last executing test programs: 7.589631363s ago: executing program 3 (id=3368): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000003380)={&(0x7f0000000340)=[{0x8, 0x9000, 0x0, 0x0}, {0x2, 0x3800, 0x0, 0x0}, {0x1, 0x4010, 0x0, &(0x7f00000001c0)}], 0x3}) 5.554451154s ago: executing program 4 (id=3369): r0 = socket(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0x0, 0x4000000}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1572, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x28, 0x29, 0x2, "e5b423fb6972d2f6b5d67448583bf4371d1b"}], 0x28, 0x1d1b}}], 0x2, 0x9090) 5.427628728s ago: executing program 4 (id=3372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x400, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private0, 0x0}, &(0x7f00000001c0)=0x14) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r13, @in6={{0xa, 0x4e22, 0xe, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}}, 0xfd48, 0x4}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.355284323s ago: executing program 3 (id=3373): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000002200", [0x8, 0xffffffff9673e35d]}}) 5.081069329s ago: executing program 3 (id=3375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="080003004000000005002000010000000500010003"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0a000000000000000300"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x9000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x7, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x40080) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000680009010000000000000000020000000000000008001000", @ANYRES32=0x0, @ANYBLOB="040009"], 0x24}}, 0x0) sendmmsg$unix(r4, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x18, 0x40001}}], 0x1, 0x20000101) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0x27800000001, 0x41000, 0x1, 0xffffffffffffffff, 0x1}) 4.728572201s ago: executing program 4 (id=3377): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/276, 0x114}], 0x1, 0x5, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x53a2, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) (async) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/276, 0x114}], 0x1, 0x5, 0x7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x53a2, 0xc000, 0x2, 0x23f}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) 4.302685396s ago: executing program 1 (id=3379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x8001, 0x6}) recvmsg$kcm(r1, &(0x7f0000001d40)={&(0x7f0000000440)=@phonet, 0x80, &(0x7f0000001c00)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000006c0)=""/78, 0x4e}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000001ac0)=""/28, 0x1c}, {&(0x7f0000001b00)=""/205, 0xcd}], 0x9, &(0x7f0000001cc0)=""/88, 0x58}, 0x10000) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000040)={0x8098f905, 0x0, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffe, 0x10000000, 0x10002, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x1, 0x400, 0x80, 0x88, 0x0, 0xc, 0x8d], 0x200000, 0x240046}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000004c0)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, '$($]-^'}], 0xa, "8c6f63a4916ac4869cea10754d4723dce920020079e9510d26bf787dda3d69d0e4d6bf0cefba3f23c3c41145e2225b791a3ec223143d730a295bbd9908e8fc35658d91cdc76ca571c6452c8a4646eed6b049139047bd2ad08a1bcb9229ae15d257dabd9ade4cac7663c59707b32a980b56636aaad1830a91d2bb9fee71be5333d031d8888766464523f5df4420a00c01ce0eb12885ea70954268b7f8887a3a8b98b169e5bc9ca819f540f74a3e812d18886c92c02f4b1e71b26871faf0ea7bc76e64aa20b068449629967d3fbed17071db03c3e3734ae7234ad746f9"}, 0xee) 4.142219189s ago: executing program 1 (id=3381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x73}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x0, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x2, 0x9, 0x110}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) 3.863794054s ago: executing program 1 (id=3382): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000004440)={0x2020}, 0x2020) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x2, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x0, @remote, 0x4e21, 0x0, 'rr\x00', 0x1e, 0x335b, 0x35}, 0x2c) write$tun(r5, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829", @ANYRES32=0x41424344], 0xfce) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r8, 0x0, 0x0, 0x80800) 3.545310773s ago: executing program 1 (id=3384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r3, 0x1) recvmmsg(r3, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x94) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, 0x0, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, 0x0) r7 = syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x8329, 0x10, 0xffffffff, 0x2c9}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0xc, 0x0, @fd_index=0xfffffffd, 0x6, 0x0, 0xfffffffe, 0x1, 0x0, {0x0, 0x0, r7}}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 3.38947229s ago: executing program 3 (id=3386): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0xc, 0x2, 0x86cb}, 0x30, 0x1) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r7, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0xd}, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x73, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@local, 0x8}, {@loopback, 0x5}, {@local, 0x8}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x400000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 2.245893504s ago: executing program 1 (id=3393): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) getdents(r1, &(0x7f0000000040)=""/45, 0x2d) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140)='\b', 0x1, 0x4b, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) (async) getdents(r1, &(0x7f0000000040)=""/45, 0x2d) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) (async) io_setup(0xc00, &(0x7f0000000000)) (async) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140)='\b', 0x1, 0x4b, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1}]) (async) 2.19258618s ago: executing program 2 (id=3394): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r1], 0x2a) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_PAYLOAD={0x36, 0xa, "a631654531122a179c6f0cc0ef6cd72b49455958f2d744ede8f84e1eba71152b399b544080146019457f082fdf37c58a638e"}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFQA_PAYLOAD={0xce, 0xa, "4f131e00d160c6407c4a3e35c13940b1c9f05b0eb8651984d7869bd82f565a89721afad7b1a630c038fb50e9fd461805823a46058c421e48ab9abb774e93ff5a8d4b0ae4afc5bc47b6a3753afa4f31330f9d536397e8ecd4ba0095e2b55be133eb944dad0a9edccdf5a01c98dc7c40ebfc8bfe214084947aef22af578d52a2d7fd209b624bc4fd490a3482c0f7f960affcfe39eba47f8dbe9c8214e7b23a899dd487f095d13667bedf4e2b99eb4d5de88eace3626ddac06bf671b0f3111945049d0b4333c6d46baab88d"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x138}, 0x1, 0x0, 0x0, 0x4011}, 0x24008844) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff6, {0x2}, [@nested={0x8, 0x10b, 0x0, 0x1, [@generic="ca6e412c"]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0xc957}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8804) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffe, 0x10000000, 0x10002, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x1, 0x400, 0x80, 0x88, 0x0, 0xc, 0x8d], 0x200000, 0x240046}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) 2.106753392s ago: executing program 0 (id=3395): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x6, "0b334c0e1fc3"}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x6, "0b334c0e1fc3"}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) read$eventfd(r4, &(0x7f00000001c0), 0x8) syz_usb_control_io$lan78xx(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003e3000000e303b9bde64f49b6c87ebfd8ff61fa78912e7a07678af0e77c0274547b617b4e6dc5b4665331d9a276a91396169d96de6064"]}, 0x0) 2.050531797s ago: executing program 2 (id=3396): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x18) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000dfeffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00d7040000400000006a0af2fe00000000850000001a00000062000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee23404aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459664124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x18) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) 1.876208442s ago: executing program 1 (id=3397): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x8008cff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1.874762588s ago: executing program 4 (id=3398): r0 = socket(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0x0, 0x4000000}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1572, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x28, 0x29, 0x2, "e5b423fb6972d2f6b5d67448583bf4371d1b"}], 0x28}, 0x12}], 0x2, 0x9090) 1.871645369s ago: executing program 2 (id=3399): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d0040041200a012c00128009000100626f6e64000000001c000280050001000500000008001200f8ffffff08000b00", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 1.703457202s ago: executing program 0 (id=3400): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5fe, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e17d070000000000000000fec000000200008006060000008879e66485201a0023ca83747357a52759000400000000f2e0fc370000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.669087754s ago: executing program 4 (id=3401): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020603000000000000000000000005000100b7ace1c06aba51bc94cbe99ff28b86cf07000000c258a43081c6e18874fe403067a197213128494399e5979c93364a1a16da6c6c42b3f0f367b51dfc2dae806f786efa30bd8f4727576d9500"/109], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffda6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r1], 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020) 1.543752549s ago: executing program 0 (id=3402): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x2a50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2a20, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x220, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4b0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7120d0a43aab6534fac124d833da918e0969be3ba8aa24f18b0a072b507281bb81dd8b9156c65f4820c350315f23a02372504efb116be802c8efc5d3b10aa48a2ec796acbd139030c964f8517bde1fcca32be"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xb98, 0x2, 0x2}, {0x8, 0x5, 0x0, "a9bc9d17bf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d91f6ae5dd441a2a52078ba960bb2e32aeeb697206186243acc6562a78d4d4739eabc5dcb03050f3d465b77e4bfa227e969f8aaaca75046470d5e0095d809792203733489986de8060bd895ce0769894233ef33212dbfe4f65c48ec6cce8fe96ee096fb6c9fff8e55fb66808b58fb007ad49fbfa4245af29fe7181d1"}}]}]}, @TCA_CGROUP_EMATCHES={0x117c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "70731e9d973322ed263781be205faed4861362b731b71c69857d5f8e487782e0abbd4b4a366fb8c1c8ac2ab18a7e539166b79662209dda88e9ea8cc35f29762d483490f5cb09f457e6d5bbafd26dfacfa78896bdf79b5d1699cfcfbd65e359b7cce20823ab657c754bfaa6c7e244eb3c1fe050b079d81f498a5d8660f16536c4"}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x0, 0x4, 0xee}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="070595ccf100a20f144c", @TCF_META_TYPE_VAR="86384dfe31a394", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x6}, {0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8f01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xac}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x81}, {0x2, 0x7, 0x38ff, 0x2, 0x6, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x90, 0x8, 0xc}, {0x1, 0x1, 0x5}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x40}, "658461cbe2dbea19cd6f4ad314ceebc6b543dd4bece7653d357e1a1a7730ced0b6be1bc484f7d641aae91776e3b539c543bbaadc82df694fbc4cd2e7fcf74c3303a5aee6cb6437be9e49eb63c03752e5dcd5f8db2f96934036c394b79a1e386717f677cfbef4a24da0b5cd218fe0cee7f629d5b7d03195fac64a4dd6f42e0d10d301f9d9510b412a11c52c27b78447141a7ffc4c7386e0a8bc029b01972b5b5b0719380e3de34c00db817a82f493c1544fcc23e7b821530d520ca45edbef68a056841d6cfe54cf35873862ac638593d42ae17a278e3d646209c5858d9ee2f3374e1c4dd51801c738027f98a3b27e511f650e06898c0826f58fb60bd79a476274dcaf64df4176f0c8bac52f074446f635e08703eb403ff7cf5b4e479705a4566df7a31ed15030246fbdd4db3edde40e856a2c3c9e2d091ffc70ef4bd95f5b689d1c72e1121a0c1df49d710c41af44e7cc305db2a9c788b20f7651268705ed67b742c60556e48c5578c72dfcd15359f9f83377b5e0df34b68dcd298f14a48b2491ad72f54c186b5e31c400fd4927e5ed0395ba5bdc4065ee5fc191019d9df5db9566eb6b62730ee4cedb8ec5e9a32ae7bb1384008286abf59d4b4f4badcb6c16cd8c6f69328f8cb01c9c08a2249765af06e2fe1e0c44a4e835d366786414cce2c78540e549466d4d3d4d80df5d579232770d3cbc569a30f3bdf0244ab538be9a8d4e81bc3285b48577ea1a24016f931550d451125b98dd2e596d02465be34c8ecf8d5db0c4db574e178d06a83e4e1d12220953e3004ffed51da66f2123cb1258059e484f8076c1061cf712d3596124844c5066776c32d6e154a06abd6d3a21574d5192289585b2a2807ec0253a56f0b41cfa2012f23d4ac98af6e14873012229afb64f3c39d8b5766177e59f72cade50674c584e782c82ba1b7d97e8fa407418f0a843a1274178248da9adf4c1d4efdab86a5fc69af9064f1b916f456008db91ffb18a54bf7729f896521970db8e9a540cf762273a6325877767e9de9653a4758207dcd8701886cef9fbff8d30e85be0fc46818c58cf27150940e9827788b2ee3a90464bfa3ae630ce3e6ba63f48fa13ea5972687554d9c2d8848e7900f0d8336cd5f1bd11b06713b592cfaeaae07620b8b008853f0240ba57dd139346214255603e5729fc021737d79d3f13d4a21c32be13a4d2dc889db696d303ea6da0c49860fbb546b8e3229f9c1ad07202b4305738d4547e69d47d81fdcec5572bdfac5eabc018f1622262b9875fd21f265810a794dcf2ed6a43f8b2e651c3bfffce327b6cda2d6a69844976588d8ad8973f2841494e5bed68aff3879adecf35faaf3ca61d7f70b6ab274e7f16488e4199b902d3c476676b33f32eb7c6bfe12e1566b22b017fedaf40a5c2564c776532067b40a70a3d63b918d607e5908afc9d2a25c4f146e8b1e40067b4f5f09705d226a1706d01be91c9d2a62f837c1e8a1872ac5ec79f59c3a4f80204f55fe027b31066a0df166af4fd02b5999de61b0b33c276c33da6f89551cbac4f7d07d8bc71ead953b9639dfbadc32cf5d428fce7f44b933caa803fd0d757910e15a0b1f8045a00b6156cb10d11de95117c0d9e612b554e42ffe595851959c122950f037604a649f1ce68ffa4194161f88060f680f5ea38b11545dc2c73632b4a14a9f9241c2123537eccd3519a9d3f669e17c34af712b9977592db77f0731b5173055a040a8beb6358a03e9162f3f5f1d976f7910143bbe3b28a14b3a043e96a8f2eac5f54f8f3b71a7759ce65dbc260ddd3e3605f737a9431504ede8afa90fa948f3e7fbe7219007c5ca6af4cdd07b6cf8760dd66db01326f1f8c125040fc9ec5d6968f65a70c006bbf0280fe081d897b5c49bfbd06b5db23e7f243641688849298e6a93b1c1e57bf842784ee20f2c258bdf05b34f99dc78d49a9e9f5e8a95dc41293a3273d45a62603f3a8452b3153e6992f2af9f5323422ea5d6f1ec146a8c70fdc4d0b0ccc6ffaafed1bc41b9a7b79722397bc25e89e520cbf29a11c5899d01d9f0a5598076b6f28eaaf09fc00e1e0e8ade392bde5bbb37981190a7ec0df02b9e8354dab4311cf4ae75ae1c4f09d4f42cbb22fea37490f19b930f38556af78384816b75a5363788e7d011de43b9b51e1f16b5e222b6e23f5a5c437ea2539b96b5dbbf79e9bbbde80ab3b4739ee1894735e73796daec01dfbcc5c5a732c86cc1815a2761fded5f7e686f746446eb36485b8c4a4cc593802eaacb1c0a4cb74d5f3c17cc639475de6604aab5c3a1d6e141d9484d360e1109da8350c8555d5e8b3f0c3c381d56a0bc94cda72bb9b172ddae29dac16d39b0d4680c798a0472f26b3c7c0e23b5f95114a8dde5b71d45be38fe31a100f82cf0a15f2453ee6716a1783522f94829679a101ef076deccd112dc1cd059455e8d4b1ecaef8c1079a0b168291e0b13e9373fb27658792f89f8f3ceca11a138b9bed42f665d000b3a2e786ac52b8d05878dc05b10fbed371557dd60f6eb93e01f00b69a955bbf165482e50454a060e8c8176a93af64640627750c4517cb555ceb135114ebaf79cae638b611eef7869fe64d107605c8c2f50506405fcc3a917e53203905f0b9a273b2faefee210e40cbd978374af5cb9118d8305a948b85321ef40ce79ad343fd4a6ed34b2fd529c52f6ed615d6c445782ea8c0ca46f14cd299f8308da2a565f2bb2b73add037171025323d407cc4800c6a1bed0ab83fc877ee9f13ab9f83dd04371f958ee7b768c552d2ed98f8e3d77345fd934c3d574ad638e1f5e07ebabd8fd55962bd64055702cd19b8ffbb5df563eed38eef1afb1bcd9a670c896e685d4a6543e48574bc9ee261f570be8f2e480941c4d1e61f8cfea75f541172e1271385fefcaee4ef4af780ed6095b7b929304c5ed662a0e38f22e98cb723d2923bc1051be2257537d39b1030111c3055c3514d9619f00daa3e9a2a75335ade0211a8c80b4a6ffdc3d45da607139957b1fdc0db70b76caffe0d47c432fe806a7695521f0fcb2bdbe14a6744bbf8afcacf95970870d9405c9265cc515c0a5ad7e5939a0b1f51612d8bc84b643497d5800c1b04da570216b9f62bc3516cead5bd7f279f9c16b6c33a69f45784db7304e211942e92c7d8f676d0b10fb60b60e3e7737c449fc8a34c2e8b399372f38f82b2753c61d94996dc305b9dd0287006da9d57b7d78f7861d5fa2b97094f7383c821223c5e0457aaf22d83a66d9fea8ef6220da382267068665a2b327646c0b6fe3181d1ade242d01f8b01bfa44cef7abba482a8a550b5ff87caca019a36c2c3f6e648fab4f08f04e5f44f4974d3c9fef54b96a2c36c77b4825ad2d5cb9fa20303b5fefdfedfed5327d0f4bf683dc517da23ed0dacd72ff39c7104ae6e209c5a592419eb09583684d760f3acafb43fdf59c4b66f1f61fea98f623b89ec6c47a91ac0edbe568f0015a1c0f9c669b9c754c0db80c5bd788d41e1f4db047c8f2ad52220b33ab8a864570157b5ef266688e85a9fc5659178f19b24265bfa763f14d176cabbb8f46348996d931fc81c2d6b241d2567db2f2d04cd34ac7762be055aad474761d7c4419b657c8e39e40ef7de873f57a50f408523fd29d9e4fc7bc072c827ef05d526d82413b4a3a16618bf28c6977cec3f61734bb58d738068c26156a86a6702781c942434eea2c5e5cf34addf4d554ea6451a34739a5ab0de2bd6d94aad7479debc152159aa91e7d17d1af3c375e4dd0273edcc9c48171bfc40559e5adf834d2d49fbbd829470002787fad7b02cfb5fdae0153a5bfa0f349eccdfd54c0faf8817aca57beea739a0d5a4619f92872cd2867661d9601375a5476c70dd60bc82c951912e3ff9f1eff222c8bf8dbb4f98b60559c8739032f2a21d33e26f28b32a356c6e025241f7b68c185bd2497fb96c5e45c403c4b9c6f96b6b3c50c540b419307cb5862f1b772ad84ac41ae0305ab67ef173eaf85e9fd6728178da7ad37940fbd392086e2a73fa9af4a2772156bf9b6b4a74ff7b70323fdd44e91c4eab791ca95e18ab0a17f5e911608132783145b22ed9f794f5fa2f0a39cf2542b865f07f819cbaacb536a12e011e7e0665cf6cab27fc052c8d97a3d5d46e183dd1f1f4f7c68af4c6cddc2759c6c0393fc04a0f523bf27dfffb454d6e819a6e5abecea675f614cb7f2a10403958b96296ceca9796525b842469fe498a0f6c7556649358761ad15663c5014108351d753188a79499807628b111cc6af68e50435509e6df5973cf5d804d4b0126af41d163b1c8fd698944ce5cabe1a423306874938b5430971ab4d4c429767ab0bfc52503b5961c34