6bce8b1aa05342411d88fa0cdf9b55ae694746b0d4d44f", 0x53}], 0x3, &(0x7f0000000880)=[@rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4, r5, r6, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x18, 0x1, 0x1, [r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee01, r21}}}], 0xd0, 0xa913b216a51161f9}}], 0x1, 0x4000) r22 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r22, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@ipv6_newaddrlabel={0x70, 0x48, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0xffffffffffffffae, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 39m55.046758996s ago: executing program 0 (id=2017): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x82c, 0x2, 0x1}}, @wrmsr={0x65, 0x20, {0x40000002, 0x3f}}], 0x50}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000180)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000004200", "2809e8dbe108598948224ad54afac11d875397bdb26d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) openat$rdma_cm(0xffffff9c, &(0x7f0000003740), 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, r7, r7, 0x1) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 39m52.963378617s ago: executing program 0 (id=2026): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':\x10\xee\xc2G\x8e\xe4\xef1CS/%\xa2%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\x00\x00\x00\x00\x00\x00\x00\x04\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xca\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaq6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xd9\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f', 0x3a, './file1'}, 0x231) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0000, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x8000000000000001, r0}) write$rfkill(r7, &(0x7f0000000100)={0x6, 0x9, 0x0, 0x1}, 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1309fcfffffffcffffff0100000008000900fcffffff08000a0000000020822c4f8ab3fd288b3576d27cb36065ad1130798f6639cd64dba712be9be04a4dd0776f13bc5ae9466c2c7b67"], 0x24}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/144, &(0x7f0000000340)=0x90) syz_open_dev$dri(&(0x7f0000000600), 0x9, 0x20080) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r7) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r11, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc8c}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x24040050) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x0, 0xde, 0xae, 0x1}, {0x1, 0x1, 0x13, 0x81000000}, {0x2, 0x4, 0xda, 0x9}]}) syz_usb_connect(0x5, 0x2d, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x6, 0x3c, 0xc8, 0x20, 0x22b8, 0x2d91, 0xa0de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x70, 0x0, "", [{{0x9, 0x4, 0xc3, 0x4, 0x1, 0x52, 0x45, 0x84, 0x2, [], [{{0x9, 0x5, 0x2, 0x1, 0x40, 0x1, 0x5, 0x1}}]}}]}}]}}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 39m50.559638858s ago: executing program 0 (id=2034): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) socket$alg(0x26, 0x5, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, {0x2}, {0x1, 0x1, 0x4}, 0xff}], 0x20) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39m50.197617064s ago: executing program 0 (id=2037): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x200}) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) keyctl$dh_compute(0x1d, &(0x7f0000000580), 0x0, 0x0, 0x0) shmat(r2, &(0x7f0000caa000/0x3000)=nil, 0x7000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x42060680) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b5"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 39m49.843475833s ago: executing program 0 (id=2039): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 39m49.575043895s ago: executing program 32 (id=2039): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.153893037s ago: executing program 3 (id=12438): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @local}, {0x2, 0x200, @rand_addr=0x64010101}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0xfffffffbfffffffe, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@null, @default, @bcast, @bcast, @rose, @default, @bcast, @rose]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f00000008c0)=""/56, 0x38}], 0xa, &(0x7f00000009c0)=""/55, 0x37}, 0x4}, {{&(0x7f0000000a00)=@generic, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/193, 0xc1}, {&(0x7f0000000c80)}], 0x3, &(0x7f0000000d00)=""/155, 0x9b}, 0xed}, {{&(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e40)=""/227, 0xe3}, {&(0x7f0000000f40)=""/32, 0x20}, {&(0x7f0000001040)=""/223, 0xdf}, {&(0x7f0000001140)=""/73, 0x49}], 0x4, &(0x7f0000001200)=""/162, 0xa2}, 0x9}, {{&(0x7f00000012c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/163, 0xa3}, {&(0x7f0000001400)=""/123, 0x7b}, {&(0x7f0000001480)=""/58, 0x3a}], 0x3, &(0x7f0000001500)=""/24, 0x18}, 0x5}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000015c0)=""/132, 0x84}, {&(0x7f0000001680)=""/120, 0x78}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/114, 0x72}, {&(0x7f0000002840)=""/209, 0xd1}, {&(0x7f0000002940)=""/238, 0xee}, {&(0x7f0000002ac0)=""/167, 0xa7}], 0x9, &(0x7f0000002c40)=""/183, 0xb7}, 0x400}, {{&(0x7f0000002d00)=@isdn, 0x80, &(0x7f0000003140)=[{&(0x7f0000002d80)=""/24, 0x18}, {&(0x7f0000002dc0)=""/81, 0x51}, {&(0x7f0000002e80)=""/222, 0xde}, {&(0x7f0000002f80)=""/198, 0xc6}, {&(0x7f0000003080)=""/132, 0x84}], 0x5}, 0x6}, {{&(0x7f00000031c0)=@caif=@rfm, 0x80, &(0x7f0000003480)=[{&(0x7f0000003240)=""/54, 0x36}, {&(0x7f0000003280)=""/239, 0xef}, {&(0x7f0000003380)=""/246, 0xf6}], 0x3, &(0x7f00000034c0)=""/246, 0xf6}, 0x5}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f00000035c0)=""/200, 0xc8}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/190, 0xbe}], 0x3}, 0x4}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf76, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) 8.131585023s ago: executing program 3 (id=12444): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000021c0)={0x28, 0x3, 0x0, 0x0, 0x200000000001, 0xffffffffffffffff, 0x3fff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000002c0)={0x74, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7}) 7.585288345s ago: executing program 3 (id=12447): socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4d0d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x20, 0x0, 0xb, r4}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x8, 0xffff}}}, 0x24}}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x23}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x509301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 3.819595725s ago: executing program 1 (id=12461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x1240, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11f4, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "9083c9250f639a053f5175d9bffed8442e8ed317449cf3d5ad23836320555c0a1983ae30d25c2a875004976711a2d149fa630c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8713}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, {0x116c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "f136e7221e0cf224cfddfe95f01f5a6749b204d269ddbc1fd4f17214bbc459dd07bbf8c76ac6c9d331104795ed0a0908b2627a36bf0306702b8c51dbc5f480086a29e5ad7c171ae723cd06efbc8a226405ecf6b1916115dfbffaa72ea5c42c59d0a50566e6c04d3a36bf2a124bcb46a3e3b650038de0a5b4ec8b6372ba8824c2f464e418342306"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x12ac}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 3.588507903s ago: executing program 1 (id=12462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110ac000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110ac000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) (async) 3.440605208s ago: executing program 4 (id=12463): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="2954bee0f639bb020d930c412b8bf22096dcda9a05bd81bb70b3a4adb6e34e5d184618fead0072cff7b9283399f82987dc0a50e592a697f0ae6133b7b4ab938af046f5ac26a53942f24112b73e6f5ed0f31f16487bdddf20c9300ae968e595ef1ddd5edf448196777ede17065df6b6bcb550eeb27e9e1e340009a0a6f8dc08331ebc7d1195", 0x85}, {&(0x7f0000000000)="3f291fdbff074e9a0c228814447b0858bcd406f3d8", 0x15}], 0x2) 3.365318462s ago: executing program 1 (id=12464): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.281291477s ago: executing program 4 (id=12465): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001007369740024000280050009000000002908000200e0000002060008000000000005000a"], 0x50}}, 0x0) 3.195876767s ago: executing program 3 (id=12466): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000a77000/0x2000)=nil, 0x2000, 0x17) syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 2.64705494s ago: executing program 5 (id=12471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) 2.595743145s ago: executing program 4 (id=12472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x1240, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11f4, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "9083c9250f639a053f5175d9bffed8442e8ed317449cf3d5ad23836320555c0a1983ae30d25c2a875004976711a2d149fa630c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8713}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, {0x116c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "f136e7221e0cf224cfddfe95f01f5a6749b204d269ddbc1fd4f17214bbc459dd07bbf8c76ac6c9d331104795ed0a0908b2627a36bf0306702b8c51dbc5f480086a29e5ad7c171ae723cd06efbc8a226405ecf6b1916115dfbffaa72ea5c42c59d0a50566e6c04d3a36bf2a124bcb46a3e3b650038de0a5b4ec8b6372ba8824c2f464e418342306"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x12ac}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 2.535096756s ago: executing program 3 (id=12473): r0 = inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x80000) socket(0x840000000002, 0x3, 0xff) (async) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x3}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.490209418s ago: executing program 4 (id=12474): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b2c25190b35f68af8ff00000000b70800000f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000003600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x8, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x28, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x1000, 0x8, 0x1, 0x7ff, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) (async) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r2, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r11, 0x0, r1, 0x0, 0x6, 0x9) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendto(r1, &(0x7f0000000080)="16d941a8ee2f74c7323ea5e5bdbd341397a95b07a117f2041371bbc4db532f19b117c074302b167a1da875216ea257599f040de9f949b7a257a08f391ea77f093c4dcda7cdb5e86b83a8b9bfc4fac6999e459de6b6cf8ec4a4633298b8af91cd3871ed89bedc", 0x66, 0x1, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000080)="16d941a8ee2f74c7323ea5e5bdbd341397a95b07a117f2041371bbc4db532f19b117c074302b167a1da875216ea257599f040de9f949b7a257a08f391ea77f093c4dcda7cdb5e86b83a8b9bfc4fac6999e459de6b6cf8ec4a4633298b8af91cd3871ed89bedc", 0x66, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000040)="a5d440ca15bda5a57edd034336f7e26e0d00009079c442cb3d", &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000040), 0x2, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000040)="a5d440ca15bda5a57edd034336f7e26e0d00009079c442cb3d", &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000040), 0x2, r0}, 0x38) 2.335430925s ago: executing program 3 (id=12475): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)='2', 0x1}, {0x0}], 0x2) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x1c, 0x80800) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x9]}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000004c0)={r1, &(0x7f0000000240)='\x00', 0x41, &(0x7f00000003c0)={@_ha_fsid={[0x4, 0x80]}, {0x9, 0x0, 0xfffffffd, 0x7}}, 0xffff8f4a, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000480)=0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x3) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000180)=0x2000004) pwritev(r3, &(0x7f0000000880)=[{&(0x7f00000002c0)="00214717a7070000000083e7555ab44c3c0a7e1bbbaa90", 0x17}], 0x1, 0x9, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x40) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r4, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="06"], 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xff, 0x69, {0x7, 0x25, 0x1, 0x4, 0xd, 0xead}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5a, 0x9, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.984259891s ago: executing program 5 (id=12477): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x3ff, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1837}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1010}}, {0xfffffffffffffff8, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0xb3, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x407}}]}) 1.491765432s ago: executing program 4 (id=12478): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.490350043s ago: executing program 4 (id=12479): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="02030109020900000180860700000001000000000000000000d6d5"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000000f201"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.466944202s ago: executing program 2 (id=12480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x7}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) 1.403021376s ago: executing program 5 (id=12481): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff50042402020d030905030200"/85, @ANYRES32], 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000080)="4dd2c25bbb6e2ca1bd97a56be6352b4e6effab5aa409fea564259ecde362091ae3a4e955f60be65b05025c3249d2d946e3ab65f6ee69f73ba4565324930f34515e183511f61d2d3b89402ca1d3225816668d5afb8f98e1433a065b0876a067d5a47a12ba82ba64bd99cf32631d72c3befa13b865f7480a50d509b3d46759d5a056e490e30a61317196357ee4832a10fa3dc515bec206c7d7f5e33df73791d9d7a924cc802fccdda8d4f1b210bebcd5eab42de071f669232e23087c9a5b24b2e8f0f33c5ceadc1d808b01fb0c72abb90ae146d8245dbe915557583c9c4ecb43fd839ca081f9a968e70a9b270c239b", 0xee) 1.163773771s ago: executing program 2 (id=12482): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) (rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') (async) sendmsg(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="971df7b92ef2c452e3bbb48298dd508bf45d2f8a623883160ed577f4de830c7fd0571a", 0x23}, {&(0x7f0000000080)="d89ccfc94d20bff773d09e112fa228aaac7aee3bfdfe5b5b04d7419049b94153dbaddea467fc3163c95c3631e79d484bef42e72fddfc55a6641fd5bbb0be076b4110395545fbd62d30ae6aa1ca9dfc9dd19b8d48c6e3b21279ae9dee4ae280266100e59ceaa842eb8748511254bb6a928a3c55b0ced09c58dc0066c23cdf9fbff5dd4dc3d8d3520f629746bd18ac1c4b4f6007fdf648458c1d18022825ac62d179d59343cf1988972925fdd8c9cc611dfd9dc816bebfa6f04fba84bc099d4628523e3615845a4421c847a7c85d6e58261333aa70ade6ada6091e484df4cc52d58c54012d9c44c9174f77f0612c", 0xed}, {&(0x7f0000000180)="562e7ccc1a74953e24f55732801648a520d04fa1009f0dbcfd1c0864b18798b1c78f5e183616db2131da7495cec5a8dfb04a53d9e350a6a09d62988bdc9d3769f9a74b31cd4afb610ecf9a08f2f301430453172df2162deb8f5fe129f6c197640b8a766e3dcd647981323694696b28d6f1397d2fe4", 0x75}, {&(0x7f0000000200)="5cb4b8dbd6a58821bac917ceddf2b298550b07aefc870b7503e58aed0b3747cbf283efd2ca36c3575832b310bb5fa827a3a83ec94af34573b0", 0x39}, {&(0x7f0000000240)="798115cf3fa3d917a4728835644b983e18c276b6a4e3effd05878edf56fd9aae684890bf0f6c30dcf6865965b6b78d3d741177d91205fb4b84c9e7e3a7b0b29644db34c8fe673e7576150c489a82f1f326bff1dc1a76933e0007cbce109843963810973159ff27daae5c2eedb7f572777617ed5f24f0d456683243fc7a78e394650cf0554247dc1c17097b07ade0867a5ac4d3", 0x93}], 0x5, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x2538}, 0xc001) 1.138036823s ago: executing program 2 (id=12483): r0 = socket$inet6(0x10, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200007}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044811}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) (async) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.071285141s ago: executing program 2 (id=12484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x1240, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11f4, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "9083c9250f639a053f5175d9bffed8442e8ed317449cf3d5ad23836320555c0a1983ae30d25c2a875004976711a2d149fa630c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8713}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, {0x116c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "2f64597f2dc2fc6f9e2d671c3643de76d6a7e6a8bed0f15b9ccacd9d02beff1fcba6864972141667c232a0c3253c656744ff01581ce21458611d2ae4b56925aea4f91ce0b8ec9e95ef8b8043b36d9d15054c34113536e3bfda9d5a16c9c3ad447958ff02d82e60d45716c45569b368fb9e562e791226506f9695b7cb245cd8eaa1432acdf290d0a2a0926b6a427414a6c84311c93dab1df674a029f5eb8a944021ae9e4020adcf32dcb2dfda0f33c68a1f07bc45aa1316d8c95b4a2f05118fc3448cecacd49d459ec46deeabe3e0bc2a086b1e10845fe1b862d3bc15746779cdcccd768c73ea69085195b048f84b2fe3ac2ceccc940b865f1f060be29d4affa60bca0ca71920f007517de5a3be9da6fa24ff61139a2ac2194678f0e1b1916bfa6a78017cc4133330a2ad119aebb983d748ff4f24666a9e623ff78e698e071cafa5c80373ed75cdad424597e6529d218c488cbebef1d56dd35308ca45bb087637ae00ad64d9a30600fbbcb9474f61bce325e8a8e6bb7779c2c84b944c41d1e4b5899367a749a2963e348db3999e68a29e8cd70a5e5e765af6b1032c71aa94e9ed66c61c55f7cb7e353a1193fea30e0df861770ba95aa45c000538dd662a13ca2d9bc2d8053f0d1f8133cb1dca914978fcc3cb4f22ed8cbc4cb14998e51df5797248e76821b1357d9da8036c0431ad5629897eaf5d2916e8fb1aea24fb11c0e60a3e4d721f64d17254377f99deb6a3204b42db56e158e0a45bce6aceacb27c57ec518bccde3da548486d16491e891415e91697e9e967db0d33a4333ef3b48be10043939932678b22f453638d0f933f3051ebe029714b97305b6a56152969fdcb50f1a10beb81ed450b01bb2501889a7e4cde94a86b34cafea3cac859bb054e818789ab321bfbd1df3bf5680fba88a73929b48bec848a5dfbf75b5f716803c3174798a8b7c24bfd0c49813147e0df48a9ef399bd7528cda8b58d295275dc150528751607ae4d7ba78b316ca8e461a930e6984ca3beb2b8f7db616ea9742276a341a40ed9941b3bd2f5cdf1db4db59319c41b659b0a6ccce2bf23dd2f8578ec6ed78d827bfd00bf949c4aefac4342fd74a0512fa931c327ba93bb082af9fef466664d72e882a7f9e7e69c8bd16b28c6fa65f576f9b503e1e5eab1c2a2cbd8503e1e1b78d235dd3d0e45fc8547c373ee46f8e2c305f2e3eedea42fb5e452a5993e53c1bf88842913b9f81d950fad3c70ff7ef5052b5a61543078c84f19cd792f494e9c5df116d7f68fba150dc6345758926ca87d8d0988599341f3384d29dc2a557dff1b7ffd9f9570b3d3df245c406244f5fd35667a898b8d15f514c7703e9557f58efe6ffb0f693da86148bdc77be7e33786ffa47355c507d40feab16cf18fe4898fceb72858ec1cdb243c98435aaca08c0f14b4cf8b80db4e0600b8e5f6f431e0307d3afa7724a036603d0d19c669cbe4fefe4d0197467f94ffd8b61ef47fa05e6c7eb00d22a51fcdc07cd4d40e868432930265175b63beb2fb361a233a806e2ef46bf904d86bbbb06ae882e5e6adb2d6a6066eb4d74bcccff49ed508df724eeaddc9e4fc400b04222c1953dfcce7ade271771dae12236976deca7fdad4f1ffb497b1d30f24b5e8c75a3cd1026eba8ddab80afc978498d9b9fd48fcf18d056896a5d210b3724a88e8782c09365ddf2f642bf1a294b7129b27694521cafc1d1754001df41e996ddc4d21b774d009d67a25eed9852337bf536a44f6e47e2c63f06bd24a21542073b8c73a90e669f775127fd24e970fce389b92911b43288f9c111a069a90d98f6c4563512a8ec6da81932589edf253c81fda2d6fb2a2d93ecb9230fb06ac8a7d4ed1a10198bd27b82566489b103d62c62a70712c79e0f75aa1c828417ca680433e698ca4c683cfb6544479849f6665c1cb1adf8d9a7e0bd24585305922037f646bd817af90d218065422a01a86fbb8240a9ebf3a571342c4334dfb656a09b5980a09f5f2a025a891df67f53b8176e6f11a90aa89fcf8b9629cd8a9438a40d9c492eed63f450c70dfc40e5b69abd4f49250fea8ae6c8ebedf8c22f113a485dbb8610ab8cc78e25e4beb9c1c592b685572c9e6949c4b74ee0f43251683efe05d29b76968781b3b3bc6cec098d95f43b9bdc3c5bbff77bac2844ce3019b523c36a54efc6f61c577838ad4821e5f7d151a651c724a8818aabd6c32771223f9d901bcf5b84b762d8a1eb1120319309f89f24f8522d19bc2f5bea7acbee6175238964ee30594bdc4cd3ba3fb3dd73cf64c32012e7c6f9d6dbc7ac3f84474f6bf89dd8a72017b0c8aa43465ae2a743ea6239ab5d400d7e065bfd697b6a29f1eca941e5d43c86f2c0f2b11d95875e0fdca71552946bd052c1cc350290ffe6c5134964f42accb0b831ce2df5725638eafb23f18158152d365044debf31ebeec155ea8250fa6832ac1f24c5b967d7ea468314297ff11d7e9733c43b7503ba023ce3c3a9d0b6b8130d16d5de3a88d1ddd11707774e6037166a1650cc8413f65667afa12c5f436bc4dd808be1891b3a11ef34de6f349406655a4939063a09228923c439bae88316993f20cf8a493e65865ebb91d10c100600d425aabb682b18dd55351e3aa76084c6d72722cfd23ba2c9134ae51f6deda8596bff0ed5cc7c5154461cdcfdb9e5691dd9a1c3496fc572dce62f91341fd64af713dbf63e30007df158aeb20a0e987851260ad8d67fbfdff3daf5c2d5a38ddc4f4e90d0675c3a170b76da45ac49392d361dbafdc89b47d7982fbc79a681a6d8c5895f118b514dc65cca0b321a383fd990274472c543015cec9730106cc2f9e55bd71d545008ee468d40e71f6ea920917da89a8e4e586c820dbb535132ba7ac061b2dca16b07071266167624a4c07c4d9a0abbde5ec8c4f8acf125ffeb516f2ef5aaa66c79d94b4a4c4c389199f5443f922de96e1ec5f4cbe81cda4991e686ed5f5ef76eaf7e7b8fcdc45dc0636d83a78d8188d866275435a6734a70b917e3bb43bd52d34a13a16bbb7e360d50735cb49e76c2784682159e364b176e834e8009129f634d990c9737941b83bfad047a5a0159eb7de250503110fa504ed70260c6920d5666c2504bae4069fd7f26c3d3e7272c9b648ba70f178bdadb9d66bf30ff260df882aa081f8e2704285a514da1be898e34a258e633f509462d45dd77784c58968241db40ad2a4dd84071f641ff80d81cc9cf71e58f4d566ae8fc720315f1e43f75d090de5852482004b8455d862a7993800997dd5d3ffd613968a6fcd6aa83eb4f999d90b3b2b902dba84fe5baa2db15cf6b25e1b13691d06061118b13c3d7c6f125e4217ff708cbdf831a479f99fa7633d5a837505961e5ccd40fc3a49911a4d2545c791dab9d551576d0fd82a799c349335d654eb25bef5da641e47ac10ee8b0c8b250a59ec1fa85d15606651a49326eee96d7721d964fad55ccbe0a7b2f2703a6e50d682e8746198bf53887269eb92f2539fef215c18b4f1dec146b2d52263a703107f8645ea7b7d8564b284dd9c7d142f2707afc7457955d79279899d1658472d25863254eb7f9375376f0ca72636e59c19b20a105439a1515831d4ecf69ec312bacfd9ac330af9546ab304c0e9f3d3e6bd7b6f082049aab39ec364cb4d8a50c5be5a3ba0a089353a0e5d666d2c85d14dc9feca049e913486a49cb1579f8691f7314273e7778efcf0b321c916b71543f7e50a48db25b1c123e9408014bd7179fdcb04ab66fd70a70958c113fa3cd82301c2172ca9cc25400c8402c78523f2fc20da9af9afe9381f69c86230deef757ce8ea71c8dbb9b4416b8ddf4c47940a01d6d126740e2f41011c34f6597fdb7006ace3a430ea2d2b6d2a2d9f4cbe4f08d7a38da69ae93f8989f9148c80aa4149e81f347a62eb075163a27d7553bec3d156a4e89a70e17f8174361f4829af2bde266c3238a741f9e05d13ab43d82d7c8c931aa0d49600a03c2c1d8e86a457b6acd78d83bc388759ece165476ab565a0622e7468a66def4aa5febf9dbaac0dae97bfef28fdbad00374d71cb19312ffc540a395589ca3a78895b09896acaa43143c8da0503617ea85f7561d2212301d0e141e51ed6a3ecaeb714626fc5bf8194cce1ae7c3aef4718a940b06d6b37952af2661fc0d0d42bcd786ba4e682e2078d21aa55a3bedf416a5ff59282af49fbd4e01d3bf00d9e24589a1e5e5e5776ef3aac154954bd6bc825afc81fd467e8773ccf0b5de4ece6e063b74887d025818e8f2d24eae0868cc59df09eda830c0ad7f254dd51d298e6672935476d418cf19e6d5a2bab42c1a73e5dc54ee3026c70b1c1f664c8742b5212ba3929fb0ac2dbdb3c07ed022f9d220bec5921aed64416bd6bb5dafe80d09f21302c7725627dc4841e2b481457c087db358a08d81391747b255e5c4d5655b42965fa6ea1e8bce3a4926baecbd5752bcf7d139f708ca7b9990d1e74f387039e25af58f5bb0d026e31a10d20adbcd4c725f148634d4fa611745a3ad83c9420f4fa50abfde19544d1095d880742bfad701d15e0c1d5edb2985c00f6411e6acbfd56b95a2e01c49f41b56d29209b8b949b518075ac5df26659c2c6524bf2f99f74da9f2f205dace6a78b44be00287e56b783a3b8b811c7fc9ed3cebff0329390218a591fe73a60a71af9cf49236bf9ee25a1026d4bff4a35506adf0e7898bda9018a326ed6113267046d68c1613202b739f4e4700cccd4fe8dc0ccca8226dd994bb60384f9b3f69e4ebad20a37ce4526ff4f9746679efcb8b8b1c23396979dffcf9ed34ccd6acd952b673908c51f71e1c9d4c86bcba956253ebb6d5c9d59d91fd636d240d57859f7ec3403da974d2e4a8b13c47d6e4931b859c838c3f5673822b2bbcf51345c29f966eb5dd538cbcb6fcef5319e1dc8fac773ce5e67c25ccc89e7e9a770e94a40b756c9a0c8d14722cc49a5b62ebc0022e8a01297af0e3e712e81490994d81c22b1e8ed8fa801c82ce9e68c84e0df8ec9e37bd17eabdec1f8528284fb0e5c9f93aa032bf5791593f173d18ce94eb169eaaaa2efd9ec85137997127e3b21cbaa57c1258b17f557cd5528712639fb8eab791adf403c741e461fe8989dac2df7dcf2558d1cedf1b462ac695ee9a7a25e7cbf0176410faf5c09662b8d2985dfb3a82aee57260ceddfd958453d2d64222fd0d63d46ec5e9dd03a4ac3f4840df266d56b31017bc25b5fccf6fb2ac28ff4eeabbc6fb458e9ded9171dce6cbc403ba2d1c7f63d78f481d74c27bffee846d82947ed9e758b4aba238f21809833efa03f0585de6c063a0c3397d1f85865fc47e176f2f95063e815bb584bc0f1f9feabe9c90391194120b75ccb13395473926ce227c23326432868e495e921e3363881c175d29aedd85a85ed9d6e69709864bce44a512b06042237977f5feec98ae6185076092c601018f98711a814e992f3e87ebe10b083ebdd63e7516cca03115659593a9120a624fe3d9c9d9dd66c3b56643ebfd990295bdcde2348f3cdf3b8098edcbf23dafa458b331b55f78bcd9096d0defede7a59363484859c825acf6f9b3a346137daaaafaebfd0d3f284b8d8f419be3bd4f8f1ce4544813c6642b22e4689a7e54a0b2a866320ac1f3d1d1e0402a7d99f897fa8ffac8a19754bf65ed2341442f7dc1905ae940fd99571eb54609fbb49952bc399d963d7650db6a72e2ba5d1bf3b6ede2d543e7f62eaa3d6d4b5766df51b825c595205151e94eec6f423c4c6c80b20291e83186033b004b71714d45549bc3d46694b401ce1ba27555218094e"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "f136e7221e0cf224cfddfe95f01f5a6749b204d269ddbc1fd4f17214bbc459dd07bbf8c76ac6c9d331104795ed0a0908b2627a36bf0306702b8c51dbc5f480086a29e5ad7c171ae723cd06efbc8a226405ecf6b1916115dfbffaa72ea5c42c59d0a50566e6c04d3a36bf2a124bcb46a3e3b650038de0a5b4ec8b6372ba8824c2f464e418342306"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x12ac}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1.004822768s ago: executing program 2 (id=12485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000025c0)=ANY=[@ANYBLOB="fc030000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000535000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb000000006c0000000000000000000000000000000000000000000000000000000000500000000000000000000000000020010000000000000000000000000002001000006c00000000000000640101000000000000000000000000000000000000000000000000000000000008000000ac1414bb000000000000000000000000000000002b000000"], 0x3fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 879.696818ms ago: executing program 2 (id=12486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r4 = gettid() r5 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3, @local, 0xfdf}}, 0x9, 0x8}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x401, 0x6b13a7b0, 0xb, 0x38, 0x1, 0x88, 0x2, {r7, @in6={{0xa, 0x4e21, 0x1ff, @empty, 0x8}}, 0x1000010, 0x6, 0x0, 0x5, 0x3}}, &(0x7f00000002c0)=0xb0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000000c0)={r4}) 738.917744ms ago: executing program 5 (id=12487): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000001c000480130001"], 0x30}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000180}, 0x20044814) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x1ecc1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4a080}, 0x200088c2) 536.946551ms ago: executing program 5 (id=12488): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async, rerun: 32) r0 = userfaultfd(0x1) (rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x91}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 259.535759ms ago: executing program 1 (id=12489): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 230.409229ms ago: executing program 1 (id=12490): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r2) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='gre0\x00', 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x45}, {&(0x7f0000002340)="6511", 0x2}], 0x2}, 0x4000000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/17, 0x11}], 0x2) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x0, 0x9, 0x2, 0x4, 0x6, 0x1, 0xd, 0x6, 0x10, 0x1, 0xc, 0x7, 0x6}, {0x0, 0x0, 0x54, 0x0, 0x5, 0x5, 0x5, 0xfa, 0x81, 0x81, 0x6, 0x4, 0x9}, {0x9, 0x2, 0xbc, 0x4, 0x80, 0x1, 0xb2, 0x9, 0x0, 0x1, 0x6c, 0x5, 0x7}], 0x6}) 118.443357ms ago: executing program 5 (id=12491): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = socket$inet6(0xa, 0x3, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) sendmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="80000000000000002900000002000000341283feb1a3491a1fd11d409128d27ce9"], 0x1b0}}], 0x1, 0x40000) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x4001}, 0x10) r5 = gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}) bind$inet(r2, &(0x7f00000008c0)={0x2, 0x4e20, @multicast1}, 0x10) tkill(r5, 0x8) migrate_pages(r5, 0x7, &(0x7f0000000180)=0x7, &(0x7f0000000200)=0x4c88) r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="4e5975fec8ca69b517e68c46c2e85553b6bfaf320ecc5c45a46cef1c595a9380ba382108619cf396148733ea878116146da43233a470ef86fd587d95b72d15a7f99622b86d92b63c46add8fe72b49e8d55b065ce9b387abbc954c42f563dac3c928fff5ce653e6510313e29f5cd7d7e2f0c02289c27708ad6c14c7adaf676df7de3a3c1f4eb3844d4e5a84150e3d8bd2cd4ccd57b69b12ac66b4c07351369daf3c2ed841326346e46d9a3faa2cc5f79080725fd52389488668", @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES8=0x0, @ANYBLOB="66f3e85b74d822e3233f7e3a37c52a3dd7dd1bf7b934398a38336c813a8966f7b48f22e8c74cd7ea218418067a6fc104e8e7de40760e185e1aeac200f5c36f681d5a7158579fc7ce4e311439142c4f1bfc6c86f88a1aa116c7332f6ee4a8d3f570825f65b6333a07a44ef4fb6b254300ac4a0e20de5df001b6a343b4e20b40119a259b01f86c5a2be55dd96bb0b4b11d3fa918d1", @ANYRES8=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, 0x0, &(0x7f0000000900)) syz_usb_control_io(r7, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0x1c, {0x1c, 0x3a, "d10d4c0bfd9eacc234ba4321783397febd513d4db408f4ac5fd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000240)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xb3, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xa9, {{0x8, 0x24, 0x6, 0x0, 0x0, "68ac96"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x6, 0xf}, [@mdlm={0x15, 0x24, 0x12, 0x240}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xfe, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x8, 0xba}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x80, 0x2, 0x84, 0x10, 0xff}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x7, [{0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "40265e6edda03f1779d4f54826a366a5455e0b7163fb5f2f80207e4e2d2f47c1a5190240c88d39eac85f402f152691cd65c5a37254735874a389cbdf9aa5e6e96b2963d3a3f21200eefc665bd5f765fcf08710a8d04b0efa87ff809d3a197414d9b2a4335a37f83cccba36a900445f0f28d2cc784c701586667ad94d9954fd15ff2f6679e5522ddd95704157b1c70e10d94ef18d254393ef790d24beeb658ec1f49fe7a7494940dcca20b43929e28716fec336d8abfbbe70db7ebec9f6bf8bc213cb6f14a7c7b9fa7549994bc2b98605031b6442666150d7a463e225b5404aafcf972d0054"}}, {0x101, &(0x7f0000000440)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41b}}, {0xcf, &(0x7f0000000600)=@string={0xcf, 0x3, "a9cd6a53dbc08530a3db9dcfe7bb921b52c5157cb955d5b7c593d0806985679f03bd152691f53d22c1ae9998d9d2812113dbc5e58277b3e93d8c94b8771f1013a98141af27335bea52efe67b6858908ec7051b575d25acca74b84a392c3f9c0996b9645f5a094328fdfa4b03abaff483857f3ef102a93d1270c7e83d41ce509c3833878d9fb022be8ea3e849fa6cff4d1eb7a62c9acc3987614643c295bbf78d46daf11df8423ab11e33eda181b6d9e1911f95a534d13c458660a9c4d207a7f6f9f8385d21366c7e138b158e0a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x436}}, {0xde, &(0x7f0000000740)=ANY=[@ANYBLOB="de03654125831dd1757f16b8f40813933ded90e644a43ed58b27df0133a9279e6a0b3a54483e01716594c6adb71f4f8d605959000701c58e6564add3aff26ada83bb084ed65b3fc33a51e54885a03ecc2144cc6c5b897adecf00ebc6771c1094520fe0ea914d6220dcf91b09915691d6ad1f90db9b00575824e974ba2c0ec36b423f2f7e048eb3a183d61884687f25990edd120aa097e919ed656582907e0a0beb5c12490f80587044d06f260abfb3d519175e474fa3602989b8b8233371d01522517f46253e6f994ebe0a80d403ba00"/222]}]}) 0s ago: executing program 1 (id=12492): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x2841) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ces/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2780.399070][T14145] usb 2-1: USB disconnect, device number 77 [ 2780.401743][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2780.459356][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2780.472859][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.151700][T14145] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2781.241751][ T4699] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2781.256510][T15964] loop5: detected capacity change from 0 to 7 [ 2781.285715][T15964] Dev loop5: unable to read RDB block 7 [ 2781.313044][T15964] loop5: unable to read partition table [ 2781.325674][T15964] loop5: partition table beyond EOD, truncated [ 2781.328577][T15960] netlink: 'syz.4.12102': attribute type 21 has an invalid length. [ 2781.340251][T15960] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12102'. [ 2781.373720][T14145] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2781.385702][T14145] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2781.398274][T15960] netlink: 'syz.4.12102': attribute type 5 has an invalid length. [ 2781.409265][T15960] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12102'. [ 2781.425874][T14145] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 2781.441620][T14145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2781.441857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2781.463094][T14145] usb 3-1: Product: syz [ 2781.479554][T14145] usb 3-1: Manufacturer: syz [ 2781.491759][ T4699] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2781.509620][T14145] usb 3-1: SerialNumber: syz [ 2781.519796][T15964] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2781.520200][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2781.597599][ T4699] usb 2-1: Product: syz [ 2781.613260][ T4699] usb 2-1: Manufacturer: syz [ 2781.623327][ T4699] usb 2-1: SerialNumber: syz [ 2781.642886][ T4699] usb 2-1: config 0 descriptor?? [ 2781.754131][T14145] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2781.787933][T14145] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2782.396509][ T4699] usb 2-1: Firmware version (0.0) predates our first public release. [ 2782.427728][ T4699] usb 2-1: Please update to version 0.2 or newer [ 2782.481666][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2782.495246][ T4699] usb 2-1: USB disconnect, device number 78 [ 2783.032151][ T4699] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2783.042613][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2783.088834][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12110'. [ 2783.135280][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2783.231990][ T4699] usb 2-1: Using ep0 maxpacket: 32 [ 2783.268862][ T4699] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2783.288747][ T4699] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2783.317730][ T4699] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2783.320076][T15994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12111'. [ 2783.327131][ T4699] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2783.344509][ T4699] usb 2-1: Product: syz [ 2783.348726][ T4699] usb 2-1: Manufacturer: syz [ 2783.372755][ T4699] hub 2-1:4.0: USB hub found [ 2783.521796][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2783.883189][ T4699] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 2783.954809][ T4699] usb 2-1: USB disconnect, device number 79 [ 2784.126325][T14145] usb 3-1: USB disconnect, device number 21 [ 2784.278215][T16012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2784.319609][T16012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2784.339650][T16015] netlink: 'syz.4.12116': attribute type 2 has an invalid length. [ 2784.352722][T16015] netlink: 'syz.4.12116': attribute type 8 has an invalid length. [ 2784.388653][T16015] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12116'. [ 2784.416749][T16018] loop5: detected capacity change from 0 to 7 [ 2784.431764][T16018] Dev loop5: unable to read RDB block 7 [ 2784.437480][T16018] loop5: unable to read partition table [ 2784.443473][T16018] loop5: partition table beyond EOD, truncated [ 2784.464294][T16018] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2784.561677][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2784.618558][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12119'. [ 2784.631874][T14145] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2784.714803][T16027] fuse: Bad value for 'user_id' [ 2784.721404][T16027] fuse: Bad value for 'user_id' [ 2784.727780][T16027] fuse: Bad value for 'user_id' [ 2784.734039][T16027] fuse: Bad value for 'user_id' [ 2784.739354][T16027] fuse: