last executing test programs: 17m8.061771317s ago: executing program 1 (id=2): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002000}) io_submit(0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac0000000100", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 17m7.789860744s ago: executing program 1 (id=6): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x78d9c8c660a6aed2, 0x2}}}, 0x17) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001080), &(0x7f0000001100)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001000), &(0x7f0000001040)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xe4}) write$tun(r7, &(0x7f00000000c0)={@val={0x0, 0xdada}, @void, @mpls={[{0x6}, {0x4}, {0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}], @llc={@llc={0x4, 0xf0, 'wv', "ad2dffd9eb0e980aa184b932a53925f0799282f1ffd62a0f23f354ed1f154d82fdb8"}}}}, 0x3e) 17m7.294846434s ago: executing program 1 (id=7): socket(0x28, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000096, 0x0, 0x6}]}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000010", @ANYRES64=r0], 0xb2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) 17m6.91863019s ago: executing program 1 (id=8): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0xc0, 0xc0, 0x278, 0xc0, 0x190, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'wg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x4, 0x1}, {0x8, 0x100000000}, {0xe}, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}], 0x2, 0x20004810) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000088, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000240)=@random={'system.', '!^\x00'}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x48) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e29, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 17m6.167752347s ago: executing program 1 (id=9): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x7ffffbf8, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r4, 0x9012}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x801000000060d3}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r4, 0x6, &(0x7f0000000140)={0x2, 0x0, 0x80000fd8b, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) fchown(r5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x8, 0xffff, 0x8, 0x3}) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) fchdir(0xffffffffffffffff) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x6f4000) syz_clone(0x0, 0x0, 0x32, 0x0, 0x0, 0x0) 17m5.13987146s ago: executing program 1 (id=19): mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unshare(0x20600) 16m49.998187848s ago: executing program 32 (id=19): mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unshare(0x20600) 16m1.932943145s ago: executing program 5 (id=318): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000340)="f3", 0x1}], 0x1}}], 0x1, 0x4004801) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000240)={0x0, 0x4, 0x71}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000400)={0xc0, 0x0, 0x4000}) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x10000000000}]) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="8227e87cab4ca8b5b0f41a34605cb92b0812fbe0b8f95c6e906933b021cd94b3c1d351bdbce636d483da917b83c92994db8502f1406f280a4e4bd72f18e7008ce65e4d13bb19f4a9bfff3e305b93a8a710e71739ce3871e9e51c3e848b8e387ee31685d3bc7e5cc4bbba4169f964169e59c74059050dcd7c298f9252a5f84e624f377e332c85f16f5384", 0x8a}, {&(0x7f0000000340)="99bef99e1da0a9539cbd8d570d99604ae64193bc62ff077c24fbdcbe3d446100ba1c0257e6f80e9c60ffc358b4791ab0a682c79cb367b27d2c7d25cabe8ea82e75e27423bf17377bb7ee603634d4d71003d782a657e2d38b7c45e3c22f378af00e940f8f701e83798b926d1f61be385d4a4af62d9ebf6b5f876619bb07db7d", 0x7f}], 0x2, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "d45098689f8bc2d5"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x1004c009) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r5, @ANYRESHEX=r8], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000008) 16m1.451294722s ago: executing program 5 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x2f, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2a, 0x107, 0x3, 0x25dfdbfd, {0x3, 0x7c}}, 0x14}}, 0x400c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x54}}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x3, 0xfff0, 0x3f80, 0xfffa}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000001cc0)={0x1, [{0x1, 0x8, 0x3, &(0x7f00000001c0)="0f"}, {0x2, 0x28, 0xffff, &(0x7f0000000200)="d8918e96d4"}, {0x1, 0x0, 0xfffffffa, 0x0}, {0x1, 0x0, 0x16b, 0x0}, {0x1, 0x0, 0x30, 0x0}, {0x3, 0x3008, 0x9, &(0x7f0000000540)="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"}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xfff, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x262800, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x2, 0x0}]}) 16m1.118239247s ago: executing program 5 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000459bb2405804030300000000000000021b000111000000090400000195699b0009058bfd7503c2180d27af3c8f456b7d092ea0d4aeb5d58f2505f003d32effdfd603663e28f41340aca6835d5e8f61a26faf94c75e1ffb1a58a43d442394e4c1f2ddd60a2a596b991f9094553988895821e71a7af51eef4355e2c43f0949370eaf3d3c786da872a79d48279dc70358e75db5bfabb14f3deeee3b3670cf849c5fc43fde75eb308411a4223226e4afabe9bb5c127ef30001a7ecfd02b160a7d095a38cedc0d0f7f218", @ANYRESDEC=0x0], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 15m57.871808594s ago: executing program 5 (id=342): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x4, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') r1 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f00000000c0)='1\x00', 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x99, 0xe, 0xf7, 0x40, 0x2040, 0xc080, 0x881a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x5, 0x7, 0x70a1c7e174e5b518, 0x7}}]}}, &(0x7f0000000000)={0x35, 0x0, 0x0, 0x0}) 15m54.727691353s ago: executing program 5 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x90000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f0008000300"], 0x78) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x81, 0x800, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @remote, {[@noop]}}}}}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x0, 0x10}, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'wg2\x00', &(0x7f0000000140)=@ethtool_ts_info}) sendmmsg$unix(r11, &(0x7f000000b640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x30, 0x24040040}}], 0x1, 0x0) r13 = mq_open(&(0x7f00000000c0)='\x00', 0x2, 0x40, &(0x7f0000000180)={0x4, 0x5, 0x2, 0xd}) fcntl$notify(r13, 0x402, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x5, 0x1, 0x0, r5}, @alu={0x0, 0x1, 0xc, 0xa, 0x6, 0x0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x8, 0x5, 0x4, 0x36, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x72}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x10}, @jmp={0x5, 0x0, 0x9, 0x1, 0x2, 0x0, 0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000300), 0x1e00, 0x3, '\x00', r7, @fallback=0x35, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[r5, r4, r5, r8, r5, r3, r5, r9], &(0x7f00000004c0)=[{0x5, 0x4, 0x7, 0xa}], 0x10, 0x2}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 15m54.415983509s ago: executing program 5 (id=362): r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000c80)) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206050000000000000000000000000205000400000000000500040003000000140007800800134000000000080012400000000d050005000100000005000100060000000d000300686173683a6d61630000000046c47c57bb24d910003613edfa6aa3b43fe8ff55912197fa4cc51cf95241636f51efaa640ebfff27390f7ad677a15ed4775a7b56a8d9042dd855"], 0x58}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x6, 0x0, &(0x7f0000000080)=[{}, {0x80000000}, {0x80000000}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}]}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x0, 0x14) write(r10, &(0x7f0000000380)='100000', 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r11, &(0x7f0000000200)='1', 0x1) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r12, &(0x7f0000000280)='0', 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000500)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r15, 0x10c000) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES64=r5, @ANYBLOB="4a3cf1c2d7451209c24b743eb152c7d93ccc5e8c749fcfc4a8e6f0a9ddac395feba59ce082cabfaf7f44bc55886b7932d22e225737c56e5a9158ef3cc682ef", @ANYRESDEC=r13, @ANYRESHEX=r3, @ANYRES64=r4], 0x44}, 0x1, 0xba01, 0x0, 0x22000010}, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_open_dev$video(&(0x7f0000000740), 0xffffffffffffffff, 0x100) 15m39.027980576s ago: executing program 33 (id=362): r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000c80)) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206050000000000000000000000000205000400000000000500040003000000140007800800134000000000080012400000000d050005000100000005000100060000000d000300686173683a6d61630000000046c47c57bb24d910003613edfa6aa3b43fe8ff55912197fa4cc51cf95241636f51efaa640ebfff27390f7ad677a15ed4775a7b56a8d9042dd855"], 0x58}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x6, 0x0, &(0x7f0000000080)=[{}, {0x80000000}, {0x80000000}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}]}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x0, 0x14) write(r10, &(0x7f0000000380)='100000', 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r11, &(0x7f0000000200)='1', 0x1) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r12, &(0x7f0000000280)='0', 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000500)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r15, 0x10c000) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES64=r5, @ANYBLOB="4a3cf1c2d7451209c24b743eb152c7d93ccc5e8c749fcfc4a8e6f0a9ddac395feba59ce082cabfaf7f44bc55886b7932d22e225737c56e5a9158ef3cc682ef", @ANYRESDEC=r13, @ANYRESHEX=r3, @ANYRES64=r4], 0x44}, 0x1, 0xba01, 0x0, 0x22000010}, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_open_dev$video(&(0x7f0000000740), 0xffffffffffffffff, 0x100) 14.530054243s ago: executing program 4 (id=5339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000002c0)=0xfffffffb) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) 11.239684514s ago: executing program 2 (id=5361): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtclass={0x48c, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x3, 0xff, 0x5, 0x1000, 0x2, 0x4, 0x3, 0xf, 0x7bf8, 0x8000, 0x7, 0x200, 0x1, 0x4, 0x10001, 0x3, 0x10, 0x9, 0x0, 0xd1, 0x80000001, 0x3ff, 0x2, 0x2, 0x9, 0x280, 0xfffffff7, 0x6, 0x2, 0x1, 0x2, 0x10, 0x1ff, 0x7f, 0x80, 0x5, 0x9c, 0x2, 0x20aa, 0x0, 0xe, 0x8001, 0xfffffffa, 0x2, 0x8, 0x0, 0x5, 0x1, 0x2, 0x3, 0x0, 0x9, 0x163a, 0x0, 0x8, 0x10000, 0x73, 0x4, 0x8, 0xfb0000, 0x3, 0x400, 0x401, 0x1, 0x4, 0x4, 0x8, 0x9, 0xfffffff8, 0x0, 0x7, 0x3, 0x7, 0x6, 0xffff0a4b, 0x1, 0x6, 0x40, 0x22, 0x6, 0xff, 0x9, 0x9, 0x3, 0x4, 0x9, 0x6, 0xfff, 0x0, 0x2, 0xc56f, 0xffffffff, 0x9, 0x0, 0x6, 0xfffffffe, 0x9, 0x6, 0x5, 0x400, 0x3, 0x4, 0x11c, 0x9, 0xffc, 0x1d, 0x8, 0x5106, 0x4, 0x0, 0xe3c, 0xf05e, 0x9, 0xdf68, 0x0, 0x9, 0x8c800000, 0x9, 0x7, 0xd, 0xff, 0x6, 0x0, 0xfe00000, 0x7, 0x2, 0x0, 0x8, 0x3, 0x10000, 0x5, 0xfffffff8, 0x10000, 0x3, 0x42c, 0x54e, 0xc15, 0x8, 0x4, 0x2, 0x1, 0x2, 0x7fffffff, 0xfff, 0x6, 0x6, 0x4, 0xf, 0x7, 0x7fff, 0x2, 0x117, 0x9, 0x7fff, 0x4, 0x80000001, 0xb1, 0x40, 0x5, 0x9, 0xffffffff, 0x2, 0x5, 0x3, 0xfffffffd, 0xf, 0x5, 0xf5, 0x4, 0xd9, 0x0, 0xffffffff, 0x8, 0x3ff, 0x1, 0xd, 0x9, 0x7, 0xfffffffc, 0x8, 0x6, 0x80, 0x800, 0x0, 0x2, 0xfffff800, 0x1, 0x4, 0x81, 0x6, 0x5, 0x3, 0x5, 0x0, 0x7357, 0x2c72, 0x7, 0x9, 0xa, 0x5cb, 0x5, 0x7, 0x9, 0x7, 0x30, 0x1, 0x101, 0x7, 0x8, 0xfffffe01, 0x7, 0x4, 0xfffffff0, 0x4, 0xf, 0xc59, 0x9, 0xd, 0x1, 0x7fffffff, 0x0, 0x5, 0x6, 0x9, 0x3b58, 0x2, 0x5, 0x8, 0xffff, 0x40e, 0x6, 0x3ff, 0x7, 0x8, 0x3, 0x3, 0x8, 0xfffffff7, 0x6, 0xeb44, 0x1000, 0x6, 0x0, 0x81, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x2, 0x9, 0x7, 0x10001, 0x9d]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x19e2, 0x3, 0x4, 0x2}, {0xc0, 0x2, 0x6, 0xfff8, 0x3ff, 0x7}, 0x4, 0x10000, 0x6, 0x7, 0x5}}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0x80000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706179ec6f6164001400028008000340000000b908000240000000020900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x7, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000002300)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESHEX=r5], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7f, 0xbe, 0x6, 0xc7a9, 0xd4f7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x0, 0x9}}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x61a7b7f8b4074f54, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 10.936582041s ago: executing program 4 (id=5364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0xda, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x4, 0xf3, 0x1, {0x22, 0xab6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0x8, 0x0, 0x6400}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) listen(r0, 0x7) 8.704962948s ago: executing program 4 (id=5370): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xd, 0x3, 0x1, {0x3, 0x1, 0x1400, 0x870}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="be9fb0c555fe878cacad8cc914fdf1464ce5318e", @ANYRESOCT=r3, @ANYBLOB="1a3214b06f5c6b7d7cec5e3c474b47e92589179d7425c61510507e0a7f7287ec98e2e15c9144edcd5a761806079e130c932160ad1ea1be9cce77151ce064f3582ad3936964605382e51a50cb445adc5aecea299e0ff9ac06abffb672a8c342f40aa63f18fa2e18cc109b09e12437bf767a74e0153cb97d487d1f1ae2d1bdeffdd24e14ddc58734e449e40331f3416e1bbfdae186cb790d80bbfbd2eee48432c6186e699a5e805a166a9fb1a3d4da13feac9c9eabaafae1c8161c2f133af398d4858aac4e7a065ad02c76f4339efd", @ANYRES8=r1, @ANYBLOB="aea5585303b5b2ae79be5ed0ce426b4b646b893dea422606814966192ff7ecb2252d836e3f70db0a2c9a39a592c61836a764cafc5e33af442b63363d714938ea773c26069865d510557d25899cac935551c3f0fb0f0d95c25eda154025f0da57d4a2eee0bd0bef9879509a333a0e958063d105befe1a108f5d55cdd353db1107085f0c5dd65721ea26245ee3f730e27cee0dc11f421318c2dc251abc5e1c5f816c9f242c8060669812386fae7b217b81d8718cb55009c7616730665b6ddb20435c85ca2002330e59f163e09e36c052b2386023073a6aedf8f3f2d5168e3251f7b1273816af308151738604d6d69c79", @ANYRES8=r6, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16], 0x50) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) unshare(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x40, 0x24, 0x713, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa5ba}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r8}, &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c219cb7ec4acd2a1acbad66acd05f32781f5695f082cb1cec7f696e60bbdec64505448ced732be215115bfeed1ac6d8157379dae66ac48e99613f2c095f78412c01d4d96a44954e5f318ed295808dce751877b1a5676534fda29bd5e784d95ad0faa324622f26b6c2efab3ab2ef8ed3d5c1f0389115db400111c9857f076"], 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x1, 0x80, 0x8, 0xe, 0x8, 0x7}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) 8.120834921s ago: executing program 2 (id=5371): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c032090400000102020000052400100104240202052406000105240100010705810308000a09040100020a000000070582024000000705030240"], 0x0) syz_usb_connect(0x6, 0x790, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x7d, 0x16, 0x9e, 0x20, 0x19d2, 0x1070, 0xd456, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77e, 0x2, 0x0, 0x6, 0xe0, 0x1, "", [{{0x9, 0x4, 0xc8, 0x7, 0x10, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x7, 0xfc, 0x5, [@generic={0x1a, 0x0, "cface46a28e6a3e0084dd11e1934f4c90620168a9ce98bda"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x5c8d}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x61bada4444cf4b0d, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9, 0x6, 0xdc}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xc2, 0x81, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x8, 0x7, [@generic={0x84, 0x0, "bf3738e76b7b0f08f86cde0821c82b57fc1643fd5726e58c516f194a9b2c53b88dc86e5ce3c7d9f7d36f9737505527f871a00917b2a67f4edc8cac6b30184d4d0d8d4b30ec878294085a8fab25ddcf47e34f384e0e88b0b9964e0d7c38af33a4a7a5619c4f264cf2ca6a0a09d9c049398cc78029a690ce482939fb45814e6596bfc5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xff}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xf9, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0xc, 0x6, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x94}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x34, 0xd, 0x1, [@generic={0xf6, 0x11, "fa35e1acd843199545c9fd8c6318314b97681255dbe719661b792e60a4c5b30a3cb87e2d57e759b4f3981bc375a00b752a2598cff154b141035d843453dd08bcdcd3be69830c8091002a7409cc0b80774a1378a4df08159e1a38ade0697937fefd5b1416834179d3b3164021a8c148a44a099a16ef7401a7ed1995155147bfc4c2122f5912cf1d38f1711e66961beae185080bf9c2aab8c0620a3c568c7557e06270f5e33fe3ef071debf831e3abea9d7890085926108ec0820fc4b394232e95119f96b9b83d9dbf97840471147615e5fd0f4f4bb8028c058cb5acf5a75182dcfa1e670a83339641b4215ebd06b4464df46c631c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa0, 0x400}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0xda, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6f, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xf801}, @generic={0x96, 0x22, "5137625b74481b8870b6f281c6a7346d9a307caa378f5fc3506c755eb2b09531617c859d056f9a3f78baa0d167459cfa188e23acc7f8c70da14ebe9a8a2a1c6b457fbd4f531d9e7feadf97b71f9f79ffa4b2428a6514251176b07d721cee1794aec24d948109f7dc68e39b1132e759c84c498fee5924f177bf4b9adb3a07a3347f5cdcc7c595b98df782939fcedad70ca3ce4c6f"}]}}, {{0x9, 0x5, 0x3, 0xd, 0x200, 0x9, 0xa2, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0xf, 0x0, 0xfe, [@generic={0xab, 0x24, "bbacffb4767fe5e540a6f04154a54283148e71987a2a477d53947fb364c0ed7e0ff3e847f618d905d81e424fc4c673a694b3f0820bcd69df0e50e6c8912070ea9a9b7cce99cd460b6488c97c3ffb3d10e4c5651189922518879f579cc2778acfb5a3e15fb742a60abc1d95b9888a5bd395e892638477bf343d93385193ac049c13236d8ac601b495c2caabefe4f556c9ae41e602f98a85348e46e1e25ee03519e9b389eea5adab583f"}, @generic={0x51, 0x22, "3e96037b5549869b3a17df25d9e4aea00f431aa42ac74becbca9a13756577269a331043cc808a51356b9b25f883acefc211355d4448db7c62398183eeee4c213771938e14c9eab4fe9217d56526a93"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x2, 0x6, 0xd9}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x98, 0x0, 0x4, [@generic={0x7c, 0x5, "a0ad1df0c3bd03c96f21f998f6bfa995c502950e6a267142477043ba81d817e8626860e296f88b805bdd5a0d591a83831bed22f5a3867f830e55f815fdd2765c069f84e44a1ff4a2d7c4b4fbcb3b63606490e3e978b149c62446308dea64f10927fc87d361cf212ea7d5058e25d8fd268a0248892fd7c7c48413"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4e, 0x6}]}}, {{0x9, 0x5, 0x8, 0x13, 0x10, 0xbe, 0x80, 0x6, [@generic={0x1d, 0x4, "acd8af2675b8f2b86decac121766ca2c88377642c6e6052a428318"}]}}]}}, {{0x9, 0x4, 0xea, 0x1, 0xd, 0x5, 0xa9, 0x75, 0xe1, [], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x9, 0x8, 