deedf542c80100522f54d9fef012510df127a9e841f9b645c5a8f7f1c2d5733ea68d5c93a38240cff51123c758a8116b545fbdbd88e9035207f96254305bc0e0f7d87b1d684ec47d5bcf65ebdfbf88a799f31b92fa628858fe48c703d9f7cda57ed221de99df10862a7cdee0de9dbe72805ec43930323b553bed1d3104796ee13727fe407c4b5fa7b299219fe83aa101ca4896a234e9e8034440cf1c2a0c23e51c3b2f0fe2c46af10784903be16c4f01750e70a57e1490315b7c877919da8835889ecf13000d186cf48563138c583ad1b6da71e633b64c6b1e165b2b1526d23f3453e497ec375a45b56c11a6bfb168857125fa3a4b531b44f8d4da14360271131d9116ae343cec10082c45f2646218e586600c253cb9f10274f80457aa3fab17034af01d7874ec5862f98b672a75ffa89b148faed59b38cce850e36d3702046fb1186382674fd26ebd344a3794f465015dbd6e9a38ef69acb81fea561c2a75f7a90dde13f19a490aea672331e74338b98910da80090dd9ab7accf3f0479e3919ccf54e4fa97262189a14f95bdc8d96183f4fd308686234611843cba9c12dfcdfebc1dd9cac63e421d2798387722a7bb581c6d7d44683e27c0f859af60b5e1766fd8a3afe4d21ea649f63ba696b0ed24eb08d558cff2766ef2d2db5335d9baa66d434da6d2b7114cdf58c7119f9bb9cd8440fd30ea82c60b2ff2802e0614747cae0f54a643894dd1ab16e3b3eb79e889be47404dbbf7545212d8d5ddea9f90ba95bbf212de1a7b08f62c85d0e4e89891ed660cb3d58799b8baa346d3d2017df78fd59713b8089ce69355cf46ec167a92f1485ec8cf8e2008233e247ffcdb12943ef42f026ab493198f1821eda686d38672f42e6100db7e00ea3e258e6075a71ef36d5b48e0249cdcebcae844ca858f98d798aa2c728acc46a020c7939b7ad6e8df0aa6d3b472cdf80307e2f9b5959d586c30764d7ff24cce26a998d5d7f4fcffa87b3a561b3571a0ce8ee767983b9c097c5c1b37b3078871651bca4bed2d9e01976becdd1d85edf29785ecdad6e0e9d74bf7ae70f471384690ec498ab161da0b903630fb5d3132d78378f63e45cb048ccd951aac878d8c6389748d745194fc4012aa39704e8c7d239a69090ea36e4dac273cda554d42e02dea5bde3623520b8bd72baf8a774b2bf50f7cbdb1cee989d50aef793cc9e9bdec74e0f712a71428ab6c02b3410c9e4f208ae79e4bc51e696bfb3fb682ce0ac4bb68105e9c90a03744ba21f506e84fa0043083f49735bf7031d03c6749a294b16a61fa00bcb4ebcc8baa5dd0d1a16fb1b81ae5c440e2e2cbebc3b5f44a62ab0d987a01ad43bc5cf517e94a11b5662483fa7499ddb6490a7f9490b6233ae7f9d0284d9eceebe07bcd39d9d04015cfda291213b5b18813c68e22f6949b726340ccfe76d33f89edb5ade89469d0"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8008001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e7f}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x0, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x33f1, 0x1, 0x8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, 0x72, 0x9, 0x7fffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x7ea6, 0xfffffffd, 0x9, 0x0, 0x4, 0x8, 0xd, 0x8, 0xc, 0xa3d8, 0x1, 0x270c, 0xc24a, 0xfffffffa, 0x81, 0x1, 0xc, 0x7, 0x10, 0x400, 0x9, 0x0, 0x10, 0x3, 0xa, 0xb, 0x80, 0xd, 0x4, 0x9, 0x8, 0xa3, 0x5, 0x3, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xffffff7f, 0x6, 0x9f, 0x4, 0x8000, 0x4, 0x8, 0xf, 0xffffffff, 0x9, 0x7f, 0x7f, 0x5, 0xb25, 0x6, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x8, 0x5, 0x4, 0x9, 0x200, 0x1ce5, 0x8000, 0xa3c, 0x6df30703, 0x80000001, 0x8, 0x527, 0x2, 0x7ff, 0x1, 0x400, 0x9, 0x1, 0x7, 0x0, 0x7, 0x1, 0x2, 0x3ff, 0xdd36, 0x4, 0x800, 0x8, 0x1, 0xffffff7f, 0x4, 0x2a897e25, 0x401, 0x0, 0x7, 0x5, 0xffff, 0x7, 0x2, 0x5, 0x1, 0x4, 0xd, 0xa4, 0x7f, 0xa9, 0xa, 0x2, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x7fffffff, 0xfffffff9, 0xfffffffb, 0x7, 0x7fffffff, 0x0, 0x1, 0xe3, 0x3, 0x80, 0xfffffffa, 0x559, 0xdd4, 0x1c, 0x3ff, 0x6, 0x2, 0x1, 0x188b, 0x0, 0x3, 0xfff, 0x0, 0xd755, 0x5, 0x1, 0x9, 0x5, 0x7, 0x2c667b41, 0x2, 0x7c, 0x4, 0x0, 0x85d, 0xebab, 0x6, 0x5, 0x8001, 0xffffff8d, 0x5, 0x4, 0x3, 0x6912b3a9, 0x4e5f, 0x7, 0xb, 0x80, 0x8000, 0x8, 0x8, 0x3, 0x8, 0x2, 0xe19, 0x3, 0x3, 0xd, 0x5, 0xab, 0x9, 0x5, 0x9, 0xfffffff7, 0x401, 0x3, 0x4, 0x80, 0xa, 0x8000, 0x5, 0x6, 0x5, 0xb, 0x4, 0x40, 0x3e, 0x6, 0x7, 0xd114, 0x50e3aa14, 0x8, 0x1000, 0x2, 0x7fff, 0xb4, 0x8, 0x2, 0x7, 0x57c, 0x0, 0x8, 0x4, 0x8, 0x8, 0x7, 0x400, 0x3, 0x9, 0xff0, 0x5, 0xffffffd9, 0x9, 0x2, 0x6, 0xfffffffd, 0x2, 0xb, 0x5, 0x4, 0x7, 0x7, 0x200, 0x7ff, 0x2, 0x2, 0x3, 0x32, 0x77b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x1, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x394, 0x1, [@m_pedit={0xd0, 0x10, 0x0, 0x0, {{0xa}, {0x1}, {0xa4, 0x6, "7df2b8770dac8b0d2fec9af709aa3b5c850449a033ca7477144080226789cda42cc5b84fe202a6a0cec99190e5cf876ef6f8b1317c7d7ed2cf3c0b2e190ab07a71f1bd011d5e0c69694dde33cf48a60371ab0a4a446c4e9f9a7b156519122de0c76152fdf94f336cb4ff24f72c474f40c7fabb62eb507547e52790d761b45365c8a249b364aa90318bec827239736716b2fab26585c345cbb7781d9c492acbc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x170, 0x10, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe5, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4739dd9e0579f2fe6007f81d0f542bab7aa23912effec59f99ba7ee5ac798997d17b3f8724cf913f4785508065d972b88564f71f577bc955f6326d8f3c45c22578190d999eb975f16f68bfbbe9b8ee7f239a77f19eb1e9fe3bd2ffaa6a7973aa04f781659f6563d6755c81f3c84a1bc5fe431e59dcb2d85b18b6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x150, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbdc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff9}]}, {0xea, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdaea84391a4bd60089b4c221b02c5b6ce7b15dee519249b163b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x2a50}}, 0x20040054) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl(r4, 0x8b01, &(0x7f0000000040)) 1.470231884s ago: executing program 0 (id=3403): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1.286979035s ago: executing program 2 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000) 836.015769ms ago: executing program 3 (id=3405): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000005244534b00", [0x8, 0xffffffff9673e35d]}}) 739.155443ms ago: executing program 2 (id=3406): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="16"], 0x50) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14004800}, 0x400c8c0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010029bd7000ffdbdf250200040000000000040008"], 0x24}}, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)) 728.816126ms ago: executing program 0 (id=3407): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x400, 0x7, 0x1c00, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x1}, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="cb00000000002000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0a00180003030303030300f6f74752026c090000"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x64, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff2, 0xe}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x3e}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x40000009, 0x6}, {0xb, 0x2, 0x6, 0x20000008}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050007020000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51fa3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0xe, @private2, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)="d8", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x4}, 0x1c, 0x0}}], 0x3, 0x20040140) r13 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) 414.98449ms ago: executing program 3 (id=3408): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x151080, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x4) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x8, 0x200000, 0x0, 0x0, 0x0, 0xa417, 0x1}, {0x0, 0x4, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x4002, 0x32}, 0x0, @in=@empty, 0x0, 0x2, 0x1, 0x6, 0x0, 0x7, 0x800}}, 0xe8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x50c5, 0x80}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={r3, 0xaa, "9200042cf276d754a23091fd6e22b671e42c2330297e01c81748047b8734e4b161136f17feaabebce10a4862970aca091c3fd78a6fbbfe40845d789d9b222fde7bede2214fa536467753927c32aa088b023c8d6e635474d6ca14cf37b68cebda5bb94c016a4b6b507de49d79f2a283b13675e79ba6bf47923e995f648356fea926f3e5c9b339963932875624629e59454db7ce92066e157e4713595f8f60cd50a1889ede3aa47ef9ae51"}, &(0x7f00000005c0)=0xb2) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0x10}, {}, {}, 0x5}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) close(r2) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="400806000000a61723bea283"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@local, @loopback, 0x0, "d7c3855be0971b82ebbf9496f1a3cd6c0479812b0831a0fc2ab4da6ef1d3c67c", 0x7, 0xff, 0x7, 0x6}, 0x3c) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000180)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0xdf, 0x4) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x28400, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x40}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 348.707655ms ago: executing program 2 (id=3409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r2 = socket(0x15, 0x5, 0x0) connect$can_j1939(r2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) memfd_create(&(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) (async, rerun: 64) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001980)={&(0x7f00000018c0)=[{0x5, 