last executing test programs: 2m6.483356609s ago: executing program 4 (id=5036): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0xa2b, {0xffffffffffffffff}, {}, 0xa94b, 0x7f}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x3, 0x40, 0xfffffff9, 0x80a, 0x200007, 0xf61, 0x4, 0x0, 0xfffffffd}, 0x0) socket(0x10, 0x800, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x8000, 0x34325842, 0x3, 0x926, 0x101, 0x5, 0x5, 0x1, 0x4, 0x2}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) close(r6) r7 = signalfd(r0, &(0x7f00000000c0)={[0x40]}, 0x8) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000001c0)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305240200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 2m3.863860651s ago: executing program 4 (id=5043): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb'], 0x200000000000000}) 2m3.75381179s ago: executing program 4 (id=5044): syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x180) (async) r0 = socket$inet6(0xa, 0x3, 0x1) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async, rerun: 64) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0}, 0x90) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b02d25a80648c2594f90524fc60100c060003000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) (async, rerun: 32) mmap(&(0x7f0000a33000/0xd000)=nil, 0xd000, 0x1, 0x10, r0, 0xcf9eb000) msync(&(0x7f0000385000/0x3000)=nil, 0x3000, 0x6) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x130) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0x0) (async, rerun: 32) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (rerun: 32) 2m3.360917265s ago: executing program 4 (id=5047): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000087c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x180a00080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r5, r5, r5], 0x3}, 0x58) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000300)=',#,\x00', 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2000c805}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0xe6a10000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x3}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8}]}}}]}, 0x48}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x40) 2m2.469533117s ago: executing program 4 (id=5052): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3f000000, @remote, 0xc}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)="be58efede415a6d8eebc8d3973c929d9f9ba53166c5ea1a41025273cb200229e576422ed32b60fb51d27113feac64491ec3173d46215d8faa5effdd0499691fa3b52d686a48bd9cb1b75638d08e2a8354a15c1639d2b503af566f52667d29ff4c6383cb3e7a310938c49367313492d0dd9825f0791d070f149c4c430ba5af7a6f1573317547d15ce05b0ff4efc61a6ac6c5c40222822946c56ec3138427ba6ccd193b544a3dc349685bc34404578d02f9cafd340baa3b131803dfacae474ad145618a78eb762fa915094d7ef0159581c70ac28e5c9146ecb1acd901acff221a1deca6b30c2e8e14bbda223e1a69763fef3a8269deeacf6749998313c799b6cbffc1d827517e90dbde391651f652dc63ccb2083430072780bd668b5a07e4844f78df3ed18449ab485c59a887c817a087cadef33e56edfd83ec35fabb2e199201ef9db8a0ea3ecaa7a40f23bf3d769826a6c1822b3cf4d64db8795c6dab2244bfb83b066f96676d77a01d87d3a4a97930da9e6ee8a3fa66cc0fdb3eb7c08b7653824da0d40a57a808a7e076d77b8fc8f7ea529d0742d6835272acf4814aa35e748d2e430d2c341c6a328c7e4297619e4cc136267aab004b3492d1426a8601e62a08af11417225b2430f92ce24d8e541e014b0dc02390923f82648da017ee8813b3b14966c6085004fd640bccf349dd9559db962f22438f47e0a24a2f3cf7497b24f749352a7faa7521f98108906b91259d17fff23d353d1a9c52f4b355c02931b02a88ea6f65418df7f8c6d82a646c37bd3d60ba240f9dcc0ac016e75ef4dd77a23b338e979a88847856b8ee104434927c8ba34de24e6e2f161df1001540ce4140c25c0607c87625539714ce3aa4dbfe44b5d6c6d358071ae7a028142f3a6c35eb71ccd320404e5c89e80ef3d5434c49526a98af6f557d7425797cd8b70d49f6cbd07bb074000733509d8d5c50f6536b325e9447cdfd137cbb091eee4cfc150daa044f144e4ec1983f9263883af18e2b3c23eaf8a6e7924c6df4be5c9ca786fa10597f2514a1a660453264db9d7895357f10f16b8fe89cbd5be995430e6eefa967ec91dbd2fe7826cc9cd78a75b4c87917d4ca89efce30dbf65ef44ced0518a67cb6be8eaaa02fce6a3129e3b5af1945a25d536db383d40ca7c588e1a71d860d1687a8907d0cf0e889ace3f78ef557dc6a4b61d17c4490fc1d1087f567abb1f38e9a0d1864cc5c2b12a782106643070a0c61469f07794181fcbb4db44c82e8d38c38a3ef0b6d0d8de08229a596aa42e9e2dba5b14200198c1fe993c1d46f646a422df4a6525b00f8b417b56faf208fb463e4f32e80c264e3bae563680f75414eefe2c58dad44d58d7d93865839e39023b790f3da54f5ba8195f37ee090f257c65017302a9e20681ccb746235149937049f3929f4527cd6cd8b157a7886d260de086340c32ed1ae3fe523cebfb92752bbbcca543b8cd6b2c253e1c37feb9317690409e8e1ab4bf261d5224041da41231af18a76e21e3cdfb133f8d240d23ec2cdf7ebc419750487d171b3917c2a84b2e0e9adb6cad30c54d18bd4dc1feed7717cd4b3808b5026b9b1f59e191860f9d14e0a8e8d4a4da2e6f87d075bd8d18f75b834944bb5054807387ac3937819b9baa510ecf3c8fea83a174df66988997421e52415693d4bca8591e3d7d7a3060801e0f6e67ad6f5c08b1615a618cbb07d61d077c0ebfaf7f6e8b87acfb49d0deb738604c5a998e6b55fbc2ea6a8b692a5187b948364141aa351446aa4e65323dd3ba930e9c69f7f1c958e96474c19425e8f03d51be99ef45ab0266a1972cb6eda3e933c9cab0ec1414d6a4904111abbce34fdc00cdfa3894d6ef155b66afd7179bf538cee028fc93d975f55937fdde9613c337370af8a83c59d25e498d46fb9687342dde857530112c1e3ba07f6a0eb1a2e1acd7a8889c94c33206e625e51d4b65189509e3d70598102af10eaea061d799f4d04c91c37eb7d70512aa7eb1187ead517168802ff38d955affe02a43b95a0c6d02cb97d70d4ef91c3c431eef77df1518c3086e6e681dcc7a2a26bcd3f4fb7fc907b04ffdfa351eb9ebe97b77e0eb8886d31bd5ff2743878e473c8840120f5be00bfa8b5b405f3423f3f574b3f60d58ffa563a35a7153330702efd66bbc287487dd7258f18fb7f1449a64bb7fc39d213f3e8c8496960593d6a0cce828140b0292d75012a585396cfcafecf5c4bfd4cf2eb8eb3e6339844cf04e5d396faefc840106bbc18a1b0315a62d4b8c894762166dc6d9d6501075a92293a5f105b421a467ca61eab8625b051a70689c6afc73ed6eae421b5155f7c0e860231e14ae5eb2056933980e8bb4ce2d8d2512bc547409391d87bab3b74ca2fa449fce8be4f4ab7cc03dba17803c0aac6628f7fcfc04880af7ee384517c28c01c98a051dccfef6d253fb112370d3b8ebd41bb832e382106061e084e4d81894a69a51a70880d8370bd027d73653a7b71f2a706409dbadb9acfedb271b45d400a8f36a8dfe5b481bbb30fc07781729ac5144805a16cc4c4683e6352fb85d8869629f0be1767799ba38ab3d3c241604911b83ac16b8f6cb4362df31f99100db252fd71a786eef015c7876ff3c801d7ea8939a8cb26bad72a7171f9315c98bd45c0f0aa21d10bf206253bf7563b595cb781fd42ac2a7e3581ad8318512d6cc7721b9aab18a3827efc3b96f7c3c43e62ce6d633c6c2e53c4a53fac4495c84a2652ab386b512e15278474070187062f0111ef143d1e6ba226c38c94b45a2fa38ac4a365cd582f6ae9ee624d2a076c4e9daf492e7ff7f225932179bec47d216cb80fea9ea72cc1a0a7d86f0bd03b403acaf2db7411912bf872e39b8745057cac3f8f2a6ff54b42d63e81abc7886a2245a3ee03cfc124a05dd6050eeb39f6a6f95d393c687f1544f123c054e34263319ed6c42554c1a73c251f0109d54813c63679d82d8480bec38c842ab5f6d6a8d49f0450f29254bce6e6c4800f1ec1a49add35075ab7370f86e94120a8499689495818d18f663c611d0bdd06fa0e0441c09cb299228ecbc52d6b2f5eae238442aa8002973d196a0763a1ce70e8c94addf75d8332d25336d3671e1b04b5aa695d36787c81b580f034e5a5378d61e1a467890d89943b2a734d79aebd6c3f32b25fe05453dc6caaef9308f7a8bfd9476edf1ccccaab364c606141d711b3770cf74565dcb89be7bdf0d3f209e13b6947867b77b404fa972470fa4f7b422aaf9e62e67d7f6de9558cff741b021ebe312aab0cbb9f6e640b9c6f12016f4c442b4d9c4c2eb334ebf77d2302437d132ac672ec91b0b328212ecb6f312f4aa990be0b52bc7800b2eacad48bc15c7d671ffaa2a8475c31df0fe0293a34a29a687f331fde39260c77fa1ba3bdd87b4badaa5e0c9b920e22dfaefa7f2453c897a68091ade1c78220e5c4515c4f37549920668ca2421e53b7325595aec0f0f654b796f757bc13dfce470c6b7b1e5d8e3f498d75afdcc6f6f3bd3c715fa1c13fd8ab5cc95938dfc0e5c50a917ed69dccae2f6bf05784dfcca8c66f7618c2931686f3e356d00a331e7f9a380f73b88fb4057c5160bca1bf8f8c2f63d3530e1fe9198e56426bce8caa78c6f40ed443dc9d753ecfbf64f991890844114f23e52fde04f1800c5b31185b584fb8938b9362389591c502efcbbeb8e6c31f8a9eaae5a3eb56823596ad2ccb7aa60395405c9a2aa22d45180311ce68b790dc59bf20cd979afe13e7820ccb8d0020e3dea14ddb9179a0766b6d1684338346b3629ab801ca9f0b018ea16fcd31e5e70403bc266179e898b055d9c1a8fdfcf91248d11b12c3d9c4d55c634a16be570825e7ea6ba7d7bbd4c6b4b9fc57f014d6a2c4a28aa547d05ff2d60c38251e0ec54ca2adc1bfcd1ddea66acd9bf87c737ee8985d430309fb0dde8e749a2e60cf400488e1202634e4f7dcada1ae0291a2b16d8b46471fadcf0a32fcc919d8370b0de4e3c388f4c420a7ef37e6d2579a330c011e8122bc8b5ae27d0272c4dae5dde4b1bb3eb7ed2686c4cac77b3b4de425048504f3ecd4394a4808d1f934309a7081aadd7a719cef8526bfc9bc1224e0d0753e28063bab156cccdde37ae98e4ed6a1e66959333bd0b559303d928fc86afc652b7f4eb44f4bdebdcbc408b94438676e3d31869dfc7fddc9d2747a321f80590616cf72ed56ab227957bca8953aa8b0e6c3e7d49277902af9be7704aba7489e66e84e221e0d42403a08e693f32264670ff146817b06f0f57abdfe719e4748fdbdbfccc7018a56749e6f544c941d196137cf45e895989d29619980d193ede69324d5b249d1167aeb7aef3469b48ed0d9ae1de8a9a4d55ff65d80e1d88f0fccf5477f448585c8cc707d70486fc5933c5f3d9e7ff51fee6bbac5d2d586529082ac4c5bc97ed1cd731a6a1b9bd2ae59cc7e5d14f8bd83a0dab69ca8c473b8c3bdc9d455feeb995bb57ddb682a9848bc9da7c583136be3d821543b8b41dc0c739793e7f1094e881240c135658b6eaaea21b9b4f8b713b0ede4dca4bfbb8fc6712bfb87f9dcdb6c41e7d55fff6822a6fe9a275d9c562c0d17f8d967925bcd77fef2398c408308a12a118f3ee04184cf38a8688244899cfeb086e2b6a676fd1726a6aa1b728cff8345a6fbf7085e6e3ecf2c2f02c07bf3287a73ef24f44915f4921a127480a160fa587262febefdcbe85245eeb80cbf1ef1a9d24fb22fa930c1a4a2a67c73c0734feba5bee8338c19feae1e9142ea2d064453e5ab16e83de3684106bb48d6fbc3f928ea7899544770b4b25fc3b0d53ce9a406b16bf617bc4ad440fb7eebe85a3fdd3070e5e89872de4cf0cfcbaeb81887e05e7b5c6d134efdf0e3f0a9a8e40535286e3304d13efd05b7f2507b44a230c03baf98058cfde0c6bb8f10253fb9eca3e7ea372de475b9f0c061e2ada664734d775bc60d9529bb7b4787ce0f6586a291d82284c4b64b0d455bc5d4941ff699b74472df6abf7b73d14c3a340d9402933eeb498e44ae7bae2f41508e15e84df92afb022370cd6b83918ebf293245d2336949d49ced47e09cdf509d4201d65c5434d78a836b2175c3a87330f0acd6062fde2c33e90c5799c29c53250cb298c2f43b7a40e11f7ce7a52b6046acdb510eb12e909bc7841b6b35d20182a33e8a8dbe915b97524c121926db5e9a458498631e0d001ff22c5a2a8171d8a519aa9bd492fe153c27ce65c97002ee18e5174af33d9e4faccff9ccb68213902c422e4828d924239329f9d7a7c44f96399e9cd60e21028dafc9032028cf8e20880d6d3938766f44c2a0d3d6a9e972b47e2ab602a5500da82dd9a275bfc10438e42e939379f2866afa76c050f82819b8f359bb85294421c9853415d04ae91ebc6df4e9064b15432bd02532046a0b75a16c4b160ec428656be3d8826f368e2a8f29e787cf9cfe408141ad047fa2ad13dd42d6cf415a64f65ee91ac14c62f993e01b9972f160a32d8eb3169fb3cd96dac3f9cf272425c17781203cd928db56e3fb8d76ae9ccc01daa8038bec7864802a641c9518be2bedb8e9cef9500a0fe40e2da488fd9158820fb6d26ea45c035b42167b4c951d5b48e2eabafb1001f2e36eb00ca9280177f982f13558e6e10a9aeb5596e88b0444ebd24d0e0cc24d1f187801f6fd4f7112f8c6083f1ac01add72a4ce1c06f956947854a0b5a7886c488835638349d96e1b2c306c248a47b5c3bdb2e7288ed77798ae1af59efe48fe4dfedf0b096e9e5eb6e980d1628ac012b011a5adcc9333a3f3effd2d62fd0aa8bd5acbd6", 0x1000}, {&(0x7f00000001c0)="7b8212a0c132f16dac2bb2d5b15d384d0e712ed6630606644f8ce809d9b2d6f6c5db11a9683d54d93dc03345cd15282e75849e8f771cf7c41b62fdd72a510eb8751d4fbd7aa5900945ab6ce4a325c0bc81d0364aae45f0d2cc1543d0c7a71d6b74135fc5436d3a1ac6cdb7573f1e505f04c136af42a0dfc53d1ea0af68222de4571197c222ccd977f7a61e43b55ce8fa36b3a68a1eb9b9735117dc9c6df9d57218c2d5476a9f5a1edc73fb7613477a95b39020f9e5fa6c75eb9c4f4b49e8c6a1cee8938d91c7830d52dd4b764e489a94cdacb97bdd3b1d56fd38d74ddf2a56d6ff50bdd2ae1f97d6f0c39d9419aaa545ac80", 0xf2}, {&(0x7f0000000080)="9a65abe8e23e312dbb39cc6c196333bfce36d4b492300e4a013a1c97cb8fbbcd9ad4662d6e2feab9dff1ccc600f8", 0x2e}, {&(0x7f0000000440)="565c78a5a1fc336e5c1f0afddb2e9c53242426def0b3c1ff2f7a8ac8c95f9c4ffc2f26d79f4476681c7c9d82baa05227ff", 0x31}], 0x4}}], 0x2, 0x8008801) epoll_create1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r4, 0x7}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$loop(&(0x7f0000000d80), 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m1.435385028s ago: executing program 4 (id=5062): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x5, 0xfffffff9, 0x720, 0xfffffffa, 0xa85a]}, &(0x7f00000001c0)=0x54) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x114, 0x5, 0x0, 0x4) syz_usb_control_io(r0, 0x0, 0x0) r4 = memfd_secret(0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0xeeef0000, 0x1c000}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) 2m0.172525998s ago: executing program 32 (id=5062): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x5, 0xfffffff9, 0x720, 0xfffffffa, 0xa85a]}, &(0x7f00000001c0)=0x54) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x114, 0x5, 0x0, 0x4) syz_usb_control_io(r0, 0x0, 0x0) r4 = memfd_secret(0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0xeeef0000, 0x1c000}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) 9.973486345s ago: executing program 5 (id=5403): unshare(0x4020400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x20020000) unshare(0x22020400) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x6400000c) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0)=0x100000001, 0xffffffffffffffde) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x14) write$FUSE_INIT(r0, &(0x7f0000000380)={0xa0, 0x0, r1, {0x7, 0x27, 0x9, 0x801001a, 0x66d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x8, 0x0, 0x0, 0x103, 0x6, 0x7, 0x40, 0x43, 0x40, 0x3, 0x7, 0x0, 0xd68, 0x0, 0x0, 0x3, 0xc0, 0xf, '\x00', 0xe4, 0x9}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x0, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 9.629968719s ago: executing program 3 (id=5406): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x5015, 0x0) 9.267255966s ago: executing program 5 (id=5407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0xfc, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000e23000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x800000000000, &(0x7f0000000100)=[{0x3}], 0x1, 0x0, 0x8, 0x0, 0x0, 0x5c}) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1459, 0x8, 0x30f8d7a1, 0x28, 0x5, 0x8}, &(0x7f0000000400)=0x9c) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000002000)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x80000000, 0x28, 0xfffffff7, 0xe, 0x80}, &(0x7f0000000440)=0x98) (async) sendmsg$inet_sctp(r2, &(0x7f0000002180)={&(0x7f00000021c0)=@in6={0xa, 0x4e24, 0x9, @private1, 0x20}, 0xfffffffffffffd59, &(0x7f00000003c0)=[{&(0x7f0000000180)="499f22e86f5a1439b5eaa1901fcd2210c3dc45bf3007ee1b1b8c5e325015a4647740ec28ede243e654a0b359ea0a9866e0961853f1ab1f2c478108c396a66f57b908c1b766f42daffe367fb3d40b6b4a81107402d13e3e073fa7a953b53de3e2503081955ac5985509105206e0dc9089dc33f46b13b96de78409e8d4e3d524963fe61c1708cf1c3467f05fb758b2", 0x8e}, {&(0x7f00000002c0)="0bc26f21eacb8fee1390c2a76e3a8b40953f4176c593bab35716011a5c85d4dde10800000000000000f1588cf0d487530e85", 0x32}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="200000000000000084000000020000000f0008000200000090ea0000", @ANYRES32=0x0, @ANYBLOB="005f0a7f298c027b12878cf02dc5fd00000000b4bb24e221d620000000000000008400000008000000fc000000000000000000000000000000200000", @ANYRES32=r6, @ANYBLOB="20000000000000008400000002000000050002800700000030030000", @ANYRES32=r6, @ANYBLOB="180000000000000084000000050000001000000001000000180000000000000084000000050000001000000077000000"], 0xb0, 0x4000}, 0x44012) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6040044) (async) syz_io_uring_setup(0x127f, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x3, 0x1}, 0x1) (async, rerun: 32) socket(0x10, 0x803, 0x0) (rerun: 32) 8.812752346s ago: executing program 5 (id=5408): syz_io_uring_setup(0x1462, &(0x7f0000000340)={0x0, 0xbe93, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="60000000190001090000000000000000021800000000fd010000000008000100ac141400080005cab89fb284b2b57e80300800f2ffdf00000206001500060000000c100d283da6a800168005864c00000000000c004826d6641b5840b2ec77d37090bf86a3d01bbf19f5f2698ab5aebd1cdc6a01f3f2d18971d93ede770e2ba8d15ac62f9e10202d1d9bf8baf045d01474d79e5b5a45568a9a1f119307000b53df8ee76769d05866cbe804b96f160492143e5f290172338dcd05aebde6d816d198f3e472b077b4c8eeb65b0052df816623df5d4da266292d5f49686704be0074c840d7b8d132df2504250396cc464736128976b57865139ca7b1bb73aa5cd8ad7f646b247e94acf5bb7892", @ANYRES32=r7, @ANYBLOB="06001d004e210000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r8, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) 7.883284635s ago: executing program 3 (id=5412): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x200008002, r4, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES64=r5], 0xa0}}], 0x1, 0x4040815) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3b, 0x0, 0x3}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x400, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x5, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x8}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x400, 0x3, 0x0, 'syz1\x00', 'syz1\x00', {0x10001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket(0x400000000010, 0x3, 0x0) 7.653656864s ago: executing program 0 (id=5413): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) (fail_nth: 10) 7.615054252s ago: executing program 2 (id=5414): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000b00000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) read$eventfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xad, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x99, 0xff, 0x0, 0x22, 0x6}, {0x3fe, 0x2, 0x2, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x4, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x14) 7.103283741s ago: executing program 0 (id=5415): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f001, 0x1}) 6.079927742s ago: executing program 5 (id=5418): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd"], 0xfdef) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r6, 0x2000, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @isdn={0x22, 0x8, 0x17, 0x7, 0x4}, @tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x7}}, @qipcrtr={0x2a, 0x0, 0x7ffe}, 0x200, 0x0, 0x0, 0x0, 0x50b7, &(0x7f0000000040)='pimreg1\x00', 0x7, 0x9, 0x7f}) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.68345195s ago: executing program 1 (id=5419): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x103a00, 0x3, 0x25}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x3}, 0x18) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000100)='$\\\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\xa2\'\x00', &(0x7f00000001c0)='}!*}\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='@)]&\x00', 0x0, &(0x7f00000002c0)='/+!,3)\'\x00', &(0x7f0000000300)='%\x00']}, &(0x7f0000000500)={[&(0x7f00000003c0)='-)\x00', &(0x7f0000000400)='\xdb!*\x00', &(0x7f0000000440)='&]#(+$*&[@&.r+\x00', &(0x7f0000000480)='*\x00', &(0x7f00000004c0)='\\\\}$.\xbf.