0x8}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x5, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x58, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xe5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xa, 0x5, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x30, 0x6, [@generic={0x73, 0x7, "a2a57ad03256bd9080056e27022e2ca186c24156dca98b8b63ec8d820e9135d380579ba43ea94f42fd2ad6d296e0cfa9115cdc688ac591e344e7c2b5fbdbe60d75012236c2b0cfd2dd47d15ab227aae5d0b3fec22f8290a76198db8b9a66e654cf83658d1f8395f366b20248ad5c0b371a"}, @generic={0xf3, 0x7, "30159ac68146b0ba68df24d6b9059a91ea9ad6ce2d4624cbe43aac3a51801ad3e67779522a6ef94a326d25a3c04de3620f147f2817305123335b98884087c439c6ab1f676cff11bb20ad48f4398bdd8f780fb28707d66a786e0f51f39d6682394c94154b9c02714194d6a0c65d42d45a0804e2e3ab1fce1b1b1185fab29fe151f0979c78a98e2adf5c11b0bda23a515499bfbe472c0947a9ecc56e72091b728c4b41d18766be0f8bfe738b1d00efbc184e517e8b358dbca7e127bdd3e57e55d12302d4f921e218334134a32c0fd9f4d15b7843e55cf814c810f6e5bc029d293c6835dc19c9e66b7291ccdca2ca0186de1a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x7b, 0xc7}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xb, 0x67, 0x27}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x3, 0x1a, 0x0, [@generic={0x54, 0xc, "74230dd3a0d25b58b85d7cfb4c3d0235e0e7609f4a0e6ae1167b8735e43db8f9e507bd570df1883da60359452f5da5fac1e1fb4cc8c112e40c7166af046f4e83005310dd3d26e894b4b49af716f2b2fba971"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x25, 0x80, 0xf7}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x10, 0x4, 0x7f, [@generic={0x8, 0x22, "ab8f370a466b"}, @generic={0x90, 0xc, "65726b9c07bc103f6d0b05e271714bc220086bf2f60f5e12da16459330cd7547447542b8af8ed0def0f5aba05205ab9c4eba5898b0d9e77e2a825905568323e8dd5b7978b2a115f78dacbac05d1d96d82d29ae236dab824378a0705da83833b201fa0cac3f379490ff8533577e3532ac050ea8a96e00a27c8442b6a8878f8350b4cdd7199c39d9da60adf45b87fd"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xa0, 0x50, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x4, 0xd, 0xd}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x2, 0x3, 0x9}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x1, 0xf6, 0xf, 0x93, 0x8, 0x10}, 0x126, &(0x7f0000000880)={0x5, 0xf, 0x126, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bb4f35a82085aac7f754a4521e8ec962"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "ddb1d6743caca34678410b38c13205ae"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xb2, 0x5, 0x9, 0x6}, @generic={0xee, 0x10, 0x3, "7d8723d7214d4266ff282ec16cf7c9a0f6b50d215cba0f722e49fb398f240b1dfd6e636cf2ec1ce61d7a296fe74b3f6fffdd8207ea772eca4e5d1160d41444cba83f528cde4f6aed5722ce5e45cb50f1ff36c8cf2a99744675929afc2461bd6b16e8814bc7c1227f6a8ac19d71634fdcc8331769894e7b38b016b1ef2a9db34aebd251fd5e1f22aa5da286aaaf410f8006727e5c9cb5ee238d19a9981271458e1b4b31e68b33462d219fe9e214cdd6e7c0048445273ff8e52d81a4a3f8bbd675ea1c32945c61625dfcd468af50f407a0617ed94080ed10e84f53f1367645b6537d3775be5e4d67efa27cc4"}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x35, &(0x7f0000000a00)=@string={0x35, 0x3, "8684f431cbbf3b5fafe8a2671898b35d3785afea5349acf245f1a7354744cccf85dfa0998b6aa42b7ba2f0c2b960934e9f71b3"}}, {0x5d, &(0x7f0000000a40)=@string={0x5d, 0x3, "b8230b160ddaf28e996a5f31d2f676cf8f23cdb49ba42351082bfc516ce7d11a2014be1129c3e608f8b78ed6ab16e3f80feda7dd35ff57ab6a0e07a592f5cd3b1dfbe2081210f58020ad8d340aa7017bccbf860e24b63e2151142c"}}, {0x20, &(0x7f0000000ac0)=@string={0x20, 0x3, "35456abf172aa574eb348c8aac00df5f49fb0ddb05edd6b91a0e85cebcd2"}}]}) 8.118460757s ago: executing program 4 (id=5372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, &(0x7f0000000200)=0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x8, 0xffe2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3506}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r12, 0x4004480f, &(0x7f0000000040)=0x3) 7.795990392s ago: executing program 0 (id=5374): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000c40)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeea900112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x30, 0xddcfd81ca2619344, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='user\x00', r0) 7.73772861s ago: executing program 0 (id=5376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x9c, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) 7.582030366s ago: executing program 0 (id=5377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) close(r0) r2 = syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 6.761998989s ago: executing program 2 (id=5381): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/190, 0xbe}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000090557"], 0x0) 5.30909135s ago: executing program 2 (id=5382): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xd, 0x3, 0x1, {0x3, 0x1, 0x1400, 0x870}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="be9fb0c555fe878cacad8cc914fdf1464ce5318e", @ANYRESOCT=r3, @ANYBLOB="1a3214b06f5c6b7d7cec5e3c474b47e92589179d7425c61510507e0a7f7287ec98e2e15c9144edcd5a761806079e130c932160ad1ea1be9cce77151ce064f3582ad3936964605382e51a50cb445adc5aecea299e0ff9ac06abffb672a8c342f40aa63f18fa2e18cc109b09e12437bf767a74e0153cb97d487d1f1ae2d1bdeffdd24e14ddc58734e449e40331f3416e1bbfdae186cb790d80bbfbd2eee48432c6186e699a5e805a166a9fb1a3d4da13feac9c9eabaafae1c8161c2f133af398d4858aac4e7a065ad02c76f4339efd", @ANYRES8=r1, @ANYBLOB="aea5585303b5b2ae79be5ed0ce426b4b646b893dea422606814966192ff7ecb2252d836e3f70db0a2c9a39a592c61836a764cafc5e33af442b63363d714938ea773c26069865d510557d25899cac935551c3f0fb0f0d95c25eda154025f0da57d4a2eee0bd0bef9879509a333a0e958063d105befe1a108f5d55cdd353db1107085f0c5dd65721ea26245ee3f730e27cee0dc11f421318c2dc251abc5e1c5f816c9f242c8060669812386fae7b217b81d8718cb55009c7616730665b6ddb20435c85ca2002330e59f163e09e36c052b2386023073a6aedf8f3f2d5168e3251f7b1273816af308151738604d6d69c79", @ANYRES8=r6, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16], 0x50) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) unshare(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x40, 0x24, 0x713, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa5ba}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r8}, &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c219cb7ec4acd2a1acbad66acd05f32781f5695f082cb1cec7f696e60bbdec64505448ced732be215115bfeed1ac6d8157379dae66ac48e99613f2c095f78412c01d4d96a44954e5f318ed295808dce751877b1a5676534fda29bd5e784d95ad0faa324622f26b6c2efab3ab2ef8ed3d5c1f0389115db400111c9857f076"], 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x1, 0x80, 0x8, 0xe, 0x8, 0x7}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) 5.040220134s ago: executing program 6 (id=5385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901001c0000009500000000000000b7020000000000007baaf8ff00004000b5090800000000007baaf0ff00000000bf872000bf830000000007070000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001828", @ANYRES32, @ANYBLOB="00000000fffffff3b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.8211282s ago: executing program 6 (id=5387): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000c40)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeea900112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x30, 0xddcfd81ca2619344, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='user\x00', r0) 4.589195826s ago: executing program 4 (id=5388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc9) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 4.423751611s ago: executing program 6 (id=5389): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001400b59500000000000000000a184400", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080041e7"], 0x34}}, 0x0) 4.368933216s ago: executing program 0 (id=5390): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 4.162182935s ago: executing program 2 (id=5391): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7fff, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7fff, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0xffff}, {}, {0x10, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x8a25}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0xffff}, {}, {0x10, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x8a25}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r14, 0x107, 0x5, &(0x7f0000000180)=@req3={0x2, 0x8, 0x2, 0x3, 0x8000, 0x8, 0xe}, 0x1c) syz_open_dev$loop(&(0x7f0000000480), 0xb, 0x10000) fstat(0xffffffffffffffff, &(0x7f0000000300)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000008, 0x11, r14, 0x0) ioctl$SNDCTL_SEQ_RESET(r13, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r13, 0x5100) 4.071786894s ago: executing program 6 (id=5392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000800060005000000140009000000000000000008b92f203c6aafa2e7b158cf09f56a0284653c36a7"], 0x1c) 3.947477106s ago: executing program 0 (id=5393): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="e646d97e9af9165a733d9b1c94fc54e00f191e3b7e450be9d03b061404ea507314d8c1f987176dc83a692aa7f0564977015e161b93b1a5bd2ae591ae482ef8caa69c23e043d8b3759c", 0x49}, {&(0x7f00000001c0)="b6b7aa456b583a44babb84e502e00c47ca53a02693d8ff17aff1983f93e455f08935c0897f6dbd51a0a88120c127751140a65b5a4211e7ccc4640274fa03b68f3df282fb3171132f7f4f8f90c092ff88c1945d569f2fa0fe4e7e1b63d945531ab91c8aaa1c548b9bcffd54a65c92a2d135fab0a2aeae3021db6794104379a5a9c3699bd09ae4d676183516224538b566956cef9344ffb1027ef284db9c7ed60260a4c8c8de5ffd9ed2bdd1d0463fdfde77ccaf1e1426ee6a2b03a1c26701a3", 0xbf}], 0x2, 0xc) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 3.763526093s ago: executing program 2 (id=5395): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8014) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000087b000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000010c0)="430fc73f0f2390b9800000c00f32350000000f300f20d8250804f5000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66baf80cb844f85385ef66bafc0c66ed66b88e008ec02d1aa80000460f1c460041ae", 0x55}], 0x1, 0x32, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(0x0, &(0x7f0000002200), 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}}) 3.631326648s ago: executing program 0 (id=5396): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x5, 0x4) r2 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x0, 0x2000000, 0x0, 0x2700, 0x6, 0x0, 0x2, 0x20000000}}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf8, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xb2fa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, ']{L\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x56}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0xf8}}, 0x10000800) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000001080)) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000240)={0x0, 0x4, 0x71}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000001c0)) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x20, 0x23, 0xdc, {0xdc, 0x21, "0b5a049b20339f79ae7232b71daa548eee972cd90d180ecfb56249d129b3c59b3fdeb85fbb3cf0e9fa280b754dafb0b3d4c1e36ed6cee2d2624c8a7a74387fd0847d7adceccf148aa74f9800a8de8da430617164d3ff05330f9c31b77bf469a072ac61751220630b58961781e06798bde0d3a31a56bf983576fff39f877f3fc878c543fa89458bee14359fd4d3a6952be9907e188ddfa39aa0815f7851aa3035cadce9000c997c66a5f6a327f3c977775de813478fa4a0c32c4e7c03b44b5cae07edd74c3a5dca58336416737eb253f795fa7501d2d5ac38086e"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x7, 0x20, "8b10c6e07a7ee05a200d416438c256d963e652311e485c52e50ade388342cb8d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0xd9, {0xd7, "a2c191240a6187dea8dac6d2bfecd79ccaf91ab897780cdd71f1d9433cf8ed9b8dc83cfb42ac558030113d425f2b28cd2a35e93b1d3cff853f5e5996e864d686dcd14798cdb77efdda0f2d71b31a39590df2ea4cc519b9baa2a25efc7eeebd31057e9ed94734db716c757049296f967c3bd09ae09b29c1bb574051db74f675bbfce30e1bf1bcbe9a4d66a848bdcbbbb154b80a4bb5bad87a87bab4bbe2df0756803a410aebab9eea06d46900da8de18afafc080353aab4ed6df4dc48d4487d441b69d4d5d50813610f901fd50bfd2e2cddb66154441d10"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x80}}) 3.472089921s ago: executing program 3 (id=5397): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x8, 0x0, r1}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="a86d98fa", @ANYRES16=r5, @ANYBLOB="00012abd7000fedbdf25010000004c00028008000700ffffffff05000d000000000006000f000800000006000b000a00000008000500e10000000800060000010000080006000600000006000f00010100000800040001000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x4081) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1\x00'}) r7 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r7, &(0x7f0000000040)=[{0x0, 0x3, 0x800}, {0x4, 0x0, 0x1000}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 2.837818299s ago: executing program 3 (id=5398): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000038000/0x3000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.679470531s ago: executing program 6 (id=5399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x1b, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x1, 0x4, 0x48, 0x6}, {0x78, 0x0, 0x18, 0x5}, {0x2, 0x4, 0x9, 0xfffffff1}, {0x9, 0x3, 0x2, 0x418c}, {0x466, 0x8, 0xff, 0x40}, {0x2, 0x9, 0x4, 0x2}, {0x6, 0x73, 0x4, 0xb}]}) fsmount(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x345, 0xec000000}]}) lseek(r3, 0x1, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xe}}}, &(0x7f0000000480)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r14) 2.320265679s ago: executing program 3 (id=5400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x255fdbfb, {0x1c, 0x20, 0x80, 0x8, 0xff, 0x1, 0xff, 0xa, 0xe00}, [@RTA_DST={0x8, 0x1, {0x100, 0x0, 0x1}}]}, 0xffffffffffffff41}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) 1.820329749s ago: executing program 4 (id=5401): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xd, 0x3, 0x1, {0x3, 0x1, 0x1400, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$inet6(0xa, 0x400000000001, 0x100) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="be9fb0c555fe878cacad8cc914fdf1464ce5318e", @ANYRESOCT=r4, @ANYBLOB="1a3214b06f5c6b7d7cec5e3c474b47e92589179d7425c61510507e0a7f7287ec98e2e15c9144edcd5a761806079e130c932160ad1ea1be9cce77151ce064f3582ad3936964605382e51a50cb445adc5aecea299e0ff9ac06abffb672a8c342f40aa63f18fa2e18cc109b09e12437bf767a74e0153cb97d487d1f1ae2d1bdeffdd24e14ddc58734e449e40331f3416e1bbfdae186cb790d80bbfbd2eee48432c6186e699a5e805a166a9fb1a3d4da13feac9c9eabaafae1c8161c2f133af398d4858aac4e7a065ad02c76f4339efd", @ANYRES8, @ANYBLOB="aea5585303b5b2ae79be5ed0ce426b4b646b893dea422606814966192ff7ecb2252d836e3f70db0a2c9a39a592c61836a764cafc5e33af442b63363d714938ea773c26069865d510557d25899cac935551c3f0fb0f0d95c25eda154025f0da57d4a2eee0bd0bef9879509a333a0e958063d105befe1a108f5d55cdd353db1107085f0c5dd65721ea26245ee3f730e27cee0dc11f421318c2dc251abc5e1c5f816c9f242c8060669812386fae7b217b81d8718cb55009c7616730665b6ddb20435c85ca2002330e59f163e09e36c052b2386023073a6aedf8f3f2d5168e3251f7b1273816af308151738604d6d69c79", @ANYRES8=r7, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES16=r2], 0x50) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) unshare(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x40, 0x24, 0x713, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa5ba}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r9}, &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c219cb7ec4acd2a1acbad66acd05f32781f5695f082cb1cec7f696e60bbdec64505448ced732be215115bfeed1ac6d8157379dae66ac48e99613f2c095f78412c01d4d96a44954e5f318ed295808dce751877b1a5676534fda29bd5e784d95ad0faa324622f26b6c2efab3ab2ef8ed3d5c1f0389115db400111c9857f076"], 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x1, 0x80, 0x8, 0xe, 0x8, 0x7}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) 1.57615306s ago: executing program 3 (id=5402): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001400b59500000000000000000a184400", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080041e7"], 0x34}}, 0x0) 1.402652066s ago: executing program 3 (id=5403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000002b40)) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000200)='./cgroup\x00', 0x4000002) lsetxattr$security_capability(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @mcast2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0xff, @empty, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setsig(r2, 0xa, 0x19) write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x40, 0x3, 0x1}}, 0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000080)) 1.006798744s ago: executing program 3 (id=5404): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000105002400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x2, 0x805, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="120110ca6796ee6906c84356594ab7888601bdcf5d401107000982b80102030109021200"], 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000080)={&(0x7f0000000000)=0x3ff, 0x3, &(0x7f0000000180), &(0x7f00000003c0)}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0}, 0x0) 0s ago: executing program 6 (id=5405): syz_usb_connect(0x1, 0x24, &(0x7f0000003c80)={{0x12, 0x1, 0x0, 0x94, 0xb6, 0xd9, 0x8, 0x17cc, 0x4711, 0x374c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x20, 0x4, "", [{{0x9, 0x4, 0x92, 0x7, 0x0, 0x72, 0x7a, 0x3, 0xef}}]}}]}}, &(0x7f0000004e40)={0x9, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) kernel console output (not intermixed with test programs): dv_slave_1 (retrying later): interface not active [ 1037.112429][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4955'. [ 1037.125161][ T13] dummy0: left promiscuous mode [ 1037.222912][T14922] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1037.258004][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1037.288685][T14922] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1037.343136][ T13] veth1_macvtap: left promiscuous mode [ 1037.360833][ T13] veth0_macvtap: left promiscuous mode [ 1037.381489][ T13] veth1_vlan: left promiscuous mode [ 1037.391079][ T13] veth0_vlan: left promiscuous mode [ 1038.297976][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1038.306943][T14922] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1038.479120][T14922] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 1038.501212][T14922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.525304][T14922] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 1038.538056][T21352] Bluetooth: hci1: command tx timeout [ 1038.547078][T14922] usb 1-1: Product: syz [ 1038.557087][T14922] usb 1-1: SerialNumber: syz [ 1038.578621][T14922] usb 1-1: config 0 descriptor?? [ 1038.589328][T14922] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1038.623505][T14922] usb 1-1: Detected SIO [ 1038.645580][T14922] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1038.843454][T22225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.875882][T22225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.908013][ T188] usb 1-1: USB disconnect, device number 111 [ 1038.920464][ T188] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1038.936358][T22133] hsr_slave_0: entered promiscuous mode [ 1038.958998][T22133] hsr_slave_1: entered