0x2a00, 0x1f, &(0x7f0000000000)="4bec052932c0b29f415d6fb5b1bd232605a918fdb17f296bd7e4ddc58915f7"}, {0x2, 0x0, 0x66, &(0x7f0000000080)="349d7cd8f41fb46da7c12386dd36a8f910ae343d3cc5b5162aa20d16c3747d341e40ef3affb02158b11a87e705e23ed3f9e3659642cd29cccdd79c23fc267752c210dc46bee6f4f3136dbd31da0c1932f6deac05f98d3dc6107ba645c217e8fcd11cac9bca51"}, {0x80, 0x401, 0x1000, &(0x7f0000000400)="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"}, {0x0, 0x0, 0xcc, &(0x7f0000001400)="b6702a5fe4141b1eb1e5649b06c22eb1177eaa44de71fb9ac1aad633b4e60753fc5cf6acde028b32182abc08c0edbb73be2c52e18c4642e4d640485cb4f461564eccbe6c63134ebe0dbef7919a42a3014f1f23ada587912f0004789ddc2ec597cfe33a83be1c0162d70469c56ffcfb14be6476a0aa85e83b90a13ac44a30fd5201addedaf39e0ac91a812609b5a439a0d823bc2768b6af21b213b78721f216c127f5519ca4091332881c11b5a7384715f19f80517a336fb90a71f15c13fedc4fd88d67046e7896a4ebe9d571"}, {0x1, 0x800, 0x63, &(0x7f0000001500)="62e4a44cc7fb724dc31a86722b7cdfa9d6525f0903db0d37e033254dab65c9bf1730fe9b498151cdd43b287300b676746b776ebddac0941ecf8ec68290bd2ab31f1b1e53e72ffb764fc2e82e06766e87d8f4496907f51f3955afafc175d98b9f8a2242"}, {0x6, 0x1000, 0xce, &(0x7f0000001580)="617159a38bd07fb685101f6073d31b99a06a1fbf781b8c60708cd26c8811662069a5e12c0d90b76af1a667e1f4e081fe04432176944f26f85faf75d1861ddf10dc701ffe577c196af09bd23624544d65ab3849428d4eb9e0ae2723585874444b07feab09cd8fb5788c8d1708ca7eb518dacde16267a3168a09ee392cebeaed6a0b468bd32c3cb94bcd22bd168da7d33cfd6f0c0602dcd349a47a8da2045615464fdf3e8f41c267e7ef4ca555bcf107af9f5465f9c6b42820450823ea2cf9f023724ef11adeceb74aee46d56c0a1c"}, {0xffff, 0x0, 0xda, &(0x7f0000001680)="3cc6cec6345796d9c33208fbf97da2b6061e85aac6bcafe6960e05dd62647c9c5df99bf94c2d2f7c4b571f0368d6ba80192550395950649b18e183026fe49ad536f584fb79964a4ab8e9c903568c88fa3237a8a03cf86e746502d7d9eb93439c09d023e9b5cd3d72c36f7458209569dd36efbd2d3a1140672b3cdd6bba906728fd5acac8bf97f066fb586def33d64a10ae2c9bf535a209e3d6e2e68c8cabb6da639180ce3a7bb12c993158031128fec69a9074f0351bebbc0df469ad1fdbc415e7a3e420424c0ddcd692c82d6a93826a578e442a26482c0877d4"}, {0xfffb, 0x8000, 0xc5, &(0x7f0000001780)="91f3e54b40e898da4f7915473ff8cd734bdc591e4d474deeda2fabddeef52abbcab5b5a357fd9e6d835635b12c97ba7b7e0ff9046d4740bc3d794a018a70930145a012e0eb9945afc1aba401c20c445f7be7a1a05535aaf5a88c2606afcdbbdb09d5bc43978eb4289bb98642262db565690bd0f9feccdb4ae3603d1f0fc3d062bdce09cdf925e8f24ccb46fd7454585fb4bd3478ce1faf5e234d33da540973b2c1cfc8aeea711578485ecd9de358385b86bad0887c9347d7e21bb4ad5b560baec403ef7743"}, {0x101, 0x2000, 0x29, &(0x7f0000001880)="0a88ae3b6b1691cf46f85bdb0b4be6c78acc60e71ec8396da7f84526192016e74b41a98eafe6b86e71"}], 0x9}) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0xb, {0xb, 0x6, "b4516803a95c28658b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 327.908006ms ago: executing program 0 (id=3410): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x30000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000580)) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) bind$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7f}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100037040300000003006c710ba10000970100000000000080668b499b13df83f4d3cc6a406d43b02c2fd73e5065cf69d1462a", @ANYRES32=r11, @ANYBLOB="0b1b05000000000008000d000100008005002700080000000a00240075fa34a0b072000024000e00050000000000000000000000000000000180000000000000000005020000000008002c005005000005001000c1000000"], 0x70}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r9, &(0x7f0000000200)="001a338568da3602a8b76fde0f0c", 0xe, 0x8004, &(0x7f0000000500)={0x11, 0x0, r11, 0x1, 0xc}, 0x14) sendmsg$kcm(r8, &(0x7f00000004c0)={&(0x7f0000000180)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[{0x30, 0x113, 0x5, "8f1c1bcc6f3939f0e16aca2fdb38b192817f7928ecd7968b4a"}, {0xe8, 0x111, 0x0, "efdae3855bc837b5bab6cd7216f6c46c5ade9463556b14fa0b9295633ab8697484f6e617e21a68b8f7ede2265354b0eba8b14d0f12affb5684cd5cf8ae3ca14485902a5643edc4b43a4e19318d34082abf42340746be7db7deaac08f190910dc79c8cc245b96ffc45c643793d7fa66e24503e7e18218e92605e25808e3147d0c681497382fb0a5f7f218f79b5b4577e5f8042eae3ecd188347aee0ef7d6fa6aff7060b49356c70c900f2eefb7b6f8e370fbffb040c06b359809f47b614382d883e6f6c8560c65b5071e8a6a318d6080d6630"}, {0x88, 0x10c, 0x1000, "d204cf47d1251b10ae8d29e5ada6651fb94a89f6b8c5a8ae66717c12228228129f048ba9e3ee1dc9234acd9e0b8d539ab5021f71f4de14fccff635fea5dee1994fe973326c609b572661963ac1b491e99ed70746d63637a904d516b6e95ce5ad0d571c56eaafd40fe7decedc8d05b4b25d95"}, {0x90, 0x1, 0x800, "01b515e2028a970cb14bb891e9aca0fc1f0f3422f2558a8c3cf4ae3696f3a6f943fcb3d94d836b87038191158b96e0e8afa5052624d47653751c0b27ebe5e14081a66859be57268cfa2dfda8baaae1f7abe6745cc7b801fb326520633aef275823cbcfdc7a5a6913944c2d5e1ed732253d857f2949439225bc95"}, {0x50, 0xef22a3d9678eb432, 0x5, "6aee2a79ba4fca6dd5024263ec93f6973d7a6bc5343d22d19c07382eb8cbe119cccfd69a3dd38353f78d12bcbbd64066343c592df7619b832e3ad7019d53"}], 0x280}, 0x4000085) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r12}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) r13 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r13, 0x84}], 0x1, 0x3ff) listen(r13, 0xda90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 0s ago: executing program 4 (id=3411): prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{0x6000, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9, 0x4}, {0x2, 0xbe87c0651d0f6d01, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x1, 0x3, 0x3, 0x9, 0x5}, {0x2, 0x5000, 0xc, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0x0, 0x0, 0xe3, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf5, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0c00, [0x7, 0x7, 0x7, 0x9]}) kernel console output (not intermixed with test programs): umber 14 [ 601.401147][T10148] usb 2-1: USB disconnect, device number 4 [ 601.408774][T16122] cdc_wdm 2-1:1.0: Error autopm - -16 [ 601.465103][T16128] cdc_wdm 2-1:1.0: Error autopm - -16 [ 601.557683][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.721429][T10139] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 601.899058][T10139] usb 4-1: Using ep0 maxpacket: 32 [ 601.912428][T10139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.944282][T16218] netlink: 'syz.0.3099': attribute type 2 has an invalid length. [ 601.955772][T10139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.996666][T10139] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 602.031593][T10139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.072392][T10139] usb 4-1: config 0 descriptor?? [ 602.094675][T10139] hub 4-1:0.0: USB hub found [ 602.295151][T10139] hub 4-1:0.0: 16 ports detected [ 602.326826][T10139] hub 4-1:0.0: insufficient power available to use all downstream ports [ 602.335989][T16059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.382823][T16059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.411585][T16059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.474630][T16059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.495275][T10139] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 602.502690][T16059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.510583][T10139] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 602.538426][T16059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.563531][T10139] usbhid 4-1:0.0: can't add hid device: -71 [ 602.572101][T16059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.588928][T10139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 602.599606][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.616641][T16059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.658379][T10139] usb 4-1: USB disconnect, device number 103 [ 602.760296][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.878449][T16059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.925342][T16059] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.950271][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.957474][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.021234][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.028430][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.088058][ T5635] Bluetooth: hci3: command tx timeout [ 603.198128][T16059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.459187][T16256] loop4: detected capacity change from 0 to 7 [ 603.494834][T16256] Dev loop4: unable to read RDB block 7 [ 603.505870][T16059] veth0_vlan: entered promiscuous mode [ 603.543215][T16256] loop4: unable to read partition table [ 603.566586][T16059] veth1_vlan: entered promiscuous mode [ 603.581767][T16256] loop4: partition table beyond EOD, truncated [ 603.604622][T16256] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 603.641324][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.775416][T16059] veth0_macvtap: entered promiscuous mode [ 603.845270][T16059] veth1_macvtap: entered promiscuous mode [ 