-\\(\x00']}, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000001}, 0x18) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800200000064010101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.136821492s ago: executing program 1 (id=5420): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="260f799f050000000f35f3af66baf80cb87cdbde82ef66bafc0c66ed0f20d835080000000f22d8b805000000b9000000000f01d967660fdb19c7442400f0000000c744240252b30000c7442406000000000f011c24c744240000400000c744240200000000c7442406000000000f011c240f01c4", 0x74}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01060000000000000000090000001c0004801300010050726f6164636173742d6c4e04c257"], 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x8000203d}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 'queue0\x00', 0xa}) syz_io_uring_setup(0x73cc, &(0x7f0000000140)={0x0, 0x4a05, 0x50, 0x0, 0x190}, &(0x7f0000000200), &(0x7f0000000240)) 4.101229981s ago: executing program 3 (id=5421): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000e9ef1b4cbcf1ef0b4e5f21524802c044bbdbe115eb7c19dfa5201bc81ec63fb7188cebfa75f26aec2223e50e5a53437768e5cb127b2cef24ca1faed86e6b6aa8d262ae5e69ce9d2aec98cedc8e63e94c4f23c8c09314223f6f34df005b5b206a21393e389f", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1eceaab674ae0c0e01a9fb9eb8522a28cfada2959abe154b50911a16fca63e5772a2006ed41b0024dce4d77147009f6fb372cbdb1ef15fe9870b85d81d4a5e78fd51d6d5134e1c1f344c0e3c3981cc93c93f13757c72bee976686f09d94af610594192466f4c8b5ba7a4a78eb9899e5a75dce761a4faa200fb0ccc87d7621c9dd38d4f6696deeb75287689c6209317439db1a1b1e21e204e90ef5bd759381c25446dbc6f5d13552f8b138a2c32acbcf3d94df04b83d459f7db180cd20d57c359b4a6d7a140cd48c2a5bb", @ANYBLOB="00000000040000000000831b7f810000b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ed61a03fc316d5d47970907af5fc4a27f6cf718909"], 0x20000600}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) 3.936429015s ago: executing program 2 (id=5422): r0 = socket$packet(0x11, 0x2, 0x300) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x80010, r1, 0x0) unshare(0x20000) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES32=r1], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="2a9a6ac53efe9d404f51b227a9fa9accf30b2622c7551202a988d55dd2012c1e4bc039bf1f635390c80fba3b2abe64af7da0f81119a3621cda307e62e9e9413d77f630ba192d98d53dec5e102aa143785292b6b50ab76697df", @ANYRESHEX=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="c30d6cc41d240629077f79f1ee38de69cfcc7a0abf45", @ANYRES32=r0, @ANYRESHEX=r4], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) 3.499217075s ago: executing program 0 (id=5423): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000003c0004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="0a000200bb"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 3.257095435s ago: executing program 2 (id=5424): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="66660f38819361b536d84d0066b9800000c00f326635010000000f3064daca0f7816814a642e0f2342670f35f2a526f2aff30fc7b03d7b", 0x37}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x80543, 0x23456}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) eventfd(0x3) (async) r12 = eventfd(0x3) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000280)={r12, 0x800, 0x2, r12}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r12, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r12, 0x1) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.143208282s ago: executing program 0 (id=5425): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060102"], 0x4c}}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xc8, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x4, 0x10, 0x101}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x2, 0x1, 0x7}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x5c, 0x0, 0x8, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x2b0b, 0x5, 0x5, 0x1}, 0x5}}]}, {0x25, 0x6, "a94ea8cd2c456f46b73d2f1ac29d83f865a819e50400b3d23efd1d2a87d8037aa7"}, {0xc, 0x7, {0x48022b82b4dfdb53}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0xa4, 0x15, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff0d, 0x8, 0x10000002, 0xfff, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x10000000, 0x0, 0x7}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x7, 0x10000000, 0x9, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x3, 0x1, 0x9, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_io_uring_setup(0x81f, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.076527862s ago: executing program 1 (id=5426): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) chmod(0x0, 0x93) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x100000000000000) fcntl$setstatus(r2, 0x4, 0x42000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) syz_clone3(&(0x7f0000000ac0)={0x10100000, &(0x7f0000000000), &(0x7f00000006c0), 0x0, {0x6}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f00000009c0)=""/139, 0x0, 0x0, {r3}}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.88080395s ago: executing program 0 (id=5427): socket$nl_xfrm(0x10, 0x3, 0x6) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x2000, 0xb2) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) r1 = io_uring_setup(0xad7, &(0x7f0000000180)={0x0, 0x2efd, 0x8000, 0x0, 0x3d0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) close(r1) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x1ff, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000280)={0x77359400}, 0xfffffffffffffffe) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x3, 0x1800}, {0x0, 0x9d2, 0x1000}, {0x0, 0x0, 0x2000}, {0x3, 0x1, 0x800}, {0x1, 0x8001, 0x800}, {0x0, 0x6b62, 0x800}, {0x2, 0x1, 0x1800}, {0x1, 0x2, 0x1000}, {0x3, 0x4, 0x800}, {0x1, 0xad3, 0x1800}], 0xa) 2.271384148s ago: executing program 2 (id=5428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "88e834a1", {0x3, 0x107, 0x0, 0x3, 0x2, 0xf, 0x5}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) 2.115896002s ago: executing program 1 (id=5429): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r0, &(0x7f0000000280)="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", 0xb7e) mbind(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x6, 0x8b, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000005680)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (async) write$dsp(r0, &(0x7f0000000280)="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", 0xb7e) (async) mbind(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x6, 0x8b, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000005680)) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) 2.105055554s ago: executing program 5 (id=5430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xf93}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5278}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r6, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x1, 0x9, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000, 0xa000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_NMI(r8, 0xae9a) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x2, 0x0, 0x100000, 0xb, 0x401, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x100000001, 0x2], 0x0, 0x281}) 1.931497818s ago: executing program 0 (id=5431): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="43c7ed294cbc57f58b2e4666d91815d0a3701b274b2626a1", 0x18}, {&(0x7f0000000100)="ede147b1e9586c88dc83ab527c0afdc95e6898e58fc9b8f37896177ddbaec9e37ac700adcd82101a5205973b8e8ea441f18c3a78f6f15721671f251611183bc8c2581f285cf22134ef341ae2c82187000240fb0d618d924f2aec81dcf1e3", 0x5e}, {&(0x7f0000000180)="0fcb7fe33f89b70deb1ffb36f12fc6d1f9180f61807d5ab64498c36117b3692535a4467fcbe3cd343d10745c152b0a8a2bbb7c9ae86fe1be010fcdb3f6a91b8a7ca019dc7176087ea3f9744051bc663b192db31c43a311e36a1f67ababd4a0a5c042ed528952e254747d94d4015b4f707c0a9c2aa3", 0x75}], 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) 1.672576819s ago: executing program 2 (id=5432): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x8080) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x4a8, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x5, 0x9}, {0x4, 0x7}, {0xfff1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xfb}}, @TCA_CHAIN={0x8, 0xb, 0xde}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x458, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xffff}}, @TCA_ROUTE4_POLICE={0x44c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x2, 0x6, 0xd, {0x6, 0x1, 0x7, 0x1d, 0x1f7, 0x2}, {0x5, 0x2, 0x4, 0x5, 0x728, 0xffffffa1}, 0xcd4, 0x8, 0x200}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xfffffff7, 0x7, 0x3, 0xe, 0x9, 0x8, 0x401, 0x4, 0x9, 0x2, 0x8247, 0x70be, 0x0, 0x4, 0x7, 0x3, 0xffffffff, 0x7fffffff, 0x9, 0xfff, 0x3, 0x2, 0x0, 0x1, 0x1, 0x6, 0x10001, 0x8, 0x7ff, 0xae, 0x9, 0x10001, 0x1ff, 0x10000, 0xf1d, 0x3, 0x4, 0x800, 0x10, 0x9, 0x5, 0x80000000, 0x1, 0x8, 0x6, 0x5, 0x4, 0x1, 0x8, 0xfffffff8, 0x3, 0x1, 0xfffffffc, 0x665, 0x1, 0x32000, 0x3, 0x7, 0x3ff, 0x101, 0x76, 0x6, 0x3, 0x8756, 0x2, 0x1, 0x9, 0x7, 0x1, 0x0, 0xfffffffb, 0x400, 0x7, 0x2, 0x7fffffff, 0xf9a7, 0x2, 0x7f, 0xedd, 0x6, 0x4, 0xffffffff, 0x8, 0x4, 0x7, 0x3, 0x8000, 0x7c9d9129, 0x5, 0xffffff81, 0xb10d, 0xf, 0x1, 0x5, 0x2, 0x81, 0x2e37, 0x7f, 0x7, 0x9, 0xfff, 0x4, 0x5, 0x6, 0x3, 0x80000000, 0x5, 0xd9, 0x9, 0x65, 0x100, 0x8, 0x2, 0x7, 0x6e62, 0x10, 0x180, 0x0, 0x401, 0xd9c2, 0x0, 0x10, 0x4, 0x1, 0x2, 0xf09, 0x1, 0xfffffff7, 0x3, 0x9, 0xfe, 0x7fd1, 0x3, 0x2, 0x3ff, 0x2, 0x9, 0x5, 0x1, 0x40, 0xfffff202, 0x0, 0x2f4f, 0x4, 0x2, 0x101, 0x8001, 0x3, 0xb, 0x6, 0x9, 0x4, 0x80, 0xb5, 0x98f3, 0x4467, 0x2, 0x7ff, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x8, 0x3, 0x5db, 0x8e79, 0xffffff81, 0xba5, 0x3, 0x6, 0xfffffffb, 0x9, 0xd26, 0xc, 0x953, 0x468, 0x9, 0xa2ef, 0x6, 0x8, 0x1, 0x81, 0x1, 0x1, 0x0, 0xff, 0xf, 0x40, 0x4, 0x6, 0xdf, 0x2, 0x81, 0x4, 0x1, 0x3, 0x81, 0x3, 0x0, 0x7, 0x1, 0x3, 0x744b5996, 0x0, 0x4, 0x6, 0xfffffffd, 0x4b3, 0x8e2, 0x7, 0x40, 0x10000000, 0x80000000, 0x8, 0xe6f, 0x2a6, 0x0, 0x3, 0x4, 0x6, 0x1, 0x4, 0x8, 0x0, 0xb3b, 0x5, 0x2, 0x5, 0x7, 0x3, 0x4, 0xff, 0x7, 0x4, 0x1, 0x0, 0x10, 0x2, 0x837, 0x3719, 0x8, 0x0, 0x4, 0x101, 0x3ff, 0x2, 0x3, 0x5, 0xfffffff3, 0x9, 0x0, 0x7, 0x10000]}]}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x44084}, 0x0) 954.7669ms ago: executing program 3 (id=5433): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc028020", 0x12) 847.638176ms ago: executing program 3 (id=5434): r0 = socket$packet(0x11, 0x2, 0x300) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x232d0000) unshare(0xa80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) 767.58078ms ago: executing program 1 (id=5435): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000003f0004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="0a000200bb"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 515.738015ms ago: executing program 3 (id=5436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x218, 0xf0, 0xfeffffff, 0x218, 0x218, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x10}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}, @common=@set={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e24, 0x4e23, 0x4e24, 0x4e21, 0x4e24, 0x4e23, 0x4e25, 0x4e20, 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000140)={0xa, 0x0, 0x4c44b40e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000001040)="81", 0x1}], 0x1}}], 0x1, 0x20000004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 115.276075ms ago: executing program 1 (id=5437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400128009000100626f6e64000000000400028008003a00263840"], 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io(r6, &(0x7f0000002780)={0x2c, 0x0, &(0x7f0000002400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "58aaceed8016ce7d", "5e75ffba9fd51861928b043bf1f32df3", "b4f6c363", "186787dc23d84d64"}, 0x28) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800290041010000080028"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x4, 0x658, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x1, 0x10, 'veth0_to_bond\x00', 'vlan1\x00', 'macvtap0\x00', 'veth1_macvtap\x00', @random="f785c6ee720d", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x4, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xe1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x3, 0x88e7, 'veth0_to_bridge\x00', 'macvtap0\x00', 'pim6reg0\x00', 'bond_slave_1\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff], @random="79d5c7512d23", [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xfc, 0x4, {0x8}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x6a, 0x80f3, 'veth1_virt_wifi\x00', 'wg2\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="871a8ee756e7", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}}}}, {0x5, 0x45, 0x88f8, 'team0\x00', 'gretap0\x00', 'wlan1\x00', 'sit0\x00', @random="e4d3e53e4641", [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xde, 0x1ce, 0x246, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x1, {0x7513}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xff, 0x7, 0x7, 0x0, 0x0, "5bf23eb6478f0167675576ccdda603c4d36a15778d66c056d357e627a4f56bb9b8047ddef1179ebdc640b2e8c8bf6dccdcf148c20d634917dfe98ad366dc6cbe"}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0xd, 0x400, 0x5, 0x1, 0x0, "2b1b713547b984da09b60d1496c66a4fae5453d0186e18cb1367a8012922a9deec1861df5348cac1c81ba8da1aaf52094c77e6131948567e57811e148c806d71"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x63, 0x1d4d, 0x4, 0x0, 0x0, "e702494cdb6a827eed8c7d9e602672246da459e4d7aca8b08be8208951e544cf69d7d1dac211c01a61e95c8c7c54edab7902c36656801d688a60d10fc34c66b1"}}}}]}]}, 0x6d0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xffe0}, {0xa}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x7a, 0xff, 0x37}]}}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 67.789997ms ago: executing program 5 (id=5438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006680)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0xdf, '\x00', 0x0, r0, 0x5, 0x2}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002940)=r1, 0x4) clock_gettime(0x3, &(0x7f0000006880)={0x0, 0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) close(r4) link(&(0x7f0000006740)='./file0\x00', &(0x7f0000000180)='./file0\x00') recvmmsg(r0, &(0x7f0000006400)=[{{&(0x7f0000000080)=@ax25={{}, [@remote, @remote, @default, @default, @bcast, @null, @default]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000200)=""/62, 0x3e}], 0x3, &(0x7f0000000280)=""/46, 0x2e}, 0x101}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f0000000440)=""/28, 0x1c}, 0x200}, {{&(0x7f0000000480)=@tipc=@name, 0x80, &(0x7f0000002840)=[{&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/117, 0x75}, {&(0x7f00000026c0)=""/125, 0x7d}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/120, 0x78}], 0x6, &(0x7f0000000500)=""/51, 0x33}}, {{&(0x7f00000028c0)=@in, 0x80, &(0x7f0000002940)}, 0x6a76}, {{0xfffffffffffffffd, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/160, 0xa0}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/232, 0xe8}], 0x4, &(0x7f0000003c80)=""/38, 0x26}, 0x2}, {{&(0x7f0000003cc0)=@alg, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/155, 0x9b}], 0x2, &(0x7f0000004e40)=""/86, 0x56}, 0x5}, {{&(0x7f0000004ec0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006240)=[{&(0x7f0000004f40)=""/2, 0x2}, {&(0x7f0000004f80)=""/170, 0xaa}, {&(0x7f0000005040)=""/247, 0xf7}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/200, 0xc8}], 0x5, &(0x7f00000062c0)=""/137, 0x89}, 0x2}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006380)=""/38, 0x26}], 0x1}, 0x8}], 0x8, 0x12120, &(0x7f0000006640)={r2, r3+60000000}) bind$netlink(r4, &(0x7f0000006700)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x26, 0x3, 0x0, {0x2, 0x5, 0x0, '^/{]]'}}, 0x26) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000006780)=""/162, &(0x7f0000006840)=0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006680)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0xdf, '\x00', 0x0, r0, 0x5, 0x2}, 0x50) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002940)=r1, 0x4) (async) clock_gettime(0x3, &(0x7f0000006880)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) fchdir(r4) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) (async) close(r4) (async) link(&(0x7f0000006740)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) recvmmsg(r0, &(0x7f0000006400)=[{{&(0x7f0000000080)=@ax25={{}, [@remote, @remote, @default, @default, @bcast, @null, @default]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000200)=""/62, 0x3e}], 0x3, &(0x7f0000000280)=""/46, 0x2e}, 0x101}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f0000000440)=""/28, 0x1c}, 0x200}, {{&(0x7f0000000480)=@tipc=@name, 0x80, &(0x7f0000002840)=[{&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/117, 0x75}, {&(0x7f00000026c0)=""/125, 0x7d}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/120, 0x78}], 0x6, &(0x7f0000000500)=""/51, 0x33}}, {{&(0x7f00000028c0)=@in, 0x80, &(0x7f0000002940)}, 0x6a76}, {{0xfffffffffffffffd, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/160, 0xa0}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/232, 0xe8}], 0x4, &(0x7f0000003c80)=""/38, 0x26}, 0x2}, {{&(0x7f0000003cc0)=@alg, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/155, 0x9b}], 0x2, &(0x7f0000004e40)=""/86, 0x56}, 0x5}, {{&(0x7f0000004ec0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006240)=[{&(0x7f0000004f40)=""/2, 0x2}, {&(0x7f0000004f80)=""/170, 0xaa}, {&(0x7f0000005040)=""/247, 0xf7}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/200, 0xc8}], 0x5, &(0x7f00000062c0)=""/137, 0x89}, 0x2}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006380)=""/38, 0x26}], 0x1}, 0x8}], 0x8, 0x12120, &(0x7f0000006640)={r2, r3+60000000}) (async) bind$netlink(r4, &(0x7f0000006700)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) (async) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x26, 0x3, 0x0, {0x2, 0x5, 0x0, '^/{]]'}}, 0x26) (async) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000006780)=""/162, &(0x7f0000006840)=0xa2) (async) 0s ago: executing program 2 (id=5439): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) kernel console output (not intermixed with test programs): tered promiscuous mode [ 1532.260066][T25955] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1532.267284][T25955] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1532.278475][T25955] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5090'. [ 1532.295561][T25861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.331014][T25861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.366252][T25861] bridge_slave_1: entered allmulticast mode [ 1532.414811][T25861] bridge_slave_1: entered promiscuous mode [ 1532.542043][T25962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.560567][T25962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.879423][T25861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.021317][T25861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.069289][T16707] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1533.175877][T25861] team0: Port device team_slave_0 added [ 1533.260091][T16707] usb 1-1: device descriptor read/64, error -71 [ 1533.266468][ T888] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1533.268950][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1533.301465][T25861] team0: Port device team_slave_1 added [ 1533.462490][ T888] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1533.503517][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.520530][T16707] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1533.551769][ T888] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1533.584336][ T888] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1533.597229][T25861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.613919][T25861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1533.615012][ T888] usb 3-1: Manufacturer: syz [ 1533.719029][T16707] usb 1-1: device descriptor read/64, error -71 [ 1533.727359][T25861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.751267][T25975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.770012][ T888] usb 3-1: config 0 descriptor?? [ 1533.782705][T25861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.788651][T25975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.818439][T25861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1533.829360][T16707] usb usb1-port1: attempt power cycle [ 1533.844453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.920974][T19347] Bluetooth: hci4: command tx timeout [ 1533.964044][T25861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.017067][ T888] rc_core: IR keymap rc-hauppauge not found [ 1534.023252][ T888] Registered IR keymap rc-empty [ 1534.030040][ T888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1534.095745][ T888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input108 [ 1534.195841][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1534.229037][T16707] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1534.250887][T16707] usb 1-1: device descriptor read/8, error -71 [ 1534.299014][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1534.490011][T16707] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1534.541718][T16707] usb 1-1: device descriptor read/8, error -71 [ 1534.679482][T16707] usb usb1-port1: unable to enumerate USB device [ 1534.771139][T25861] hsr_slave_0: entered promiscuous mode [ 1534.840183][T25861] hsr_slave_1: entered promiscuous mode [ 1534.996322][T25861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1535.137383][T25861] Cannot create hsr debugfs directory [ 1535.338936][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1535.413025][T16707] usb 3-1: USB disconnect, device number 33 [ 1535.665176][ T888] usb 4-1: USB disconnect, device number 28 [ 1535.713769][ T888] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1535.892291][T25993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.069606][T25993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.295491][T26007] loop6: detected capacity change from 0 to 2560 [ 1536.331087][T26007] buffer_io_error: 19 callbacks suppressed [ 1536.331100][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.379008][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1536.401034][T25861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1536.505676][T25861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1536.529410][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.566354][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.576582][T25861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1536.597082][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.672423][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.685389][T25861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1536.783364][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.959107][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.967125][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.996284][T26007] ldm_validate_partition_table(): Disk read failed. [ 1537.005088][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1537.041711][T26007] Buffer I/O error on dev loop6, logical block 0, async page read [ 1537.084586][T26007] Dev loop6: unable to read RDB block 0 [ 1537.149397][T26007] loop6: unable to read partition table [ 1537.198661][T26007] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1537.250501][ T5216] ldm_validate_partition_table(): Disk read failed. [ 1537.257570][ T5216] Dev loop6: unable to read RDB block 0 [ 1537.322807][ T5216] loop6: unable to read partition table [ 1537.354801][T25861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.377474][T26022] netlink: 'syz.1.5099': attribute type 1 has an invalid length. [ 1537.418926][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1537.428663][T26022] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1537.523274][T25861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.645127][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.652352][ T8318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.735695][T17682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.742932][T17682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.087856][T25861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.152401][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.159087][T11545] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1538.303898][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.316841][T25861] veth0_vlan: entered promiscuous mode [ 1538.351685][T25861] veth1_vlan: entered promiscuous mode [ 1538.372207][T11545] usb 3-1: Using ep0 maxpacket: 32 [ 1538.382100][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.394027][T11545] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1538.432185][T11545] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1538.456221][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.456315][T11545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.464194][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1538.474203][T25861] veth0_macvtap: entered promiscuous mode [ 1538.500509][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.525334][T11545] usb 3-1: Product: syz [ 1538.537517][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.548164][T11545] usb 3-1: Manufacturer: syz [ 1538.551086][T25861] veth1_macvtap: entered promiscuous mode [ 1538.563213][T11545] usb 3-1: SerialNumber: syz [ 1538.589831][T11545] usb 3-1: config 0 descriptor?? [ 1538.625176][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.642076][T25861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.676733][T25861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.689203][T16744] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1538.737844][T25861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.747744][T25861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.751882][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.780038][T25861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.788802][T25861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.800827][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.864250][T16744] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1538.876456][T16744] usb 1-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 1538.886033][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.909211][T16744] usb 1-1: Product: syz [ 1538.913478][T16744] usb 1-1: Manufacturer: syz [ 1538.916337][T26041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.936262][T16744] usb 1-1: SerialNumber: syz [ 1538.969371][T16744] usb 1-1: config 0 descriptor?? [ 1538.994603][T16744] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1539.017637][T26041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.028025][T11545] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 1539.045337][T11545] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1539.077832][T11545] usb 3-1: USB disconnect, device number 34 [ 1539.184844][ T8318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.204744][ T8318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.342832][T17683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.352613][T26048] netlink: 'syz.0.5105': attribute type 10 has an invalid length. [ 1539.371017][T26048] hsr_slave_0: left promiscuous mode [ 1539.409450][T17683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.418731][T26048] hsr_slave_1: left promiscuous mode [ 1539.471434][T26056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.483928][T26056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.499542][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1540.295354][T26078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.311008][T26078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.538975][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1540.703273][T11545] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1541.320930][T11545] usb 3-1: Using ep0 maxpacket: 16 [ 1541.334466][T11545] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1541.578927][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1541.800626][T11545] usb 3-1: config 0 has no interface number 0 [ 1541.820343][ T888] usb 1-1: USB disconnect, device number 39 [ 1541.978158][T11545] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1542.083137][T26098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5112'. [ 1542.127849][T11545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.309411][ T888] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1542.432725][T11545] usb 3-1: Product: syz [ 1542.444162][T11545] usb 3-1: Manufacturer: syz [ 1542.451163][T11545] usb 3-1: SerialNumber: syz [ 1542.477189][T11545] usb 3-1: config 0 descriptor?? [ 1542.481859][ T888] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 1542.496531][ T888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1542.595431][T11545] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1542.628935][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1542.676550][ T888] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1542.721165][ T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.749667][ T3498] usb 3-1: Failed to submit usb control message: -71 [ 1542.752548][T16744] usb 3-1: USB disconnect, device number 35 [ 1542.769512][ T3498] usb 3-1: unable to send the bmi data to the device: -71 [ 1542.840039][ T3498] usb 3-1: unable to get target info from device [ 1542.925520][ T3498] usb 3-1: could not get target info (-71) [ 1542.933723][ T888] usb 1-1: config 0 descriptor?? [ 1542.954005][ T3498] usb 3-1: could not probe fw (-71) [ 1543.405900][ T888] acrux 0003:1A34:0802.0051: hidraw0: USB HID vff.fb Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 1543.417325][ T888] acrux 0003:1A34:0802.0051: no inputs found [ 1543.432394][ T888] acrux 0003:1A34:0802.0051: Failed to enable force feedback support, error: -19 [ 1543.618115][T11545] usb 1-1: USB disconnect, device number 40 [ 1543.658918][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1543.717321][T26122] fido_id[26122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1544.042116][T26128] bond0: option mode: unable to set because the bond device has slaves [ 1544.698937][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1545.746396][ T888] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1545.748933][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1545.871165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.877967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.040378][ T888] usb 1-1: Using ep0 maxpacket: 32 [ 1546.088921][ T888] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1546.101809][ T888] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1546.120855][ T888] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1546.174287][ T888] usb 1-1: config 9 interface 0 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1546.245149][ T888] usb 1-1: config 9 interface 0 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 64 [ 1546.314782][ T888] usb 1-1: config 9 interface 0 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 64 [ 1546.394853][ T888] usb 1-1: config 9 interface 0 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1546.422746][ T888] usb 1-1: config 9 interface 0 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1546.448982][ T888] usb 1-1: config 9 interface 0 altsetting 9 bulk endpoint 0xD has invalid maxpacket 8 [ 1546.488947][ T888] usb 1-1: config 9 interface 0 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1546.521415][ T888] usb 1-1: config 9 interface 0 altsetting 9 endpoint 0xC has invalid maxpacket 15999, setting to 64 [ 1546.559084][ T888] usb 1-1: config 9 interface 0 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 1546.611812][ T888] usb 1-1: config 9 interface 0 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1546.708089][ T888] usb 1-1: config 9 interface 0 has no altsetting 0 [ 1546.778945][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1546.787488][ T888] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=f9.a9 [ 1546.837234][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.892943][ T888] usb 1-1: Product: ☗鞮닶巑쯂␑炪忥풭䃕쏿戴듗叺 [ 1546.902280][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.914921][ T888] usb 1-1: Manufacturer: ͦ谋눆䒐惊꬝豿ㅦᤅ⎅‫뜏餙憰⍈眸蟫्霷ᛙ卪⠅黑䰹ꥷ仕뇩᥾͕륽⎖㧏蜩瞎럺랕䘿⪶㐘튛鈰볚簞쩯Á킩쒃迌ᵧ艉⇃㫅頶젥簳闲驈⤼ڄ쳜开෥섴磳仈 [ 1546.947318][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.978955][ T888] usb 1-1: SerialNumber: В [ 1547.023253][T26157] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1547.044624][T26157] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1547.067917][T26157] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1547.412408][T26157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.529244][T26157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.647617][T26157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.790592][T26157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.818916][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1548.017801][ T888] usb 1-1: USB disconnect, device number 41 [ 1548.093363][T17110] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1548.276302][T17110] usb 6-1: device descriptor read/64, error -71 [ 1548.538964][T17110] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1548.588347][T26213] FAULT_INJECTION: forcing a failure. [ 1548.588347][T26213] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.604981][T26213] CPU: 1 UID: 0 PID: 26213 Comm: syz.3.5132 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1548.605011][T26213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1548.605022][T26213] Call Trace: [ 1548.605028][T26213] [ 1548.605035][T26213] dump_stack_lvl+0x189/0x250 [ 1548.605059][T26213] ? __pfx____ratelimit+0x10/0x10 [ 1548.605083][T26213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1548.605101][T26213] ? __pfx__printk+0x10/0x10 [ 1548.605126][T26213] ? __pfx___might_resched+0x10/0x10 [ 1548.605143][T26213] ? fs_reclaim_acquire+0x7d/0x100 [ 1548.605168][T26213] should_fail_ex+0x414/0x560 [ 1548.605195][T26213] should_failslab+0xa8/0x100 [ 1548.605230][T26213] __kmalloc_noprof+0xcb/0x4f0 [ 1548.605247][T26213] ? io_cache_alloc_new+0x40/0x100 [ 1548.605262][T26213] ? __lock_acquire+0xab9/0xd20 [ 1548.605280][T26213] io_cache_alloc_new+0x40/0x100 [ 1548.605297][T26213] __io_prep_rw+0x23f/0xd80 [ 1548.605324][T26213] ? __pfx___io_prep_rw+0x10/0x10 [ 1548.605343][T26213] ? percpu_ref_get_many+0x21/0x1e0 [ 1548.605361][T26213] ? percpu_ref_get_many+0x21/0x1e0 [ 1548.605387][T26213] io_prep_rwv+0x8c/0x3d0 [ 1548.605407][T26213] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1548.605426][T26213] ? __pfx_io_prep_rwv+0x10/0x10 [ 1548.605449][T26213] ? __asan_memset+0x22/0x50 [ 1548.605463][T26213] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 1548.605481][T26213] io_submit_sqes+0x90f/0x1c50 [ 1548.605542][T26213] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1548.605578][T26213] ? ksys_write+0x1cb/0x250 [ 1548.605598][T26213] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1548.605619][T26213] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1548.605655][T26213] ? __pfx_vfs_write+0x10/0x10 [ 1548.605674][T26213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1548.605692][T26213] ? __fget_files+0x3a0/0x420 [ 1548.605717][T26213] ? fput+0xa0/0xd0 [ 1548.605730][T26213] ? ksys_write+0x22a/0x250 [ 1548.605749][T26213] ? __pfx_ksys_write+0x10/0x10 [ 1548.605764][T26213] ? rcu_is_watching+0x15/0xb0 [ 1548.605786][T26213] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1548.605811][T26213] do_syscall_64+0xfa/0x3b0 [ 1548.605826][T26213] ? lockdep_hardirqs_on+0x9c/0x150 [ 1548.605839][T26213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.605853][T26213] ? clear_bhb_loop+0x60/0xb0 [ 1548.605871][T26213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.605887][T26213] RIP: 0033:0x7fa28db8e929 [ 1548.605900][T26213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.605913][T26213] RSP: 002b:00007fa28ea5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1548.605929][T26213] RAX: ffffffffffffffda RBX: 00007fa28ddb5fa0 RCX: 00007fa28db8e929 [ 1548.605940][T26213] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 1548.605949][T26213] RBP: 00007fa28ea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.605958][T26213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.605967][T26213] R13: 0000000000000000 R14: 00007fa28ddb5fa0 R15: 00007fa28dedfa28 [ 1548.605989][T26213] [ 1548.729333][T26220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.731577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1548.747081][T26220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.930643][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1548.952863][T17110] usb 6-1: device descriptor read/64, error -71 [ 1549.010034][T26220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.056636][T26220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.118967][T17110] usb usb6-port1: attempt power cycle [ 1549.166773][T26226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.195122][T26226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.399196][ T888] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1549.479090][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1549.499055][T17110] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1549.531530][T17110] usb 6-1: device descriptor read/8, error -71 [ 1549.551201][ T888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1549.591770][ T888] usb 4-1: config 84 has an invalid interface number: 151 but max is 0 [ 1549.624310][ T888] usb 4-1: config 84 has no interface number 0 [ 1549.639112][ T888] usb 4-1: config 84 interface 151 has no altsetting 0 [ 1549.659723][ T888] usb 4-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=32.ab [ 1549.670395][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.686980][ T888] usb 4-1: Product: syz [ 1549.714331][ T10] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 1549.726027][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.729775][ T888] usb 4-1: Manufacturer: syz [ 1549.745783][ T10] usb 1-1: config 0 has no interface number 0 [ 1549.764363][ T10] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1549.778810][ T888] usb 4-1: SerialNumber: syz [ 1549.787948][ T10] usb 1-1: config 0 interface 168 