Bad value for 'user_id' [ 2784.745652][T16027] fuse: Bad value for 'user_id' [ 2784.751273][T16027] fuse: Bad value for 'user_id' [ 2784.756834][T16027] fuse: Bad value for 'user_id' [ 2784.773875][T16027] fuse: Bad value for 'user_id' [ 2784.778934][T16027] fuse: Bad value for 'user_id' [ 2784.792311][T16027] fuse: Bad value for 'user_id' [ 2784.794444][T14145] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2784.815478][T16027] fuse: Bad value for 'user_id' [ 2784.815609][T14145] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 2784.863711][T14145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.884709][T16027] fuse: Bad value for 'user_id' [ 2784.892210][T14145] usb 3-1: Product: syz [ 2784.900700][T16027] fuse: Bad value for 'user_id' [ 2784.909420][T14145] usb 3-1: Manufacturer: syz [ 2784.925192][T16027] fuse: Bad value for 'user_id' [ 2784.926692][T14145] usb 3-1: SerialNumber: syz [ 2784.931481][T16031] loop2: detected capacity change from 0 to 7 [ 2784.946418][T16027] fuse: Bad value for 'user_id' [ 2784.961278][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2784.968253][T16027] fuse: Bad value for 'user_id' [ 2784.984268][T14145] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2784.985725][T16031] loop2: p1 [ 2784.995896][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2784.998090][T16027] fuse: Bad value for 'user_id' [ 2785.009562][T16031] loop2: partition table partially beyond EOD, truncated [ 2785.018967][T16027] fuse: Bad value for 'user_id' [ 2785.026797][T16031] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 2785.034941][T16027] fuse: Bad value for 'user_id' [ 2785.041422][T16027] fuse: Bad value for 'user_id' [ 2785.048399][T16027] fuse: Bad value for 'user_id' [ 2785.061013][T16027] fuse: Bad value for 'user_id' [ 2785.071910][T16027] fuse: Bad value for 'user_id' [ 2785.083237][T16027] fuse: Bad value for 'user_id' [ 2785.098163][T16027] fuse: Bad value for 'user_id' [ 2785.102581][T11445] udevd[11445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2785.120630][T16027] fuse: Bad value for 'user_id' [ 2785.136567][T16027] fuse: Bad value for 'user_id' [ 2785.153795][T16027] fuse: Bad value for 'user_id' [ 2785.172950][T16027] fuse: Bad value for 'user_id' [ 2785.185586][T16027] fuse: Bad value for 'user_id' [ 2785.206391][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2785.222977][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2785.231866][T16027] fuse: Bad value for 'user_id' [ 2785.243871][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12123'. [ 2785.257293][T16027] fuse: Bad value for 'user_id' [ 2785.263190][T16027] fuse: Bad value for 'user_id' [ 2785.270527][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2785.279642][T16027] fuse: Bad value for 'user_id' [ 2785.290177][T16027] fuse: Bad value for 'user_id' [ 2785.297048][T16027] fuse: Bad value for 'user_id' [ 2785.302969][T16038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2785.303333][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2785.319585][T16027] fuse: Bad value for 'user_id' [ 2785.326052][T14145] usb 3-1: USB disconnect, device number 22 [ 2785.332537][T16027] fuse: Bad value for 'user_id' [ 2785.337884][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2785.348642][T16027] fuse: Bad value for 'user_id' [ 2785.357421][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2785.359130][T16038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2785.367900][T16027] fuse: Bad value for 'user_id' [ 2785.386026][T16027] fuse: Bad value for 'user_id' [ 2785.391450][T16027] fuse: Bad value for 'user_id' [ 2785.408306][T16027] fuse: Bad value for 'user_id' [ 2785.415288][T16027] fuse: Bad value for 'user_id' [ 2785.424786][T16027] fuse: Bad value for 'user_id' [ 2785.434457][T16027] fuse: Bad value for 'user_id' [ 2785.439491][T16027] fuse: Bad value for 'user_id' [ 2785.446018][T16027] fuse: Bad value for 'user_id' [ 2785.447039][T11445] udevd[11445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2785.454636][T16027] fuse: Bad value for 'user_id' [ 2785.473937][T16027] fuse: Bad value for 'user_id' [ 2785.479175][T16027] fuse: Bad value for 'user_id' [ 2785.486778][T16027] fuse: Bad value for 'user_id' [ 2785.501195][T16027] fuse: Bad value for 'user_id' [ 2785.514606][T16027] fuse: Bad value for 'user_id' [ 2785.520696][T16027] fuse: Bad value for 'user_id' [ 2785.602353][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2785.851698][T14145] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2786.007739][T14145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2786.007790][T14145] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2786.007814][T14145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.010563][T14145] usb 2-1: config 0 descriptor?? [ 2786.011905][T16040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2786.236141][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.262742][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.283717][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.304090][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.347911][T16040] loop4: detected capacity change from 0 to 7 [ 2786.349289][T16058] loop5: detected capacity change from 0 to 7 [ 2786.373455][T16058] Dev loop5: unable to read RDB block 7 [ 2786.375633][T16040] loop4: [ 2786.379325][T16058] loop5: unable to read partition table [ 2786.382574][T16040] loop4: partition table partially beyond EOD, [ 2786.388523][T16058] loop5: partition table beyond EOD, [ 2786.388910][T16040] truncated [ 2786.395451][T16058] truncated [ 2786.410625][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.428365][T16058] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2786.438582][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.501234][T14145] usbhid 2-1:0.0: can't add hid device: -71 [ 2786.543777][T14145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2786.580782][T14145] usb 2-1: USB disconnect, device number 80 [ 2786.641684][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2786.757242][T16063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.782177][T16063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.825815][T16063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.852164][T16063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.873012][T16063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.899837][T16063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.133555][T16068] netlink: 'syz.1.12132': attribute type 1 has an invalid length. [ 2787.229958][T16068] bond1: entered promiscuous mode [ 2787.237085][T16068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2787.287289][T16071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2787.297329][T16071] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 2787.308744][T16071] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2787.349594][T16071] bond1: (slave gre1): making interface the new active one [ 2787.363649][T16071] gre1: entered promiscuous mode [ 2787.383306][T16071] bond1: (slave gre1): Enslaving as an active interface with an up link [ 2787.647106][T16080] syzkaller0: entered promiscuous mode [ 2787.655978][T16080] syzkaller0: entered allmulticast mode [ 2787.681673][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2787.704090][T16083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.716483][T16083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.737604][T16085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12135'. [ 2788.301792][T14145] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2788.464387][T16089] netlink: 'syz.3.12137': attribute type 1 has an invalid length. [ 2788.482207][T14145] usb 5-1: Using ep0 maxpacket: 16 [ 2788.506258][T14145] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2788.520470][T14145] usb 5-1: config 21 has an invalid interface number: 205 but max is 0 [ 2788.539159][T14145] usb 5-1: config 21 has no interface number 0 [ 2788.555386][T14145] usb 5-1: config 21 interface 205 has no altsetting 0 [ 2788.574224][T14145] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f5.2f [ 2788.589959][T14145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.604249][T16104] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12140'. [ 2788.621485][T14145] usb 5-1: Product: syz [ 2788.631486][T14145] usb 5-1: Manufacturer: syz [ 2788.636450][T14145] usb 5-1: SerialNumber: syz [ 2788.668100][T16089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2788.703634][T16102] bond1: entered allmulticast mode [ 2788.721655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2789.761670][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2790.093459][ T4699] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2790.331736][ T4699] usb 3-1: Using ep0 maxpacket: 16 [ 2790.351331][ T4699] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2790.406679][ T4699] usb 3-1: config 0 has no interface number 0 [ 2790.528181][ T4699] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2790.650241][ T4699] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 1025, setting to 1024 [ 2790.801662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2790.814997][ T4699] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2790.833714][ T4699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.857587][ T4699] usb 3-1: Product: syz [ 2790.866153][ T4699] usb 3-1: Manufacturer: syz [ 2790.878376][ T4699] usb 3-1: SerialNumber: syz [ 2790.901212][ T4699] usb 3-1: config 0 descriptor?? [ 2790.915242][T16121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2790.932503][ T4699] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2791.022455][T14145] kvaser_usb 5-1:21.205: error -ENODEV: Cannot get usb endpoint(s) [ 2791.081179][T14145] usb 5-1: USB disconnect, device number 11 [ 2791.150318][ T4699] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB1 [ 2791.224380][ T4699] usb 3-1: USB disconnect, device number 23 [ 2791.267384][ T4699] nokiaca42v2 ttyUSB1: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB1 [ 2791.301200][ T4699] cypress_m8 3-1:0.35: device disconnected [ 2791.332974][T16134] syzkaller0: entered promiscuous mode [ 2791.347974][T16134] syzkaller0: entered allmulticast mode [ 2791.418213][T16131] tipc: Started in network mode [ 2791.426983][T16131] tipc: Node identity 0a7d1d42afb8, cluster identity 4711 [ 2791.451252][T16131] tipc: Enabled bearer , priority 0 [ 2791.508518][T16130] tipc: Resetting bearer [ 2791.580158][T16130] tipc: Disabling bearer [ 2791.769075][T16142] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12148'. [ 2791.841706][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2792.227327][T16152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12150'. [ 2792.688269][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12153'. [ 2792.807525][T16161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2792.808741][T16161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2792.881663][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2793.267640][T16165] xt_hashlimit: max too large, truncated to 1048576 [ 2793.466551][T16170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2793.495560][T16170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2793.552887][T16171] dvmrp8: entered allmulticast mode [ 2793.736353][T16173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2793.756486][T16173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2793.863933][ T4696] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2793.876944][T16176] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12160'. [ 2793.921833][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2794.021969][ T4696] usb 5-1: Using ep0 maxpacket: 32 [ 2794.029705][ T4696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2794.040163][ T4696] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2794.059540][ T4696] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2794.071592][ T4696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.100834][ T4696] usb 5-1: Product: syz [ 2794.113152][ T4696] usb 5-1: Manufacturer: syz [ 2794.123895][ T4696] usb 5-1: SerialNumber: syz [ 2794.369255][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.383945][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.423323][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.437203][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.670648][ T4696] usb 5-1: Cannot retrieve CPort count: -110 [ 2794.677033][ T4696] usb 5-1: Cannot retrieve CPort count: -110 [ 2794.685674][ T4696] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 2794.980691][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2795.083335][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12167'. [ 2795.120624][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12167'. [ 2795.131679][ T4696] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2795.177187][T16213] netlink: 448 bytes leftover after parsing attributes in process `syz.5.12171'. [ 2795.249308][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2795.274493][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2795.283594][ T4696] usb 3-1: Using ep0 maxpacket: 16 [ 2795.290882][ T4696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2795.303099][ T4696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2795.314693][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2795.315065][ T4696] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2795.325851][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2795.334125][ T4696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2795.348968][ T4696] usb 3-1: Product: syz [ 2795.355395][ T4696] usb 3-1: Manufacturer: syz [ 2795.360346][ T4696] usb 3-1: SerialNumber: syz [ 2795.380024][ T4696] usb 3-1: 0:2 : does not exist [ 2795.558640][T13968] cgroup: fork rejected by pids controller in /syz1 [ 2795.597484][ T4696] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2795.684777][ T4696] usb 3-1: USB disconnect, device number 24 [ 2795.733266][T16224] syz_tun (unregistering): left allmulticast mode [ 2795.739833][T16224] syz_tun (unregistering): left promiscuous mode [ 2795.748591][T16224] bridge0: port 3(syz_tun) entered disabled state [ 2795.778371][T11444] udevd[11444]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2796.001767][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2796.241240][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.256973][T10477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2796.275612][T10477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2796.284057][T10477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2796.297471][T10477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2796.310714][T10477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2796.311723][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.397284][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.431038][ T4699] usb 5-1: USB disconnect, device number 12 [ 2796.446696][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.508276][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.552307][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.632201][T14145] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2796.792228][T14145] usb 3-1: device descriptor read/64, error -71 [ 2796.991763][ T4699] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2797.030171][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2797.041652][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2797.051678][T14145] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2797.069320][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.088212][T16233] bridge_slave_0: entered allmulticast mode [ 2797.099819][T16233] bridge_slave_0: entered promiscuous mode [ 2797.120080][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2797.132996][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.140414][T16233] bridge_slave_1: entered allmulticast mode [ 2797.148446][T16233] bridge_slave_1: entered promiscuous mode [ 2797.164506][ T4699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2797.175387][ T4699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2797.191331][T16233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2797.200803][T16246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.212758][T14145] usb 3-1: device descriptor read/64, error -71 [ 2797.219228][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.225144][T16233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2797.228536][ T4699] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2797.252761][T16246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.254349][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.303351][ T4699] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2797.325235][ T4699] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2797.334963][T14145] usb usb3-port1: attempt power cycle [ 2797.335723][T16233] team0: Port device team_slave_0 added [ 2797.341248][ T4699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2797.354989][ T4699] usb 5-1: Product: syz [ 2797.360575][ T4699] usb 5-1: Manufacturer: syz [ 2797.365606][ T4699] usb 5-1: SerialNumber: syz [ 2797.372033][T16233] team0: Port device team_slave_1 added [ 2797.396463][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.410823][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.424250][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12181'. [ 2797.435488][T16233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2797.442843][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2797.469080][T16233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2797.480487][T16249] syzkaller0: entered promiscuous mode [ 2797.486203][T16249] syzkaller0: entered allmulticast mode [ 2797.494673][T16233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2797.502959][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2797.530987][T16233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2797.592243][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.608156][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.635268][T16235] netlink: 