603.957971][T16059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.023743][T16059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.028797][T10154] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 604.296166][T11918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.347344][T10153] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 604.349336][T11918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.463243][T11918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.480969][T11918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.518298][T10153] usb 4-1: Using ep0 maxpacket: 8 [ 604.552092][T10153] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 604.586219][T10153] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.628441][T10153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.679777][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.693658][T10153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.738524][T10153] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.788010][T10153] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.828271][T10153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.849865][T11933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.877150][T11933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.002985][T11933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.022490][T11933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.108092][T10153] usb 4-1: GET_CAPABILITIES returned 14 [ 605.122720][T10153] usbtmc 4-1:16.0: can't read capabilities [ 605.627315][T10154] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 605.724778][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.787414][T10154] usb 3-1: Using ep0 maxpacket: 32 [ 605.810115][T10154] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 605.849349][T10154] usb 3-1: config 0 has no interface number 1 [ 605.891321][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.893358][T10154] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 605.919126][T16342] loop4: detected capacity change from 0 to 7 [ 605.931647][T16342] Dev loop4: unable to read RDB block 7 [ 605.945090][T10154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.946950][T16342] loop4: unable to read partition table [ 605.980022][T10154] usb 3-1: Product: syz [ 605.987212][T16342] loop4: partition table beyond EOD, truncated [ 606.001626][T10154] usb 3-1: Manufacturer: syz [ 606.007018][T10154] usb 3-1: SerialNumber: syz [ 606.025879][T16342] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.055288][T10154] usb 3-1: config 0 descriptor?? [ 606.162910][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.179847][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.190380][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.199993][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.209790][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 606.211544][T10154] viperboard 3-1:0.61: version 0.00 found at bus 003 address 124 [ 606.282398][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.359144][T10154] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 606.406226][T10154] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 606.458569][T10154] viperboard 3-1:0.0: version 0.00 found at bus 003 address 124 [ 606.519791][T10154] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 606.547880][T10154] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 606.571662][T10154] usb 3-1: USB disconnect, device number 124 [ 606.757684][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.120738][T10154] usb 4-1: USB disconnect, device number 104 [ 607.316558][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3121'. [ 607.398362][T10146] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 607.568019][T10146] usb 3-1: Using ep0 maxpacket: 16 [ 607.582517][T10146] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 607.592823][T10146] usb 3-1: config 0 has no interface number 0 [ 607.606708][T10146] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 607.606902][T16373] kernel profiling enabled (shift: 5) [ 607.617009][T10146] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 607.626886][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 607.632768][T10146] usb 3-1: config 0 interface 41 has no altsetting 0 [ 607.656824][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.674346][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.674523][T10146] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 607.692949][T10146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.705202][T10146] usb 3-1: Product: syz [ 607.707011][T16344] bridge_slave_0: entered allmulticast mode [ 607.728052][T10146] usb 3-1: Manufacturer: syz [ 607.736447][T10146] usb 3-1: SerialNumber: syz [ 607.747016][T16344] bridge_slave_0: entered promiscuous mode [ 607.749698][T10146] usb 3-1: config 0 descriptor?? [ 607.770457][T16359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 607.787400][T16359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 607.798185][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.816147][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.836913][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.850392][T16344] bridge_slave_1: entered allmulticast mode [ 607.862003][T16344] bridge_slave_1: entered promiscuous mode [ 607.887681][T16375] bridge1: entered promiscuous mode [ 607.909026][T16375] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 607.958046][T10139] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 607.986474][T16344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.017886][T16359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 608.022619][T16344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.035638][T16359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 608.120917][T16344] team0: Port device team_slave_0 added [ 608.128341][T10139] usb 5-1: Using ep0 maxpacket: 16 [ 608.142568][T10139] usb 5-1: config 9 has an invalid interface number: 133 but max is 1 [ 608.151579][T16344] team0: Port device team_slave_1 added [ 608.165188][T10139] usb 5-1: config 9 has an invalid interface number: 245 but max is 1 [ 608.199113][T10139] usb 5-1: config 9 has no interface number 0 [ 608.209121][T10139] usb 5-1: config 9 has no interface number 1 [ 608.231595][T10139] usb 5-1: config 9 interface 133 has no altsetting 0 [ 608.247667][T16344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.254656][T10139] usb 5-1: config 9 interface 245 has no altsetting 0 [ 608.268821][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.298142][ T5635] Bluetooth: hci4: command tx timeout [ 608.314475][T10139] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d [ 608.324330][T10139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.340730][T10139] usb 5-1: Product: syz [ 608.348078][T10139] usb 5-1: Manufacturer: syz [ 608.354643][T16344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.381296][T10139] usb 5-1: SerialNumber: syz [ 608.417907][T16344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.437799][T16344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.467054][T10146] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 608.503576][T16344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.602206][T16344] hsr_slave_0: entered promiscuous mode [ 608.612776][T16344] hsr_slave_1: entered promiscuous mode [ 608.619567][T16344] debugfs: 'hsr0' already exists in 'hsr' [ 608.626540][T16344] Cannot create hsr debugfs directory [ 608.692369][T10146] usb 3-1: USB disconnect, device number 125 [ 608.702927][T10139] videodev: could not get a free minor [ 608.728239][T10139] dsbr100 5-1:9.245: couldn't register video device [ 608.760000][T10139] dsbr100 5-1:9.245: probe with driver dsbr100 failed with error -23 [ 608.800289][T10139] usb 5-1: USB disconnect, device number 106 [ 608.875079][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.921853][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.028353][T16388] loop4: detected capacity change from 0 to 7 [ 609.049602][T16388] Dev loop4: unable to read RDB block 7 [ 609.057927][T16388] loop4: unable to read partition table [ 609.069794][T16388] loop4: partition table beyond EOD, truncated [ 609.090466][T16388] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.145340][T16344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.164006][ T4991] Dev loop4: unable to read RDB block 7 [ 609.173504][ T4991] loop4: unable to read partition table [ 609.188102][ T4991] loop4: partition table beyond EOD, truncated [ 609.213404][T16344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.319291][T16393] netlink: 'syz.4.3128': attribute type 2 has an invalid length. [ 609.419486][T16344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.444954][T16344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.567804][ T5699] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 