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1549.801444][T17110] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1549.845330][T17110] usb 6-1: device descriptor read/8, error -71 [ 1549.868342][T26237] ptrace attach of "./syz-executor exec"[17854] was attempted by "./syz-executor exec"[26237] [ 1549.910105][ T10] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1549.929623][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.987232][ T10] usb 1-1: config 0 descriptor?? [ 1549.992318][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1550.033746][ T888] usb 4-1: bad CDC descriptors [ 1550.041267][T17110] usb usb6-port1: unable to enumerate USB device [ 1550.074104][ T888] usb 4-1: USB disconnect, device number 29 [ 1550.105733][ T10] HFC-S_USB 1-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1550.316231][ T888] usb 1-1: USB disconnect, device number 42 [ 1550.843238][T26246] ptrace attach of "./syz-executor exec"[17714] was attempted by "./syz-executor exec"[26246] [ 1551.018924][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1551.940634][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5141'. [ 1552.059195][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1552.101231][T26261] bond0: (slave bond_slave_0): Releasing backup interface [ 1552.126867][T26261] bond_slave_0: left promiscuous mode [ 1552.138674][T26261] bond_slave_0: left allmulticast mode [ 1552.255820][T26261] bond0: (slave bond_slave_1): Releasing backup interface [ 1552.371762][T26261] bond_slave_1: left promiscuous mode [ 1552.539742][T26261] bond_slave_1: left allmulticast mode [ 1552.548264][T26261] team_slave_0: left promiscuous mode [ 1552.577395][T26261] team0: Port device team_slave_0 removed [ 1552.716749][T26261] team_slave_1: left promiscuous mode [ 1553.011429][ T5944] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1553.060179][T26261] team0: Port device team_slave_1 removed [ 1553.099520][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1553.305314][T26261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.319991][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 1553.332804][ T5944] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1553.344335][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1553.354626][ T5944] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1553.365794][ T5944] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.395528][T26261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.519813][ T5944] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1553.529239][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.636520][ T5944] usbtmc 6-1:16.0: bulk endpoints not found [ 1553.644343][T26261] bridge0: port 1(macvlan2) entered disabled state [ 1553.664344][T26261] bond1: (slave bridge3): Releasing active interface [ 1553.747620][T26261] bond2: (slave ip6gretap1): Releasing backup interface [ 1553.924834][T26270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.936108][T26270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.968081][T26270] input: syz1 as /devices/virtual/input/input109 [ 1554.139159][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1554.289240][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1554.469172][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1554.483909][ T10] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1554.792702][ T10] usb 4-1: config 0 has no interface number 0 [ 1554.831143][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1554.906708][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.061542][ T10] usb 4-1: Product: syz [ 1555.076760][ T10] usb 4-1: Manufacturer: syz [ 1555.087304][ T10] usb 4-1: SerialNumber: syz [ 1555.132001][ T10] usb 4-1: config 0 descriptor?? [ 1555.178913][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1555.195765][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1555.298787][T26292] sit1: entered promiscuous mode [ 1555.316777][T26292] sit1: entered allmulticast mode [ 1555.359210][T17110] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1555.570084][T17110] usb 1-1: Using ep0 maxpacket: 16 [ 1555.580488][T17110] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1555.588717][T17110] usb 1-1: config 0 has no interface number 0 [ 1555.595320][T17110] usb 1-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1555.623034][T17110] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1555.637705][T17110] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1555.650609][T17110] usb 1-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1555.666852][T17110] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1555.927831][T11545] usb 6-1: USB disconnect, device number 6 [ 1555.948672][T17110] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1556.000542][T26306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5148'. [ 1556.029505][T17110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.059731][T17110] usb 1-1: Product: syz [ 1556.077218][T17110] usb 1-1: Manufacturer: syz [ 1556.100877][T17110] usb 1-1: SerialNumber: syz [ 1556.147997][T17110] usb 1-1: config 0 descriptor?? [ 1556.186124][T26288] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1556.197045][T26288] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1556.219028][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1556.228345][ T3498] usb 4-1: Failed to submit usb control message: -110 [ 1556.243498][ T3498] usb 4-1: unable to send the bmi data to the device: -110 [ 1556.271100][ T3498] usb 4-1: unable to get target info from device [ 1556.285089][ T3498] usb 4-1: could not get target info (-110) [ 1556.298659][ T3498] usb 4-1: could not probe fw (-110) [ 1556.372292][T26316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.381689][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5149'. [ 1556.418159][T26316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.433605][T26288] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1556.445267][T26316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.462534][T26288] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1556.473230][T26316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.566067][T26323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.585334][T26323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.826053][T26323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.841818][T26323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.905091][ T5944] usb 4-1: USB disconnect, device number 30 [ 1557.101468][T26288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.101739][T17110] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1557.132360][T26288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.258932][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1557.336935][T26339] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5154'. [ 1557.423723][T17110] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1557.442491][T17110] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1557.879134][T17110] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1557.929154][T17110] usb 1-1: USB disconnect, device number 43 [ 1558.009526][T11545] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1558.219075][ T888] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1558.298936][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1558.326886][T11545] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1558.335158][T11545] usb 4-1: config 0 has no interface number 0 [ 1558.341538][T11545] usb 4-1: config 0 interface 4 has no altsetting 0 [ 1558.373202][T11545] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1558.422208][ T888] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1558.426873][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5156'. [ 1558.468145][ T888] usb 6-1: config 0 has no interface number 0 [ 1558.478912][T11545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.498371][ T888] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1558.514782][T11545] usb 4-1: config 0 descriptor?? [ 1558.526953][T11545] cp210x 4-1:0.4: cp210x converter detected [ 1558.554756][ T888] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1558.646500][ T888] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1558.679539][ T888] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1558.692476][ T888] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1558.704741][ T888] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1558.732619][T11545] cp210x 4-1:0.4: failed to get vendor val 0x370b size 1: -32 [ 1558.740403][T11545] cp210x 4-1:0.4: querying part number failed [ 1558.764719][ T888] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1558.773908][ T888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.806789][T11545] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1558.817537][ T888] usb 6-1: config 0 descriptor?? [ 1558.824642][T26352] ptrace attach of "./syz-executor exec"[17854] was attempted by "./syz-executor exec"[26352] [ 1558.880451][T26345] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1558.896698][T26345] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1558.944425][ T888] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1559.338936][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1560.062993][T11545] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1560.324251][T11545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1560.335412][T11545] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1560.372285][T26369] FAULT_INJECTION: forcing a failure. [ 1560.372285][T26369] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.389007][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1560.396567][T11545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1560.416572][T11545] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1560.429069][T26369] CPU: 1 UID: 0 PID: 26369 Comm: syz.1.5158 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1560.429098][T26369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1560.429111][T26369] Call Trace: [ 1560.429119][T26369] [ 1560.429128][T26369] dump_stack_lvl+0x189/0x250 [ 1560.429158][T26369] ? __pfx____ratelimit+0x10/0x10 [ 1560.429192][T26369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.429215][T26369] ? __pfx__printk+0x10/0x10 [ 1560.429248][T26369] ? __pfx___might_resched+0x10/0x10 [ 1560.429270][T26369] ? fs_reclaim_acquire+0x7d/0x100 [ 1560.429304][T26369] should_fail_ex+0x414/0x560 [ 1560.429339][T26369] should_failslab+0xa8/0x100 [ 1560.429369][T26369] __kmalloc_noprof+0xcb/0x4f0 [ 1560.429394][T26369] ? io_cache_alloc_new+0x40/0x100 [ 1560.429415][T26369] ? __lock_acquire+0xab9/0xd20 [ 1560.429440][T26369] io_cache_alloc_new+0x40/0x100 [ 1560.429465][T26369] __io_prep_rw+0x23f/0xd80 [ 1560.429504][T26369] ? __pfx___io_prep_rw+0x10/0x10 [ 1560.429530][T26369] ? percpu_ref_get_many+0x21/0x1e0 [ 1560.429559][T26369] ? percpu_ref_get_many+0x21/0x1e0 [ 1560.429596][T26369] io_prep_rwv+0x8c/0x3d0 [ 1560.429624][T26369] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1560.429650][T26369] ? __pfx_io_prep_rwv+0x10/0x10 [ 1560.429689][T26369] ? __asan_memset+0x22/0x50 [ 1560.429709][T26369] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 1560.429735][T26369] io_submit_sqes+0x90f/0x1c50 [ 1560.429795][T26369] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1560.429845][T26369] ? ksys_write+0x1cb/0x250 [ 1560.429873][T26369] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1560.429900][T26369] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1560.429924][T26369] ? __pfx_vfs_write+0x10/0x10 [ 1560.429951][T26369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1560.429977][T26369] ? __fget_files+0x3a0/0x420 [ 1560.430012][T26369] ? fput+0xa0/0xd0 [ 1560.430031][T26369] ? ksys_write+0x22a/0x250 [ 1560.430057][T26369] ? __pfx_ksys_write+0x10/0x10 [ 1560.430079][T26369] ? rcu_is_watching+0x15/0xb0 [ 1560.430109][T26369] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1560.430142][T26369] do_syscall_64+0xfa/0x3b0 [ 1560.430165][T26369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.430184][T26369] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1560.430205][T26369] ? clear_bhb_loop+0x60/0xb0 [ 1560.430230][T26369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.430250][T26369] RIP: 0033:0x7f5c1158e929 [ 1560.430268][T26369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1560.430286][T26369] RSP: 002b:00007f5c124cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1560.430307][T26369] RAX: ffffffffffffffda RBX: 00007f5c117b5fa0 RCX: 00007f5c1158e929 [ 1560.430323][T26369] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 1560.430335][T26369] RBP: 00007f5c124cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.430348][T26369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.430360][T26369] R13: 0000000000000000 R14: 00007f5c117b5fa0 R15: 00007f5c118dfa28 [ 1560.430392][T26369] [ 1560.459075][T11545] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1561.236381][ T888] usb 4-1: USB disconnect, device number 31 [ 1561.311378][ T888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1561.371853][ T888] cp210x 4-1:0.4: device disconnected [ 1561.429121][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1561.566960][T11545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.640892][T11545] usb 1-1: Product: syz [ 1561.677947][T11545] usb 1-1: Manufacturer: syz [ 1561.718408][T11545] usb 1-1: SerialNumber: syz [ 1561.739992][T11545] usb 1-1: config 0 descriptor?? [ 1561.786399][T11545] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1561.839018][T11545] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1561.897992][T11545] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1561.958223][T26367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.969964][T26367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.071460][ T888] usb 6-1: USB disconnect, device number 7 [ 1562.106111][ T888] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1562.468911][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1562.654279][T26399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.721583][T26399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.730413][T26400] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1563.498919][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1563.750329][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5164'. [ 1564.200508][T17110] usb 1-1: USB disconnect, device number 44 [ 1564.538910][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1564.591609][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1564.644921][T26437] bridge_slave_0: left allmulticast mode [ 1564.656467][T26437] bridge_slave_0: left promiscuous mode [ 1564.692976][T26437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.753271][T26437] bridge_slave_1: left allmulticast mode [ 1564.777600][T26407] kvm: user requested TSC rate below hardware speed [ 1564.792477][T26437] bridge_slave_1: left promiscuous mode [ 1564.798620][T26437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.836028][T26437] bond0: (slave bond_slave_0): Releasing backup interface [ 1564.913682][T26437] bond0: (slave bond_slave_1): Releasing backup interface [ 1564.959088][T11545] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1565.141556][T11545] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1565.162862][T11545] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1565.199367][T11545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1565.232817][T11545] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1565.300737][T11545] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1565.334329][T11545] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1565.344428][T11545] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1565.427227][T11545] usb 1-1: Product: syz [ 1565.436800][T11545] usb 1-1: Manufacturer: syz [ 1565.476941][T11545] cdc_wdm 1-1:1.0: skipping garbage [ 1565.509352][T11545] cdc_wdm 1-1:1.0: skipping garbage [ 1565.578939][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1565.604466][T11545] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1565.619774][T11545] cdc_wdm 1-1:1.0: Unknown control protocol [ 1565.788078][ T5838] usb 1-1: USB disconnect, device number 45 [ 1566.618923][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1567.289179][ T5838] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1567.463947][ T5838] usb 1-1: config 0 has no interfaces? [ 1567.502128][ T5838] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1567.516420][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.544959][ T5838] usb 1-1: Product: syz [ 1567.582457][ T5838] usb 1-1: Manufacturer: syz [ 1567.659004][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1567.889725][ T5838] usb 1-1: SerialNumber: syz [ 1567.926865][ T5838] usb 1-1: config 0 descriptor?? [ 1568.531529][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1568.531549][ T30] audit: type=1326 audit(1751781134.994:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1568.660298][ T30] audit: type=1326 audit(1751781134.994:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1568.682970][ T30] audit: type=1326 audit(1751781134.994:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1568.699013][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1568.721847][ T30] audit: type=1326 audit(1751781134.994:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1568.926690][ T5838] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1568.985593][ T30] audit: type=1326 audit(1751781134.994:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.085420][ T30] audit: type=1326 audit(1751781134.994:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.159141][ T5838] usb 4-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.317414][ T5838] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.476512][ T30] audit: type=1326 audit(1751781134.994:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.515316][ T5838] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1569.559107][ T30] audit: type=1326 audit(1751781135.194:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.581973][ T30] audit: type=1326 audit(1751781135.194:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.636685][ T30] audit: type=1326 audit(1751781135.194:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28db8e929 code=0x7ffc0000 [ 1569.703439][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1569.739142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1569.773925][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 1569.798619][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.909887][ T5838] usb 4-1: Product: syz [ 1569.938671][ T5838] usb 4-1: Manufacturer: syz [ 1569.985350][ T5838] usb 4-1: SerialNumber: syz [ 1570.098005][ T5838] usb 4-1: config 0 descriptor?? [ 1570.328459][ T5838] usbtest 4-1:0.0: Linux user mode ISO test driver [ 1570.358952][ T5838] usbtest 4-1:0.0: high-speed {control