promiscuous mode [ 1038.969484][ T188] ftdi_sio 1-1:0.0: device disconnected [ 1038.985823][T22133] debugfs: 'hsr0' already exists in 'hsr' [ 1039.008413][T22133] Cannot create hsr debugfs directory [ 1039.022630][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1039.248296][T22235] loop9: detected capacity change from 0 to 7 [ 1039.279244][T22235] Dev loop9: unable to read RDB block 7 [ 1039.308461][T22235] loop9: AHDI p1 p2 p3 [ 1039.336282][T22235] loop9: partition table partially beyond EOD, truncated [ 1039.358035][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1039.374184][T22235] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1039.440241][T22235] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1039.761794][T22237] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1039.914133][T22247] fuse: Bad value for 'fd' [ 1040.299158][T14925] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1040.377817][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1040.470936][T14925] usb 5-1: Using ep0 maxpacket: 16 [ 1040.488279][T14925] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1040.523276][T14925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1040.560161][T14925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 1040.627535][T14925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.628511][T21352] Bluetooth: hci1: command tx timeout [ 1040.653146][T14925] usb 5-1: Product: syz [ 1040.676452][T14925] usb 5-1: Manufacturer: syz [ 1040.694815][T14925] usb 5-1: SerialNumber: syz [ 1041.179055][T14925] usb 5-1: USB disconnect, device number 71 [ 1041.319978][T13609] udevd[13609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.427835][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1041.763307][T22286] Option ' [ 1041.763307][T22286] ' to dns_resolver key: bad/missing value [ 1041.835595][ T30] audit: type=1326 audit(1787245708.160:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1041.876418][ T30] audit: type=1326 audit(1787245708.190:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1041.911217][ T30] audit: type=1326 audit(1787245708.190:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1041.936726][ T30] audit: type=1326 audit(1787245708.190:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1041.962509][ T30] audit: type=1326 audit(1787245708.190:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1041.993835][ T30] audit: type=1326 audit(1787245708.190:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1042.051704][ T30] audit: type=1326 audit(1787245708.190:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1042.099459][ T30] audit: type=1326 audit(1787245708.190:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1042.135336][ T29] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1042.163172][ T30] audit: type=1326 audit(1787245708.350:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22285 comm="syz.3.4970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1042.192693][T22293] loop9: detected capacity change from 0 to 7 [ 1042.201117][T22293] Dev loop9: unable to read RDB block 7 [ 1042.206772][T22293] loop9: AHDI p1 p2 p3 [ 1042.211727][T22293] loop9: partition table partially beyond EOD, truncated [ 1042.233400][T22293] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1042.264076][T22293] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1042.299536][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1042.319348][ T29] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1042.365566][ T29] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 1042.393412][T22133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1042.403583][ T29] usb 5-1: config 252 has no interface number 0 [ 1042.445216][ T29] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1042.458642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1042.502541][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.530664][ T29] usb 5-1: Product: syz [ 1042.542771][ T29] usb 5-1: Manufacturer: syz [ 1042.555983][ T29] usb 5-1: SerialNumber: syz [ 1042.608126][ T29] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1042.618547][T22133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.751333][T22303] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 1042.795340][ T29] usb 5-1: USB disconnect, device number 72 [ 1042.811769][ T13] usb 5-1: Failed to submit usb control message: -71 [ 1042.828952][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 1042.856656][ T13] usb 5-1: unable to get target info from device [ 1042.866107][ T13] usb 5-1: could not get target info (-71) [ 1042.874936][ T13] usb 5-1: could not probe fw (-71) [ 1042.883263][T22133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1042.902676][T22133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.944699][T22133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1043.030409][T22133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.042940][T22133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1043.060421][T22133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.498017][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1043.628608][ T30] audit: type=1800 audit(1787245709.960:2498): pid=22338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4980" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1043.677521][T22133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.720821][T22133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.759275][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.766684][T17819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.850940][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.858361][T17819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.026608][T22319] IPVS: You probably need to specify IP address on multicast interface. [ 1044.057202][T22319] IPVS: Error connecting to the multicast addr [ 1044.085217][T22319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4976'. [ 1044.110588][T22133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.293488][ T29] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1044.465708][T22133] veth0_vlan: entered promiscuous mode [ 1044.486294][ T29] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1044.513107][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.522866][ T29] usb 1-1: Product: syz [ 1044.527234][ T29] usb 1-1: Manufacturer: syz [ 1044.534337][ T29] usb 1-1: SerialNumber: syz [ 1044.540742][T22133] veth1_vlan: entered promiscuous mode [ 1044.547978][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1044.645932][T22133] veth0_macvtap: entered promiscuous mode [ 1044.677010][T22133] veth1_macvtap: entered promiscuous mode [ 1044.737236][T22133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.760712][T22133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.788564][T17819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.849568][ T5701] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1044.892791][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.939229][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.012297][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.021568][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 1045.150863][T22366] misc userio: The device must be registered before sending interrupts [ 1045.182800][T13938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.211692][T13938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.326853][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.363947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.577891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1045.643457][T22366] fuse: Bad value for 'fd' [ 1045.907862][T14248] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1046.053514][ T29] rtl8150 1-1:1.0: couldn't reset the device [ 1046.067863][T14248] usb 3-1: device descriptor read/64, error -71 [ 1046.073662][ T29] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1046.329512][T14248] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1046.488855][T14248] usb 3-1: device descriptor read/64, error -71 [ 1046.617935][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1046.631570][T14248] usb usb3-port1: attempt power cycle [ 1046.998272][T14248] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1047.038980][T14248] usb 3-1: device descriptor read/8, error -71 [ 1047.066113][T22401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4988'. [ 1047.145029][ T29] usb 1-1: USB disconnect, device number 112 [ 1047.310287][T14248] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1047.350664][T14248] usb 3-1: device descriptor read/8, error -71 [ 1047.478161][T14248] usb usb3-port1: unable to enumerate USB device [ 1047.624683][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1047.660326][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1047.677961][ T5701] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1047.718453][ T5701] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1047.746615][ T5701] usb 4-1: can't read configurations, error -71 [ 1048.084523][T22422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1048.280900][T22426] vivid-000: disconnect [ 1048.426910][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4991'. [ 1048.508060][T22417] vivid-000: reconnect [ 1048.698012][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1049.433288][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1049.459260][T22444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1049.469146][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1049.488952][T22445] netlink: 'syz.3.5001': attribute type 13 has an invalid length. [ 1049.541016][T22445] netlink: 'syz.3.5001': attribute type 12 has an invalid length. [ 1049.737901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1049.744500][ T5701] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1049.780564][T22459] FAULT_INJECTION: forcing a failure. [ 1049.780564][T22459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.794351][T22459] CPU: 0 UID: 0 PID: 22459 Comm: syz.2.5006 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.794378][T22459] Tainted: [L]=SOFTLOCKUP [ 1049.794385][T22459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1049.794395][T22459] Call Trace: [ 1049.794402][T22459] [ 1049.794409][T22459] dump_stack_lvl+0xe8/0x150 [ 1049.794437][T22459] should_fail_ex+0x410/0x560 [ 1049.794459][T22459] _copy_to_user+0x31/0xb0 [ 1049.794481][T22459] simple_read_from_buffer+0xe1/0x170 [ 1049.794512][T22459] proc_fail_nth_read+0x1bb/0x230 [ 1049.794536][T22459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1049.794556][T22459] ? rw_verify_area+0x24a/0x4c0 [ 1049.794574][T22459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1049.794591][T22459] vfs_read+0x213/0xa80 [ 1049.794611][T22459] ? __pfx___mutex_lock+0x10/0x10 [ 1049.794628][T22459] ? __pfx_vfs_read+0x10/0x10 [ 1049.794645][T22459] ? __fget_files+0x2a/0x420 [ 1049.794663][T22459] ? __fget_files+0x3a2/0x420 [ 1049.794677][T22459] ? __fget_files+0x2a/0x420 [ 1049.794697][T22459] ksys_read+0x150/0x270 [ 1049.794715][T22459] ? __pfx_ksys_read+0x10/0x10 [ 1049.794729][T22459] ? fput+0xa0/0xd0 [ 1049.794758][T22459] do_syscall_64+0x166/0x520 [ 1049.794773][T22459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.794789][T22459] ? clear_bhb_loop+0x70/0xc0 [ 1049.794808][T22459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.794824][T22459] RIP: 0033:0x7f704d95e90e [ 1049.794838][T22459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1049.794852][T22459] RSP: 002b:00007f704e7a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1049.794869][T22459] RAX: ffffffffffffffda RBX: 00007f704e7a36c0 RCX: 00007f704d95e90e [ 1049.794882][T22459] RDX: 000000000000000f RSI: 00007f704e7a30a0 RDI: 0000000000000005 [ 1049.794892][T22459] RBP: 00007f704e7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.794902][T22459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.794912][T22459] R13: 00007f704dc26038 R14: 00007f704dc25fa0 R15: 00007f704dd4fa48 [ 1049.794936][T22459] [ 1049.902341][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 1050.039285][ T5701] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1050.050635][ T5701] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1050.066209][ T5701] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.070057][ T188] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1050.080574][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1050.097808][ T5701] usb 1-1: SerialNumber: syz [ 1050.110667][ T5701] usb 1-1: 0:2 : does not exist [ 1050.237991][ T188] usb 4-1: Using ep0 maxpacket: 16 [ 1050.310048][T22449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.319398][T22449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.370849][ T5701] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1050.396833][ T5701] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1050.418478][T14922] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1050.435917][ T5701] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1050.454778][ T5701] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1050.476377][ T5701] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 1050.492768][ T5701] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 1050.539730][ T5701] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1050.589014][T14922] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1050.604319][ T5701] usb 1-1: USB disconnect, device number 113 [ 1050.616406][T14922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.639893][T14922] usb 3-1: Product: syz [ 1050.652569][T12974] udevd[12974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.669485][T14922] usb 3-1: Manufacturer: syz [ 1050.675484][T14922] usb 3-1: SerialNumber: syz [ 1050.787876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1050.815920][ T188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1050.832887][ T188] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1050.844074][ T188] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1050.852174][ T188] usb 4-1: can't read configurations, error -71 [ 1051.072283][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1051.106936][T14922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1051.157132][T14922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1051.230077][T14922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1051.253126][T14922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1051.263844][T14922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1051.305050][T14922] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1051.348714][T14922] usb 3-1: USB disconnect, device number 124 [ 1051.439163][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.453312][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.478795][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.494560][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.505328][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.514353][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.522306][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.530893][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.538689][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.546226][T14925] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 1051.571391][T14925] hid-generic 0000:0000:0004.003A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1051.589885][ T5701] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1051.614360][ T5349] logitech-hidpp-device 0005:046D:B012.0039: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1051.679580][T22491] fido_id[22491]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1051.750080][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 1051.769452][ T5701] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1051.813392][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.827811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1051.840586][ T5701] usb 5-1: Product: syz [ 1051.850666][ T5701] usb 5-1: Manufacturer: syz [ 1051.861280][ T5701] usb 5-1: SerialNumber: syz [ 1051.878653][ T5701] usb 5-1: config 0 descriptor?? [ 1051.901663][ T5701] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1051.952314][T22494] fido_id[22494]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1052.165520][ T30] audit: type=1326 audit(1787245718.490:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.201628][ T30] audit: type=1326 audit(1787245718.490:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.231656][T22506] lo: Caught tx_queue_len zero misconfig [ 1052.271720][ T30] audit: type=1326 audit(1787245718.490:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.328030][ T30] audit: type=1326 audit(1787245718.490:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.371508][ T30] audit: type=1326 audit(1787245718.490:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.410837][ T29] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1052.423192][ T30] audit: type=1326 audit(1787245718.490:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.450214][ T30] audit: type=1326 audit(1787245718.520:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.491938][ T30] audit: type=1326 audit(1787245718.520:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.521225][ T30] audit: type=1326 audit(1787245718.490:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.556016][ T30] audit: type=1326 audit(1787245718.520:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22501 comm="syz.0.5022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f757779e0d9 code=0x7ffc0000 [ 1052.583875][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1052.672739][T22509] netlink: 'syz.2.5024': attribute type 3 has an invalid length. [ 1052.689490][T22509] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1052.783036][T22514] program syz.4.5016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.867940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1052.918109][ T5701] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 1052.926322][ T5701] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 1052.989628][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5025'. [ 1053.171114][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1053.179675][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1053.201163][ T29] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1053.218985][T22519] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1053.228423][ T29] usb 4-1: can't read configurations, error -71 [ 1053.317308][T22520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1053.552275][T22529] loop9: detected capacity change from 0 to 7 [ 1053.564164][T22529] Dev loop9: unable to read RDB block 7 [ 1053.571279][T22529] loop9: AHDI p1 p2 p3 [ 1053.575788][T22529] loop9: partition table partially beyond EOD, truncated [ 