609.596937][T16344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.607411][T16344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.738424][T16344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.750540][T16344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.762158][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.771162][ T5699] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 609.794622][ T5699] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 609.804951][ T5699] usb 5-1: can't read configurations, error -61 [ 609.849319][T10153] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 609.888779][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.938080][ T5699] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 610.030582][T10153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.061268][T10153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.085663][T10153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.120894][T10153] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.122721][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.131304][T10153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.157389][T10153] usb 3-1: config 0 descriptor?? [ 610.170287][ T5699] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 610.194401][ T5699] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 610.214066][ T5699] usb 5-1: can't read configurations, error -61 [ 610.236819][ T5699] usb usb5-port1: attempt power cycle [ 610.249655][T16344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.268364][T16344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.282150][T16344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.297720][T16344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.312401][T16344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 610.328693][T16344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.343156][T16344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.357409][ T5635] Bluetooth: hci4: command tx timeout [ 610.368053][T16344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.597730][ T5699] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 610.659927][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.689546][ T5699] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 610.700925][T16429] tipc: Invalid UDP bearer configuration [ 610.700978][T16429] tipc: Enabling of bearer rejected, failed to enable media [ 610.703689][ T5699] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 610.723477][ T5699] usb 5-1: can't read configurations, error -61 [ 610.787087][T16344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.817475][T16344] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.832116][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.839294][T11933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.861476][ T5699] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 610.884231][T10153] plantronics 0003:047F:FFFF.0021: global environment stack underflow [ 610.898463][T10153] plantronics 0003:047F:FFFF.0021: item 0 4 1 11 parsing failed [ 610.902409][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.917924][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.920051][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.939526][ T5699] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 610.940475][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.953362][ T5699] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 610.954427][T11933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.962414][ T5699] usb 5-1: can't read configurations, error -61 [ 610.981807][T10153] plantronics 0003:047F:FFFF.0021: parse failed [ 610.981921][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.004895][T10153] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22 [ 611.006747][ T5699] usb usb5-port1: unable to enumerate USB device [ 611.127368][T10149] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 611.139348][T16344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.202346][T16344] veth0_vlan: entered promiscuous mode [ 611.224931][T16344] veth1_vlan: entered promiscuous mode [ 611.280726][T10149] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 611.293838][T16344] veth0_macvtap: entered promiscuous mode [ 611.307504][T10149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.320800][T10149] usb 2-1: Product: syz [ 611.325439][T16344] veth1_macvtap: entered promiscuous mode [ 611.326884][T16434] loop4: detected capacity change from 0 to 7 [ 611.331577][T10149] usb 2-1: Manufacturer: syz [ 611.350967][T16434] Dev loop4: unable to read RDB block 7 [ 611.360112][T16434] loop4: unable to read partition table [ 611.361579][T16344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.367854][T16434] loop4: partition table beyond EOD, [ 611.373163][T10149] usb 2-1: SerialNumber: syz [ 611.373323][T16434] truncated [ 611.384947][T16344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.391005][T16434] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.398773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.424370][T11933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.442702][T10149] usb 2-1: config 0 descriptor?? [ 611.447038][T11933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.516786][T10149] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 611.532968][T11933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.574161][T11933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.646538][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.655373][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.668826][T10149] gspca_sunplus: reg_r err -71 [ 611.686663][T10149] usb 2-1: USB disconnect, device number 5 [ 611.711521][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.721206][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.867922][ T5722] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 611.958354][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.967755][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.027353][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 612.041909][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.055762][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.070562][ T5722] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 612.080693][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.089405][ T5722] usb 4-1: Product: syz [ 612.095904][ T5722] usb 4-1: Manufacturer: syz [ 612.108686][ T5722] usb 4-1: SerialNumber: syz [ 612.437829][ T5635] Bluetooth: hci4: command tx timeout [ 612.652419][T10149] usb 3-1: USB disconnect, device number 126 [ 612.697338][T10139] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 612.858247][T10139] usb 5-1: device descriptor read/64, error -71 [ 612.950214][ T5722] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 613.017917][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.032798][T10153] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 613.083509][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 613.102612][ T5722] usb 4-1: USB disconnect, device number 105 [ 613.117849][T10139] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 613.156463][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.209308][T10153] usb 2-1: device descriptor read/64, error -71 [ 613.277789][T10139] usb 5-1: device descriptor read/64, error -71 [ 613.389706][T10139] usb usb5-port1: attempt power cycle [ 613.457378][T10153] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 613.588791][T10153] usb 2-1: device descriptor read/64, error -71 [ 613.720232][T10153] usb usb2-port1: attempt power cycle [ 613.737674][T10139] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 613.768054][T10139] usb 5-1: device descriptor read/8, error -71 [ 614.020596][T10139] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 614.048028][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.059869][T10139] usb 5-1: device descriptor read/8, error -71 [ 614.067326][T10153] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 614.118431][T10153] usb 2-1: device descriptor read/8, error -71 [ 614.189549][T10139] usb usb5-port1: unable to enumerate USB device [ 614.247618][T10146] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 614.368043][T10153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 614.398191][T10153] usb 2-1: device descriptor read/8, error -71 [ 614.428052][T10146] usb 4-1: Using ep0 maxpacket: 32 [ 614.448060][T10146] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 614.482231][T10146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 614.517351][ T5635] Bluetooth: hci4: command tx timeout [ 614.537722][T10153] usb usb2-port1: unable to enumerate USB device [ 614.544132][T10146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 614.557117][T10146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 614.568615][T10146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 