'syz.4.12179': attribute type 1 has an invalid length. [ 2797.653165][T16233] hsr_slave_0: entered promiscuous mode [ 2797.669360][T16233] hsr_slave_1: entered promiscuous mode [ 2797.675113][T14145] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2797.678450][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2797.687840][T16233] debugfs: 'hsr0' already exists in 'hsr' [ 2797.698939][T16233] Cannot create hsr debugfs directory [ 2797.706701][T14145] usb 3-1: device descriptor read/8, error -71 [ 2797.706778][T16236] netlink: 'syz.4.12179': attribute type 1 has an invalid length. [ 2797.715598][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2797.738543][ T4699] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2797.765872][ T4699] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2797.898391][ T4699] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2797.913415][ T4699] usb 5-1: USB disconnect, device number 13 [ 2797.918721][T11444] udevd[11444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2797.953319][T14145] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2798.018920][T14145] usb 3-1: device descriptor read/8, error -71 [ 2798.021522][T16257] netlink: 448 bytes leftover after parsing attributes in process `syz.3.12183'. [ 2798.081766][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2798.103514][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.131206][T16260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.132573][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.144083][T16260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.147766][T14145] usb usb3-port1: unable to enumerate USB device [ 2798.354512][T16263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.382046][T16263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.402703][T10477] Bluetooth: hci4: command tx timeout [ 2798.433188][T16233] bond0: (slave netdevsim1): Releasing backup interface [ 2798.499798][T16270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12187'. [ 2798.632080][ T4685] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2798.777245][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.792898][ T4685] usb 5-1: Using ep0 maxpacket: 32 [ 2798.803438][ T4685] usb 5-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 2798.830357][T16274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.834222][ T4685] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2798.866945][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.882747][T16274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.894403][ T4685] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 2798.927904][ T4685] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 2798.953628][ T4685] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2798.979123][ T4685] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 2798.996416][ T4685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2799.016627][ T4685] usb 5-1: SerialNumber: syz [ 2799.046524][ T4685] usb 5-1: config 0 descriptor?? [ 2799.109430][T16233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2799.121656][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2799.137385][T16233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2799.166761][T16233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2799.214196][T16233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2799.233348][T16233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2799.264231][T16233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2799.283690][ T4685] usb-storage 5-1:0.0: USB Mass Storage device detected [ 2799.300284][T16233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2799.323942][T16233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2799.345117][ T4685] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 2799.485478][ T4685] usb 5-1: USB disconnect, device number 14 [ 2799.603323][T16233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2799.646606][T16233] 8021q: adding VLAN 0 to HW filter on device team0 [ 2799.679540][T15180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.686792][T15180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2799.757124][T15180] bridge0: port 2(bridge_slave_1) entered blocking state [ 2799.764446][T15180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2799.802642][T14145] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2799.876973][T16233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2799.999553][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12191'. [ 2800.018197][T14145] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2800.034919][T16233] veth0_vlan: entered promiscuous mode [ 2800.043295][T14145] usb 3-1: config 0 has no interface number 0 [ 2800.054561][T14145] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2800.086623][T16233] veth1_vlan: entered promiscuous mode [ 2800.093736][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12191'. [ 2800.105343][T14145] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2800.153697][T14145] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2800.161718][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2800.206497][T14145] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 1144, setting to 64 [ 2800.247459][T16233] veth0_macvtap: entered promiscuous mode [ 2800.276721][T14145] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2800.291329][T16233] veth1_macvtap: entered promiscuous mode [ 2800.345840][T16233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2800.353500][T14145] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2800.392486][T14145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2800.437329][T16233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2800.446763][T14145] usb 3-1: config 0 descriptor?? [ 2800.465565][T16291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2800.484051][T10477] Bluetooth: hci4: command tx timeout [ 2800.499513][T14145] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2800.507776][ T9933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.538299][ T9933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.629602][ T9933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.661148][ T9933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.799905][T16312] netlink: 448 bytes leftover after parsing attributes in process `syz.4.12194'. [ 2801.201723][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2801.209283][T15180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2801.218728][T15180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2801.461956][T14145] usb 3-1: USB disconnect, device number 29 [ 2801.462060][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 2801.480163][T15180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2801.488168][T15180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2801.579734][T14145] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2801.611441][T16291] ldusb: No device or device unplugged -19 [ 2801.782571][ T4699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2801.975183][ T29] audit: type=1326 audit(1782686280.648:14106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.020700][ T4699] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2802.056257][ T4699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2802.089537][ T4699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2802.091190][ T29] audit: type=1326 audit(1782686280.688:14107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.130933][ T4699] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2802.175123][ T29] audit: type=1326 audit(1782686280.698:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.214511][ T4699] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2802.228144][ T4699] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2802.242419][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2802.261693][ T29] audit: type=1326 audit(1782686280.698:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.286868][ T4699] usb 5-1: Manufacturer: syz [ 2802.293945][ T29] audit: type=1326 audit(1782686280.698:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.310896][ T4699] usb 5-1: config 0 descriptor?? [ 2802.326785][ T29] audit: type=1326 audit(1782686280.698:14111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.384333][ T29] audit: type=1326 audit(1782686280.698:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.412308][T14145] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2802.466396][ T29] audit: type=1326 audit(1782686280.698:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.540463][ T29] audit: type=1326 audit(1782686280.708:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.566377][T10477] Bluetooth: hci4: command tx timeout [ 2802.591787][ T29] audit: type=1326 audit(1782686280.708:14115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.1.12176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2802.621914][T14145] usb 3-1: Using ep0 maxpacket: 8 [ 2802.647401][T14145] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2802.669168][T14145] usb 3-1: config 9 has an invalid descriptor of length 64, skipping remainder of the config [ 2802.704810][T14145] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 12 [ 2802.742387][T14145] usb 3-1: string descriptor 0 read error: -22 [ 2802.750074][T14145] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=bf.ab [ 2802.761725][T14145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.932699][ T4699] appleir 0003:05AC:8243.00BC: unknown main item tag 0x0 [ 2802.977000][ T4699] appleir 0003:05AC:8243.00BC: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2803.011023][T14145] usb 3-1: USB disconnect, device number 30 [ 2803.095142][T16334] IPVS: set_ctl: invalid protocol: 119 172.20.20.40:4 [ 2803.126245][T16334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.163105][T16334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2803.274429][T14145] usb 5-1: USB disconnect, device number 15 [ 2803.281680][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2803.434144][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.447152][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2803.458323][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2803.471940][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.015855][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2804.067406][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.124358][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2804.149316][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.321663][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2804.611001][T16354] netlink: 448 bytes leftover after parsing attributes in process `syz.4.12205'. [ 2804.642203][T10477] Bluetooth: hci4: command tx timeout [ 2804.681026][T16356] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 2804.682586][T16355] IPVS: stopping backup sync thread 16356 ... [ 2805.066052][T16368] loop2: detected capacity change from 0 to 7 [ 2805.073378][ T4697] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 2805.112803][T16368] loop2: p1 [ 2805.119351][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12209'. [ 2805.123594][T16368] loop2: partition table partially beyond EOD, truncated [ 2805.153237][T16368] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 2805.243570][ T4697] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2805.282513][T11444] udevd[11444]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2805.284104][ T4697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 2805.357076][ T4697] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2805.370222][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2805.437281][ T4697] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 2805.471672][ T4697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.492962][ T4697] usb 5-1: config 0 descriptor?? [ 2805.502471][T16361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2805.713379][T16383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.755274][T16383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2805.773875][ T4697] uclogic 0003:5543:0003.00BD: ignoring exceeding usage max [ 2805.799645][ T4697] uclogic 0003:5543:0003.00BD: unknown main item tag 0x4 [ 2805.853065][ T4697] uclogic 0003:5543:0003.00BD: hidraw0: USB HID v0.01 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 2805.942841][ T4697] usb 5-1: USB disconnect, device number 16 [ 2806.068699][T16387] fido_id[16387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2806.278990][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12212'. [ 2806.295581][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12217'. [ 2806.310142][T16380] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12212'. [ 2806.319678][T16397] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12217'. [ 2806.401771][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2806.763657][ T4685] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2807.001680][ T4685] usb 5-1: Using ep0 maxpacket: 8 [ 2807.019078][ T4685] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2807.039216][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2807.060741][ T4685] usb 5-1: config 179 has no interface number 0 [ 2807.087462][ T4685] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2807.087684][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2807.138170][ T4685] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2807.179345][ T4685] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2807.221875][ T4685] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2807.277505][ T4685] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2807.326438][ T4685] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2807.348299][ T4685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.392735][T16403] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2807.441767][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2807.656738][ T3828] usb 5-1: USB disconnect, device number 17 [ 2807.656819][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2807.671289][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2807.890080][T16413] loop2: detected capacity change from 0 to 7 [ 2807.904514][T16413] loop2: p1 [ 2807.916486][T16413] loop2: partition table partially beyond EOD, truncated [ 2807.935727][T16413] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 2808.068480][T11444] udevd[11444]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2808.128790][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.178495][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.206403][T16419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.230233][T16419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.444144][ T3828] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2808.481669][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2808.602526][ T807] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2808.613335][ T3828] usb 2-1: config 253 has an invalid interface number: 82 but max is 0 [ 2808.622616][ T3828] usb 2-1: config 253 has no interface number 0 [ 2808.640244][ T3828] usb 2-1: config 253 interface 82 has no altsetting 0 [ 2808.653407][ T3828] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 2808.664457][ T3828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2808.673239][ T3828] usb 2-1: Product: syz [ 2808.677809][ T3828] usb 2-1: Manufacturer: syz [ 2808.697833][ T3828] usb 2-1: SerialNumber: syz [ 2808.771838][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 2808.783723][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2808.811713][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2808.831688][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2808.844692][ T807] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2808.855732][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2808.869040][ T807] usb 5-1: config 0 descriptor?? [ 2808.926258][ T3828] rtl8150 2-1:253.82: couldn't find required endpoints [ 2808.941442][ T3828] rtl8150 2-1:253.82: probe with driver rtl8150 failed with error -5 [ 2808.957188][ T3828] usb 2-1: USB disconnect, device number 81 [ 2809.281915][ T4682] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2809.302431][ T807] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00BE/input/input280 [ 2809.348889][T16438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2809.359887][T16438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2809.387589][ T807] microsoft 0003:045E:07DA.00BE: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2809.433253][ T4682] usb 3-1: config index 0 descriptor too short (expected 65361, got 72) [ 2809.468304][ T4682] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2809.483202][ T4682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.501635][ T4682] usb 3-1: Product: syz [ 2809.508977][ T4682] usb 3-1: Manufacturer: syz [ 2809.509619][ T807] usb 5-1: USB disconnect, device number 18 [ 2809.518320][ T4682] usb 3-1: SerialNumber: syz [ 2809.524505][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2809.556978][ T4682] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2809.577291][ T3828] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2809.651985][T16443] fuse: Bad value for 'fd' [ 2809.990659][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.073716][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.155815][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.157887][T16448] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12233'. [ 2810.200782][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.238198][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.269914][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.319397][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.323995][T16446] loop4: detected capacity change from 0 to 7 [ 2810.353917][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.369940][T16446] loop4: [ 2810.382974][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.394638][T16446] loop4: partition table partially beyond EOD, truncated [ 2810.416625][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.438753][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12234'. [ 2810.457498][T16455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.534400][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.534947][T16455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.561755][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2810.608141][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.628612][T16456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.649771][ T3828] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2810.678165][ T3828] ath9k_htc: Failed to initialize the device [ 2810.691390][T16456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.730192][T16448] syzkaller1: entered promiscuous mode [ 2810.771751][T16448] syzkaller1: entered allmulticast mode [ 2810.907060][ T3828] usb 3-1: ath9k_htc: USB layer deinitialized [ 2810.926946][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.953821][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.086935][T16462] binder: 16461:16462 ioctl c0306201 2000000003c0 returned -14 [ 2811.098764][T16462] binder: 16461:16462 ioctl 6f41 200000000080 returned -22 [ 2811.227457][T16465] misc userio: No port type given on /dev/userio [ 2811.406912][T16471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2811.601634][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2811.786063][T16481] loop5: detected capacity change from 0 to 7 [ 2811.824135][T16481] Dev loop5: unable to read RDB block 7 [ 2811.859031][T16481] loop5: unable to read partition table [ 2811.881896][T16481] loop5: partition table beyond EOD, truncated [ 2811.915286][T16481] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2812.078382][ T4696] usb 3-1: USB disconnect, device number 31 [ 2812.183671][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2812.246224][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2812.651662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2813.137534][ T807] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2813.325446][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 2813.346102][T16514] random: crng reseeded on system resumption [ 2813.348155][ T807] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2813.408357][ T807] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2813.439136][ T807] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2813.456685][ T807] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2813.487524][ T807] usb 2-1: Product: syz [ 2813.500253][ T807] usb 2-1: Manufacturer: syz [ 2813.542204][ T807] hub 2-1:4.0: USB hub found [ 2813.681637][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2813.725392][ T807] hub 2-1:4.0: 2 ports detected [ 2813.801955][ T4699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2813.961698][ T4699] usb 5-1: Using ep0 maxpacket: 8 [ 2813.979158][ T4699] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2813.989162][ T4699] usb 5-1: config 179 has no interface number 0 [ 2813.998019][ T4699] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2814.019519][ T4699] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2814.045511][ T4699] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2814.076514][ T4699] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2814.166366][ T4699] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2814.244841][ T4699] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2814.283281][ T4699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2814.295779][T16516] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2814.527207][ T4696] usb 5-1: USB disconnect, device number 19 [ 2814.527218][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2814.527356][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2814.582263][ T3828] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2814.721657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2814.784664][ T3828] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2814.784718][ T807] usb 2-1: USB disconnect, device number 82 [ 2814.836839][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2814.858487][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2814.868972][ T3828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2814.903807][ T3828] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2814.927598][ T3828] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2814.967104][ T3828] usb 3-1: Manufacturer: syz [ 2815.015738][ T3828] usb 3-1: config 0 descriptor?? [ 2815.576347][T16543] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12258'. [ 2815.662754][ T3828] appleir 0003:05AC:8243.00BF: unknown main item tag 0x0 [ 2815.698261][ T3828] appleir 0003:05AC:8243.00BF: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2815.771645][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2815.861686][ T4696] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2815.916688][ T3828] usb 3-1: USB disconnect, device number 32 [ 2816.004332][T16544] fido_id[16544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2816.039321][ T4696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2816.054946][ T4696] usb 5-1: not running at top speed; connect to a high speed hub [ 2816.088240][ T4696] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 2816.139588][ T4696] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 2816.185506][ T4696] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 2816.221112][ T4696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.261722][ T4696] usb 5-1: Product: syz [ 2816.281612][ T4696] usb 5-1: Manufacturer: syz [ 2816.301070][ T4696] usb 5-1: SerialNumber: syz [ 2816.480891][T16553] pim6reg: entered allmulticast mode [ 2816.517771][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12262'. [ 2816.531975][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2816.553789][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2816.573299][ T4696] usb 5-1: Can't get UAC3 power state for id 10 [ 2816.580033][T16552] pim6reg: left allmulticast mode [ 2816.596300][ T4696] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 2816.636512][ T4696] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 2816.672564][ T4696] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 2816.697896][ T4696] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 2816.715132][ T4696] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2816.752464][ T4696] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2816.801802][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2816.827493][T16562] netlink: 'syz.1.12264': attribute type 3 has an invalid length. [ 2816.837116][T16562] netlink: 'syz.1.12264': attribute type 1 has an invalid length. [ 2816.854138][ T807] IPVS: starting estimator thread 0... [ 2816.937747][ T4696] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2816.964821][T16563] IPVS: using max 56 ests per chain, 134400 per kthread [ 2816.989360][ T4696] usb 5-1: USB disconnect, device number 20 [ 2817.038266][T11539] udevd[11539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2817.263645][ T807] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2817.429397][T16575] fuse: Unknown parameter '000000000000000000000x0000000000000008' [ 2817.439674][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 2817.451470][ T807] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2817.470033][ T807] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 2817.518697][ T807] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 2817.532240][ T4696] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2817.562859][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2817.581993][ T807] usb 2-1: Product: syz [ 2817.587778][ T807] usb 2-1: Manufacturer: syz [ 2817.595853][ T807] usb 2-1: SerialNumber: syz [ 2817.711697][ T4696] usb 5-1: Using ep0 maxpacket: 8 [ 2817.718893][ T4696] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2817.729777][ T4696] usb 5-1: config 179 has no interface number 0 [ 2817.737782][ T4696] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2817.756862][ T4696] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2817.777827][ T4696] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2817.792567][ T4696] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2817.805326][ T4696] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2817.831195][ T807] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2817.841783][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2817.863555][ T4696] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2817.872975][ T3828] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2817.890155][ T4696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2817.913549][T16568] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2817.997789][ T807] usb 2-1: invalid MIDI EP [ 2818.018503][ T807] usb 2-1: snd-bcd2000: error during probing [ 2818.040894][ T3828] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2818.041666][ T807] snd-bcd2000 2-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 2818.084220][ T807] usb 2-1: USB disconnect, device number 83 [ 2818.099542][ T3828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.118407][ T3828] usb 3-1: Product: syz [ 2818.132076][ T3828] usb 3-1: Manufacturer: syz [ 2818.137242][ T3828] usb 3-1: SerialNumber: syz [ 2818.156761][ T4699] usb 5-1: USB disconnect, device number 21 [ 2818.156806][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2818.171804][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2818.230930][T11444] udevd[11444]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2818.232300][ T3828] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2818.287889][ T4696] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2818.554188][T16592] fuse: Bad value for 'user_id' [ 2818.557057][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.570494][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.584741][ T4699] usb 3-1: USB disconnect, device number 33 [ 2818.625518][T16592] fuse: Bad value for 'user_id' [ 2818.640718][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.671185][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.687113][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.706074][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.736932][T16598] netlink: del zone limit has 4 unknown bytes [ 2818.747777][T16598] fuse: Unknown parameter '0x0000000000000003' [ 2818.758026][T16594] loop4: detected capacity change from 0 to 7 [ 2818.775956][T16594] loop4: [ 2818.785922][T16594] loop4: partition table partially beyond EOD, truncated [ 2818.809062][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.835710][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.856661][ T4994] loop4: [ 2818.871815][ T4994] loop4: partition table partially beyond EOD, truncated [ 2818.881657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2819.134929][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2819.162863][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2819.215552][T16612] syzkaller1: entered promiscuous mode [ 2819.229975][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2819.229987][ T29] audit: type=1326 audit(1782686297.908:14117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.3.12277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef4919ce59 code=0x0 [ 2819.260559][T16612] syzkaller1: entered allmulticast mode [ 2819.364442][ T4696] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2819.371923][ T4696] ath9k_htc: Failed to initialize the device [ 2819.378884][ T4699] usb 3-1: ath9k_htc: USB layer deinitialized [ 2819.642820][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12282'. [ 2819.681892][ T4699] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2819.842633][ T4699] usb 3-1: Using ep0 maxpacket: 32 [ 2819.854355][ T4699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2819.866840][ T4699] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 2819.881289][ T4699] usb 3-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 2819.902621][ T4699] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2819.921483][ T4699] usb 3-1: config 128 has no interface number 0 [ 2819.931751][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2819.939787][ T4699] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2819.958842][ T4699] usb 3-1: config 128 interface 127 has no altsetting 0 [ 2819.977787][T16631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2819.983356][ T4699] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2820.008102][ T4699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.026152][ T4699] usb 3-1: Product: syz [ 2820.035316][ T4699] usb 3-1: Manufacturer: syz [ 2820.045476][T16631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2820.055585][ T4699] usb 3-1: SerialNumber: syz [ 2820.422975][ T4699] usb 3-1: USB disconnect, device number 34 [ 2820.453079][T11444] udevd[11444]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2820.792595][ T807] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2820.961651][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 2820.961651][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2820.975854][ T807] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2820.984385][ T807] usb 2-1: config 179 has no interface number 0 [ 2820.991780][ T807] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2821.003365][ T807] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2821.019481][ T807] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2821.088339][ T807] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2821.118061][ T807] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2821.185306][ T807] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2821.208760][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.237691][T16634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2821.477491][ T807] usb 2-1: USB disconnect, device number 84 [ 2821.477528][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2821.491735][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2821.501406][ T4685] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2821.654434][ T4685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2821.667671][ T4685] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2821.686791][ T4685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.722225][ T4685] usb 3-1: config 0 descriptor?? [ 2821.736748][T16655] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2821.975595][T16655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2822.001639][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2822.064546][T16655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2822.126112][T16655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2822.186971][T16655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2822.216734][T16659] fuse: blksize only supported for fuseblk [ 2822.257786][T16655] loop4: detected capacity change from 0 to 7 [ 2822.299462][T16655] loop4: [ 2822.318007][T16655] loop4: partition table partially beyond EOD, truncated [ 2822.364052][T16662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2822.406491][T16662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2822.439126][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2822.454871][ T4994] loop4: [ 2822.458569][ T4994] loop4: partition table partially beyond EOD, truncated [ 2822.484507][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2822.506536][ T4685] usbhid 3-1:0.0: can't add hid device: -71 [ 2822.523582][ T4685] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2822.568847][ T4685] usb 3-1: USB disconnect, device number 35 [ 2822.620754][T16665] loop9: detected capacity change from 0 to 7 [ 2822.630794][T16665] Dev loop9: unable to read RDB block 7 [ 2822.639334][T16665] loop9: AHDI p1 p2 p3 [ 2822.646301][T16665] loop9: partition table partially beyond EOD, truncated [ 2822.656559][T16665] loop9: p1 start 1920169572 is beyond EOD, truncated [ 2822.669078][T16665] loop9: p2 start 1851744889 is beyond EOD, truncated [ 2822.712815][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12295'. [ 2822.737951][T16668] netlink: 'syz.3.12295': attribute type 7 has an invalid length. [ 2822.783060][T16668] netlink: 'syz.3.12295': attribute type 8 has an invalid length. [ 2822.795109][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12295'. [ 2823.041691][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2823.312444][T16675] syzkaller0: entered promiscuous mode [ 2823.341331][T16675] syzkaller0: entered allmulticast mode [ 2823.556309][T16680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2823.566819][T16682] netlink: 448 bytes leftover after parsing attributes in process `syz.5.12300'. [ 2823.636191][T16680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2823.732197][T14145] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2823.872429][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2823.922887][T14145] usb 2-1: Using ep0 maxpacket: 8 [ 2823.935352][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2823.954000][T14145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.970599][T16689] syzkaller0: entered promiscuous mode [ 2823.980624][T14145] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 2823.981787][T16689] syzkaller0: entered allmulticast mode [ 2823.997937][T14145] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2824.068026][T14145] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2824.081762][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2824.099395][T14145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.110916][T14145] usb 2-1: Product: syz [ 2824.117573][T14145] usb 2-1: Manufacturer: syz [ 2824.125758][T14145] usb 2-1: SerialNumber: syz [ 