1053.593102][T22529] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1053.613444][T22529] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1053.897866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1054.154631][T13938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.166866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.220385][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1054.427881][ T29] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1054.444627][ T188] usb 5-1: USB disconnect, device number 73 [ 1054.598633][ T29] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1054.651773][ T29] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1054.689462][T22550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1054.700383][ T29] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1054.739790][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.779973][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.786497][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.818323][T22554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.827649][ T29] pl2303 4-1:1.0: required endpoints missing [ 1054.932836][ T29] pl2303 4-1:1.1: pl2303 converter detected [ 1054.947932][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1054.971131][ T29] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 1055.019404][T14925] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1055.051771][ T29] usb 4-1: USB disconnect, device number 95 [ 1055.073341][ T29] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1055.102531][ T29] pl2303 4-1:1.1: device disconnected [ 1055.157840][T14925] usb 1-1: device descriptor read/64, error -71 [ 1055.409101][T14925] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1055.420813][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.588707][T14925] usb 1-1: device descriptor read/64, error -71 [ 1055.698494][T14925] usb usb1-port1: attempt power cycle [ 1055.987802][ C0] net_ratelimit: 1 callbacks suppressed [ 1055.987826][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1056.061597][T14925] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1056.070326][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.081117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.128797][T14925] usb 1-1: device descriptor read/8, error -71 [ 1056.279719][T22580] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1056.387952][T14925] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1056.439578][T14925] usb 1-1: device descriptor read/8, error -71 [ 1056.515138][T22583] netlink: 'syz.3.5047': attribute type 9 has an invalid length. [ 1056.549078][T22583] netlink: 'syz.3.5047': attribute type 7 has an invalid length. [ 1056.577126][T14925] usb usb1-port1: unable to enumerate USB device [ 1056.591670][T22583] netlink: 'syz.3.5047': attribute type 8 has an invalid length. [ 1057.018162][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1057.050354][T22595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1057.905230][ T188] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1058.057934][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.100221][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1058.122591][ T188] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1058.156813][T22624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.170872][ T188] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.192802][T22624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.213399][ T188] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1058.246588][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.303671][T22613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1058.378399][T16058] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1058.410783][ T188] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1058.680601][ T13] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 1059.097913][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1059.204623][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 1059.260101][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.268814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.541306][ T188] IPVS: starting estimator thread 0... [ 1059.556217][T22654] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1059.670659][T22658] IPVS: using max 26 ests per chain, 62400 per kthread [ 1059.764010][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1059.790499][T22613] ip6tnl0: Caught tx_queue_len zero misconfig [ 1059.803026][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 1059.809556][T22613] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1060.086600][T22672] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5077'. [ 1060.138014][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1060.183135][T22679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.951201][ T29] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1061.155558][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1061.174291][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 1061.187973][ C0] net_ratelimit: 2 callbacks suppressed [ 1061.188001][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1061.214899][ T29] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 1061.324053][ T29] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 1061.346584][ T29] usb 3-1: config 160 has no interface number 0 [ 1061.372899][ T29] usb 3-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1061.420754][ T29] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 1061.472336][ T29] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1061.535164][ T29] usb 3-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1061.600904][ T29] usb 3-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1061.664825][ T29] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1061.700808][T16058] usb 1-1: USB disconnect, device number 118 [ 1061.736307][ T29] usb 3-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 1061.820850][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.829501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.839146][ T29] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 1061.885863][ T29] usb 3-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 1061.961643][ T29] usb 3-1: config 160 interface 187 has no altsetting 0 [ 1062.008101][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.024487][ T29] usb 3-1: Product: syz [ 1062.048050][ T29] usb 3-1: Manufacturer: syz [ 1062.068472][ T29] usb 3-1: SerialNumber: syz [ 1062.118432][T22692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1062.149256][T22692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1062.217952][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1062.231941][T22692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1062.498886][ T29] pl2303 3-1:160.187: pl2303 converter detected [ 1062.517968][ T29] pl2303 3-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 1062.519415][ T188] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1062.587507][ T29] usb 3-1: USB disconnect, device number 125 [ 1062.708173][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 1062.729312][ T188] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1062.749880][ T188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.773781][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.785359][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.800423][ T188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1062.814935][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.829580][ T188] usb 1-1: config 0 descriptor?? [ 1062.901361][T22708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1063.257872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1063.274137][ T5349] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1063.293712][T22717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.312506][T22717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.378187][T14922] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1063.420916][ T188] usbhid 1-1:0.0: can't add hid device: -71 [ 1063.427080][ T188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1063.436985][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 1063.447529][ T188] usb 1-1: USB disconnect, device number 119 [ 1063.538098][T14922] usb 3-1: Using ep0 maxpacket: 16 [ 1063.551551][T14922] usb 3-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice= 0.40 [ 1063.565701][T14922] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1063.577220][T14922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.588875][T14922] usb 3-1: Product: ג㼉ዊ䀻㢡ぜ펻̨ⷦ睵쐶⑝䖌涰ง⊵믅蹁﮽苤燨ᶬࠅ覒嘢ઈ맣忀螕돥巪룮퓈㫯癄붗㄁ᇖꛪഈꩭ阀ᨬⷾ濥쿥ፔ站᜼楗ᆂൊ귔ฆ令驝퇀쾴외뛙㰿춮욽哰酷谳榡禄೉ᕲ賻᪙᥄ऄ鈰䵕앞韾눩釞䧦뀸셌⪡ᨾ颩왥头꽂ൻ迡䲴祿舗䏀 [ 1063.620871][T14922] usb 3-1: Manufacturer: ࡡ [ 1063.625588][T14922] usb 3-1: SerialNumber: 듕譵⛮峈黛ᐼ壮䈮뜆⩯禇祣ᴨꈼ譣श⸝説㉆矙䢨㳧뀠ଢ଼ﮪ첖ꨈ싕俴߁洚 [ 1063.851828][T22714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.863438][T22714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.876635][T22714] x_tables: duplicate underflow at hook 1 [ 1063.903407][T14922] usbhid 3-1:1.0: can't add hid device: -71 [ 1063.909842][T14922] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1063.924151][T14922] usb 3-1: USB disconnect, device number 126 [ 1064.075187][ T5349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1064.084689][ T5349] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1064.101648][ T5349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1064.113169][ T5349] usb 5-1: can't read configurations, error -71 [ 1064.297922][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1064.358509][T22734] binder: 22733:22734 ioctl 4008ae93 200000000080 returned -22 [ 1064.379652][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.388153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.541969][T22739] loop9: detected capacity change from 0 to 7 [ 1064.550364][T22739] Dev loop9: unable to read RDB block 7 [ 1064.556233][T22739] loop9: AHDI p1 p2 p3 [ 1064.561798][T22739] loop9: partition table partially beyond EOD, truncated [ 1064.569656][T22739] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1064.577378][T22739] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1064.704802][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1065.337924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1065.369600][ T5349] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1065.410608][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1065.549788][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 1065.558873][ T5349] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1065.583124][ T5349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.609665][ T5349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.638231][ T5349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1065.664216][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.709308][ T5349] usb 5-1: config 0 descriptor?? [ 1065.947570][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5110'. [ 1066.178486][T14922] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1066.261805][T22752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.318929][T22752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.327469][ T8052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.336174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.352016][T14922] usb 1-1: Using ep0 maxpacket: 8 [ 1066.362776][T14922] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice= 9.00 [ 1066.377957][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1066.396490][ T5349] hid_parser_main: 91 callbacks suppressed [ 1066.396519][ T5349] microsoft 0003:045E:07DA.003B: unknown main item tag 0x4 [ 1066.416219][T14922] usb 1-1: too many configurations: 172, using maximum allowed: 8 [ 1066.433810][T14922] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1066.451283][T14922] usb 1-1: can't read configurations, error -61 [ 1066.485139][ T5349] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003B/input/input81 [ 1066.522048][ T5349] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1066.612094][T14922] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1066.798387][T14922] usb 1-1: Using ep0 maxpacket: 8 [ 1066.816943][T14922] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice= 9.00 [ 1066.846135][T22784] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.5114'. [ 1066.860947][T14922] usb 1-1: too many configurations: 172, using maximum allowed: 8 [ 1066.896675][T14922] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1066.920133][T14922] usb 1-1: can't read configurations, error -61 [ 1066.938522][T14922] usb usb1-port1: attempt power cycle [ 1066.978559][ T29] usb 5-1: USB disconnect, device number 77 [ 1067.106646][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5112'. [ 1067.290225][T14922] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1067.363584][T14922] usb 1-1: Using ep0 maxpacket: 8 [ 1067.372794][T14922] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice= 9.00 [ 1067.387906][T14922] usb 1-1: too many configurations: 172, using maximum allowed: 8 [ 1067.417945][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1067.434072][T14922] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1067.446469][T14922] usb 1-1: can't read configurations, error -61 [ 1067.582719][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.588388][T14922] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1067.599965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.623138][ T29] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1067.630772][T14922] usb 1-1: Using ep0 maxpacket: 8 [ 1067.682762][T14922] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice= 9.00 [ 1067.707878][T14922] usb 1-1: too many configurations: 172, using maximum allowed: 8 [ 1067.730823][T14922] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1067.760005][T14922] usb 1-1: can't read configurations, error -61 [ 1067.781503][T14922] usb usb1-port1: unable to enumerate USB device [ 1067.790161][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5122'. [ 1067.801843][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1067.811391][ T29] usb 3-1: too many configurations: 108, using maximum allowed: 8 [ 1067.828670][ T29] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 1067.845678][ T29] usb 3-1: config index 1 descriptor too short (expected 65183, got 72) [ 1067.861696][ T29] usb 3-1: config index 2 descriptor too short (expected 65183, got 72) [ 1067.882935][ T29] usb 3-1: config index 3 descriptor too short (expected 65183, got 72) [ 1067.910978][ T29] usb 3-1: config index 4 descriptor too short (expected 65183, got 72) [ 1067.934681][ T29] usb 3-1: config index 5 descriptor too short (expected 65183, got 72) [ 1067.961947][ T29] usb 3-1: config index 6 descriptor too short (expected 65183, got 72) [ 1067.992498][ T29] usb 3-1: config index 7 descriptor too short (expected 65183, got 72) [ 1068.011253][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.022329][ T29] usb 3-1: Product: syz [ 1068.026649][ T29] usb 3-1: Manufacturer: syz [ 1068.031597][ T29] usb 3-1: SerialNumber: syz [ 1068.084451][T16058] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1068.367947][ T29] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1068.457929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1068.519294][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1068.530393][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.538803][ T29] usb 5-1: config 0 has no interface number 0 [ 1068.545218][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1068.560073][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1068.571482][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.584833][ T29] usb 5-1: config 0 descriptor?? [ 1068.590992][T22805] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1068.606864][ T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1068.698363][ T188] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1068.819426][T22805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.829315][T22805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.853500][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.864394][ T188] usb 4-1: Using ep0 maxpacket: 8 [ 1068.879354][ T188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1068.888858][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.900795][ T188] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1068.914698][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.926769][ T188] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1068.934252][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.951014][ T188] usb 4-1: string descriptor 0 read error: -22 [ 1068.957840][ T188] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1068.969724][T14922] usb 5-1: USB disconnect, device number 78 [ 1069.019730][ T188] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1069.053645][ T188] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1069.078911][ T188] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1069.093994][ T188] usb 4-1: media controller created [ 1069.132201][ T188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.178259][T16058] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1069.198359][T16058] ath9k_htc: Failed to initialize the device [ 1069.217191][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.231742][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.250720][ T188] zl10353_read_register: readreg error (reg=127, ret==0) [ 1069.324489][T16058] usb 3-1: ath9k_htc: USB layer deinitialized [ 1069.356898][ T188] usb 4-1: USB disconnect, device number 96 [ 1069.414503][T22815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5128'. [ 1069.425414][T22815] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5128'. [ 1069.498201][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1069.639584][T22820] atomic_op ffff88807b7aa198 conn xmit_atomic 0000000000000000 [ 1069.887947][ T188] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1069.949480][ T29] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1070.058476][ T188] usb 1-1: Using ep0 maxpacket: 32 [ 1070.071065][ T188] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1070.085201][ T188] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.101387][ T188] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1070.117283][ T188] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.118471][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1070.139340][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.147983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.163650][ T188] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1070.171099][ T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1070.202202][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.220088][ T29] usb 5-1: config 0 has no interfaces? [ 1070.223211][ T188] usb 1-1: Product: syz [ 1070.237817][ T188] usb 1-1: Manufacturer: syz [ 1070.246353][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.255203][ T188] usb 1-1: SerialNumber: syz [ 1070.302257][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1070.320397][ T29] usb 5-1: config 0 descriptor?? [ 1070.388736][ T188] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input82 [ 1070.519904][T22370] usb 3-1: USB disconnect, device number 127 [ 1070.550285][ T188] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1070.595251][ T188] (id 0x00) [ 1070.690194][T22820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.741912][T22834] vivid-000: disconnect [ 1070.758232][ T188] rc_core: IR keymap rc-imon-pad not found [ 1070.809634][ T188] Registered IR keymap rc-empty [ 1070.853385][ T188] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1070.870714][ T188] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1070.914726][ T188] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1070.955145][ T188] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input83 [ 1071.004591][ T188] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:124> initialized [ 1071.304174][T14248] usb 5-1: USB disconnect, device number 79 [ 1071.498845][ T57] net_ratelimit: 1 callbacks suppressed [ 1071.498872][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.513385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.579703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1071.904290][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 1071.984550][T22837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096140225 (65538243600 ns) > initial count (57006281168 ns). Using initial count to start timer. [ 1072.543950][T22860] pimreg: tun_chr_ioctl cmd 1074812117 [ 1072.560657][T22860] pimreg: tun_chr_ioctl cmd 1074025673 [ 1072.605788][T22860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.617807][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1072.724352][T22840] imon:send_packet: task interrupted [ 1072.732520][T16058] usb 1-1: USB disconnect, device number 124 [ 1072.771490][T22840] imon:send_packet: packet tx failed (-512) [ 1072.811147][T22840] imon:vfd_write: send packet #1 failed [ 1073.163632][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1073.351072][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.359747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.503862][T22834] vivid-000: reconnect [ 1073.657798][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1073.930629][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1074.271672][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1074.438787][ T29] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1074.476021][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.493055][T22904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5157'. [ 1074.513002][ T29] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1074.534859][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.547507][ T29] usb 3-1: Product: syz [ 1074.557218][ T29] usb 3-1: Manufacturer: syz [ 1074.572754][ T29] usb 3-1: SerialNumber: syz [ 1074.697815][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1074.850304][T22896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5154'. [ 1075.112880][T22924] tipc: Started in network mode [ 1075.145971][T22924] tipc: Node identity be9d580143b7, cluster identity 4711 [ 1075.175552][T22924] tipc: Enabled bearer , priority 0 [ 1075.195183][T22931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.206871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.301050][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1075.403591][T22924] tipc: Disabling bearer [ 1075.411636][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5166'. [ 1075.449757][ T29] usb 3-1: USB disconnect, device number 2 [ 1075.630149][T22932] hsr_slave_0: left promiscuous mode [ 1075.671649][T22932] hsr_slave_1: left promiscuous mode [ 1075.966085][T22947] FAULT_INJECTION: forcing a failure. [ 1075.966085][T22947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.966177][T22947] CPU: 1 UID: 0 PID: 22947 Comm: syz.3.5172 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.966210][T22947] Tainted: [L]=SOFTLOCKUP [ 1075.966219][T22947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.966233][T22947] Call Trace: [ 1075.966243][T22947] [ 1075.966253][T22947] dump_stack_lvl+0xe8/0x150 [ 1075.966296][T22947] should_fail_ex+0x410/0x560 [ 1075.966330][T22947] _copy_from_user+0x2d/0xb0 [ 1075.966360][T22947] move_addr_to_kernel+0x7e/0x160 [ 1075.966393][T22947] io_bind_prep+0x185/0x380 [ 1075.966491][T22947] io_submit_sqes+0xbde/0x2310 [ 1075.966549][T22947] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1075.966593][T22947] ? __fget_files+0x3a2/0x420 [ 1075.966621][T22947] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1075.966646][T22947] ? fput+0xa0/0xd0 [ 1075.966679][T22947] ? ksys_write+0x242/0x270 [ 1075.966706][T22947] ? __pfx_ksys_write+0x10/0x10 [ 1075.966735][T22947] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1075.966764][T22947] do_syscall_64+0x166/0x520 [ 1075.966788][T22947] ? trace_irq_disable+0x3b/0x140 [ 1075.966819][T22947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.966843][T22947] ? clear_bhb_loop+0x70/0xc0 [ 1075.966875][T22947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.966898][T22947] RIP: 0033:0x7fc08799e0d9 [ 1075.966919][T22947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.966939][T22947] RSP: 002b:00007fc085bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1075.966964][T22947] RAX: ffffffffffffffda RBX: 00007fc087c25fa0 RCX: 00007fc08799e0d9 [ 1075.966981][T22947] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1075.966995][T22947] RBP: 00007fc085bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.967010][T22947] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1075.967024][T22947] R13: 00007fc087c26038 R14: 00007fc087c25fa0 R15: 00007fc087d4fa48 [ 1075.967050][T22948] raw_sendmsg: syz.0.5171 forgot to set AF_INET. Fix it! [ 1075.967056][T22947] [ 1076.518559][ C0] net_ratelimit: 16 callbacks suppressed [ 1076.518587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.519096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.679477][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1076.737900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.751391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.764308][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1076.777832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1076.993942][T22956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.088380][T22981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.103159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.117955][T14248] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1077.144706][T22983] FAULT_INJECTION: forcing a failure. [ 1077.144706][T22983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.159435][T22983] CPU: 0 UID: 0 PID: 22983 Comm: syz.2.5185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.159473][T22983] Tainted: [L]=SOFTLOCKUP [ 1077.159482][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.159497][T22983] Call Trace: [ 1077.159507][T22983] [ 1077.159516][T22983] dump_stack_lvl+0xe8/0x150 [ 1077.159557][T22983] should_fail_ex+0x410/0x560 [ 1077.159595][T22983] _copy_to_user+0x31/0xb0 [ 1077.159626][T22983] simple_read_from_buffer+0xe1/0x170 [ 1077.159677][T22983] proc_fail_nth_read+0x1bb/0x230 [ 1077.159709][T22983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1077.159739][T22983] ? rw_verify_area+0x24a/0x4c0 [ 1077.159766][T22983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1077.159792][T22983] vfs_read+0x213/0xa80 [ 1077.159821][T22983] ? __pfx___mutex_lock+0x10/0x10 [ 1077.159847][T22983] ? __pfx_vfs_read+0x10/0x10 [ 1077.159873][T22983] ? __fget_files+0x2a/0x420 [ 1077.159899][T22983] ? __fget_files+0x3a2/0x420 [ 1077.159920][T22983] ? __fget_files+0x2a/0x420 [ 1077.159950][T22983] ksys_read+0x150/0x270 [ 1077.159977][T22983] ? __pfx_ksys_read+0x10/0x10 [ 1077.160013][T22983] do_syscall_64+0x166/0x520 [ 1077.160035][T22983] ? trace_irq_disable+0x3b/0x140 [ 1077.160065][T22983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.160089][T22983] ? clear_bhb_loop+0x70/0xc0 [ 1077.160116][T22983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.160139][T22983] RIP: 0033:0x7f704d95e90e [ 1077.160161][T22983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1077.160180][T22983] RSP: 002b:00007f704e7a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1077.160203][T22983] RAX: ffffffffffffffda RBX: 00007f704e7a36c0 RCX: 00007f704d95e90e [ 1077.160220][T22983] RDX: 000000000000000f RSI: 00007f704e7a30a0 RDI: 0000000000000006 [ 1077.160234][T22983] RBP: 00007f704e7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.160249][T22983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.160263][T22983] R13: 00007f704dc26038 R14: 00007f704dc25fa0 R15: 00007f704dd4fa48 [ 1077.160298][T22983] [ 1077.382168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.394994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.407610][ T188] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1077.545857][T14248] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1077.557527][T14248] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 1077.566515][T14248] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1077.574867][T14248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.585428][T14248] usb 5-1: config 0 has no interface number 0 [ 1077.592059][T14248] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1077.603308][T14248] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 1077.615407][T14248] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 1077.626936][T14248] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1077.641732][T14248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.654102][T14248] usb 5-1: config 0 descriptor?? [ 1077.659761][ T188] usb 4-1: Using ep0 maxpacket: 16 [ 1077.666987][ T188] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1077.680584][ T188] usb 4-1: config index 0 descriptor too short (expected 61458, got 18) [ 1077.694641][ T188] usb 4-1: config 1 has an invalid interface number: 0 but max is -1 [ 1077.704935][T14248] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1077.730825][ T188] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 1077.748045][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.756515][ T188] usb 4-1: Product: syz [ 1077.761646][ T188] usb 4-1: Manufacturer: syz [ 1077.767512][ T188] usb 4-1: SerialNumber: syz [ 1077.884766][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 1077.884788][ T30] audit: type=1326 audit(1787245744.210:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22971 comm="syz.4.5181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b5cb9e0d9 code=0x0 [ 1077.993109][T22977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.006814][T22977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.035539][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5189'. [ 1078.235129][ T188] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1078.250512][ T188] usb 4-1: USB disconnect, device number 97 [ 1078.858820][T14248] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1078.868939][ T36] usb 5-1: Failed to submit usb control message: -110 [ 1078.888288][ T36] usb 5-1: unable to send the bmi data to the device: -110 [ 1078.897112][ T36] usb 5-1: unable to get target info from device [ 1078.905426][ T36] usb 5-1: could not get target info (-110) [ 1078.915297][ T36] usb 5-1: could not probe fw (-110) [ 1078.944473][T14248] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1078.959828][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1079.527541][T23024] FAULT_INJECTION: forcing a failure. [ 1079.527541][T23024] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.541593][T23024] CPU: 0 UID: 0 PID: 23024 Comm: syz.2.5198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.541630][T23024] Tainted: [L]=SOFTLOCKUP [ 1079.541639][T23024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.541653][T23024] Call Trace: [ 1079.541663][T23024] [ 1079.541673][T23024] dump_stack_lvl+0xe8/0x150 [ 1079.541711][T23024] should_fail_ex+0x410/0x560 [ 1079.541763][T23024] should_failslab+0xa8/0x100 [ 1079.541789][T23024] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1079.541821][T23024] ? skb_clone+0x212/0x3a0 [ 1079.541842][T23024] ? skb_clone+0x212/0x3a0 [ 1079.541870][T23024] skb_clone+0x212/0x3a0 [ 1079.541895][T23024] __netlink_deliver_tap+0x413/0x860 [ 1079.541929][T23024] ? netlink_deliver_tap+0x2e/0x1b0 [ 1079.541952][T23024] netlink_deliver_tap+0x19c/0x1b0 [ 1079.541974][T23024] netlink_unicast+0x781/0x940 [ 1079.542012][T23024] netlink_sendmsg+0x813/0xb40 [ 1079.542042][T23024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.542068][T23024] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1079.542102][T23024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.542124][T23024] sock_sendmsg_nosec+0x13a/0x180 [ 1079.542158][T23024] ____sys_sendmsg+0x54e/0x850 [ 1079.542191][T23024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.542226][T23024] ? import_iovec+0x73/0xa0 [ 1079.542251][T23024] ___sys_sendmsg+0x2a5/0x360 [ 1079.542277][T23024] ? __lock_acquire+0x683/0x2cf0 [ 1079.542308][T23024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.542363][T23024] ? __fget_files+0x2a/0x420 [ 1079.542380][T23024] ? __fget_files+0x3a2/0x420 [ 1079.542404][T23024] __x64_sys_sendmsg+0x1b1/0x290 [ 1079.542435][T23024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1079.542487][T23024] do_syscall_64+0x166/0x520 [ 1079.542505][T23024] ? trace_irq_disable+0x3b/0x140 [ 1079.542529][T23024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.542547][T23024] ? clear_bhb_loop+0x70/0xc0 [ 1079.542569][T23024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.542587][T23024] RIP: 0033:0x7f704d99e0d9 [ 1079.542604][T23024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.542620][T23024] RSP: 002b:00007f704e7a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.542639][T23024] RAX: ffffffffffffffda RBX: 00007f704dc25fa0 RCX: 00007f704d99e0d9 [ 1079.542652][T23024] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1079.542663][T23024] RBP: 00007f704e7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.542674][T23024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.542685][T23024] R13: 00007f704dc26038 R14: 00007f704dc25fa0 R15: 00007f704dd4fa48 [ 1079.542712][T23024] [ 1079.887452][ T29] usb 5-1: USB disconnect, device number 80 [ 1080.243020][T23033] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 1080.253485][T23033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 1080.698276][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1080.848812][ T29] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1080.861509][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.880600][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.907640][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1080.934808][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.956978][ T29] usb 3-1: config 0 descriptor?? [ 1081.190621][T23055] netlink: 'syz.0.5208': attribute type 6 has an invalid length. [ 1081.220735][T23055] netlink: 'syz.0.5208': attribute type 5 has an invalid length. [ 1081.247791][T23055] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1081.507947][ T5349] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1081.645805][T23059] net_ratelimit: 24 callbacks suppressed [ 1081.645831][T23059] socket: no more sockets [ 1081.672261][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.681188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.717937][ T5349] usb 1-1: Using ep0 maxpacket: 16 [ 1081.734082][ T5349] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1081.752038][ T5349] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1081.766607][ T5349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.779818][ T5349] usb 1-1: config 0 has no interface number 0 [ 1081.791398][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.802888][ T5349] usb 1-1: Product: syz [ 1081.807972][ T5349] usb 1-1: Manufacturer: syz [ 1081.813226][ T5349] usb 1-1: SerialNumber: syz [ 1081.830643][ T5349] usb 1-1: config 0 descriptor?? [ 1081.844103][ T5349] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 1081.977858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1082.089529][T23055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.123325][T23055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.140934][T16058] usb 1-1: USB disconnect, device number 125 [ 1082.377444][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5214'. [ 1082.458437][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.466978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.517884][T22370] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1082.548152][ T5349] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1082.594966][T23074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.678549][T22370] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1082.694266][T22370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.710094][ T5349] usb 5-1: Using ep0 maxpacket: 8 [ 1082.724222][T22370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.732967][T22370] usb 4-1: Product: syz [ 1082.733578][ T5349] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1082.737618][T22370] usb 4-1: Manufacturer: syz [ 1082.760858][ T5349] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1082.778201][T22370] usb 4-1: SerialNumber: syz [ 1082.787128][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.796328][ T5349] usb 5-1: Product: syz [ 1082.804513][ T5349] usb 5-1: Manufacturer: syz [ 1082.811572][ T5349] usb 5-1: SerialNumber: syz [ 1082.827401][ T5349] usb 5-1: config 0 descriptor?? [ 1082.828442][T22370] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1082.855288][ T5349] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1083.027895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1083.246172][T23063] loop4: detected capacity change from 0 to 7 [ 1083.256080][T23063] Dev loop4: unable to read RDB block 7 [ 1083.262393][T23063] loop4: unable to read partition table [ 1083.269201][T23063] loop4: partition table beyond EOD, truncated [ 1083.277283][T23063] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1083.415899][T23088] FAULT_INJECTION: forcing a failure. [ 1083.415899][T23088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.473999][T23088] CPU: 1 UID: 0 PID: 23088 Comm: syz.0.5221 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.474037][T23088] Tainted: [L]=SOFTLOCKUP [ 1083.474046][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.474059][T23088] Call Trace: [ 1083.474068][T23088] [ 1083.474079][T23088] dump_stack_lvl+0xe8/0x150 [ 1083.474119][T23088] should_fail_ex+0x410/0x560 [ 1083.474148][T23088] _copy_to_user+0x31/0xb0 [ 1083.474179][T23088] simple_read_from_buffer+0xe1/0x170 [ 1083.474220][T23088] proc_fail_nth_read+0x1bb/0x230 [ 1083.474259][T23088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.474280][T23088] ? rw_verify_area+0x24a/0x4c0 [ 1083.474299][T23088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.474349][T23088] vfs_read+0x213/0xa80 [ 