iso-in} tests (+alt) [ 1570.603566][ T5838] usb 4-1: USB disconnect, device number 32 [ 1570.779212][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1571.054474][ T10] usb 1-1: USB disconnect, device number 46 [ 1571.339972][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5184'. [ 1571.619014][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1571.760615][T26532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1571.800617][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1571.806226][T26532] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1571.818950][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1571.839860][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.903127][ T10] usb 1-1: config 220 has no interface number 2 [ 1571.930646][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1572.001212][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1572.035972][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1572.075443][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1572.120317][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1572.161353][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.184080][T26554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5188'. [ 1572.202157][ T10] usb 1-1: Product: syz [ 1572.226718][ T10] usb 1-1: Manufacturer: syz [ 1572.245633][ T10] usb 1-1: SerialNumber: syz [ 1572.475425][T26536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.487566][T26536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.537942][ T10] usb 1-1: selecting invalid altsetting 0 [ 1572.562444][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1572.574552][ T10] usb 1-1: No valid video chain found. [ 1572.618312][ T10] usb 1-1: selecting invalid altsetting 0 [ 1572.638431][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1572.687783][ T10] usb 1-1: USB disconnect, device number 47 [ 1572.858924][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1573.110244][T26583] tipc: Enabling of bearer rejected, failed to enable media [ 1573.261299][T16744] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1573.419483][T16744] usb 6-1: Using ep0 maxpacket: 16 [ 1573.441264][T26589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1573.449677][T16744] usb 6-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 1573.450456][T11545] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1573.498134][T16744] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1573.549210][T16744] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1573.568638][T16744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.630387][T11545] usb 1-1: device descriptor read/64, error -71 [ 1573.639266][T16744] usb 6-1: config 0 descriptor?? [ 1573.898981][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1573.906359][T11545] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1574.039122][T11545] usb 1-1: device descriptor read/64, error -71 [ 1574.152021][T11545] usb usb1-port1: attempt power cycle [ 1574.412355][T26609] kvm: pic: non byte write [ 1574.415171][T26613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.450990][T26613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.488956][T17110] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1574.529225][T11545] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1574.550777][T11545] usb 1-1: device descriptor read/8, error -71 [ 1574.617460][T26597] netlink: 'syz.5.5192': attribute type 11 has an invalid length. [ 1574.659230][T26621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.682155][T17110] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1574.694817][T26621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.715305][T17110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.773651][T17110] usb 3-1: config 0 descriptor?? [ 1574.802111][T26597] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5192'. [ 1574.803978][T17110] pwc: Creative Labs Webcam 5 detected. [ 1574.821107][T11545] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1574.874966][T11545] usb 1-1: device descriptor read/8, error -71 [ 1574.938916][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1574.989777][T11545] usb usb1-port1: unable to enumerate USB device [ 1575.978936][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1576.129005][T11545] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1576.181319][T26656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.193043][T26656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.297473][ T5944] usb 6-1: USB disconnect, device number 8 [ 1576.359020][T11545] usb 4-1: Using ep0 maxpacket: 16 [ 1576.442370][T11545] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.601248][T11545] usb 4-1: config 0 has no interfaces? [ 1576.637010][T11545] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1576.698472][T11545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.866987][T11545] usb 4-1: config 0 descriptor?? [ 1577.018922][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1577.368892][ T5838] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1577.866436][ T5838] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1577.953429][ T5838] usb 6-1: config 0 has no interface number 0 [ 1577.996456][ T5838] usb 6-1: config 0 interface 4 has no altsetting 0 [ 1578.030430][ T5838] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1578.058896][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1578.251346][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.286124][ T5838] usb 6-1: config 0 descriptor?? [ 1578.311395][ T5838] cp210x 6-1:0.4: cp210x converter detected [ 1578.642777][ T5838] cp210x 6-1:0.4: failed to get vendor val 0x370b size 1: -32 [ 1578.658441][ T5838] cp210x 6-1:0.4: querying part number failed [ 1578.774751][ T5838] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1579.098966][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1579.419978][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'. [ 1579.637055][T24589] usb 4-1: USB disconnect, device number 33 [ 1579.922826][T17110] pwc: Failed to set LED on/off time (-110) [ 1579.950937][T17110] pwc: send_video_command error -32 [ 1579.956186][T17110] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 1579.966764][T17110] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -32 [ 1580.115542][T26690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.138903][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1580.156960][T26690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.227925][ T5838] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1580.389225][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 1580.410096][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1580.423971][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1580.443351][ T5838] usb 4-1: can't read configurations, error -71 [ 1580.544415][T17110] usb 6-1: USB disconnect, device number 9 [ 1580.564828][T17110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1580.593576][T17110] cp210x 6-1:0.4: device disconnected [ 1580.816569][T26695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.865999][T26695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.123920][T26700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.178905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1581.193756][T26700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.439383][T17110] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1581.630807][T17110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1581.656192][T17110] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1581.750336][T17110] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1581.767088][T17110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.806974][T17110] usb 6-1: config 0 descriptor?? [ 1581.984866][T26712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.000199][T26713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.014931][T26712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.038061][T26713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.109098][T11545] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1582.218918][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1582.271066][T11545] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1582.292295][T11545] usb 1-1: config 0 has no interface number 0 [ 1582.323904][T11545] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1582.336141][T11545] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1582.363838][T11545] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1582.396743][T26723] netlink: 'syz.3.5218': attribute type 2 has an invalid length. [ 1582.416526][T26724] netlink: 'syz.1.5214': attribute type 10 has an invalid length. [ 1582.424570][T26724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5214'. [ 1582.429295][T11545] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1582.445816][T11545] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1582.450526][T26724] bridge0: port 3(dummy0) entered blocking state [ 1582.470653][T11545] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1582.486863][T26724] bridge0: port 3(dummy0) entered disabled state [ 1582.493233][T11545] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1582.493351][T11545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.503550][T11545] usb 1-1: config 0 descriptor?? [ 1582.518733][T26710] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1582.532496][T26710] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1582.574384][T26724] dummy0: entered allmulticast mode [ 1582.585990][T11545] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1582.638105][T26724] dummy0: entered promiscuous mode [ 1583.259049][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1583.602219][T26738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.619668][T26738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.142699][T17110] usbhid 6-1:0.0: can't add hid device: -71 [ 1584.224565][T17110] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1584.298933][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1584.315448][T17110] usb 6-1: USB disconnect, device number 10 [ 1584.470646][T26743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.531542][T26743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.604712][T26743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.653952][T26743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.708914][T17110] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1584.892668][T17110] usb 6-1: Using ep0 maxpacket: 8 [ 1584.916526][T17110] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1584.937283][T17110] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1584.966109][T11545] usb 1-1: USB disconnect, device number 52 [ 1584.993578][T17110] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1585.004196][T11545] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1585.022659][T17110] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1585.066146][T17110] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1585.106890][T17110] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1585.126341][T17110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.338906][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1585.358787][T17110] usb 6-1: GET_CAPABILITIES returned 0 [ 1585.370697][T17110] usbtmc 6-1:16.0: can't read capabilities [ 1585.578495][T17110] usb 6-1: USB disconnect, device number 11 [ 1586.378908][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1586.580738][T26766] trusted_key: encrypted_key: insufficient parameters specified [ 1587.418934][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1588.458919][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1588.845540][T26789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.966307][T26789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.339056][ T5944] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1589.378906][ T888] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1589.442524][T26801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.474387][T26801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.498896][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1589.522640][ T5944] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1589.534331][ T5944] usb 1-1: config 0 has no interface number 0 [ 1589.540781][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 1589.551019][ T888] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1589.580884][ T888] usb 4-1: config 0 has no interface number 0 [ 1589.588040][ T5944] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.603697][ T5944] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1589.604434][ T888] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1589.628060][ T5944] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1589.642712][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.651728][ T5944] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1589.669242][ T888] usb 4-1: Product: syz [ 1589.673545][ T888] usb 4-1: Manufacturer: syz [ 1589.678576][ T888] usb 4-1: SerialNumber: syz [ 1589.685659][ T5944] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1589.710261][ T888] usb 4-1: config 0 descriptor?? [ 1589.725885][ T5944] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1589.934315][ T888] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1589.946827][T17669] usb 4-1: Failed to submit usb control message: -71 [ 1589.966541][T17669] usb 4-1: unable to send the bmi data to the device: -71 [ 1589.975858][ T5944] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1589.991734][T17669] usb 4-1: unable to get target info from device [ 1590.002428][ T888] usb 4-1: USB disconnect, device number 36 [ 1590.008594][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.044490][T17669] usb 4-1: could not get target info (-71) [ 1590.061209][ T5944] usb 1-1: config 0 descriptor?? [ 1590.066944][T17669] usb 4-1: could not probe fw (-71) [ 1590.073008][T26795] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1590.080666][T26795] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1590.130811][ T5944] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1590.135568][T26807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.148305][T26807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.538957][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1590.976744][T26812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5239'. [ 1590.997570][T26812] bridge0: port 1(vlan2) entered blocking state [ 1591.004834][T26812] bridge0: port 1(vlan2) entered disabled state [ 1591.011609][T26812] vlan2: entered allmulticast mode [ 1591.017878][T26812] bridge0: entered allmulticast mode [ 1591.029104][T26812] vlan2: left allmulticast mode [ 1591.035350][T26812] bridge0: left allmulticast mode [ 1591.578897][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1591.936782][T26818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1591.984365][T26818] batman_adv: batadv0: Interface deactivated: dummy0 [ 1591.999621][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.020831][T26818] batman_adv: batadv0: Removing interface: dummy0 [ 1592.037753][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.163284][T26818] bond0: (slave bond2): Releasing backup interface [ 1592.193655][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.227462][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.238757][ T5944] usb 1-1: USB disconnect, device number 53 [ 1592.248564][T26824] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -19 [ 1592.302112][ T5944] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1592.346807][T26827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1592.618932][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1592.732732][ T888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1592.758318][T26845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.773454][T26845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.902807][ T888] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1592.956961][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1592.956979][ T30] audit: type=1326 audit(1751781159.594:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.1.5249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1158e929 code=0x0 [ 1593.011316][ T888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.038047][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1593.080647][ T888] usb 6-1: config 0 has no interface number 0 [ 1593.087653][T26849] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1593.104084][ T888] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1593.104423][T26849] gretap0: entered promiscuous mode [ 1593.113523][ T888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.113550][ T888] usb 6-1: Product: syz [ 1593.113568][ T888] usb 6-1: Manufacturer: syz [ 1593.113585][ T888] usb 6-1: SerialNumber: syz [ 1593.151140][ T888] usb 6-1: config 0 descriptor?? [ 1593.168997][ T5944] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1593.201259][ T888] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 1593.221224][ T888] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1593.357194][T26849] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1593.375026][T26834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.393419][ T5944] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 1593.410962][T26834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.421530][ T5944] usb 1-1: config 0 has no interface number 0 [ 1593.461247][T26856] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1593.472182][T26849] AppArmor: change_hat: Invalid input '' [ 1593.499369][T26858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.530451][T26858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.586708][ T5944] usb 1-1: too many endpoints for config 0 interface 94 altsetting 43: 42, using maximum allowed: 30 [ 1593.604209][T17110] usb 6-1: USB disconnect, device number 12 [ 1593.658987][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1593.766955][ T5944] usb 1-1: config 0 interface 94 altsetting 43 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 1593.947854][ T5944] usb 1-1: config 0 interface 94 has no altsetting 0 [ 1594.065819][ T5944] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1594.299425][ T888] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1594.466897][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.486792][ T5944] usb 1-1: config 0 descriptor?? [ 1594.559128][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 1594.591004][ T888] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1594.600234][ T888] usb 4-1: config 0 has no interface number 0 [ 1594.635156][ T888] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1594.644416][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.667016][ T888] usb 4-1: Product: syz [ 1594.671758][ T888] usb 4-1: Manufacturer: syz [ 1594.676786][ T888] usb 