2824.170776][T16677] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2824.857792][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2824.889116][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2825.121655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2825.386460][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2825.418674][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2825.548923][T16707] netlink: 'syz.3.12305': attribute type 13 has an invalid length. [ 2825.633479][T16707] netlink: 'syz.3.12305': attribute type 17 has an invalid length. [ 2825.997566][T16707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2826.161638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2826.429372][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12307'. [ 2826.483854][T16717] loop5: detected capacity change from 0 to 7 [ 2826.519817][T16717] Dev loop5: unable to read RDB block 7 [ 2826.539103][T16716] hsr_slave_0: left promiscuous mode [ 2826.544805][T16717] loop5: unable to read partition table [ 2826.580828][T16716] hsr_slave_1: left promiscuous mode [ 2826.598659][T16717] loop5: partition table beyond EOD, truncated [ 2826.621902][T16717] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2826.697600][T14145] cdc_ncm 2-1:1.0: bind() failure [ 2826.748871][T14145] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2826.857583][T14145] usb 2-1: USB disconnect, device number 85 [ 2826.971393][T16720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12310'. [ 2826.984559][T16720] fuse: Unknown parameter 'd' [ 2827.202663][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2827.297197][T16721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2827.308948][T16721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2827.377775][T16730] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12312'. [ 2827.644633][T16734] syzkaller0: entered promiscuous mode [ 2827.650830][T16734] syzkaller0: entered allmulticast mode [ 2827.710888][T16734] tipc: Enabled bearer , priority 0 [ 2827.769822][T16741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2827.939336][T16744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2827.958937][ T29] audit: type=1326 audit(1782686306.638:14118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2827.992182][T16744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2828.033096][ T29] audit: type=1326 audit(1782686306.638:14119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.074206][ T29] audit: type=1326 audit(1782686306.638:14120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.114450][ T29] audit: type=1326 audit(1782686306.638:14121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.154241][ T29] audit: type=1326 audit(1782686306.638:14122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.192663][ T29] audit: type=1326 audit(1782686306.638:14123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.234425][ T29] audit: type=1326 audit(1782686306.638:14124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.259179][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2828.284316][ T29] audit: type=1326 audit(1782686306.638:14125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.329978][ T29] audit: type=1326 audit(1782686306.638:14126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.379675][ T29] audit: type=1326 audit(1782686306.638:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.4.12315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a79ce59 code=0x7ffc0000 [ 2828.457100][T16733] tipc: Resetting bearer [ 2828.529241][T16733] tipc: Disabling bearer [ 2829.061407][T16753] loop5: detected capacity change from 0 to 7 [ 2829.073500][T16753] Dev loop5: unable to read RDB block 7 [ 2829.089827][T16753] loop5: unable to read partition table [ 2829.102998][T16753] loop5: partition table beyond EOD, truncated [ 2829.119599][T16753] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2829.281644][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2829.531701][T16766] netlink: 448 bytes leftover after parsing attributes in process `syz.4.12324'. [ 2829.765097][ T3828] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2829.802757][T16773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2829.833179][T16773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2829.837434][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2829.857807][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12326'. [ 2829.881027][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2829.932393][ T3828] usb 3-1: Using ep0 maxpacket: 32 [ 2829.953169][ T3828] usb 3-1: config index 0 descriptor too short (expected 65280, got 18) [ 2829.973244][ T3828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2829.993609][ T3828] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2830.028593][ T3828] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 2830.045466][ T3828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.073407][ T3828] usb 3-1: Product: syz [ 2830.086813][ T3828] usb 3-1: Manufacturer: syz [ 2830.087828][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.102513][ T3828] usb 3-1: SerialNumber: syz [ 2830.126997][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.127334][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.144841][ T3828] usb 3-1: config 0 descriptor?? [ 2830.173759][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.174113][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.202885][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.321710][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2830.388008][T16765] ip6erspan0: entered allmulticast mode [ 2830.414105][ T4682] usb 3-1: USB disconnect, device number 36 [ 2831.361711][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2831.405997][T16802] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12335'. [ 2831.625776][T16807] FAULT_INJECTION: forcing a failure. [ 2831.625776][T16807] name failslab, interval 1, probability 0, space 0, times 0 [ 2831.665116][T16807] CPU: 0 UID: 0 PID: 16807 Comm: syz.2.12336 Tainted: G L syzkaller #0 PREEMPT(full) [ 2831.665140][T16807] Tainted: [L]=SOFTLOCKUP [ 2831.665144][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2831.665151][T16807] Call Trace: [ 2831.665156][T16807] [ 2831.665161][T16807] dump_stack_lvl+0xe8/0x150 [ 2831.665181][T16807] should_fail_ex+0x40c/0x560 [ 2831.665203][T16807] should_failslab+0xa8/0x100 [ 2831.665217][T16807] __kmalloc_noprof+0xfe/0x720 [ 2831.665234][T16807] ? rcu_is_watching+0x15/0xb0 [ 2831.665248][T16807] ? tomoyo_realpath_from_path+0xef/0x640 [ 2831.665264][T16807] ? tomoyo_realpath_from_path+0xef/0x640 [ 2831.665284][T16807] tomoyo_realpath_from_path+0xef/0x640 [ 2831.665305][T16807] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2831.665322][T16807] tomoyo_path_number_perm+0x246/0x5f0 [ 2831.665348][T16807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2831.665365][T16807] ? __lock_acquire+0x683/0x2cf0 [ 2831.665384][T16807] ? hook_file_ioctl+0x1f0/0x5f0 [ 2831.665408][T16807] ? __fget_files+0x2a/0x420 [ 2831.665420][T16807] ? __fget_files+0x2a/0x420 [ 2831.665430][T16807] ? __fget_files+0x3a2/0x420 [ 2831.665439][T16807] ? __fget_files+0x2a/0x420 [ 2831.665452][T16807] security_file_ioctl+0xc3/0x2a0 [ 2831.665473][T16807] __se_sys_ioctl+0x47/0x170 [ 2831.665487][T16807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2831.665499][T16807] do_syscall_64+0x174/0x580 [ 2831.665512][T16807] ? trace_irq_disable+0x3b/0x140 [ 2831.665529][T16807] ? clear_bhb_loop+0x40/0x90 [ 2831.665543][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2831.665554][T16807] RIP: 0033:0x7f988819ce59 [ 2831.665566][T16807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2831.665575][T16807] RSP: 002b:00007f9889073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.665587][T16807] RAX: ffffffffffffffda RBX: 00007f9888416090 RCX: 00007f988819ce59 [ 2831.665595][T16807] RDX: 0000000000000008 RSI: 0000000000009208 RDI: 0000000000000003 [ 2831.665601][T16807] RBP: 00007f9889073090 R08: 0000000000000000 R09: 0000000000000000 [ 2831.665608][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2831.665614][T16807] R13: 00007f9888416128 R14: 00007f9888416090 R15: 00007f988853fa48 [ 2831.665630][T16807] [ 2831.665635][T16807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2832.411629][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2832.573566][T16813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2832.648461][T16814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2832.692996][T16814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2832.901068][T16831] syzkaller0: entered promiscuous mode [ 2832.913497][T16831] syzkaller0: entered allmulticast mode [ 2833.451751][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2833.505795][T16836] input: syz0 as /devices/virtual/input/input283 [ 2833.531685][ T4685] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2833.691640][ T4685] usb 3-1: Using ep0 maxpacket: 32 [ 2833.706249][ T4685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2833.730393][ T4685] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2833.748380][ T4685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2833.761813][ T4685] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2833.775879][ T4685] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2833.788382][ T4685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2833.798388][ T4685] usb 3-1: Product: syz [ 2833.803833][ T4685] usb 3-1: Manufacturer: syz [ 2833.808773][ T4685] usb 3-1: SerialNumber: syz [ 2833.921725][T14145] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2833.952456][T16839] syzkaller0: entered promiscuous mode [ 2833.958091][T16839] syzkaller0: entered allmulticast mode [ 2834.074313][T14145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2834.093990][T14145] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2834.106104][T14145] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2834.115785][T14145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2834.123957][T14145] usb 5-1: SerialNumber: syz [ 2834.392673][T14145] usb 5-1: 0:2 : does not exist [ 2834.474468][T14145] usb 5-1: USB disconnect, device number 22 [ 2834.481722][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2834.567104][T11445] udevd[11445]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2835.294768][T14145] IPVS: starting estimator thread 0... [ 2835.391777][T16860] IPVS: using max 34 ests per chain, 81600 per kthread [ 2835.532357][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2836.164243][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.176824][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.288234][ T4685] usb 3-1: 0:2 : does not exist [ 2836.346492][ T4685] usb 3-1: USB disconnect, device number 37 [ 2836.380461][T11444] udevd[11444]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2836.562183][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2837.603183][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2838.658787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2839.691686][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2840.736356][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2841.214711][T16844] netlink: 'syz.5.12346': attribute type 12 has an invalid length. [ 2841.246020][T16874] tipc: Enabling of bearer rejected, failed to enable media [ 2841.751760][ T4696] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 2841.761707][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2841.901819][ T4696] usb 2-1: Invalid ep0 maxpacket: 64 [ 2841.922017][ T3828] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2842.041828][ T4696] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 2842.101717][ T3828] usb 5-1: Using ep0 maxpacket: 32 [ 2842.138539][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12358'. [ 2842.175761][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2842.186250][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2842.198571][ T3828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2842.206829][ T4696] usb 2-1: Invalid ep0 maxpacket: 64 [ 2842.216342][ T4696] usb usb2-port1: attempt power cycle [ 2842.223654][ T3828] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2842.233072][ T3828] usb 5-1: can't read configurations, error -71 [ 2842.454691][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12359'. [ 2842.571765][ T4696] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 2842.612480][ T4696] usb 2-1: Invalid ep0 maxpacket: 64 [ 2842.676031][T16905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12360'. [ 2842.763837][ T4696] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 2842.801931][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2842.823278][ T4696] usb 2-1: Invalid ep0 maxpacket: 64 [ 2842.829213][ T4696] usb usb2-port1: unable to enumerate USB device [ 2842.877233][T16910] fuse: Bad value for 'user_id' [ 2842.897276][T16910] fuse: Bad value for 'user_id' [ 2842.926731][T16910] fuse: Bad value for 'user_id' [ 2842.952245][T16910] fuse: Bad value for 'user_id' [ 2843.010953][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12363'. [ 2843.381780][T16924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 2843.489034][T16928] loop5: detected capacity change from 0 to 7 [ 2843.497044][T16928] Dev loop5: unable to read RDB block 7 [ 2843.511410][T16928] loop5: unable to read partition table [ 2843.525939][T16928] loop5: partition table beyond EOD, truncated [ 2843.540557][T16928] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2843.692382][ T3828] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2843.842001][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2843.871767][ T3828] usb 5-1: Using ep0 maxpacket: 32 [ 2843.881832][ T3828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2843.894560][ T3828] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2843.907834][ T3828] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 2843.917186][ T3828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.946742][ T3828] usb 5-1: Product: syz [ 2843.963917][ T3828] usb 5-1: Manufacturer: syz [ 2843.971693][ T3828] usb 5-1: SerialNumber: syz [ 2844.314281][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12370'. [ 2844.372366][T16938] bond5: option broadcast_neighbor: invalid value (5) [ 2844.389362][T16938] bond5 (unregistering): Released all slaves [ 2844.633345][ T3828] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2844.663152][ T3828] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2844.772880][ T3828] usb 5-1: USB disconnect, device number 25 [ 2844.832665][T16892] udevd[16892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2844.891634][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2845.682868][ T4682] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2845.875070][ T4682] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2845.888914][T16951] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2845.897684][ T4682] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 2845.921681][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2845.937325][ T4682] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 2845.967332][ T4682] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2845.998142][ T4682] usb 2-1: config 129 has no interface number 0 [ 2846.018753][ T4682] usb 2-1: config 129 has no interface number 1 [ 2846.035702][ T4682] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2846.051675][T16951] bond1: left promiscuous mode [ 2846.080372][ T4682] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2846.113323][ T4682] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2846.138659][ T4682] usb 2-1: config 129 interface 135 has no altsetting 0 [ 2846.156445][T16951] ip6erspan0: left allmulticast mode [ 2846.161858][ T4682] usb 2-1: config 129 interface 5 has no altsetting 0 [ 2846.164829][ T4682] usb 2-1: string descriptor 0 read error: -22 [ 2846.175528][ T4682] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2846.191730][ T4682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.230648][ T4682] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2846.241872][ T4682] usb 2-1: MIDIStreaming interface descriptor not found [ 2846.486756][ T4682] usb 2-1: USB disconnect, device number 90 [ 2846.539596][T15180] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2846.577623][ T4685] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2846.585864][T15180] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2846.672354][ T4685] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2846.687669][T15180] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 2846.769359][T15180] bond3: (slave veth5): making interface the new active one [ 2846.808995][T15180] bond3: active interface up! [ 2846.882407][T14145] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2846.971692][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2848.011766][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2848.821739][ T3828] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2848.994256][ T3828] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2849.020433][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2849.051626][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2849.070093][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2849.098950][ T3828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2849.169605][ T3828] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2849.187633][ T3828] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2849.207095][ T3828] usb 3-1: Manufacturer: syz [ 2849.229252][ T3828] usb 3-1: config 0 descriptor?? [ 2849.518000][T17004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2849.524540][T17004] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2849.583424][T17004] vhci_hcd vhci_hcd.0: Device attached [ 2849.665005][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12386'. [ 2849.712954][T17005] vhci_hcd: connection closed [ 2849.714373][T15187] vhci_hcd vhci_hcd.1: stop threads [ 2849.745036][T15187] vhci_hcd vhci_hcd.1: release socket [ 