1083.474389][T23088] ? __pfx___mutex_lock+0x10/0x10 [ 1083.474415][T23088] ? __pfx_vfs_read+0x10/0x10 [ 1083.474441][T23088] ? __fget_files+0x2a/0x420 [ 1083.474472][T23088] ? __fget_files+0x3a2/0x420 [ 1083.474493][T23088] ? __fget_files+0x2a/0x420 [ 1083.474523][T23088] ksys_read+0x150/0x270 [ 1083.474554][T23088] ? __pfx_ksys_read+0x10/0x10 [ 1083.474589][T23088] do_syscall_64+0x166/0x520 [ 1083.474603][T23088] ? trace_irq_disable+0x3b/0x140 [ 1083.474637][T23088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.474669][T23088] ? clear_bhb_loop+0x70/0xc0 [ 1083.474695][T23088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.474718][T23088] RIP: 0033:0x7f757775e90e [ 1083.474745][T23088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1083.474759][T23088] RSP: 002b:00007f757862dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1083.474777][T23088] RAX: ffffffffffffffda RBX: 00007f757862e6c0 RCX: 00007f757775e90e [ 1083.474806][T23088] RDX: 000000000000000f RSI: 00007f757862e0a0 RDI: 0000000000000004 [ 1083.474821][T23088] RBP: 00007f757862e090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.474835][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.474848][T23088] R13: 00007f7577a26038 R14: 00007f7577a25fa0 R15: 00007f7577b4fa48 [ 1083.474883][T23088] [ 1083.518735][T23067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.522891][T23067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.744423][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 1083.752351][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1083.789865][ T29] usb 3-1: USB disconnect, device number 3 [ 1083.816722][ T5349] gspca_zc3xx: reg_w_i err -110 [ 1083.979991][T23094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1083.995830][T23094] netlink: 774 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1084.067795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1084.345117][T22370] gspca_mr97310a: reg write [21] error -71 [ 1084.358375][T22370] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 1084.375772][T22370] usb 4-1: USB disconnect, device number 98 [ 1084.447982][T14248] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1084.455861][ T5349] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1084.462693][ T5349] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1084.619216][T14248] usb 3-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 1084.630462][T14248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1084.644032][T14248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.652854][T14248] usb 3-1: Product: syz [ 1084.657142][T14248] usb 3-1: Manufacturer: syz [ 1084.662951][T14248] usb 3-1: SerialNumber: syz [ 1084.674905][T14248] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1084.858722][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.867280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.366518][ T29] usb 5-1: USB disconnect, device number 81 [ 1085.500142][T14248] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1085.523198][T23123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5232'. [ 1085.584917][T14248] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 1085.718758][T23125] FAULT_INJECTION: forcing a failure. [ 1085.718758][T23125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.782626][T23125] CPU: 0 UID: 0 PID: 23125 Comm: syz.2.5233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.782663][T23125] Tainted: [L]=SOFTLOCKUP [ 1085.782671][T23125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1085.782683][T23125] Call Trace: [ 1085.782692][T23125] [ 1085.782702][T23125] dump_stack_lvl+0xe8/0x150 [ 1085.782739][T23125] should_fail_ex+0x410/0x560 [ 1085.782768][T23125] _copy_from_user+0x2d/0xb0 [ 1085.782797][T23125] do_sock_getsockopt+0x200/0x7e0 [ 1085.782845][T23125] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1085.782893][T23125] ? __fget_files+0x3a2/0x420 [ 1085.782913][T23125] ? __fget_files+0x2a/0x420 [ 1085.782941][T23125] __x64_sys_getsockopt+0x1a4/0x240 [ 1085.782982][T23125] do_syscall_64+0x166/0x520 [ 1085.783007][T23125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.783028][T23125] ? clear_bhb_loop+0x70/0xc0 [ 1085.783056][T23125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.783078][T23125] RIP: 0033:0x7f704d99e0d9 [ 1085.783098][T23125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.783116][T23125] RSP: 002b:00007f704e7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1085.783140][T23125] RAX: ffffffffffffffda RBX: 00007f704dc25fa0 RCX: 00007f704d99e0d9 [ 1085.783157][T23125] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 1085.783171][T23125] RBP: 00007f704e7a3090 R08: 0000200000000000 R09: 0000000000000000 [ 1085.783186][T23125] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 1085.783201][T23125] R13: 00007f704dc26038 R14: 00007f704dc25fa0 R15: 00007f704dd4fa48 [ 1085.783233][T23125] [ 1087.177906][ C0] net_ratelimit: 3 callbacks suppressed [ 1087.177931][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1087.276299][T23156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5244'. [ 1087.314265][T23153] syzkaller1: entered promiscuous mode [ 1087.321334][T23153] syzkaller1: entered allmulticast mode [ 1087.406019][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.419294][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.427871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.440604][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.450152][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.482027][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.499957][ T188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1087.544126][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.572750][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.641020][T23159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.668622][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 1087.680562][ T188] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1087.697130][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.727322][ T188] usb 3-1: config 0 descriptor?? [ 1087.755059][ T188] as10x_usb: device has been detected [ 1087.772358][ T188] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1087.794088][ T5349] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1087.849075][ T5349] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1087.863710][ T188] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1087.934272][ T188] as10x_usb: error during firmware upload part1 [ 1087.960024][ T188] Registered device nBox DVB-T Dongle [ 1087.968879][T14248] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1088.100249][T23155] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1088.127126][T23155] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1088.144659][T23155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1088.152114][T23155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1088.159094][T14248] usb 4-1: Using ep0 maxpacket: 8 [ 1088.166199][T23155] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1088.173656][T14248] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1088.185349][T14248] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.195009][T14248] usb 4-1: config 0 has no interface number 0 [ 1088.202659][T23155] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1088.209465][T14248] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1088.221517][T14248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.251029][T14248] usb 4-1: config 0 descriptor?? [ 1088.272336][T14248] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1088.290526][ T5349] usb 3-1: USB disconnect, device number 5 [ 1088.394859][ T5349] Unregistered device nBox DVB-T Dongle [ 1088.401733][ T5349] as10x_usb: device has been disconnected [ 1088.529354][T23182] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1088.535967][T23182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1088.542905][T23182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1088.549345][T23182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1088.572482][T23166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.599285][T23166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.636855][ T5349] usb 4-1: USB disconnect, device number 99 [ 1089.387847][T22370] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1089.571051][T22370] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1089.591623][T22370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1089.609579][T22370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1089.628908][T22370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1089.648902][T22370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1089.672374][T22370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.687115][T22370] usb 5-1: Product: syz [ 1089.701070][T22370] usb 5-1: Manufacturer: syz [ 1089.707355][T22370] usb 5-1: SerialNumber: syz [ 1089.709014][ T5349] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1089.724701][T22370] usb 5-1: config 0 descriptor?? [ 1089.939008][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.961642][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.998190][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.018871][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.046086][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.069946][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.087127][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.099298][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.121901][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.152196][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.200600][T22370] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1090.319060][T23213] binder: BINDER_SET_CONTEXT_MGR already set [ 1090.325286][T23213] binder: 23212:23213 ioctl 4018620d 200000000040 returned -16 [ 1090.335982][T23214] binder: BINDER_SET_CONTEXT_MGR already set [ 1090.344774][T23214] binder: 23212:23214 ioctl 4018620d 200000004a80 returned -16 [ 1090.398561][T23195] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 1090.424827][T14248] usb 5-1: USB disconnect, device number 82 [ 1090.487099][ T188] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1090.512884][ T188] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1090.541317][T21352] Bluetooth: hci0: command 0x0c1a tx timeout [ 1090.541329][ T5624] Bluetooth: hci5: command 0x0419 tx timeout [ 1090.619060][T21352] Bluetooth: hci1: command 0x0c1a tx timeout [ 1090.620221][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1090.877828][T14248] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1091.047995][T14248] usb 1-1: Using ep0 maxpacket: 16 [ 1091.057484][T14248] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1091.085886][T14248] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1091.098756][T14248] usb 1-1: config 1 has no interface number 0 [ 1091.112051][T14248] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1091.137862][T14248] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1091.148168][T14248] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1091.170245][T14248] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1091.181608][T14248] usb 1-1: Product: syz [ 1091.197895][T14248] usb 1-1: Manufacturer: syz [ 1091.202634][T14248] usb 1-1: SerialNumber: syz [ 1091.215304][T23223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1091.224516][T23223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1091.231740][T23232] sctp: [Deprecated]: syz.4.5265 (pid 23232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1091.231740][T23232] Use struct sctp_sack_info instead [ 1091.462594][T23223] loop9: detected capacity change from 0 to 8 [ 1091.556437][T23223] loop9: detected capacity change from 8 to 7 [ 1091.576567][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.586557][ C0] buffer_io_error: 32 callbacks suppressed [ 1091.586579][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.613286][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.623289][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.661596][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.671484][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.683208][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.693015][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.708088][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.717926][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.729951][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.739962][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.750726][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.760583][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.771091][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.780860][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.790678][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.800469][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.808692][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.818470][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1091.840600][T23223] ldm_validate_partition_table(): Disk read failed. [ 1091.849830][T23223] Dev loop9: unable to read RDB block 0 [ 1091.856377][T23223] loop9: unable to read partition table [ 1091.876841][T23223] loop9: partition table beyond EOD, truncated [ 1091.898085][T23223] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 1092.026642][T23223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1092.046655][T23223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1092.281444][T14248] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1092.318524][T14248] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 1092.377848][ C0] net_ratelimit: 245 callbacks suppressed [ 1092.377871][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1092.562441][T23252] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1092.593711][T23253] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1092.698771][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1092.984247][T23266] FAULT_INJECTION: forcing a failure. [ 1092.984247][T23266] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.025662][ T30] audit: type=1326 audit(1787245759.350:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x0 [ 1093.050507][T23266] CPU: 1 UID: 0 PID: 23266 Comm: syz.4.5276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.050542][T23266] Tainted: [L]=SOFTLOCKUP [ 1093.050551][T23266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1093.050565][T23266] Call Trace: [ 1093.050574][T23266] [ 1093.050584][T23266] dump_stack_lvl+0xe8/0x150 [ 1093.050621][T23266] should_fail_ex+0x410/0x560 [ 1093.050651][T23266] should_failslab+0xa8/0x100 [ 1093.050675][T23266] __kmalloc_noprof+0xfe/0x720 [ 1093.050706][T23266] ? __kmalloc_noprof+0x1af/0x720 [ 1093.050735][T23266] ? io_cache_alloc_new+0x40/0x100 [ 1093.050820][T23266] ? io_cache_alloc_new+0x40/0x100 [ 1093.050843][T23266] ? __fget_files+0x2a/0x420 [ 1093.050872][T23266] io_cache_alloc_new+0x40/0x100 [ 1093.050895][T23266] io_arm_apoll+0x459/0x910 [ 1093.050957][T23266] ? __pfx_io_arm_apoll+0x10/0x10 [ 1093.050991][T23266] ? __io_issue_sqe+0x207/0x4d0 [ 1093.051017][T23266] ? io_arm_poll_handler+0x20b/0x2a0 [ 1093.051050][T23266] io_queue_async+0x18b/0x2e0 [ 1093.051083][T23266] io_submit_sqes+0x1125/0x2310 [ 1093.051148][T23266] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1093.051190][T23266] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1093.051220][T23266] ? ksys_write+0x1fc/0x270 [ 1093.051247][T23266] ? __pfx_ksys_write+0x10/0x10 [ 1093.051277][T23266] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1093.051311][T23266] do_syscall_64+0x166/0x520 [ 1093.051333][T23266] ? trace_irq_disable+0x3b/0x140 [ 1093.051363][T23266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.051387][T23266] ? clear_bhb_loop+0x70/0xc0 [ 1093.051414][T23266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.051438][T23266] RIP: 0033:0x7f3b5cb9e0d9 [ 1093.051460][T23266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.051480][T23266] RSP: 002b:00007f3b5add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1093.051505][T23266] RAX: ffffffffffffffda RBX: 00007f3b5ce26090 RCX: 00007f3b5cb9e0d9 [ 1093.051522][T23266] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1093.051537][T23266] RBP: 00007f3b5add5090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.051552][T23266] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1093.051566][T23266] R13: 00007f3b5ce26128 R14: 00007f3b5ce26090 R15: 00007f3b5cf4fa48 [ 1093.051600][T23266] [ 1093.417787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1093.551251][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.562674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.704749][ T4983] ldm_validate_partition_table(): Disk read failed. [ 1093.726464][ T4983] Dev loop9: unable to read RDB block 0 [ 1093.737198][ T4983] loop9: unable to read partition table [ 1093.755469][ T4983] loop9: partition table beyond EOD, truncated [ 1093.763314][T22370] usb 1-1: USB disconnect, device number 126 [ 1093.818442][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.826838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.457924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1094.467863][T14248] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1094.630582][T14248] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1094.646644][T14248] usb 3-1: not running at top speed; connect to a high speed hub [ 1094.667216][T14248] usb 3-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice=31.24 [ 1094.692910][T14248] usb 3-1: config 133 has an invalid interface number: 190 but max is 0 [ 1094.717311][T14248] usb 3-1: config 133 has no interface number 0 [ 1094.730892][T14248] usb 3-1: config 133 interface 190 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1094.760646][T14248] usb 3-1: config 133 interface 190 has no altsetting 0 [ 1094.778195][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1094.795005][T14248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.811386][T14248] usb 3-1: Product: syz [ 1094.826364][T14248] usb 3-1: Manufacturer: syz [ 1094.834815][T14248] usb 3-1: SerialNumber: syz [ 1094.910122][T23295] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 1094.976686][T23295] bond6: entered promiscuous mode [ 1095.005219][T23295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1095.068220][ T30] audit: type=1326 audit(1787245761.390:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.130453][T23297] ipvlan0: entered allmulticast mode [ 1095.163129][T23297] bond6: entered allmulticast mode [ 1095.176824][ T30] audit: type=1326 audit(1787245761.390:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.236895][ T30] audit: type=1326 audit(1787245761.460:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.244519][T14248] usb 3-1: Could not find all expected endpoints [ 1095.314875][T14248] usb 3-1: USB disconnect, device number 6 [ 1095.367652][ T30] audit: type=1326 