614.593486][T10146] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 614.607376][T10146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.617761][T10146] usb 4-1: Product: syz [ 614.623682][T10146] usb 4-1: Manufacturer: syz [ 614.633397][T10146] usb 4-1: SerialNumber: syz [ 614.648319][T10146] usb 4-1: config 0 descriptor?? [ 614.999077][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.071076][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 615.077672][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.099885][T10146] input input89: Device does not respond to id packet M [ 615.121974][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 615.134970][T10146] input input89: Device does not respond to id packet P [ 615.137431][T10148] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 615.155565][T10146] input input89: Device does not respond to id packet B [ 615.328878][T10148] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 615.344910][T10148] usb 1-1: config 0 has no interface number 0 [ 615.362492][T10148] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 615.387679][T10148] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 615.420550][T10148] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 615.447167][T10148] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 615.466352][T10148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.487556][T10148] usb 1-1: config 0 descriptor?? [ 615.526775][T10148] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input90 [ 615.730088][T16481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.748118][T16481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.782608][ T5722] usb 1-1: USB disconnect, device number 15 [ 615.838927][T10148] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 615.910469][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.009380][T10148] usb 5-1: Using ep0 maxpacket: 16 [ 616.025436][T10148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.053266][T10148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.074214][T10148] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 616.089808][T10148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.119691][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.139910][T10148] usb 5-1: config 0 descriptor?? [ 616.198277][T10146] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 616.213762][T10146] input input89: Device does not respond to id packet N [ 616.234189][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 616.246841][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 616.261787][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 616.284627][T10146] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 616.322854][T10146] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input89 [ 616.406210][T10148] usbhid 5-1:0.0: can't add hid device: -71 [ 616.418063][T10148] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 616.446541][T10148] usb 5-1: USB disconnect, device number 115 [ 616.532860][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.831391][ T9] usb 4-1: USB disconnect, device number 106 [ 617.169027][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.403904][T16514] can: request_module (can-proto-0) failed. [ 617.427398][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'. [ 617.513945][T16522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.609981][T16522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.618127][T16530] FAULT_INJECTION: forcing a failure. [ 617.618127][T16530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.631490][T16514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 617.651669][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.4.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.651688][T16530] Tainted: [L]=SOFTLOCKUP [ 617.651692][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 617.651699][T16530] Call Trace: [ 617.651704][T16530] [ 617.651710][T16530] dump_stack_lvl+0xe8/0x150 [ 617.651734][T16530] should_fail_ex+0x40c/0x560 [ 617.651761][T16530] _copy_from_user+0x2d/0xb0 [ 617.651791][T16530] ___sys_recvmsg+0x173/0x5a0 [ 617.651819][T16530] ? __pfx____sys_recvmsg+0x10/0x10 [ 617.651833][T16530] ? __fget_files+0x2a/0x420 [ 617.651855][T16530] ? __fget_files+0x3a2/0x420 [ 617.651873][T16530] do_recvmmsg+0x31a/0x7f0 [ 617.651888][T16530] ? __pfx_do_recvmmsg+0x10/0x10 [ 617.651907][T16530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.651919][T16530] ? __fget_files+0x3a2/0x420 [ 617.651948][T16530] __x64_sys_recvmmsg+0x198/0x250 [ 617.651972][T16530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 617.652000][T16530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.652016][T16530] do_syscall_64+0x174/0x580 [ 617.652027][T16530] ? clear_bhb_loop+0x40/0x90 [ 617.652040][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.652050][T16530] RIP: 0033:0x7f2c9af9de99 [ 617.652061][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.652070][T16530] RSP: 002b:00007f2c9bed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 617.652082][T16530] RAX: ffffffffffffffda RBX: 00007f2c9b226090 RCX: 00007f2c9af9de99 [ 617.652090][T16530] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000006 [ 617.652097][T16530] RBP: 00007f2c9bed0090 R08: 0000000000000000 R09: 0000000000000000 [ 617.652103][T16530] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 617.652109][T16530] R13: 00007f2c9b226128 R14: 00007f2c9b226090 R15: 00007f2c9b34fa48 [ 617.652125][T16530] [ 617.829242][T10146] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 618.038221][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.162096][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'. [ 618.177437][T10146] usb 2-1: Using ep0 maxpacket: 8 [ 618.189183][T10146] usb 2-1: unable to get BOS descriptor or descriptor too short [ 618.199764][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.220472][T10146] usb 2-1: config 4 interface 0 has no altsetting 0 [ 618.234870][T10146] usb 2-1: string descriptor 0 read error: -22 [ 618.244038][T10146] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 618.260755][T10146] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 618.303912][T10146] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 618.347772][T10146] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 618.378705][T10146] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 618.399117][T10146] usb 2-1: media controller created [ 618.432560][T16538] bridge1: entered promiscuous mode [ 618.444161][T10146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.523927][T10146] zl10353_read_register: readreg error (reg=127, ret==0) [ 618.633708][T10146] usb 2-1: USB disconnect, device number 10 [ 618.987331][ T5699] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 619.129431][ T5699] usb 3-1: device descriptor read/64, error -71 [ 619.237710][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.347345][T10146] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 619.387961][ T5699] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 619.510777][T10146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.527388][ T5699] usb 3-1: device descriptor read/64, error -71 [ 619.533740][T10146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.546844][T10146] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 619.568632][T10146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.579035][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 619.579046][ T29] audit: type=1326 audit(1784897198.491:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16566 comm="syz.1.3181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf2c79de99 code=0x0 [ 619.657661][ T5699] usb usb3-port1: attempt power cycle [ 619.679829][T10146] usb 5-1: config 0 descriptor?? [ 620.007489][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 620.038531][ T5699] usb 3-1: device descriptor read/8, error -71 [ 620.116067][T16554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.137219][T16554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.181863][T16554] syzkaller0: entered promiscuous mode [ 620.189802][T16554] syzkaller0: entered allmulticast mode [ 620.212025][T16576] tipc: Started in network mode [ 620.218489][T16576] tipc: Node identity 92b562e12c1, cluster identity 4711 [ 620.229754][T16576] tipc: Enabled bearer , priority 0 [ 620.244835][T16553] tipc: Resetting bearer [ 620.277449][ T5699] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 620.291185][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.301427][T16553] tipc: Disabling bearer [ 620.312962][ T5699] usb 3-1: device descriptor read/8, error -71 [ 620.359704][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.380889][T10146] usbhid 5-1:0.0: can't add hid device: -71 [ 620.393135][T10146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 620.426701][T16578] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 