4-1: SerialNumber: syz [ 1594.699003][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1594.723395][ T888] usb 4-1: config 0 descriptor?? [ 1594.781861][ T888] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1594.991962][ T59] usb 4-1: Failed to submit usb control message: -71 [ 1594.997187][ T888] usb 4-1: USB disconnect, device number 37 [ 1595.043867][ T59] usb 4-1: unable to send the bmi data to the device: -71 [ 1595.061867][ T59] usb 4-1: unable to get target info from device [ 1595.081728][ T59] usb 4-1: could not get target info (-71) [ 1595.106948][ T59] usb 4-1: could not probe fw (-71) [ 1595.739249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1596.102887][T26878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.112796][T26878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.409735][ T5944] usb 1-1: string descriptor 0 read error: -71 [ 1596.416667][ T5944] cp210x 1-1:0.94: cp210x converter detected [ 1596.461268][ T5944] cp210x 1-1:0.94: failed to get vendor val 0x370b size 1: -71 [ 1596.490622][ T5944] cp210x 1-1:0.94: querying part number failed [ 1596.522707][ T5944] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1596.553156][ T5944] usb 1-1: USB disconnect, device number 54 [ 1596.587351][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1596.612977][ T5944] cp210x 1-1:0.94: device disconnected [ 1596.640672][T26881] program syz.0.5256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1596.691507][T26882] program syz.0.5256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1596.778926][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1596.977395][T26892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.995355][T26892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.027994][T26897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.038226][T26895] vlan2: entered promiscuous mode [ 1597.047249][T26895] bridge0: entered promiscuous mode [ 1597.047767][T26897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.055523][T26895] vlan2: entered allmulticast mode [ 1597.061343][T26896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.066018][T26895] bridge0: entered allmulticast mode [ 1597.091324][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1597.156073][T26896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.190609][T17110] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1597.349019][T17110] usb 4-1: Using ep0 maxpacket: 8 [ 1597.355886][T17110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1597.368481][T17110] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1597.378038][T17110] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1597.389493][T17110] usb 4-1: Product: syz [ 1597.393831][T17110] usb 4-1: Manufacturer: syz [ 1597.398446][T17110] usb 4-1: SerialNumber: syz [ 1597.608203][T17110] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1597.616766][T17110] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1597.624902][T17110] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1597.633099][T17110] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1597.814345][T17110] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1597.822741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1597.867230][T17110] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1597.885851][T17110] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1597.926027][T17110] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1597.950529][T17110] usb 4-1: USB disconnect, device number 38 [ 1597.966107][T17110] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1598.071356][T17110] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1598.194851][T17110] visor 4-1:1.0: device disconnected [ 1598.858902][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.281447][T26906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.311522][T26906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.333030][T26906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.548351][T26913] dummy0: left allmulticast mode [ 1599.568976][T26913] dummy0: left promiscuous mode [ 1599.574064][T26913] bridge0: port 3(dummy0) entered disabled state [ 1599.898908][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.940697][T26945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.941019][T26945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.170879][T26949] bridge1: entered promiscuous mode [ 1600.329053][T16707] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1600.489079][T16707] usb 4-1: Using ep0 maxpacket: 16 [ 1600.588035][T16707] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1600.654990][T16707] usb 4-1: config 0 has no interface number 0 [ 1600.715683][T16707] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1600.728625][T16707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.803770][T16707] usb 4-1: Product: syz [ 1600.847699][T16707] usb 4-1: Manufacturer: syz [ 1600.870376][T16707] usb 4-1: SerialNumber: syz [ 1600.938903][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1600.971957][T16707] usb 4-1: config 0 descriptor?? [ 1601.332437][T16707] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1601.493070][T17682] usb 4-1: Failed to submit usb control message: -71 [ 1601.493428][ T5838] usb 4-1: USB disconnect, device number 39 [ 1601.504456][T17682] usb 4-1: unable to send the bmi data to the device: -71 [ 1601.548254][T17682] usb 4-1: unable to get target info from device [ 1601.574911][T17682] usb 4-1: could not get target info (-71) [ 1601.592315][T17682] usb 4-1: could not probe fw (-71) [ 1601.687248][T26968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5276'. [ 1601.727642][T26968] macvtap1: entered promiscuous mode [ 1601.734721][T26968] erspan0: entered promiscuous mode [ 1601.743269][T26968] macvtap1: entered allmulticast mode [ 1601.752009][T26968] erspan0: entered allmulticast mode [ 1601.771239][T26970] erspan0: left allmulticast mode [ 1601.777695][T26970] erspan0: left promiscuous mode [ 1601.975676][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'. [ 1601.984828][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1602.064026][T26977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.073468][T26977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.149018][ T5838] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1602.334564][ T5838] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1602.343212][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.361238][ T5838] usb 1-1: config 0 has no interface number 0 [ 1602.422970][ T5838] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1602.433779][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.443238][ T5838] usb 1-1: Product: syz [ 1602.453421][ T5838] usb 1-1: Manufacturer: syz [ 1602.488931][ T5838] usb 1-1: SerialNumber: syz [ 1602.522682][ T5838] usb 1-1: config 0 descriptor?? [ 1602.560615][ T5838] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 1602.572167][ T5838] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 1602.968920][ T888] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1603.018891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.121193][ T888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.133139][ T888] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1603.171858][ T888] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.213957][ T888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1603.223643][ T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1603.233529][ T888] usb 4-1: Product: syz [ 1603.237782][ T888] usb 4-1: Manufacturer: syz [ 1603.242615][ T888] usb 4-1: SerialNumber: syz [ 1603.455974][ T888] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1603.486405][ T888] usb 4-1: USB disconnect, device number 40 [ 1603.559323][ T888] usblp0: removed [ 1604.059337][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.389381][ T888] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1604.548980][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 1604.559688][ T888] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1604.578162][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.751539][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.766012][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.777968][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.791400][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.874439][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.914487][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.965708][ T888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.979738][ T888] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1604.988869][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1604.997023][ T888] usb 4-1: SerialNumber: syz [ 1605.003614][ T888] usb 4-1: config 0 descriptor?? [ 1605.032698][ T888] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input110 [ 1605.049211][ T5838] usb 1-1: USB disconnect, device number 55 [ 1605.098904][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.408429][T27013] input: syz1 as /devices/virtual/input/input111 [ 1606.138909][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1606.282507][T27027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.341488][T27027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.394982][T27031] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1606.410837][T27027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.484208][T27027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.969026][T27043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.116659][T27045] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1607.135918][T27043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.178899][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1607.265587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.272130][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.285020][ T5201] bcm5974 4-1:0.0: could not read from device [ 1607.334131][ T5201] bcm5974 4-1:0.0: could not read from device [ 1607.357639][ T888] usb 4-1: USB disconnect, device number 41 [ 1607.374737][ T5201] bcm5974 4-1:0.0: could not read from device [ 1607.407367][ T5201] bcm5974 4-1:0.0: could not read from device [ 1607.530538][T27017] delete_channel: no stack [ 1607.829666][T17110] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1607.879275][ T5838] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1608.016389][T17110] usb 1-1: config 0 has no interfaces? [ 1608.022360][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1608.130300][T17110] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1608.141034][T17110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.164139][T17110] usb 1-1: Product: syz [ 1608.176228][T17110] usb 1-1: Manufacturer: syz [ 1608.186673][T17110] usb 1-1: SerialNumber: syz [ 1608.206907][T17110] usb 1-1: config 0 descriptor?? [ 1608.228907][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.255301][T27068] netlink: 'syz.2.5303': attribute type 12 has an invalid length. [ 1608.350347][ T5838] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1608.750267][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1608.860156][ T5838] usb usb6-port1: attempt power cycle [ 1609.258891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.419146][ T5838] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1609.449716][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1609.691060][ T5838] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1609.810506][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1609.941685][ T5838] usb usb6-port1: unable to enumerate USB device [ 1610.298893][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1610.551463][ T888] usb 1-1: USB disconnect, device number 56 [ 1610.764951][T27085] FAULT_INJECTION: forcing a failure. [ 1610.764951][T27085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.818971][T27085] CPU: 1 UID: 0 PID: 27085 Comm: syz.2.5307 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1610.819002][T27085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1610.819015][T27085] Call Trace: [ 1610.819024][T27085] [ 1610.819034][T27085] dump_stack_lvl+0x189/0x250 [ 1610.819065][T27085] ? __pfx____ratelimit+0x10/0x10 [ 1610.819099][T27085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1610.819123][T27085] ? __pfx__printk+0x10/0x10 [ 1610.819153][T27085] ? __might_fault+0xb0/0x130 [ 1610.819191][T27085] should_fail_ex+0x414/0x560 [ 1610.819228][T27085] _copy_from_user+0x2d/0xb0 [ 1610.819259][T27085] kstrtouint_from_user+0xc4/0x170 [ 1610.819284][T27085] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1610.819324][T27085] proc_fail_nth_write+0x88/0x240 [ 1610.819356][T27085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1610.819394][T27085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1610.819426][T27085] vfs_write+0x27e/0xa90 [ 1610.819461][T27085] ? __pfx_vfs_write+0x10/0x10 [ 1610.819488][T27085] ? __fget_files+0x2a/0x420 [ 1610.819522][T27085] ? __fget_files+0x3a0/0x420 [ 1610.819549][T27085] ? __fget_files+0x2a/0x420 [ 1610.819587][T27085] ksys_write+0x145/0x250 [ 1610.819616][T27085] ? __pfx_ksys_write+0x10/0x10 [ 1610.819638][T27085] ? rcu_is_watching+0x15/0xb0 [ 1610.819670][T27085] ? do_syscall_64+0xbe/0x3b0 [ 1610.819695][T27085] do_syscall_64+0xfa/0x3b0 [ 1610.819715][T27085] ? lockdep_hardirqs_on+0x9c/0x150 [ 1610.819734][T27085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.819755][T27085] ? clear_bhb_loop+0x60/0xb0 [ 1610.819781][T27085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.819801][T27085] RIP: 0033:0x7f7eba38d3df [ 1610.819820][T27085] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1610.819843][T27085] RSP: 002b:00007f7ebb1cb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1610.819862][T27085] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7eba38d3df [ 1610.819873][T27085] RDX: 0000000000000001 RSI: 00007f7ebb1cb0a0 RDI: 0000000000000008 [ 1610.819884][T27085] RBP: 00007f7ebb1cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.819894][T27085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1610.819904][T27085] R13: 0000000000000000 R14: 00007f7eba5b5fa0 R15: 00007f7eba6dfa28 [ 1610.819929][T27085] [ 1611.219867][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5309'. [ 1611.339026][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1611.410122][T27090] bridge_slave_0: left allmulticast mode [ 1611.467142][T27090] bridge_slave_0: left promiscuous mode [ 1611.507706][T27090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.792004][T27090] bridge_slave_1: left allmulticast mode [ 1611.809383][T27090] bridge_slave_1: left promiscuous mode [ 1611.816445][T27090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.843074][T27090] bond0: (slave bond_slave_0): Releasing backup interface [ 1611.867637][T27090] bond0: (slave bond_slave_1): Releasing backup interface [ 1611.879040][T24589] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1611.899052][T11545] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1611.899802][T27111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.927999][T27111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.966630][T27090] team0: Port device team_slave_0 removed [ 1612.019097][T24589] usb 6-1: device descriptor read/64, error -71 [ 1612.031428][T27090] team0: Port device team_slave_1 removed [ 1612.062823][T11545] usb 1-1: Using ep0 maxpacket: 16 [ 1612.120399][T27090] bond2: (slave ip6gretap1): Releasing backup interface [ 1612.252378][T11545] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1612.255197][T27117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5315'. [ 1612.293160][T11545] usb 1-1: config 0 has no interface number 0 [ 1612.310681][T24589] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1612.324290][T11545] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1612.328361][ T30] audit: type=1326 audit(1751781178.964:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27114 comm="syz.3.5315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28db8e929 code=0x0 [ 1612.358760][T11545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.380244][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1612.387525][T11545] usb 1-1: Product: syz [ 1612.392530][T11545] usb 1-1: Manufacturer: syz [ 1612.398763][T11545] usb 1-1: SerialNumber: syz [ 1612.444280][T11545] usb 1-1: config 0 descriptor?? [ 1612.449618][T24589] usb 6-1: device descriptor read/64, error -71 [ 1612.486998][T11545] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1612.577923][T24589] usb usb6-port1: attempt power cycle [ 1612.703764][ T8318] usb 1-1: Failed to submit usb control message: -71 [ 1612.703953][T11545] usb 1-1: USB disconnect, device number 57 [ 1612.712012][ T8318] usb 1-1: unable to send the bmi data to the device: -71 [ 1612.725771][ T8318] usb 1-1: unable to get target info from device [ 1612.732424][ T8318] usb 1-1: could not get target info (-71) [ 1612.738572][ T8318] usb 1-1: could not probe fw (-71) [ 1612.978929][T24589] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1613.018562][T24589] usb 6-1: device descriptor read/8, error -71 [ 1613.279131][T24589] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1613.325431][T24589] usb 6-1: device descriptor read/8, error -71 [ 1613.418902][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.537333][T24589] usb usb6-port1: unable to enumerate USB device [ 1614.458914][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.471481][T24589] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1614.710699][T24589] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1614.720516][T24589] usb 4-1: config 0 has no interface number 0 [ 1614.726624][T24589] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1614.748007][T27158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.761562][T24589] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1614.770148][T27160] program syz.0.5324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.773731][T27158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.801165][T24589] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1614.812268][T24589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.879444][T24589] usb 4-1: config 0 descriptor?? [ 1614.886491][T27148] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1614.905768][T24589] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1614.932816][T27164] usb usb8: usbfs: process 27164 (syz.1.5323) did not claim interface 0 before use [ 1614.978990][ T888] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1615.048996][ T5944] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1615.214081][ T888] usb 6-1: Using ep0 maxpacket: 32 [ 1615.240477][ T888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1615.252086][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 1615.259900][ T5944] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1615.274678][ T888] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1615.286131][ T888] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1615.300628][ T888] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1615.619178][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1615.628885][ T888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.636924][ T888] usb 6-1: Product: syz [ 1615.648617][ T888] usb 6-1: Manufacturer: syz [ 1615.653459][ T888] usb 6-1: SerialNumber: syz [ 1615.667061][ T5944] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1615.686489][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.702955][ T5944] usb 1-1: Product: syz [ 1615.707279][ T5944] usb 1-1: Manufacturer: syz [ 1615.719192][ T5944] usb 1-1: SerialNumber: syz [ 1615.753581][ T5944] usb 1-1: config 0 descriptor?? [ 1615.771265][T27161] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 1615.792694][ T5944] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.125801][ T5944] usb 1-1: USB disconnect, device number 58 [ 1616.221407][T24589] usb 4-1: USB disconnect, device number 42 [ 1616.221477][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1616.414928][T27177] program syz.2.5327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1616.552829][T27181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.565967][T27181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.699105][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1616.804925][T16707] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1617.003831][T16707] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1617.040388][T16707] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1617.089379][T16707] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1617.143028][T16707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1617.189665][T16707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.197761][T16707] usb 1-1: Product: syz [ 1617.202166][T16707] usb 1-1: Manufacturer: syz [ 1617.207458][T16707] usb 1-1: SerialNumber: syz [ 1617.224789][T27180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1617.392394][T27190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1617.405430][ T30] audit: type=1400 audit(1751781184.044:1385): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=27188 comm="syz.3.5331" [ 1617.435625][T16707] cdc_ncm 1-1:1.0: bind() failure [ 1617.509429][T27191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.570666][T16707] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1617.578463][T27193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1617.595555][T16707] cdc_ncm 1-1:1.1: bind() failure [ 1617.626642][T16707] usb 1-1: USB disconnect, device number 59 [ 1617.735114][T27196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1617.751305][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1617.966999][T27203] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1618.062961][T27203] fuse: Unknown parameter '0x000000000000000b' [ 1618.100751][T27210] netlink: 372 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1618.144733][T27210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1618.167963][ T888] usb 6-1: USB disconnect, device number 21 [ 1618.209054][T27210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1618.216848][T27210] IPv6: NLM_F_CREATE should be set when creating new route [ 1618.442016][T16707] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1618.702743][T16707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1618.725923][T16707] usb 4-1: not running at top speed; connect to a high speed hub [ 1618.748331][T16707] usb 4-1: config 9 has an invalid interface number: 87 but max is 0 [ 1618.767275][T16707] usb 4-1: config 9 has no interface number 0 [ 1618.774279][T16707] usb 4-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1618.779119][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1618.801576][T16707] usb 4-1: config 9 interface 87 has no altsetting 0 [ 1618.813883][T16707] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 1618.825083][T16707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.835283][T16707] usb 4-1: Product: syz [ 1618.841140][T16707] usb 4-1: Manufacturer: syz [ 1618.848545][T16707] usb 4-1: SerialNumber: syz [ 1619.262104][ T30] audit: type=1326 audit(1751781185.764:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27214 comm="syz.2.5340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eba38e929 code=0x0 [ 1619.471696][T16707] usb 4-1: USB disconnect, device number 43 [ 1619.818925][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1619.908972][T16744] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1620.129037][T16744] usb 1-1: Using ep0 maxpacket: 8 [ 1620.222955][T16744] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1620.246083][T16744] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.40 [ 1620.289248][T16744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.319254][T16744] usb 1-1: Product: 좼 [ 1620.328682][T16744] usb 1-1: Manufacturer: Ѝ [ 1620.338766][T16744] usb 1-1: SerialNumber: 錉褌萆₴띉茕⦰퐟㌤臰쬘负⾙舮ⅎ [ 1620.489786][T27258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.512160][T27258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.668934][T24589] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1620.808484][T24589] usb 4-1: device descriptor read/64, error -71 [ 1620.858893][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1621.059111][T24589] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1621.248996][T24589] usb 4-1: device descriptor read/64, error -71 [ 1621.369658][T24589] usb usb4-port1: attempt power cycle [ 1621.480416][T27277] netlink: 'syz.5.5354': attribute type 1 has an invalid length. [ 1621.511702][T27277] fuse: Unknown parameter '' [ 1621.595241][T27277] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1621.861209][T24589] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1621.890642][T24589] usb 4-1: device descriptor read/8, error -71 [ 1621.898913][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1622.129625][T24589] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1622.164803][T24589] usb 4-1: device descriptor read/8, error -71 [ 1622.279593][T24589] usb usb4-port1: unable to enumerate USB device [ 1622.379135][T11545] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1622.528997][T11545] usb 6-1: Using ep0 maxpacket: 16 [ 1622.546104][T11545] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1622.607740][T11545] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1622.656922][T11545] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1622.676020][T11545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.700489][T11545] usb 6-1: Product: syz [ 1622.710256][T11545] usb 6-1: Manufacturer: syz [ 1622.722960][T11545] usb 6-1: SerialNumber: syz [ 1622.938897][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1623.289028][T27298] pimreg3: entered allmulticast mode [ 1623.978933][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1624.162521][T27311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.172702][T27311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.384226][T27107] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1624.404895][T11545] usb 6-1: 0:2 : does not exist [ 1624.422107][T27316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.438669][T27316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.570434][T11545] usb 6-1: USB disconnect, device number 22 [ 1624.629024][T27107] usb 4-1: Using ep0 maxpacket: 16 [ 1624.680832][T27107] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1624.694087][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1624.736046][T27107] usb 4-1: config 0 has no interface number 0 [ 1624.761371][T27107] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1624.784973][T27107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.973629][T27107] usb 4-1: Product: syz [ 1624.977878][T27107] usb 4-1: Manufacturer: syz [ 1625.005449][T27107] usb 4-1: SerialNumber: syz [ 1625.018887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1625.137886][T27107] usb 4-1: config 0 descriptor?? [ 1625.228994][T27107] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1625.392537][T17669] usb 4-1: Failed to submit usb control message: -71 [ 1625.392966][T27107] usb 4-1: USB disconnect, device number 48 [ 1625.413609][T17669] usb 4-1: unable to send the bmi data to the device: -71 [ 1625.435800][T17669] usb 4-1: unable to get target info from device [ 1625.448597][T17669] usb 4-1: could not get target info (-71) [ 1625.461587][T17669] usb 4-1: could not probe fw (-71) [ 1625.671729][T16744] usbhid 1-1:1.0: can't add hid device: -32 [ 1625.682348][T16744] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1625.799394][T16744] usb 1-1: USB disconnect, device number 60 [ 1626.058897][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1626.234948][T16744] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1626.462747][T16744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1626.495800][T16744] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1626.538101][T16744] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1626.554108][T16744] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1626.563464][T16744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1626.571877][T16744] usb 1-1: Product: syz [ 1626.576212][T16744] usb 1-1: Manufacturer: syz [ 1626.594882][T16744] usb 1-1: SerialNumber: syz [ 1626.745311][T27336] ptrace attach of "./syz-executor exec"[25861] was attempted by "./syz-executor exec"[27336] [ 1627.098910][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1627.209595][T16744] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1627.234538][T16744] usb 1-1: USB disconnect, device number 61 [ 1627.246827][T16744] usblp0: removed [ 1628.138939][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1628.296848][T27356] netlink: 'syz.2.5374': attribute type 2 has an invalid length. [ 1628.327374][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.397272][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.788547][T27363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 1628.835441][T27363] bridge0: port 1(vlan2) entered blocking state [ 1628.874200][T27363] bridge0: port 1(vlan2) entered disabled state [ 1628.889888][T27363] vlan2: entered allmulticast mode [ 1628.900675][T27363] bridge0: entered allmulticast mode [ 1628.932569][T27363] vlan2: left allmulticast mode [ 1628.937624][T27363] bridge0: left allmulticast mode [ 1629.178984][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1629.188119][T27377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.198059][T27377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.470477][T27107] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1629.568951][T11545] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1629.684559][T27107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1629.694970][T27107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.706531][T27107] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1629.756604][T27107] usb 6-1: config 1 has no interface number 1 [ 1629.769155][T11545] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1629.794623][T27107] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1629.809439][T11545] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1629.818532][T11545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1629.844853][T11545] usb 1-1: Product: syz [ 1629.851805][T27107] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1629.866780][T11545] usb 1-1: Manufacturer: syz [ 1629.879338][T27107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.887911][T11545] usb 1-1: SerialNumber: syz [ 1629.893247][T27107] usb 6-1: Product: syz [ 1629.898446][T27107] usb 6-1: Manufacturer: syz [ 1629.908314][T11545] usb 1-1: config 0 descriptor?? [ 1629.914201][T27107] usb 6-1: SerialNumber: syz [ 1629.925001][T11545] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1629.942209][T11545] pctv452e: pctv452e_power_ctrl: 1 [ 1629.942209][T11545] [ 1629.953734][T27390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5388'. [ 1629.953824][T11545] usb 1-1: selecting invalid altsetting 3 [ 1629.970289][T11545] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1629.970289][T11545] [ 1629.980971][T11545] dvb-usb: bulk message failed: -22 (5/0) [ 1630.012647][T11545] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1630.050591][T27393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.070745][T11545] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1630.081141][T27393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.119739][T27393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.153572][T27393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.179955][T27397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.196914][T27397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.218877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1630.272147][T27107] usb 6-1: USB disconnect, device number 23 [ 1630.361404][ T6654] udevd[6654]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1631.141829][T27412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.151381][T27412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.268887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1632.298875][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1632.336675][T27107] usb 1-1: USB disconnect, device number 62 [ 1632.407515][T27420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1632.431618][T27420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.446235][T27420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.338897][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1633.862750][T27434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.873704][T27434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.884636][T27434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.895108][T27434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.164783][T27446] FAULT_INJECTION: forcing a failure. [ 1634.164783][T27446] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.178149][T27446] CPU: 1 UID: 0 PID: 27446 Comm: syz.5.5402 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1634.178176][T27446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1634.178190][T27446] Call Trace: [ 1634.178206][T27446] [ 1634.178216][T27446] dump_stack_lvl+0x189/0x250 [ 1634.178247][T27446] ? __pfx____ratelimit+0x10/0x10 [ 1634.178281][T27446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.178307][T27446] ? __pfx__printk+0x10/0x10 [ 1634.178344][T27446] ? sig_get_ucounts+0x26/0x450 [ 1634.178371][T27446] should_fail_ex+0x414/0x560 [ 1634.178410][T27446] should_failslab+0xa8/0x100 [ 1634.178442][T27446] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1634.178482][T27446] ? __send_signal_locked+0x22a/0xeb0 [ 1634.178510][T27446] ? sig_get_ucounts+0x3da/0x450 [ 1634.178536][T27446] __send_signal_locked+0x22a/0xeb0 [ 1634.178577][T27446] do_send_sig_info+0x58/0xc0 [ 1634.178611][T27446] send_sigio_to_task+0x216/0x2e0 [ 1634.178637][T27446] ? __pfx_send_sigio_to_task+0x10/0x10 [ 1634.178678][T27446] send_sigio+0x286/0x370 [ 1634.178697][T27446] ? send_sigio+0x97/0x370 [ 1634.178720][T27446] dnotify_handle_event+0x169/0x440 [ 1634.178766][T27446] fsnotify+0x1814/0x1a80 [ 1634.178810][T27446] ? fsnotify+0x735/0x1a80 [ 1634.178834][T27446] ? __pfx_fsnotify+0x10/0x10 [ 1634.178868][T27446] ? inc_nlink+0x4d/0x150 [ 1634.178902][T27446] vfs_mkdir+0x477/0x510 [ 1634.178934][T27446] do_mkdirat+0x247/0x590 [ 1634.178961][T27446] ? __pfx_do_mkdirat+0x10/0x10 [ 1634.178999][T27446] ? getname_flags+0x1e5/0x540 [ 1634.179034][T27446] __x64_sys_mkdirat+0x87/0xa0 [ 1634.179061][T27446] do_syscall_64+0xfa/0x3b0 [ 1634.179081][T27446] ? lockdep_hardirqs_on+0x9c/0x150 [ 1634.179101][T27446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.179122][T27446] ? clear_bhb_loop+0x60/0xb0 [ 1634.179147][T27446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.179167][T27446] RIP: 0033:0x7ff3a1b8e929 [ 1634.179186][T27446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.179204][T27446] RSP: 002b:00007ff3a296b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1634.179225][T27446] RAX: ffffffffffffffda RBX: 00007ff3a1db5fa0 RCX: 00007ff3a1b8e929 [ 1634.179240][T27446] RDX: 0000000000000189 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 1634.179254][T27446] RBP: 00007ff3a296b090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.179267][T27446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.179280][T27446] R13: 0000000000000000 R14: 00007ff3a1db5fa0 R15: 00007ff3a1edfa28 [ 1634.179313][T27446] [ 1634.378923][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1634.443257][T27448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5401'. [ 1634.490123][T27448] overlayfs: missing 'lowerdir' [ 1635.418917][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1635.938402][T27475] Cannot find add_set index 1 as target [ 1636.458906][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1636.514536][T27481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5408'. [ 1636.532345][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5408'. [ 1636.611957][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5410'. [ 1636.960469][T27491] FAULT_INJECTION: forcing a failure. [ 1636.960469][T27491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.988992][T27491] CPU: 1 UID: 0 PID: 27491 Comm: syz.0.5413 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1636.989022][T27491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1636.989034][T27491] Call Trace: [ 1636.989043][T27491] [ 1636.989052][T27491] dump_stack_lvl+0x189/0x250 [ 1636.989083][T27491] ? __pfx____ratelimit+0x10/0x10 [ 1636.989116][T27491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.989140][T27491] ? __pfx__printk+0x10/0x10 [ 1636.989168][T27491] ? __might_fault+0xb0/0x130 [ 1636.989203][T27491] should_fail_ex+0x414/0x560 [ 1636.989238][T27491] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 1636.989269][T27491] ? __kasan_slab_free+0x62/0x70 [ 1636.989296][T27491] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1636.989334][T27491] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1636.989377][T27491] ? __lock_acquire+0xab9/0xd20 [ 1636.989409][T27491] ? fpu__alloc_mathframe+0xad/0x130 [ 1636.989443][T27491] get_sigframe+0x58d/0x7d0 [ 1636.989479][T27491] ? __pfx_get_sigframe+0x10/0x10 [ 1636.989510][T27491] ? cgroup_freezing+0x2ad/0x360 [ 1636.989558][T27491] x64_setup_rt_frame+0x15b/0xd40 [ 1636.989584][T27491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1636.989604][T27491] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1636.989632][T27491] ? get_signal+0x1151/0x1340 [ 1636.989662][T27491] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1636.989693][T27491] arch_do_signal_or_restart+0x3d7/0x750 [ 1636.989731][T27491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1636.989780][T27491] ? exit_to_user_mode_loop+0x40/0x110 [ 1636.989806][T27491] exit_to_user_mode_loop+0x75/0x110 [ 1636.989828][T27491] do_syscall_64+0x2bd/0x3b0 [ 1636.989848][T27491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1636.989867][T27491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.989887][T27491] ? clear_bhb_loop+0x60/0xb0 [ 1636.989912][T27491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.989932][T27491] RIP: 0033:0x7fcaaeb8e929 [ 1636.989950][T27491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.989968][T27491] RSP: 002b:00007fcaafad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1636.989989][T27491] RAX: 0000000000000000 RBX: 00007fcaaedb5fa0 RCX: 00007fcaaeb8e929 [ 1636.990007][T27491] RDX: 0000000000000189 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 1636.990021][T27491] RBP: 00007fcaafad4090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.990034][T27491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1636.990046][T27491] R13: 0000000000000000 R14: 00007fcaaedb5fa0 R15: 00007fcaaeedfa28 [ 1636.990077][T27491] [ 1637.253363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.498873][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1637.633143][T27499] Cannot find set identified by id 0 to match [ 1637.758893][T16707] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1637.924278][T16707] usb 4-1: config 0 has no interfaces? [ 1637.933176][T16707] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1637.949105][T16707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.983603][T16707] usb 4-1: Product: syz [ 1638.028989][T16707] usb 4-1: Manufacturer: syz [ 1638.076990][T16707] usb 4-1: SerialNumber: syz [ 1638.182741][T16707] usb 4-1: config 0 descriptor?? [ 1638.538887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1638.590490][T27508] tipc: Invalid UDP bearer configuration [ 1638.590532][T27508] tipc: Enabling of bearer rejected, failed to enable media [ 1639.093148][T27501] warn_alloc: 1 callbacks suppressed [ 1639.093169][T27501] syz.0.5415: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1639.154831][T27501] CPU: 0 UID: 0 PID: 27501 Comm: syz.0.5415 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1639.154862][T27501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1639.154875][T27501] Call Trace: [ 1639.154884][T27501] [ 1639.154894][T27501] dump_stack_lvl+0x189/0x250 [ 1639.154929][T27501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.154955][T27501] ? __pfx__printk+0x10/0x10 [ 1639.154985][T27501] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1639.155020][T27501] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1639.155051][T27501] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1639.155084][T27501] warn_alloc+0x214/0x310 [ 1639.155120][T27501] ? __pfx_warn_alloc+0x10/0x10 [ 1639.155160][T27501] ? __get_vm_area_node+0x28f/0x300 [ 1639.155191][T27501] ? vb2_vmalloc_alloc+0xef/0x340 [ 1639.155222][T27501] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1639.155282][T27501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1639.155319][T27501] ? __kasan_kmalloc+0x93/0xb0 [ 1639.155347][T27501] vmalloc_user_noprof+0xad/0xf0 [ 1639.155380][T27501] ? vb2_vmalloc_alloc+0xef/0x340 [ 1639.155400][T27501] vb2_vmalloc_alloc+0xef/0x340 [ 1639.155419][T27501] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1639.155440][T27501] __vb2_queue_alloc+0x9bf/0x15a0 [ 1639.155476][T27501] vb2_core_reqbufs+0xc31/0x1420 [ 1639.155507][T27501] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1639.155531][T27501] ? __vb2_init_fileio+0x1e8/0xff0 [ 1639.155553][T27501] __vb2_init_fileio+0x318/0xff0 [ 1639.155571][T27501] ? __lock_acquire+0xab9/0xd20 [ 1639.155588][T27501] ? __pfx___mutex_lock+0x10/0x10 [ 1639.155613][T27501] vb2_core_poll+0x4c1/0x840 [ 1639.155638][T27501] vb2_fop_poll+0x168/0x380 [ 1639.155657][T27501] ? __fget_files+0x2a/0x420 [ 1639.155677][T27501] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1639.155696][T27501] v4l2_poll+0x144/0x2c0 [ 1639.155715][T27501] ? __pfx_v4l2_poll+0x10/0x10 [ 1639.155743][T27501] do_sys_poll+0x8c9/0x1070 [ 1639.155776][T27501] ? do_sys_poll+0x3f1/0x1070 [ 1639.155811][T27501] ? __pfx_do_sys_poll+0x10/0x10 [ 1639.155834][T27501] ? futex_unqueue+0x22/0x240 [ 1639.155861][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155884][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155905][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155928][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155950][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155972][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.155995][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.156016][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.156039][T27501] ? __pfx_pollwake+0x10/0x10 [ 1639.156059][T27501] ? futex_wait+0x285/0x360 [ 1639.156076][T27501] ? __pfx_futex_wait+0x10/0x10 [ 1639.156111][T27501] ? __pfx_do_futex+0x10/0x10 [ 1639.156130][T27501] ? set_user_sigmask+0xc7/0x1b0 [ 1639.156148][T27501] ? __pfx_set_user_sigmask+0x10/0x10 [ 1639.156174][T27501] __se_sys_ppoll+0x1ff/0x260 [ 1639.156196][T27501] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1639.156216][T27501] ? rcu_is_watching+0x15/0xb0 [ 1639.156238][T27501] ? do_syscall_64+0xbe/0x3b0 [ 1639.156252][T27501] ? __x64_sys_ppoll+0x20/0xc0 [ 1639.156274][T27501] do_syscall_64+0xfa/0x3b0 [ 1639.156288][T27501] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.156302][T27501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.156323][T27501] ? clear_bhb_loop+0x60/0xb0 [ 1639.156348][T27501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.156376][T27501] RIP: 0033:0x7fcaaeb8e929 [ 1639.156397][T27501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.156416][T27501] RSP: 002b:00007fcaafad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1639.156438][T27501] RAX: ffffffffffffffda RBX: 00007fcaaedb5fa0 RCX: 00007fcaaeb8e929 [ 1639.156454][T27501] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1639.156465][T27501] RBP: 00007fcaaec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1639.156475][T27501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.156484][T27501] R13: 0000000000000000 R14: 00007fcaaedb5fa0 R15: 00007fcaaeedfa28 [ 1639.156507][T27501] [ 1639.158311][T27501] Mem-Info: [ 1639.578905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1639.730204][T27501] active_anon:10153 inactive_anon:124 isolated_anon:0 [ 1639.730204][T27501] active_file:20755 inactive_file:40538 isolated_file:0 [ 1639.730204][T27501] unevictable:768 dirty:6 writeback:0 [ 1639.730204][T27501] slab_reclaimable:11127 slab_unreclaimable:122148 [ 1639.730204][T27501] mapped:34019 shmem:2416 pagetables:1802 [ 1639.730204][T27501] sec_pagetables:0 bounce:0 [ 1639.730204][T27501] kernel_misc_reclaimable:0 [ 1639.730204][T27501] free:1249874 free_pcp:13335 free_cma:0 [ 1639.775790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.048882][T27501] Node 0 active_anon:42776kB inactive_anon:496kB active_file:83008kB inactive_file:161952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134460kB dirty:16kB writeback:0kB shmem:8132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12708kB pagetables:6976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1640.082362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.152031][T27501] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1640.261450][T27501] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.290574][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.301161][T27501] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1640.307089][T27501] Node 0 DMA32 free:1083952kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42152kB inactive_anon:496kB active_file:83008kB inactive_file:160384kB unevictable:1536kB writepending:20kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:34084kB local_pcp:22460kB free_cma:0kB [ 1640.339519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.362135][T27501] lowmem_reserve[]: 0 0 1 1 1 [ 1640.376238][T27501] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1640.405321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.418299][T27107] usb 4-1: USB disconnect, device number 49 [ 1640.537844][T27501] lowmem_reserve[]: 0 0 0 0 0 [ 1640.580302][T27501] Node 1 Normal free:3902196kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:0kB free_cma:0kB [ 1640.618882][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1640.675899][T27501] lowmem_reserve[]: 0 0 0 0 0 [ 1640.689665][T27501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1640.694356][T27521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.717325][T27521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.728142][T27501] Node 0 DMA32: 970*4kB (ME) 361*8kB (ME) 156*16kB (ME) 136*32kB (ME) 152*64kB (UME) 60*128kB (ME) 39*256kB (UM) 53*512kB (UME) 34*1024kB (UM) 13*2048kB (UME) 233*4096kB (UM) = 1083952kB [ 1640.746810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.756149][T27501] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1640.768690][T27501] Node 1 Normal: 209*4kB (UME) 50*8kB (UME) 50*16kB (UE) 246*32kB (UME) 115*64kB (UME) 31*128kB (UME) 8*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3902196kB [ 1640.791136][T27501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.803477][T27501] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1640.812945][T27501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.824536][T27501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1640.836475][T27501] 63827 total pagecache pages [ 1640.843040][T27501] 124 pages in swap cache [ 1640.847544][T27501] Free swap = 124500kB [ 1640.851779][T27501] Total swap = 124996kB [ 1640.855956][T27501] 2097051 pages RAM [ 1640.861563][T27501] 0 pages HighMem/MovableOnly [ 1640.866318][T27501] 425411 pages reserved [ 1640.870566][T27501] 0 pages cma reserved [ 1640.888891][T27107] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1641.054911][T27107] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1641.069090][T27107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1641.093409][T27107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1641.118599][T27107] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1641.128392][T27107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.135285][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1641.152632][T27107] usb 4-1: config 0 descriptor?? [ 1641.170292][T27107] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1641.352074][T27527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.372869][T27527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.658874][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1641.790779][T27504] delete_channel: no stack [ 1642.299928][T27546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.313867][T27546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.553300][ T30] audit: type=1800 audit(1751781209.194:1387): pid=27548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5429" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1642.698880][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1642.859083][ T888] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1643.041812][ T888] usb 1-1: device descriptor read/64, error -71 [ 1643.339512][ T888] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1643.569192][ T888] usb 1-1: device descriptor read/64, error -71 [ 1643.579541][T11545] usb 4-1: USB disconnect, device number 50 [ 1643.679646][ T888] usb usb1-port1: attempt power cycle [ 1643.738965][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1643.989947][T27568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5435'. [ 1644.162811][T27572] xt_TCPMSS: Only works on TCP SYN packets [ 1644.185903][T27568] bridge0: port 1(vlan2) entered blocking state [ 1644.228927][ T888] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1644.271765][ T888] usb 1-1: device descriptor read/8, error -71 [ 1644.287296][T27568] bridge0: port 1(vlan2) entered disabled state [ 1644.296130][T27568] vlan2: entered allmulticast mode [ 1644.301794][T27568] bridge0: entered allmulticast mode [ 1644.314224][T27568] vlan2: left allmulticast mode [ 1644.319486][T27568] bridge0: left allmulticast mode [ 1644.529140][ T888] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1644.584148][T27575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.600446][ T888] usb 1-1: device descriptor read/8, error -71 [ 1644.613970][T27575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.647143][T27579] input: syz1 as /devices/virtual/input/input112 [ 1644.663665][T27575] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 1644.675602][T27575] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 1644.684034][T27575] CPU: 0 UID: 0 PID: 27575 Comm: syz.1.5437 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1644.696133][T27575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1644.706226][T27575] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1644.711635][T27575] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 3d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 5a 4f 3e f8 85 [ 1644.719519][ T888] usb usb1-port1: unable to enumerate USB device [ 1644.731250][T27575] RSP: 0018:ffffc9000ec67070 EFLAGS: 00010206 [ 1644.731274][T27575] RAX: ffffffff89821353 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1644.731289][T27575] RDX: ffffc9001199a000 RSI: 0000000000000364 RDI: 0000000000000365 [ 1644.731304][T27575] RBP: dffffc0000000000 R08: ffff888030521e00 R09: 0000000000000002 [ 1644.731318][T27575] R10: 00000000ffffffff R11: ffffffff89821330 R12: dffffc0000000000 [ 1644.775595][T27575] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888147326000 [ 1644.783577][T27575] FS: 00007f5c124cf6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1644.792518][T27575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1644.799136][T27575] CR2: 000000110c3407d4 CR3: 0000000037dac000 CR4: 00000000003526f0 [ 1644.807219][T27575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000597b1742 [ 1644.815193][T27575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1644.823167][T27575] Call Trace: [ 1644.826449][T27575] [ 1644.829387][T27575] qdisc_tree_reduce_backlog+0x299/0x480 [ 1644.835152][T27575] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1644.840883][T27575] fq_codel_change+0xa96/0xef0 [ 1644.845662][T27575] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1644.851335][T27575] ? __pfx_fq_codel_change+0x10/0x10 [ 1644.856898][T27575] ? __sock_sendmsg+0x219/0x270 [ 1644.861763][T27575] fq_codel_init+0x355/0x960 [ 1644.866367][T27575] ? lockdep_rtnl_is_held+0x26/0x40 [ 1644.871581][T27575] ? __pfx_fq_codel_init+0x10/0x10 [ 1644.876715][T27575] qdisc_create+0x7a9/0xea0 [ 1644.881244][T27575] tc_modify_qdisc+0x1426/0x2010 [ 1644.886220][T27575] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1644.891546][T27575] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1644.896846][T27575] rtnetlink_rcv_msg+0x77c/0xb70 [ 1644.901806][T27575] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1644.906931][T27575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1644.912483][T27575] ? ref_tracker_free+0x63a/0x7d0 [ 1644.917512][T27575] ? __copy_skb_header+0xa7/0x550 [ 1644.922552][T27575] ? __pfx_ref_tracker_free+0x10/0x10 [ 1644.927937][T27575] ? __skb_clone+0x63/0x7a0 [ 1644.932478][T27575] netlink_rcv_skb+0x205/0x470 [ 1644.937253][T27575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1644.942720][T27575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1644.948029][T27575] ? netlink_deliver_tap+0x2e/0x1b0 [ 1644.953240][T27575] ? netlink_deliver_tap+0x2e/0x1b0 [ 1644.958458][T27575] netlink_unicast+0x758/0x8d0 [ 1644.963255][T27575] netlink_sendmsg+0x805/0xb30 [ 1644.968050][T27575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.973354][T27575] ? aa_sock_msg_perm+0x94/0x160 [ 1644.978332][T27575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1644.983634][T27575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.988937][T27575] __sock_sendmsg+0x219/0x270 [ 1644.993633][T27575] ____sys_sendmsg+0x505/0x830 [ 1644.998415][T27575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.003731][T27575] ? import_iovec+0x74/0xa0 [ 1645.008245][T27575] ___sys_sendmsg+0x21f/0x2a0 [ 1645.012945][T27575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.018171][T27575] ? __fget_files+0x2a/0x420 [ 1645.022775][T27575] ? __fget_files+0x3a0/0x420 [ 1645.027469][T27575] __x64_sys_sendmsg+0x19b/0x260 [ 1645.032424][T27575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.037905][T27575] ? __secure_computing+0xe2/0x2a0 [ 1645.043031][T27575] do_syscall_64+0xfa/0x3b0 [ 1645.047543][T27575] ? lockdep_hardirqs_on+0x9c/0x150 [ 1645.052754][T27575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.058832][T27575] ? clear_bhb_loop+0x60/0xb0 [ 1645.063522][T27575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.069434][T27575] RIP: 0033:0x7f5c1158e929 [ 1645.073878][T27575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.093496][T27575] RSP: 002b:00007f5c124cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.101921][T27575] RAX: ffffffffffffffda RBX: 00007f5c117b5fa0 RCX: 00007f5c1158e929 [ 1645.109899][T27575] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1645.117877][T27575] RBP: 00007f5c11610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1645.125856][T27575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.133867][T27575] R13: 0000000000000000 R14: 00007f5c117b5fa0 R15: 00007f5c118dfa28 [ 1645.141890][T27575] [ 1645.144924][T27575] Modules linked in: [ 1645.148989][T27575] ---[ end trace 0000000000000000 ]--- [ 1645.154484][T27575] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1645.159948][T27575] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 3d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 5a 4f 3e f8 85 [ 1645.179638][T27575] RSP: 0018:ffffc9000ec67070 EFLAGS: 00010206 [ 1645.185849][T27575] RAX: ffffffff89821353 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1645.193909][T27575] RDX: ffffc9001199a000 RSI: 0000000000000364 RDI: 0000000000000365 [ 1645.201959][T27575] RBP: dffffc0000000000 R08: ffff888030521e00 R09: 0000000000000002 [ 1645.210028][T27575] R10: 00000000ffffffff R11: ffffffff89821330 R12: dffffc0000000000 [ 1645.218116][T27575] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888147326000 [ 1645.226173][T27575] FS: 00007f5c124cf6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1645.235168][T27575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1645.241800][T27575] CR2: 000000110c3407d4 CR3: 0000000037dac000 CR4: 00000000003526f0 [ 1645.249857][T27575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000597b1742 [ 1645.257868][T27575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1645.265936][T27575] Kernel panic - not syncing: Fatal exception in interrupt [ 1645.273462][T27575] Kernel Offset: disabled [ 1645.277794][T27575] Rebooting in 86400 seconds..