audit(1787245761.460:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.448904][T23295] bond6: (slave bridge4): making interface the new active one [ 1095.464411][T23295] bridge4: entered promiscuous mode [ 1095.475156][T23295] bridge4: entered allmulticast mode [ 1095.486684][T23295] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1095.498002][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1095.521881][ T30] audit: type=1326 audit(1787245761.460:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.578516][ T30] audit: type=1326 audit(1787245761.470:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.655506][ T30] audit: type=1326 audit(1787245761.470:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.759534][ T30] audit: type=1326 audit(1787245761.470:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.859200][T23305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.875829][T23305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.888110][ T30] audit: type=1326 audit(1787245761.470:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23294 comm="syz.3.5285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc08799e0d9 code=0x7ffc0000 [ 1095.965994][T23309] FAULT_INJECTION: forcing a failure. [ 1095.965994][T23309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.022438][T23309] CPU: 1 UID: 0 PID: 23309 Comm: syz.0.5289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.022475][T23309] Tainted: [L]=SOFTLOCKUP [ 1096.022483][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.022497][T23309] Call Trace: [ 1096.022506][T23309] [ 1096.022516][T23309] dump_stack_lvl+0xe8/0x150 [ 1096.022551][T23309] should_fail_ex+0x410/0x560 [ 1096.022581][T23309] _copy_to_user+0x31/0xb0 [ 1096.022611][T23309] simple_read_from_buffer+0xe1/0x170 [ 1096.022648][T23309] proc_fail_nth_read+0x1bb/0x230 [ 1096.022681][T23309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1096.022713][T23309] ? rw_verify_area+0x24a/0x4c0 [ 1096.022738][T23309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1096.022763][T23309] vfs_read+0x213/0xa80 [ 1096.022793][T23309] ? __pfx_vfs_read+0x10/0x10 [ 1096.022812][T23309] ? __se_sys_io_uring_enter+0x291/0x1bb0 [ 1096.022859][T23309] ksys_read+0x150/0x270 [ 1096.022885][T23309] ? __pfx_ksys_read+0x10/0x10 [ 1096.022919][T23309] do_syscall_64+0x166/0x520 [ 1096.022939][T23309] ? trace_irq_disable+0x3b/0x140 [ 1096.022967][T23309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.022990][T23309] ? clear_bhb_loop+0x70/0xc0 [ 1096.023017][T23309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.023039][T23309] RIP: 0033:0x7f757775e90e [ 1096.023060][T23309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1096.023078][T23309] RSP: 002b:00007f757860cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.023102][T23309] RAX: ffffffffffffffda RBX: 00007f757860d6c0 RCX: 00007f757775e90e [ 1096.023119][T23309] RDX: 000000000000000f RSI: 00007f757860d0a0 RDI: 0000000000000006 [ 1096.023132][T23309] RBP: 00007f757860d090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.023144][T23309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.023155][T23309] R13: 00007f7577a26128 R14: 00007f7577a26090 R15: 00007f7577b4fa48 [ 1096.023195][T23309] [ 1096.614137][T23321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5293'. [ 1096.693627][ T5624] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1096.844813][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5297'. [ 1096.937869][T14248] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1097.101758][T14248] usb 1-1: not running at top speed; connect to a high speed hub [ 1097.114813][T14248] usb 1-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 1097.126464][T14248] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1097.141095][T14248] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1097.151392][T14248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.159855][T14248] usb 1-1: Manufacturer: ј [ 1097.164809][T14248] usb 1-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 1097.187085][T23343] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1097.197247][T23342] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1097.320216][T23343] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1097.401869][T23329] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1097.412125][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1097.423937][T23329] net_ratelimit: 10 callbacks suppressed [ 1097.423961][T23329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.442273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.454761][T23329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.469950][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.485872][T23329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.495309][T23329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.503927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.526580][T23328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.537900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.563441][T14248] usbhid 1-1:1.0: can't add hid device: -71 [ 1097.575534][T14248] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1097.583829][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1097.608418][T14248] usb 1-1: USB disconnect, device number 127 [ 1097.752930][T23349] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5303'. [ 1097.817006][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5303'. [ 1098.208058][T22370] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1098.399783][T22370] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1098.410812][T22370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.422474][T22370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.433908][T22370] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1098.443916][T22370] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.457363][T22370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.488143][T14248] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1098.524990][T23379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1098.647961][T14248] usb 4-1: Using ep0 maxpacket: 8 [ 1098.654151][T14248] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1098.666334][T14248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1098.683292][T14248] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1098.692508][T14248] usb 4-1: Product: syz [ 1098.696850][T14248] usb 4-1: Manufacturer: syz [ 1098.702430][T14248] usb 4-1: SerialNumber: syz [ 1098.839755][ T188] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1098.926808][T23387] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1099.006642][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1099.015328][ T188] usb 1-1: New USB device found, idVendor=75b9, idProduct=01f6, bcdDevice= 3.02 [ 1099.027306][ T188] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1099.036764][T14248] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1099.047241][T14248] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1099.055465][ T188] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1099.079752][ T188] usb 1-1: can't read configurations, error -22 [ 1099.227955][ T188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1099.380346][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1099.392511][ T188] usb 1-1: New USB device found, idVendor=75b9, idProduct=01f6, bcdDevice= 3.02 [ 1099.405528][ T188] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1099.415581][ T188] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1099.425801][ T188] usb 1-1: can't read configurations, error -22 [ 1099.436946][ T188] usb usb1-port1: attempt power cycle [ 1099.703760][T22370] gud 3-1:1.0: USB-2: Failed to add properties (ret=-71) [ 1099.718095][T22370] gud 3-1:1.0: Failed to get connectors (error=-71) [ 1099.730891][T22370] gud 3-1:1.0: probe with driver gud failed with error -71 [ 1099.761278][T22370] usb 3-1: USB disconnect, device number 7 [ 1099.778449][ T188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1099.812053][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1099.832696][ T188] usb 1-1: New USB device found, idVendor=75b9, idProduct=01f6, bcdDevice= 3.02 [ 1099.842579][T14248] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1099.852239][ T188] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1099.864532][ T188] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1099.876700][ T188] usb 1-1: can't read configurations, error -22 [ 1100.008309][ T188] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1100.016734][T14248] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1100.031037][T14248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.049572][T14248] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1100.070747][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1100.084913][ T188] usb 1-1: New USB device found, idVendor=75b9, idProduct=01f6, bcdDevice= 3.02 [ 1100.096238][T14248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.110419][T14248] usb 5-1: Product: syz [ 1100.118558][ T188] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1100.127456][T14248] usb 5-1: Manufacturer: syz [ 1100.138605][T14248] usb 5-1: SerialNumber: syz [ 1100.147317][ T188] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1100.164772][ T188] usb 1-1: can't read configurations, error -22 [ 1100.180722][ T188] usb usb1-port1: unable to enumerate USB device [ 1100.406387][T23391] netlink: 'syz.4.5318': attribute type 1 has an invalid length. [ 1100.722632][T14248] usb 5-1: USB disconnect, device number 83 [ 1101.358374][ T188] usb 4-1: USB disconnect, device number 101 [ 1101.987783][ T188] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1102.023898][T23437] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 1102.038578][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1102.148790][ T188] usb 5-1: Using ep0 maxpacket: 16 [ 1102.230212][T14248] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1102.399566][T14248] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1102.409680][ T5349] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1102.430373][T14248] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.447952][T14248] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1102.470638][T14248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.488543][T14248] usb 1-1: Product: syz [ 1102.494407][T14248] usb 1-1: Manufacturer: syz [ 1102.507866][T14248] usb 1-1: SerialNumber: syz [ 1102.569649][ T5349] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1102.590735][ T5349] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1102.607875][ T5349] usb 3-1: config 5 has no interface number 0 [ 1102.619762][ T5349] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1102.639414][ T5349] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1102.651102][ T5349] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1102.662812][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.671629][ T5349] usb 3-1: Product: syz [ 1102.675977][ T5349] usb 3-1: Manufacturer: syz [ 1102.681507][ T5349] usb 3-1: SerialNumber: syz [ 1102.693766][T23440] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1102.734751][T23435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1102.749574][T23435] netlink: 'syz.0.5333': attribute type 1 has an invalid length. [ 1102.775997][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1102.784005][ C0] net_ratelimit: 10 callbacks suppressed [ 1102.784029][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1102.861218][ T188] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1102.887168][ T188] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1102.901741][ T188] usb 5-1: can't read configurations, error -71 [ 1103.200686][T14248] usb 1-1: USB disconnect, device number 6 [ 1103.231077][ T5349] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1103.267108][ T5349] usb 3-1: USB disconnect, device number 8 [ 1103.356786][T23452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5338'. [ 1103.817812][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1103.838042][ T188] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1104.009526][ T188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1104.049668][ T188] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.072094][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.080726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.099586][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1104.132841][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1104.164269][ T188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1104.227867][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.263588][ T188] usb 5-1: config 0 descriptor?? [ 1104.677812][T16058] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1104.710308][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.718788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.801033][ T188] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1104.857793][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1104.928094][T16058] usb 4-1: Using ep0 maxpacket: 16 [ 1105.353233][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.361777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.468782][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5350'. [ 1105.519595][T16058] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1105.546536][T16058] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1105.575670][T16058] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1105.589550][T16058] usb 4-1: can't read configurations, error -71 [ 1105.655166][T23494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.860719][T23503] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1105.897828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1106.112476][T23513] xt_hashlimit: size too large, truncated to 1048576 [ 1106.131619][T23513] xt_hashlimit: overflow, try lower: 3/0 [ 1106.661016][T22370] usb 5-1: reset high-speed USB device number 85 using dummy_hcd [ 1107.112928][T23533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1107.218656][ T188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1107.377913][ T5349] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1107.387272][ T188] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1107.401859][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.412174][ T188] usb 1-1: Product: syz [ 1107.416986][ T188] usb 1-1: Manufacturer: syz [ 1107.428995][ T188] usb 1-1: SerialNumber: syz [ 1107.528555][ T5349] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1107.544762][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.574272][ T5349] usb 3-1: config 0 descriptor?? [ 1107.712061][T22370] usb 5-1: device descriptor read/64, error -71 [ 1107.791862][T23529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.836413][T23529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.864693][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1107.884986][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1107.977891][ C0] net_ratelimit: 1 callbacks suppressed [ 1107.977919][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1108.001721][T22370] usb 5-1: reset high-speed USB device number 85 using dummy_hcd [ 1108.060827][T22370] usb 5-1: device reset changed ep0 maxpacket size! [ 1108.113769][T16058] usb 5-1: USB disconnect, device number 85 [ 1108.168826][ T188] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1108.203488][ T188] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1108.260161][ T188] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1108.294932][ T188] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1108.307908][T16058] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1108.487957][T16058] usb 5-1: Using ep0 maxpacket: 16 [ 1108.549193][ T5349] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1108.562985][ T5349] [drm:udl_init] *ERROR* Selecting channel failed [ 1108.644825][ T5349] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1108.666682][ T5349] [drm] Initialized udl on minor 1 [ 1108.715659][ T5349] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1108.746569][ T5349] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1108.754874][T14248] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1108.771417][T14248] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1108.787123][ T5349] usb 3-1: USB disconnect, device number 9 [ 1108.793708][T14248] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1108.868759][T22370] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1109.017793][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1109.029156][T22370] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1109.049655][T22370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.067849][T22370] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1109.089734][T22370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.108293][T22370] usb 4-1: Product: syz [ 1109.114597][T22370] usb 4-1: Manufacturer: syz [ 1109.120062][T16058] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1109.132566][T22370] usb 4-1: SerialNumber: syz [ 1109.139657][T16058] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1109.179560][T16058] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1109.188137][T16058] usb 5-1: can't read configurations, error -71 [ 1109.304619][T23556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.392289][T23543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1109.408458][T23543] netlink: 'syz.3.5366': attribute type 1 has an invalid length. [ 1109.715826][T22370] usb 4-1: USB disconnect, device number 104 [ 1110.057784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1110.066662][ T5349] usb 1-1: USB disconnect, device number 7 [ 1110.087804][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1110.239487][T23567] syzkaller0: entered promiscuous mode [ 1110.246560][T23567] syzkaller0: entered allmulticast mode [ 1110.253835][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1110.270880][ T29] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1110.293753][T23567] tipc: Enabled bearer , priority 0 [ 1110.302220][ T29] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1110.338951][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.421564][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1110.421597][ T30] audit: type=1326 audit(1787245776.750:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23578 comm="syz.0.5377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f757779e0d9 code=0x0 [ 1110.466962][T23583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5379'. [ 1110.566336][ T29] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1110.588960][T16058] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1110.604204][ T29] usb 3-1: USB disconnect, device number 10 [ 