2849.766153][T15187] vhci_hcd vhci_hcd.1: disconnect device [ 2849.774797][ T3828] usbhid 3-1:0.0: can't add hid device: -71 [ 2849.797140][ T3828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2849.826739][ T3828] usb 3-1: USB disconnect, device number 38 [ 2850.082283][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2850.242159][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2850.385529][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2850.403489][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2850.449892][T17015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2850.468451][T17017] tipc: Started in network mode [ 2850.482137][T17017] tipc: Node identity 922aeeefafcd, cluster identity 4711 [ 2850.489481][T17017] tipc: Enabled bearer , priority 0 [ 2850.536217][T17016] tipc: Disabling bearer [ 2850.712674][ T4694] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 2850.762713][T17026] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12392'. [ 2850.793696][T17026] netlink: 'syz.3.12392': attribute type 10 has an invalid length. [ 2850.820279][T17026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12392'. [ 2850.885188][ T4694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2850.907236][ T4694] usb 5-1: not running at top speed; connect to a high speed hub [ 2850.939104][ T4694] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 2850.957444][ T4694] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 2850.987746][ T4694] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 2851.020231][ T4694] usb 5-1: config 14 has no interface number 0 [ 2851.031236][ T4694] usb 5-1: config 14 has no interface number 1 [ 2851.039228][ T4694] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2851.058277][ T4694] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2851.072002][ T4694] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2851.083667][ T4694] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 2851.104592][ T4694] usb 5-1: config 14 interface 57 has no altsetting 0 [ 2851.116946][ T4694] usb 5-1: config 14 interface 228 has no altsetting 0 [ 2851.123986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2851.153264][ T4694] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2851.174686][ T4694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2851.198670][ T4694] usb 5-1: Product: syz [ 2851.218481][ T4694] usb 5-1: Manufacturer: syz [ 2851.230176][ T4694] usb 5-1: SerialNumber: syz [ 2851.447168][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.466524][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.910193][ T4694] legousbtower 5-1:14.57: interrupt endpoints not found [ 2851.925490][ T3828] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2852.103483][ T3828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2852.150123][ T3828] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2852.161669][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2852.173884][T17015] batadv0: entered promiscuous mode [ 2852.182434][T17015] macsec1: entered allmulticast mode [ 2852.195119][T17015] batadv0: entered allmulticast mode [ 2852.198862][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.246507][ T3828] usb 3-1: config 0 descriptor?? [ 2852.258162][T17015] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2852.349947][T17015] batadv0: left allmulticast mode [ 2852.361829][T17015] batadv0: left promiscuous mode [ 2852.469944][ T4694] legousbtower 5-1:14.228: get version request failed: -71 [ 2852.495532][ T4694] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 2852.534191][ T4694] usb 5-1: USB disconnect, device number 26 [ 2852.699118][ T3828] usbhid 3-1:0.0: can't add hid device: -71 [ 2852.715547][ T3828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2852.754182][ T3828] usb 3-1: USB disconnect, device number 39 [ 2852.965249][ T807] hid-generic 0000:0000:0000.00C0: unknown main item tag 0x0 [ 2852.991013][ T807] hid-generic 0000:0000:0000.00C0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2853.201645][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2853.471781][ T4682] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2853.588240][T17067] atomic_op ffff88805db99198 conn xmit_atomic 0000000000000000 [ 2853.641643][ T4682] usb 5-1: Using ep0 maxpacket: 8 [ 2853.655696][ T4682] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2853.665414][ T4682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2853.676828][ T4682] usb 5-1: Product: syz [ 2853.681187][ T4682] usb 5-1: Manufacturer: syz [ 2853.691822][ T4682] usb 5-1: SerialNumber: syz [ 2853.702923][ T4682] usb 5-1: config 0 descriptor?? [ 2853.714594][ T4682] usbtest 5-1:0.0: FX2 device [ 2853.723344][ T4682] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2853.965571][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2853.977591][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2853.986564][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2853.996669][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.021813][ T4682] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2854.044083][ T3828] usb 5-1: USB disconnect, device number 27 [ 2854.171711][ T4682] usb 3-1: Using ep0 maxpacket: 16 [ 2854.183308][ T4682] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2854.192089][ T4682] usb 3-1: config 0 has no interface number 0 [ 2854.198317][ T4682] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2854.214082][ T4682] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 1025, setting to 1024 [ 2854.235758][ T4682] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2854.244909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2854.256143][ T4682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.268827][ T4682] usb 3-1: Product: syz [ 2854.276490][ T4682] usb 3-1: Manufacturer: syz [ 2854.283055][ T4682] usb 3-1: SerialNumber: syz [ 2854.292459][ T4682] usb 3-1: config 0 descriptor?? [ 2854.303375][T17077] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2854.312648][ T4682] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2854.515546][T17085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2854.522679][T17077] xt_bpf: check failed: parse error [ 2854.548785][ T4682] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB1 [ 2854.620326][ T4682] usb 3-1: USB disconnect, device number 40 [ 2854.670305][ T4682] nokiaca42v2 ttyUSB1: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB1 [ 2854.702916][ T4682] cypress_m8 3-1:0.35: device disconnected [ 2854.873958][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12413'. [ 2855.076446][T17102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2855.281810][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2855.345449][T17116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2855.432829][T17116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2856.101499][T17134] FAULT_INJECTION: forcing a failure. [ 2856.101499][T17134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2856.143402][T17134] CPU: 1 UID: 0 PID: 17134 Comm: syz.1.12424 Tainted: G L syzkaller #0 PREEMPT(full) [ 2856.143430][T17134] Tainted: [L]=SOFTLOCKUP [ 2856.143436][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2856.143445][T17134] Call Trace: [ 2856.143451][T17134] [ 2856.143459][T17134] dump_stack_lvl+0xe8/0x150 [ 2856.143483][T17134] should_fail_ex+0x40c/0x560 [ 2856.143510][T17134] _copy_from_user+0x2d/0xb0 [ 2856.143531][T17134] __sys_sendto+0x2a9/0x5a0 [ 2856.143550][T17134] ? ksys_write+0x1e6/0x270 [ 2856.143570][T17134] ? __pfx___sys_sendto+0x10/0x10 [ 2856.143587][T17134] ? __mutex_unlock_slowpath+0x731/0x900 [ 2856.143625][T17134] ? __pfx_ksys_write+0x10/0x10 [ 2856.143647][T17134] __x64_sys_sendto+0xde/0x100 [ 2856.143665][T17134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2856.143682][T17134] do_syscall_64+0x174/0x580 [ 2856.143700][T17134] ? trace_irq_disable+0x3b/0x140 [ 2856.143723][T17134] ? clear_bhb_loop+0x40/0x90 [ 2856.143742][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2856.143757][T17134] RIP: 0033:0x7f4b6839ce59 [ 2856.143772][T17134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2856.143786][T17134] RSP: 002b:00007f4b69306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2856.143803][T17134] RAX: ffffffffffffffda RBX: 00007f4b68615fa0 RCX: 00007f4b6839ce59 [ 2856.143815][T17134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2856.143824][T17134] RBP: 00007f4b69306090 R08: 00002000000001c0 R09: 0000000000000014 [ 2856.143834][T17134] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2856.143844][T17134] R13: 00007f4b68616038 R14: 00007f4b68615fa0 R15: 00007f4b6873fa48 [ 2856.143867][T17134] [ 2856.321683][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2856.462340][ T4694] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2856.589225][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12426'. [ 2856.623210][ T4694] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2856.634302][ T4694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.670433][ T4694] usb 5-1: config 0 descriptor?? [ 2856.835402][ T4682] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 2856.897876][ T4694] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2856.971800][ T4682] usb 3-1: device descriptor read/64, error -71 [ 2857.031803][ T4685] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2857.137705][ T4694] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2857.168990][ T4694] [drm] Initialized udl on minor 2 [ 2857.221742][ T4685] usb 2-1: Using ep0 maxpacket: 16 [ 2857.221767][ T4682] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 2857.246019][ T4685] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 2857.268503][ T4685] usb 2-1: config 0 has no interface number 0 [ 2857.285256][ T4685] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2857.331951][ T4685] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 1025, setting to 1024 [ 2857.361638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2857.383262][ T4685] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2857.401854][ T4682] usb 3-1: device descriptor read/64, error -71 [ 2857.420092][ T4685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.452978][ T4685] usb 2-1: Product: syz [ 2857.475015][ T4685] usb 2-1: Manufacturer: syz [ 2857.489931][ T4685] usb 2-1: SerialNumber: syz [ 2857.510125][ T4685] usb 2-1: config 0 descriptor?? [ 2857.512201][ T4682] usb usb3-port1: attempt power cycle [ 2857.542184][T17145] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2857.554964][ T4685] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2857.755022][T17145] xt_bpf: check failed: parse error [ 2857.765319][ T4685] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB1 [ 2857.796215][ T4685] usb 2-1: USB disconnect, device number 91 [ 2857.824209][ T4694] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2857.848452][ T4694] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2857.859796][ T4685] nokiaca42v2 ttyUSB1: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB1 [ 2857.860608][ T3828] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2857.883099][ T4682] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 2857.893012][ T4694] usb 5-1: USB disconnect, device number 28 [ 2857.920088][ T4682] usb 3-1: device descriptor read/8, error -71 [ 2857.932255][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2857.940102][ T3828] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2857.961453][ T4685] cypress_m8 2-1:0.35: device disconnected [ 2858.171709][ T4682] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 2858.222507][ T4682] usb 3-1: device descriptor read/8, error -71 [ 2858.284082][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.309678][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2858.352606][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.353638][ T4682] usb usb3-port1: unable to enumerate USB device [ 2858.389589][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2858.401777][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2858.417610][T17156] FAULT_INJECTION: forcing a failure. [ 2858.417610][T17156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.442342][T17156] CPU: 0 UID: 0 PID: 17156 Comm: syz.4.12434 Tainted: G L syzkaller #0 PREEMPT(full) [ 2858.442371][T17156] Tainted: [L]=SOFTLOCKUP [ 2858.442379][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2858.442390][T17156] Call Trace: [ 2858.442397][T17156] [ 2858.442405][T17156] dump_stack_lvl+0xe8/0x150 [ 2858.442432][T17156] should_fail_ex+0x40c/0x560 [ 2858.442467][T17156] prepare_alloc_pages+0x230/0x650 [ 2858.442495][T17156] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2858.442518][T17156] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2858.442542][T17156] ? __pfx_policy_nodemask+0x10/0x10 [ 2858.442573][T17156] alloc_pages_mpol+0x212/0x380 [ 2858.442599][T17156] folio_alloc_mpol_noprof+0x39/0x160 [ 2858.442622][T17156] shmem_alloc_and_add_folio+0x43e/0xf60 [ 2858.442648][T17156] ? filemap_get_entry+0xcd/0x3f0 [ 2858.442683][T17156] ? kernel_text_address+0xa5/0xe0 [ 2858.442706][T17156] ? __pfx_filemap_get_entry+0x10/0x10 [ 2858.442740][T17156] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2858.442768][T17156] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 2858.442800][T17156] shmem_get_folio_gfp+0x5da/0x16d0 [ 2858.442840][T17156] shmem_fault+0x179/0x390 [ 2858.442874][T17156] __do_fault+0x138/0x2a0 [ 2858.442895][T17156] do_pte_missing+0x684/0x34b0 [ 2858.442934][T17156] ? handle_mm_fault+0xec/0x3080 [ 2858.442963][T17156] handle_mm_fault+0x1b36/0x3080 [ 2858.443000][T17156] ? handle_mm_fault+0xec/0x3080 [ 2858.443034][T17156] ? __pfx_handle_mm_fault+0x10/0x10 [ 2858.443071][T17156] ? __lock_acquire+0x683/0x2cf0 [ 2858.443097][T17156] ? lock_mm_and_find_vma+0xa7/0x340 [ 2858.443129][T17156] do_user_addr_fault+0x744/0x1340 [ 2858.443164][T17156] exc_page_fault+0x6a/0xc0 [ 2858.443187][T17156] asm_exc_page_fault+0x26/0x30 [ 2858.443206][T17156] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 2858.443233][T17156] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 61 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2858.443250][T17156] RSP: 0018:ffffc9000542fb70 EFLAGS: 00050206 [ 2858.443268][T17156] RAX: ffffffff84b96c01 RBX: 000000000000015e RCX: 000000000000015e [ 2858.443281][T17156] RDX: 0000000000000000 RSI: ffff888078aa2000 RDI: 0000200000004440 [ 2858.443295][T17156] RBP: 000000000000015e R08: ffff888078aa215d R09: 1ffff1100f15442b [ 2858.443309][T17156] R10: dffffc0000000000 R11: ffffed100f15442c R12: 000020000000459e [ 2858.443323][T17156] R13: 00007ffffffff000 R14: ffff888078aa2000 R15: 0000200000004440 [ 2858.443345][T17156] ? _copy_to_user+0x21/0xb0 [ 2858.443375][T17156] _copy_to_user+0x8a/0xb0 [ 2858.443402][T17156] vcs_read+0xa85/0xde0 [ 2858.443423][T17156] ? __lock_acquire+0x683/0x2cf0 [ 2858.443461][T17156] ? __pfx_vcs_read+0x10/0x10 [ 2858.443484][T17156] vfs_read+0x213/0xa80 [ 2858.443515][T17156] ? __pfx_vfs_read+0x10/0x10 [ 2858.443539][T17156] ? __fget_files+0x2a/0x420 [ 2858.443561][T17156] ? __fget_files+0x2a/0x420 [ 2858.443579][T17156] ? __fget_files+0x3a2/0x420 [ 2858.443597][T17156] ? __fget_files+0x2a/0x420 [ 2858.443623][T17156] ksys_read+0x150/0x270 [ 2858.443647][T17156] ? __pfx_ksys_read+0x10/0x10 [ 2858.443678][T17156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2858.443700][T17156] do_syscall_64+0x174/0x580 [ 2858.443745][T17156] ? trace_irq_disable+0x3b/0x140 [ 2858.443774][T17156] ? clear_bhb_loop+0x40/0x90 [ 2858.443798][T17156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2858.443818][T17156] RIP: 0033:0x7ff92a79ce59 [ 2858.443835][T17156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2858.443851][T17156] RSP: 002b:00007ff92b571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2858.443870][T17156] RAX: ffffffffffffffda RBX: 00007ff92aa15fa0 RCX: 00007ff92a79ce59 [ 2858.443885][T17156] RDX: 000000000000175d RSI: 0000200000004440 RDI: 0000000000000003 [ 2858.443897][T17156] RBP: 00007ff92b571090 R08: 0000000000000000 R09: 0000000000000000 [ 2858.443910][T17156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2858.443922][T17156] R13: 00007ff92aa16038 R14: 00007ff92aa15fa0 R15: 00007ff92ab3fa48 [ 2858.443953][T17156] [ 2858.566714][T17162] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12432'. [ 2859.004245][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2859.040038][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2859.084462][T17178] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12436'. [ 2859.084985][T17177] vcan0: tx address claim with dlc 1 [ 2859.221842][ T4682] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2859.371626][ T4682] usb 5-1: Using ep0 maxpacket: 8 [ 2859.378693][ T4682] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 2859.393334][ T4682] usb 5-1: config 0 has no interface number 0 [ 2859.411471][ T4682] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2859.427721][ T4682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.441850][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2859.475459][ T4682] usb 5-1: Product: syz [ 2859.486511][ T4682] usb 5-1: Manufacturer: syz [ 2859.502212][ T4682] usb 5-1: SerialNumber: syz [ 2859.541387][ T4682] usb 5-1: config 0 descriptor?? [ 2859.586330][T17190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2859.631953][T17190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2859.665781][T17190] xt_bpf: check failed: parse error [ 2859.766337][ T4682] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2859.781868][ T4682] uvcvideo 5-1:0.31: No valid video chain found. [ 2859.808244][ T4682] usb 5-1: USB disconnect, device number 29 [ 2859.941661][ T4699] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2860.111692][ T4699] usb 3-1: Using ep0 maxpacket: 8 [ 2860.122046][T17194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2860.146963][ T4699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2860.173243][ T4699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2860.174063][T17195] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2860.234979][ T4699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2860.281745][ T4699] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 2860.311452][ T4699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2860.324552][T17194] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2860.422989][ T4699] usb 3-1: config 0 descriptor?? [ 2860.482400][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2860.868499][T17192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2860.902162][T17192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2861.144630][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12449'. [ 2861.232807][ T4699] usbhid 3-1:0.0: can't add hid device: -71 [ 2861.244669][ T4685] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2861.268666][ T4699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2861.325035][ T4699] usb 3-1: USB disconnect, device number 45 [ 2861.444689][ T4685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2861.455580][ T4685] usb 5-1: not running at top speed; connect to a high speed hub [ 2861.472603][ T4685] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2861.516900][ T4685] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=42.38 [ 2861.522194][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2861.555179][ T4685] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2861.616570][ T4685] usb 5-1: Manufacturer: syz [ 2861.721135][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 2861.721154][ T29] audit: type=1326 audit(1782686340.398:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2861.825450][ T29] audit: type=1326 audit(1782686340.398:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2861.862550][ T4685] cxacru 5-1:11.0: usbatm_usb_probe: bind failed: -19! [ 2861.902054][ T4685] usb 5-1: USB disconnect, device number 30 [ 2861.960679][ T29] audit: type=1326 audit(1782686340.448:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2861.993522][ T29] audit: type=1326 audit(1782686340.448:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.046430][ T29] audit: type=1326 audit(1782686340.448:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.091368][ T29] audit: type=1326 audit(1782686340.448:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.139097][ T29] audit: type=1326 audit(1782686340.448:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.211340][ T29] audit: type=1326 audit(1782686340.448:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.277428][ T29] audit: type=1326 audit(1782686340.448:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.336742][ T29] audit: type=1326 audit(1782686340.458:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.1.12453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b6839ce59 code=0x7ffc0000 [ 2862.561833][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2862.631728][ T4685] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2862.804832][ T4685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2862.838234][ T4685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2862.847328][T14145] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2862.877915][ T4685] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2862.911767][ T4685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2862.954182][ T4685] usb 2-1: SerialNumber: syz [ 2863.011642][T14145] usb 5-1: Using ep0 maxpacket: 32 [ 2863.022154][T14145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2863.068952][T14145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2863.101119][T14145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 162, changing to 11 [ 2863.165791][T14145] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 0.40 [ 2863.207841][T14145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.220015][ T4685] usb 2-1: 0:2 : does not exist [ 2863.256787][T14145] usb 5-1: Product: Ч [ 2863.279080][T17248] netlink: 'syz.5.12457': attribute type 39 has an invalid length. [ 2863.283089][T14145] usb 5-1: Manufacturer: 䵨뜋⭉ꢇ뛑滨幛䷘况疊퍝꧃⸪ꞻ剧挹홴脒䖜虅꽢羶䖚⒯㯈죳叙ვ봠º嫘鎗⬳ꭢぎ麵ꔆ [ 2863.319221][T17248] netlink: 'syz.5.12457': attribute type 39 has an invalid length. [ 2863.350741][T14145] usb 5-1: SerialNumber: 䄜빕䜸楩ﮭ鄶჎ⷫ潭毛䇣嘗᳜圍鹇釠쓭紒㘬혷췏嶺絪쥟&回䇘綾ﮯ䏘Ɔੇ쓸ᚾꞙ煂࠰ᢽ쁞몪ꗓ汵釋煁튄⫵ậ庀舉硋殺ᾆ轫뙕녶預䪛ᘍ돛⴯뜟䌿堦笾⊂鼠씠ۛ [ 2863.384472][ T4685] usb 2-1: USB disconnect, device number 92 [ 2863.470987][T16892] udevd[16892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2863.602708][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2863.862996][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.894868][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.930644][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.966398][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.999678][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2864.043507][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2864.124025][T14145] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2864.199394][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2864.254676][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2864.335709][T17255] netlink: 'syz.5.12459': attribute type 11 has an invalid length. [ 2864.365352][T14145] usb 5-1: USB disconnect, device number 31 [ 2864.407174][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12461'. [ 2864.412636][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2864.472470][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2864.595301][T17266] udevd[17266]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2864.641640][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2864.781301][T17272] random: crng reseeded on system resumption [ 2865.035194][T17279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2865.053100][T14145] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2865.201961][T14145] usb 2-1: device descriptor read/64, error -71 [ 2865.249092][T17281] vcan0: tx address claim with dlc 1 [ 2865.451834][T14145] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2865.563846][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12472'. [ 2865.586181][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.606933][T14145] usb 2-1: device descriptor read/64, error -71 [ 2865.617628][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.681765][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2865.693827][T17292] syzkaller0: entered promiscuous mode [ 2865.700263][T17292] syzkaller0: entered allmulticast mode [ 2865.722322][T14145] usb usb2-port1: attempt power cycle [ 2865.911487][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.920984][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.071737][T14145] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2866.092490][T14145] usb 2-1: device descriptor read/8, error -71 [ 2866.181096][T17310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.190032][T17310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.341692][T14145] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2866.363634][T14145] usb 2-1: device descriptor read/8, error -71 [ 2866.483511][T14145] usb usb2-port1: unable to enumerate USB device [ 2866.721679][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2866.770035][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.785742][T17316] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 2866.795019][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.814674][T17316] bond5 (unregistering): Released all slaves [ 2866.941721][T14145] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2867.030285][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12483'. [ 2867.037104][T17330] netlink: 35 bytes leftover after parsing attributes in process `syz.2.12483'. [ 2867.095055][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12484'. [ 2867.112555][T14145] usb 5-1: Using ep0 maxpacket: 8 [ 2867.119699][T14145] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2867.135958][T14145] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 2867.144970][T14145] usb 5-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 2867.155519][T14145] usb 5-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 2867.175731][T14145] usb 5-1: config 140 has no interface number 0 [ 2867.177293][T17335] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12485'. [ 2867.184837][T14145] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 2867.201146][T14145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2867.212304][T14145] usb 5-1: Product: syz [ 2867.217001][T14145] usb 5-1: Manufacturer: syz [ 2867.222010][T14145] usb 5-1: SerialNumber: syz [ 2867.479683][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12487'. [ 2867.569012][T17341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2867.761727][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2868.121676][T14145] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 2868.315684][T17314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2868.360290][T17314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2868.450386][T14145] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2868.498968][T14145] usb 5-1: device firmware changed [ 2868.522686][T14145] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 2868.565283][T14145] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 2868.573085][ T4685] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2868.588093][ T4699] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 2868.620826][T14145] usb 5-1: USB disconnect, device number 32 [ 2868.629458][ T4699] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 2868.699240][ T4699] ------------[ cut here ]------------ [ 2868.706153][ T4699] !atomic_read(&kn->count) [ 2868.706180][ T4699] WARNING: fs/kernfs/dir.c:560 at __kernfs_new_node+0x7d0/0x980, CPU#1: kworker/1:11/4699 [ 2868.723042][ T4699] Modules linked in: [ 2868.729733][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: kworker/1:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 2868.740813][ T4699] Tainted: [L]=SOFTLOCKUP [ 2868.745195][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2868.755309][ T4699] Workqueue: events request_firmware_work_func [ 2868.761674][ T4699] RIP: 0010:__kernfs_new_node+0x7d0/0x980 [ 2868.767431][ T4699] Code: c0 0f 85 a1 01 00 00 44 8b 25 10 4f bf 0d 31 ff 44 89 e6 e8 02 89 52 ff 45 85 e4 74 1c e8 b8 84 52 ff eb 2d e8 b1 84 52 ff 90 <0f> 0b 90 e9 9f fd ff ff e8 a3 84 52 ff eb 18 e8 9c 84 52 ff 48 8d [ 2868.787661][ T4699] RSP: 0018:ffffc9000368f440 EFLAGS: 00010293 [ 2868.794160][ T4699] RAX: ffffffff8273dd0f RBX: 0000000000000000 RCX: ffff88802a29be00 [ 2868.802195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2868.809889][ T4699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2868.818046][ T4699] RBP: ffffc9000368f598 R08: ffff88804a5cc5a3 R09: 1ffff110094b98b4 [ 2868.826089][ T4699] R10: dffffc0000000000 R11: ffffed10094b98b5 R12: ffff88805a518c30 [ 2868.834096][ T4699] R13: dffffc0000000000 R14: 1ffff920006d1e94 R15: ffff88805a518c30 [ 2868.842124][ T4699] FS: 0000000000000000(0000) GS:ffff888125320000(0000) knlGS:0000000000000000 [ 2868.851090][ T4699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2868.857738][ T4699] CR2: 000000110c35d694 CR3: 000000008405e000 CR4: 00000000003526f0 [ 2868.866025][ T4699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2868.874514][ T4699] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2868.884552][ T4699] Call Trace: [ 2868.887994][ T4699] [ 2868.890954][ T4699] ? __pfx___kernfs_new_node+0x10/0x10 [ 2868.896505][ T4699] ? kernfs_root+0x1c/0x230 [ 2868.901036][ T4699] ? kernfs_root+0x1c/0x230 [ 2868.905857][ T4699] ? kernfs_root+0x1c/0x230 [ 2868.910400][ T4699] ? kernfs_root+0x1c/0x230 [ 2868.914980][ T4699] kernfs_create_dir_ns+0xfe/0x230 [ 2868.920108][ T4699] sysfs_create_dir_ns+0x12f/0x2a0 [ 2868.925280][ T4699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2868.931024][ T4699] ? do_raw_spin_unlock+0xf5/0x210 [ 2868.936278][ T4699] kobject_add_internal+0x622/0xcd0 [ 2868.941497][ T4699] kobject_add+0x163/0x240 [ 2868.946090][ T4699] ? rcu_is_watching+0x15/0xb0 [ 2868.950870][ T4699] ? __pfx_kobject_add+0x10/0x10 [ 2868.955861][ T4699] ? __kmalloc_cache_noprof+0x150/0x660 [ 2868.961511][ T4699] ? kobject_init+0x7f/0x1e0 [ 2868.966550][ T4699] get_device_parent+0x316/0x3a0 [ 2868.971495][ T4699] device_add+0x2d4/0xb80 [ 2868.976159][ T4699] firmware_fallback_sysfs+0x2dd/0xa40 [ 2868.981982][ T4699] ? kfree+0x1c5/0x640 [ 2868.986093][ T4699] _request_firmware+0x1049/0x1780 [ 2868.991218][ T4699] ? __pfx__request_firmware+0x10/0x10 [ 2868.996730][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.002581][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.008307][ T4699] request_firmware_work_func+0xac/0x2d0 [ 2869.013968][ T4699] ? rcu_is_watching+0x15/0xb0 [ 2869.018730][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.024482][ T4699] process_scheduled_works+0xa8e/0x14e0 [ 2869.030093][ T4699] ? __pfx_process_scheduled_works+0x10/0x10 [ 2869.036133][ T4699] ? assign_work+0x3cf/0x5d0 [ 2869.040724][ T4699] worker_thread+0xa47/0xfb0 [ 2869.045353][ T4699] kthread+0x388/0x470 [ 2869.049415][ T4699] ? __pfx_worker_thread+0x10/0x10 [ 2869.054556][ T4699] ? __pfx_kthread+0x10/0x10 [ 2869.059209][ T4699] ret_from_fork+0x514/0xb70 [ 2869.063879][ T4699] ? __pfx_ret_from_fork+0x10/0x10 [ 2869.069001][ T4699] ? __switch_to+0xc89/0x1420 [ 2869.073705][ T4699] ? __pfx_kthread+0x10/0x10 [ 2869.078561][ T4699] ret_from_fork_asm+0x1a/0x30 [ 2869.083621][ T4699] [ 2869.086653][ T4699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2869.093921][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: kworker/1:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 2869.104921][ T4699] Tainted: [L]=SOFTLOCKUP [ 2869.109223][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2869.119352][ T4699] Workqueue: events request_firmware_work_func [ 2869.125505][ T4699] Call Trace: [ 2869.128789][ T4699] [ 2869.131721][ T4699] vpanic+0x56c/0xa60 [ 2869.135704][ T4699] ? __pfx__printk+0x10/0x10 [ 2869.140286][ T4699] ? __pfx_vpanic+0x10/0x10 [ 2869.144776][ T4699] ? is_bpf_text_address+0x292/0x2b0 [ 2869.150074][ T4699] ? is_bpf_text_address+0x26/0x2b0 [ 2869.155264][ T4699] panic+0xc5/0xd0 [ 2869.158975][ T4699] ? __pfx_panic+0x10/0x10 [ 2869.163381][ T4699] ? ret_from_fork_asm+0x1a/0x30 [ 2869.168309][ T4699] __warn+0x315/0x4c0 [ 2869.172274][ T4699] ? __kernfs_new_node+0x7d0/0x980 [ 2869.177380][ T4699] ? __kernfs_new_node+0x7d0/0x980 [ 2869.182526][ T4699] __report_bug+0x331/0x530 [ 2869.187023][ T4699] ? __kernfs_new_node+0x7d0/0x980 [ 2869.192119][ T4699] ? __pfx___report_bug+0x10/0x10 [ 2869.197138][ T4699] ? idr_alloc_u32+0x1f1/0x330 [ 2869.201891][ T4699] ? __kernfs_new_node+0x7d0/0x980 [ 2869.206984][ T4699] report_bug+0x16a/0x220 [ 2869.211297][ T4699] ? __kernfs_new_node+0x7d0/0x980 [ 2869.216388][ T4699] ? __kernfs_new_node+0x7d2/0x980 [ 2869.221480][ T4699] handle_bug+0x9c/0x200 [ 2869.225715][ T4699] exc_invalid_op+0x1a/0x50 [ 2869.230208][ T4699] asm_exc_invalid_op+0x1a/0x20 [ 2869.235042][ T4699] RIP: 0010:__kernfs_new_node+0x7d0/0x980 [ 2869.240748][ T4699] Code: c0 0f 85 a1 01 00 00 44 8b 25 10 4f bf 0d 31 ff 44 89 e6 e8 02 89 52 ff 45 85 e4 74 1c e8 b8 84 52 ff eb 2d e8 b1 84 52 ff 90 <0f> 0b 90 e9 9f fd ff ff e8 a3 84 52 ff eb 18 e8 9c 84 52 ff 48 8d [ 2869.260513][ T4699] RSP: 0018:ffffc9000368f440 EFLAGS: 00010293 [ 2869.266569][ T4699] RAX: ffffffff8273dd0f RBX: 0000000000000000 RCX: ffff88802a29be00 [ 2869.274527][ T4699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2869.282605][ T4699] RBP: ffffc9000368f598 R08: ffff88804a5cc5a3 R09: 1ffff110094b98b4 [ 2869.290585][ T4699] R10: dffffc0000000000 R11: ffffed10094b98b5 R12: ffff88805a518c30 [ 2869.298546][ T4699] R13: dffffc0000000000 R14: 1ffff920006d1e94 R15: ffff88805a518c30 [ 2869.306511][ T4699] ? __kernfs_new_node+0x7cf/0x980 [ 2869.311822][ T4699] ? __pfx___kernfs_new_node+0x10/0x10 [ 2869.317284][ T4699] ? kernfs_root+0x1c/0x230 [ 2869.321789][ T4699] ? kernfs_root+0x1c/0x230 [ 2869.326283][ T4699] ? kernfs_root+0x1c/0x230 [ 2869.330768][ T4699] ? kernfs_root+0x1c/0x230 [ 2869.335253][ T4699] kernfs_create_dir_ns+0xfe/0x230 [ 2869.340356][ T4699] sysfs_create_dir_ns+0x12f/0x2a0 [ 2869.345464][ T4699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2869.351088][ T4699] ? do_raw_spin_unlock+0xf5/0x210 [ 2869.356188][ T4699] kobject_add_internal+0x622/0xcd0 [ 2869.361403][ T4699] kobject_add+0x163/0x240 [ 2869.365818][ T4699] ? rcu_is_watching+0x15/0xb0 [ 2869.370573][ T4699] ? __pfx_kobject_add+0x10/0x10 [ 2869.375499][ T4699] ? __kmalloc_cache_noprof+0x150/0x660 [ 2869.381053][ T4699] ? kobject_init+0x7f/0x1e0 [ 2869.385637][ T4699] get_device_parent+0x316/0x3a0 [ 2869.390571][ T4699] device_add+0x2d4/0xb80 [ 2869.394893][ T4699] firmware_fallback_sysfs+0x2dd/0xa40 [ 2869.400340][ T4699] ? kfree+0x1c5/0x640 [ 2869.404406][ T4699] _request_firmware+0x1049/0x1780 [ 2869.409514][ T4699] ? __pfx__request_firmware+0x10/0x10 [ 2869.414958][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.420666][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.426380][ T4699] request_firmware_work_func+0xac/0x2d0 [ 2869.432003][ T4699] ? rcu_is_watching+0x15/0xb0 [ 2869.436754][ T4699] ? process_scheduled_works+0xa20/0x14e0 [ 2869.442463][ T4699] process_scheduled_works+0xa8e/0x14e0 [ 2869.448016][ T4699] ? __pfx_process_scheduled_works+0x10/0x10 [ 2869.453986][ T4699] ? assign_work+0x3cf/0x5d0 [ 2869.458564][ T4699] worker_thread+0xa47/0xfb0 [ 2869.463170][ T4699] kthread+0x388/0x470 [ 2869.467226][ T4699] ? __pfx_worker_thread+0x10/0x10 [ 2869.472325][ T4699] ? __pfx_kthread+0x10/0x10 [ 2869.476899][ T4699] ret_from_fork+0x514/0xb70 [ 2869.481471][ T4699] ? __pfx_ret_from_fork+0x10/0x10 [ 2869.486565][ T4699] ? __switch_to+0xc89/0x1420 [ 2869.491235][ T4699] ? __pfx_kthread+0x10/0x10 [ 2869.495813][ T4699] ret_from_fork_asm+0x1a/0x30 [ 2869.500588][ T4699] [ 2869.503856][ T4699] Kernel Offset: disabled [ 2869.508182][ T4699] Rebooting in 86400 seconds..