1110.697991][T22370] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1110.748587][T14248] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1110.760143][T16058] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1110.773850][T16058] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1110.794090][T16058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1110.807428][T16058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1110.818030][T16058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1110.833451][T16058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.844047][T16058] usb 5-1: config 0 descriptor?? [ 1110.850014][T22370] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1110.866159][T22370] usb 4-1: config index 0 descriptor too short (expected 54564, got 36) [ 1110.875908][T22370] usb 4-1: config 71 has too many interfaces: 115, using maximum allowed: 32 [ 1110.886395][T22370] usb 4-1: config 71 has an invalid descriptor of length 90, skipping remainder of the config [ 1110.897462][T22370] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 115 [ 1110.908898][T22370] usb 4-1: config 71 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1110.921634][T14248] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1110.927348][T22370] usb 4-1: config 71 interface 0 has no altsetting 0 [ 1110.941141][T22370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.950479][T14248] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1110.968284][T14248] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1110.990417][T14248] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1111.013888][T14248] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1111.022936][T14248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.047848][T14248] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1111.098652][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1111.262256][T14248] scsi host1: usb-storage 1-1:1.0 [ 1111.286521][T16058] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1111.407982][T16058] tipc: Node number set to 4247410689 [ 1111.447866][ T29] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1111.609127][ T29] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1111.648261][ T29] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1111.672071][ T29] usb 3-1: config 0 has no interface number 0 [ 1111.689766][ T29] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 1111.724016][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1111.747258][ T29] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1111.755916][ T29] usb 3-1: Product: syz [ 1111.760282][ T29] usb 3-1: SerialNumber: syz [ 1111.769689][ T29] usb 3-1: config 0 descriptor?? [ 1111.792544][ T29] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1112.000942][ T29] usb 3-1: USB disconnect, device number 11 [ 1112.137807][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1112.398266][T17819] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1112.595415][T17819] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1112.761507][T23601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.990634][T23573] tipc: Resetting bearer [ 1113.085729][T23573] tipc: Disabling bearer [ 1113.177778][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1113.517284][ T5349] usb 1-1: USB disconnect, device number 8 [ 1113.594247][T13941] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 1113.621590][T13941] sd 1:0:0:0: [sdb] Sense not available. [ 1113.628326][T13941] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1113.635575][T13941] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1113.641939][T13941] sd 1:0:0:0: [sdb] Write Protect is off [ 1113.648867][T13941] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1113.655339][T13941] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1114.020878][ T29] usb 5-1: reset high-speed USB device number 88 using dummy_hcd [ 1114.028989][T13941] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1114.062925][ T29] usb 5-1: device reset changed ep0 maxpacket size! [ 1114.084559][T16058] usb 5-1: USB disconnect, device number 88 [ 1114.217804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1114.478862][T16058] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1114.547834][ T188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1114.657846][T16058] usb 5-1: Using ep0 maxpacket: 8 [ 1114.669697][T16058] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1114.704908][T16058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.719666][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 1114.739709][T16058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1114.743172][ T188] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1114.776682][T16058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.833742][ T188] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1114.865471][ T188] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1114.896447][T16058] usb 5-1: config 0 descriptor?? [ 1114.915949][ T188] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1114.949942][ T188] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1114.994483][ T188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1115.023222][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.037777][ T188] usb 3-1: Product: syz [ 1115.042227][ T188] usb 3-1: Manufacturer: syz [ 1115.046949][ T188] usb 3-1: SerialNumber: syz [ 1115.068510][ T188] usb 3-1: config 0 descriptor?? [ 1115.079340][T23636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1115.257800][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1115.305046][T23636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1115.335399][T16058] usbhid 5-1:0.0: can't add hid device: -71 [ 1115.353215][T16058] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1115.394889][T16058] usb 5-1: USB disconnect, device number 89 [ 1115.413806][ T188] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87 [ 1116.002960][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 1116.053537][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5400'. [ 1116.084990][T22370] usb 4-1: string descriptor 0 read error: -32 [ 1116.188793][T22370] usbhid 4-1:71.0: couldn't find an input interrupt endpoint [ 1116.224694][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.231507][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.297811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1116.467217][T23665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.468322][ T5349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1116.669925][ T5349] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1116.711282][ T5349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.742687][ T5349] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1116.788578][ T5349] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1116.835412][ T5349] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1116.884368][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.134685][T23672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.175974][T23672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.182165][T14925] usb 4-1: USB disconnect, device number 105 [ 1117.337802][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1117.617881][T14925] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1117.787880][T14925] usb 4-1: device descriptor read/64, error -71 [ 1118.049116][T14925] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1118.218587][T14925] usb 4-1: device descriptor read/64, error -71 [ 1118.283070][ T5349] ------------[ cut here ]------------ [ 1118.288970][ T5349] strlen(name) >= DRM_PROP_NAME_LEN [ 1118.289003][ T5349] WARNING: drivers/gpu/drm/drm_property.c:396 at drm_property_add_enum+0x403/0x4c0, CPU#0: kworker/0:3/5349 [ 1118.306289][ T5349] Modules linked in: [ 1118.310768][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.322290][ T5349] Tainted: [L]=SOFTLOCKUP [ 1118.326678][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.336895][ T5349] Workqueue: usb_hub_wq hub_event [ 1118.342156][ T5349] RIP: 0010:drm_property_add_enum+0x403/0x4c0 [ 1118.348576][ T5349] Code: 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 9b 4a 06 cc e8 4e 37 39 fc 90 0f 0b 90 b8 ea ff ff ff eb dc e8 3e 37 39 fc 90 <0f> 0b 90 b8 ea ff ff ff eb cc e8 2e 37 39 fc 90 0f 0b 90 b8 ea ff [ 1118.368787][ T5349] RSP: 0018:ffffc9000375ea78 EFLAGS: 00010283 [ 1118.374995][ T5349] RAX: ffffffff858dce62 RBX: 0000000000000020 RCX: 0000000000100000 [ 1118.383186][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1118.390567][ T5349] RDX: ffffc9001a357000 RSI: 0000000000048872 RDI: 0000000000048873 [ 1118.398840][ T5349] RBP: ffff88804bba8c00 R08: 0000000000000007 R09: 0000000000000001 [ 1118.406895][ T5349] R10: ffff88804bba8c39 R11: ffffed100977518b R12: 0000000000000000 [ 1118.415387][ T5349] R13: ffffc9000375ec40 R14: 0000000000000000 R15: ffff88804bba8c00 [ 1118.423577][ T5349] FS: 0000000000000000(0000) GS:ffff888124f31000(0000) knlGS:0000000000000000 [ 1118.432665][ T5349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.439618][ T5349] CR2: 0000200000334030 CR3: 000000007487a000 CR4: 00000000003526f0 [ 1118.447734][ T5349] DR0: ffffffffffffffff DR1: 20000000000001f8 DR2: 0000000000000002 [ 1118.456051][ T5349] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1118.464199][ T5349] Call Trace: [ 1118.467576][ T5349] [ 1118.470864][ T5349] drm_mode_create_tv_properties_legacy+0x1db/0x3f0 [ 1118.477775][ T5349] gud_get_connectors+0xe66/0x1a50 [ 1118.483042][ T5349] ? __pfx_gud_get_connectors+0x10/0x10 [ 1118.488837][ T5349] ? drm_object_attach_property+0x228/0x420 [ 1118.494907][ T5349] gud_probe+0x1125/0x13b0 [ 1118.499911][ T5349] ? __pfx_gud_probe+0x10/0x10 [ 1118.504793][ T5349] ? __pm_runtime_set_status+0x994/0xc80 [ 1118.510654][ T5349] usb_probe_interface+0x653/0xc60 [ 1118.515904][ T5349] ? __pfx_usb_probe_interface+0x10/0x10 [ 1118.521751][ T5349] really_probe+0x254/0xae0 [ 1118.526388][ T5349] __driver_probe_device+0x1e8/0x360 [ 1118.532248][ T5349] driver_probe_device+0x4f/0x240 [ 1118.537355][ T5349] __device_attach_driver+0x270/0x410 [ 1118.542934][ T5349] bus_for_each_drv+0x258/0x2f0 [ 1118.548037][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 1118.554486][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1118.560230][ T5349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.566127][ T5349] __device_attach+0x2c4/0x450 [ 1118.571176][ T5349] ? __pfx___device_attach+0x10/0x10 [ 1118.576543][ T5349] ? do_raw_spin_unlock+0xf5/0x200 [ 1118.581785][ T5349] ? _raw_spin_unlock+0x28/0x50 [ 1118.586714][ T5349] device_initial_probe+0xa1/0xd0 [ 1118.592144][ T5349] bus_probe_device+0x12a/0x220 [ 1118.597105][ T5349] device_add+0x7d7/0xb80 [ 1118.601573][ T5349] usb_set_configuration+0x1ad8/0x2180 [ 1118.607215][ T5349] usb_generic_driver_probe+0x8d/0x150 [ 1118.613150][ T5349] usb_probe_device+0x1c3/0x3b0 [ 1118.618654][ T5349] ? __pfx_usb_probe_device+0x10/0x10 [ 1118.624149][ T5349] really_probe+0x254/0xae0 [ 1118.628851][ T5349] __driver_probe_device+0x1e8/0x360 [ 1118.634385][ T5349] driver_probe_device+0x4f/0x240 [ 1118.639802][ T5349] __device_attach_driver+0x270/0x410 [ 1118.645486][ T5349] bus_for_each_drv+0x258/0x2f0 [ 1118.650721][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 1118.656735][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1118.662233][ T5349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.668251][ T5349] __device_attach+0x2c4/0x450 [ 1118.673097][ T5349] ? __pfx___device_attach+0x10/0x10 [ 1118.678742][ T5349] ? do_raw_spin_unlock+0xf5/0x200 [ 1118.684012][ T5349] ? _raw_spin_unlock+0x28/0x50 [ 1118.688960][ T5349] device_initial_probe+0xa1/0xd0 [ 1118.694059][ T5349] bus_probe_device+0x12a/0x220 [ 1118.699236][ T5349] device_add+0x7d7/0xb80 [ 1118.703668][ T5349] usb_new_device+0x9aa/0x1690 [ 1118.708907][ T5349] ? __pfx_usb_new_device+0x10/0x10 [ 1118.714302][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 1118.719812][ T5349] hub_event+0x28e8/0x4d30 [ 1118.724312][ T5349] ? lock_acquire+0x106/0x350 [ 1118.729248][ T5349] ? __pfx_hub_event+0x10/0x10 [ 1118.734111][ T5349] ? process_scheduled_works+0xa1a/0x14c0 [ 1118.740364][ T5349] ? rcu_is_watching+0x16/0xb0 [ 1118.745259][ T5349] ? process_scheduled_works+0xa1a/0x14c0 [ 1118.751396][ T5349] process_scheduled_works+0xa88/0x14c0 [ 1118.757132][ T5349] ? __pfx_process_scheduled_works+0x10/0x10 [ 1118.763570][ T5349] ? assign_work+0x3cf/0x5d0 [ 1118.768822][ T5349] worker_thread+0xa47/0xfb0 [ 1118.773521][ T5349] ? __kthread_parkme+0x71/0x1f0 [ 1118.778767][ T5349] kthread+0x38b/0x480 [ 1118.782946][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 1118.788278][ T5349] ? __pfx_kthread+0x10/0x10 [ 1118.793008][ T5349] ret_from_fork+0x514/0xb70 [ 1118.798025][ T5349] ? __pfx_ret_from_fork+0x10/0x10 [ 1118.803269][ T5349] ? __switch_to+0xc89/0x1420 [ 1118.808082][ T5349] ? __pfx_kthread+0x10/0x10 [ 1118.812774][ T5349] ret_from_fork_asm+0x1a/0x30 [ 1118.817636][ T5349] [ 1118.820975][ T5349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1118.828306][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.839275][ T5349] Tainted: [L]=SOFTLOCKUP [ 1118.843662][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.853755][ T5349] Workqueue: usb_hub_wq hub_event [ 1118.858831][ T5349] Call Trace: [ 1118.862176][ T5349] [ 1118.865335][ T5349] vpanic+0x56d/0xa60 [ 1118.869388][ T5349] ? __pfx__printk+0x10/0x10 [ 1118.874054][ T5349] ? __pfx_vpanic+0x10/0x10 [ 1118.878590][ T5349] ? is_bpf_text_address+0x292/0x2b0 [ 1118.883924][ T5349] ? is_bpf_text_address+0x26/0x2b0 [ 1118.889164][ T5349] panic+0xc5/0xd0 [ 1118.892929][ T5349] ? __pfx_panic+0x10/0x10 [ 1118.897386][ T5349] ? ret_from_fork_asm+0x1a/0x30 [ 1118.902356][ T5349] __warn+0x315/0x4c0 [ 1118.906356][ T5349] ? drm_property_add_enum+0x403/0x4c0 [ 1118.911846][ T5349] ? drm_property_add_enum+0x403/0x4c0 [ 1118.917319][ T5349] __report_bug+0x276/0x570 [ 1118.921927][ T5349] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1118.927850][ T5349] ? drm_property_add_enum+0x403/0x4c0 [ 1118.933356][ T5349] ? __pfx___report_bug+0x10/0x10 [ 1118.938415][ T5349] ? drm_mode_object_add+0x112/0x180 [ 1118.943746][ T5349] ? drm_property_add_enum+0x403/0x4c0 [ 1118.949276][ T5349] report_bug+0x16b/0x220 [ 1118.953636][ T5349] ? drm_property_add_enum+0x403/0x4c0 [ 1118.959241][ T5349] ? drm_property_add_enum+0x405/0x4c0 [ 1118.964751][ T5349] handle_bug+0x9c/0x200 [ 1118.969025][ T5349] exc_invalid_op+0x1a/0x50 [ 1118.973565][ T5349] asm_exc_invalid_op+0x1a/0x20 [ 1118.978461][ T5349] RIP: 0010:drm_property_add_enum+0x403/0x4c0 [ 1118.984571][ T5349] Code: 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 9b 4a 06 cc e8 4e 37 39 fc 90 0f 0b 90 b8 ea ff ff ff eb dc e8 3e 37 39 fc 90 <0f> 0b 90 b8 ea ff ff ff eb cc e8 2e 37 39 fc 90 0f 0b 90 b8 ea ff [ 1119.004214][ T5349] RSP: 0018:ffffc9000375ea78 EFLAGS: 00010283 [ 1119.010319][ T5349] RAX: ffffffff858dce62 RBX: 0000000000000020 RCX: 0000000000100000 [ 1119.018303][ T5349] RDX: ffffc9001a357000 RSI: 0000000000048872 RDI: 0000000000048873 [ 1119.026380][ T5349] RBP: ffff88804bba8c00 R08: 0000000000000007 R09: 0000000000000001 [ 1119.034368][ T5349] R10: ffff88804bba8c39 R11: ffffed100977518b R12: 0000000000000000 [ 1119.042383][ T5349] R13: ffffc9000375ec40 R14: 0000000000000000 R15: ffff88804bba8c00 [ 1119.050381][ T5349] ? drm_property_add_enum+0x402/0x4c0 [ 1119.055882][ T5349] ? drm_property_add_enum+0x402/0x4c0 [ 1119.061372][ T5349] drm_mode_create_tv_properties_legacy+0x1db/0x3f0 [ 1119.068006][ T5349] gud_get_connectors+0xe66/0x1a50 [ 1119.073185][ T5349] ? __pfx_gud_get_connectors+0x10/0x10 [ 1119.078763][ T5349] ? drm_object_attach_property+0x228/0x420 [ 1119.084711][ T5349] gud_probe+0x1125/0x13b0 [ 1119.089154][ T5349] ? __pfx_gud_probe+0x10/0x10 [ 1119.094035][ T5349] ? __pm_runtime_set_status+0x994/0xc80 [ 1119.099702][ T5349] usb_probe_interface+0x653/0xc60 [ 1119.105076][ T5349] ? __pfx_usb_probe_interface+0x10/0x10 [ 1119.110749][ T5349] really_probe+0x254/0xae0 [ 1119.115306][ T5349] __driver_probe_device+0x1e8/0x360 [ 1119.120640][ T5349] driver_probe_device+0x4f/0x240 [ 1119.125790][ T5349] __device_attach_driver+0x270/0x410 [ 1119.131197][ T5349] bus_for_each_drv+0x258/0x2f0 [ 1119.136099][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 1119.142016][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1119.147420][ T5349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1119.153276][ T5349] __device_attach+0x2c4/0x450 [ 1119.158076][ T5349] ? __pfx___device_attach+0x10/0x10 [ 1119.163389][ T5349] ? do_raw_spin_unlock+0xf5/0x200 [ 1119.168558][ T5349] ? _raw_spin_unlock+0x28/0x50 [ 1119.173483][ T5349] device_initial_probe+0xa1/0xd0 [ 1119.178547][ T5349] bus_probe_device+0x12a/0x220 [ 1119.183479][ T5349] device_add+0x7d7/0xb80 [ 1119.187864][ T5349] usb_set_configuration+0x1ad8/0x2180 [ 1119.193388][ T5349] usb_generic_driver_probe+0x8d/0x150 [ 1119.198891][ T5349] usb_probe_device+0x1c3/0x3b0 [ 1119.203805][ T5349] ? __pfx_usb_probe_device+0x10/0x10 [ 1119.209374][ T5349] really_probe+0x254/0xae0 [ 1119.214096][ T5349] __driver_probe_device+0x1e8/0x360 [ 1119.219506][ T5349] driver_probe_device+0x4f/0x240 [ 1119.224652][ T5349] __device_attach_driver+0x270/0x410 [ 1119.230921][ T5349] bus_for_each_drv+0x258/0x2f0 [ 1119.235811][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 1119.242267][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1119.247822][ T5349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1119.254217][ T5349] __device_attach+0x2c4/0x450 [ 1119.259108][ T5349] ? __pfx___device_attach+0x10/0x10 [ 1119.264619][ T5349] ? do_raw_spin_unlock+0xf5/0x200 [ 1119.269774][ T5349] ? _raw_spin_unlock+0x28/0x50 [ 1119.274764][ T5349] device_initial_probe+0xa1/0xd0 [ 1119.280066][ T5349] bus_probe_device+0x12a/0x220 [ 1119.285095][ T5349] device_add+0x7d7/0xb80 [ 1119.289459][ T5349] usb_new_device+0x9aa/0x1690 [ 1119.294353][ T5349] ? __pfx_usb_new_device+0x10/0x10 [ 1119.299581][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 1119.304810][ T5349] hub_event+0x28e8/0x4d30 [ 1119.309254][ T5349] ? lock_acquire+0x106/0x350 [ 1119.313995][ T5349] ? __pfx_hub_event+0x10/0x10 [ 1119.318768][ T5349] ? process_scheduled_works+0xa1a/0x14c0 [ 1119.324512][ T5349] ? rcu_is_watching+0x16/0xb0 [ 1119.329288][ T5349] ? process_scheduled_works+0xa1a/0x14c0 [ 1119.335029][ T5349] process_scheduled_works+0xa88/0x14c0 [ 1119.340610][ T5349] ? __pfx_process_scheduled_works+0x10/0x10 [ 1119.346611][ T5349] ? assign_work+0x3cf/0x5d0 [ 1119.351237][ T5349] worker_thread+0xa47/0xfb0 [ 1119.355877][ T5349] ? __kthread_parkme+0x71/0x1f0 [ 1119.360953][ T5349] kthread+0x38b/0x480 [ 1119.365063][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 1119.370195][ T5349] ? __pfx_kthread+0x10/0x10 [ 1119.374838][ T5349] ret_from_fork+0x514/0xb70 [ 1119.379469][ T5349] ? __pfx_ret_from_fork+0x10/0x10 [ 1119.384621][ T5349] ? __switch_to+0xc89/0x1420 [ 1119.389359][ T5349] ? __pfx_kthread+0x10/0x10 [ 1119.394499][ T5349] ret_from_fork_asm+0x1a/0x30 [ 1119.399327][ T5349] [ 1119.403024][ T5349] Kernel Offset: disabled [ 1119.407546][ T5349] Rebooting in 86400 seconds..