620.428158][T10146] usb 5-1: USB disconnect, device number 116 [ 620.441102][ T5699] usb usb3-port1: unable to enumerate USB device [ 620.511803][T16578] bridge1: entered promiscuous mode [ 620.546059][T16582] syzkaller0: entered promiscuous mode [ 620.553664][T16582] syzkaller0: entered allmulticast mode [ 620.588483][T16582] netlink: 'syz.1.3184': attribute type 21 has an invalid length. [ 620.603785][T16582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3184'. [ 620.893880][T16597] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3190'. [ 620.977476][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 621.000953][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.017344][ T42] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 621.062259][T16601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3191'. [ 621.071826][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3191'. [ 621.082230][T16601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.139646][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 621.155225][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 621.174677][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.187653][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 621.193614][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 621.195739][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 621.204999][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 621.242160][ T42] usb 1-1: config 4 interface 0 has no altsetting 0 [ 621.253349][ T42] usb 1-1: string descriptor 0 read error: -22 [ 621.260197][ T42] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 621.269903][ T42] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 621.269992][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 621.292494][ T42] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 621.306287][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.317715][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.331253][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 621.349968][ T42] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 621.351212][ T9] usb 4-1: Product: syz [ 621.365666][ T42] usb 1-1: media controller created [ 621.376375][ T9] usb 4-1: Manufacturer: syz [ 621.384269][ T9] usb 4-1: SerialNumber: syz [ 621.404062][ T9] usb 4-1: config 0 descriptor?? [ 621.406206][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.438650][ T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 621.783258][T10139] usb 4-1: USB disconnect, device number 107 [ 621.817332][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 621.879575][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.900198][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.989510][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.013442][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 622.038506][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.058026][ T9] usb 2-1: config 0 descriptor?? [ 622.097329][ T5699] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 622.130191][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.147913][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.231310][T16610] FAULT_INJECTION: forcing a failure. [ 622.231310][T16610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.244588][T16610] CPU: 0 UID: 0 PID: 16610 Comm: syz.4.3194 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.244616][T16610] Tainted: [L]=SOFTLOCKUP [ 622.244623][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 622.244634][T16610] Call Trace: [ 622.244642][T16610] [ 622.244649][T16610] dump_stack_lvl+0xe8/0x150 [ 622.244686][T16610] should_fail_ex+0x40c/0x560 [ 622.244713][T16610] _copy_from_user+0x2d/0xb0 [ 622.244742][T16610] __copy_msghdr+0x390/0x590 [ 622.244767][T16610] ___sys_sendmsg+0x213/0x360 [ 622.244783][T16610] ? __lock_acquire+0x683/0x2cf0 [ 622.244800][T16610] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.244813][T16610] ? kstrtouint+0x6e/0xe0 [ 622.244836][T16610] ? __fget_files+0x2a/0x420 [ 622.244858][T16610] ? __fget_files+0x3a2/0x420 [ 622.244892][T16610] __sys_sendmmsg+0x273/0x4d0 [ 622.244917][T16610] ? __pfx___sys_sendmmsg+0x10/0x10 [ 622.244941][T16610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.244961][T16610] ? ksys_write+0x242/0x270 [ 622.244978][T16610] ? __pfx_ksys_write+0x10/0x10 [ 622.245000][T16610] __x64_sys_sendmmsg+0xa0/0xc0 [ 622.245020][T16610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.245040][T16610] do_syscall_64+0x174/0x580 [ 622.245063][T16610] ? trace_irq_disable+0x3b/0x140 [ 622.245088][T16610] ? clear_bhb_loop+0x40/0x90 [ 622.245104][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.245114][T16610] RIP: 0033:0x7f2c9af9de99 [ 622.245125][T16610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.245134][T16610] RSP: 002b:00007f2c9bef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.245148][T16610] RAX: ffffffffffffffda RBX: 00007f2c9b225fa0 RCX: 00007f2c9af9de99 [ 622.245162][T16610] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 622.245174][T16610] RBP: 00007f2c9bef1090 R08: 0000000000000000 R09: 0000000000000000 [ 622.245186][T16610] R10: 0000000000009090 R11: 0000000000000246 R12: 0000000000000001 [ 622.245198][T16610] R13: 00007f2c9b226038 R14: 00007f2c9b225fa0 R15: 00007f2c9b34fa48 [ 622.245228][T16610] [ 622.518493][ T42] zl10353_read_register: readreg error (reg=127, ret==0) [ 622.566499][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 622.574366][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 622.580543][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 622.602071][ T5699] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 622.615354][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.625618][ T5699] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.634849][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.646198][ T5699] usb 3-1: Product: syz [ 622.650447][ T5699] usb 3-1: Manufacturer: syz [ 622.655048][ T5699] usb 3-1: SerialNumber: syz [ 622.682556][ T5699] usb 3-1: config 0 descriptor?? [ 622.689888][ T9] usb 2-1: USB disconnect, device number 11 [ 622.704777][T16605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.713083][ T42] usb 1-1: USB disconnect, device number 16 [ 622.720964][T16622] netlink: 'syz.4.3197': attribute type 1 has an invalid length. [ 622.743523][ T5699] hub 3-1:0.0: bad descriptor, ignoring hub [ 622.757743][ T5699] hub 3-1:0.0: probe with driver hub failed with error -5 [ 622.766125][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.775023][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.863542][T16626] bridge1: entered promiscuous mode [ 622.873679][T16626] bond1: (slave bridge1): making interface the new active one [ 622.882010][T16626] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 623.048518][ T5699] usb 3-1: USB disconnect, device number 5 [ 623.087380][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 623.094988][ T5722] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 623.149608][T16634] netlink: 'syz.4.3201': attribute type 2 has an invalid length. [ 623.250103][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.262201][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 623.272541][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.281180][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 623.285282][ T9] usb 2-1: config 0 descriptor?? [ 623.298753][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.310688][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.324403][ T5722] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 623.347348][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.355391][ T5722] usb 4-1: Product: syz [ 623.360925][ T5722] usb 4-1: Manufacturer: syz [ 623.365570][ T5722] usb 4-1: SerialNumber: syz [ 623.397707][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.417316][ T5699] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 623.582650][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.596461][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.610233][ T5699] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 623.619930][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.634012][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 623.646438][ T5699] usb 1-1: config 0 descriptor?? [ 623.652469][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.669609][T16646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3207'. [ 623.821527][T16652] FAULT_INJECTION: forcing a failure. [ 623.821527][T16652] name failslab, interval 1, probability 0, space 0, times 0 [ 623.834232][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.2.3208 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.834262][T16652] Tainted: [L]=SOFTLOCKUP [ 623.834269][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 623.834280][T16652] Call Trace: [ 623.834295][T16652] [ 623.834304][T16652] dump_stack_lvl+0xe8/0x150 [ 623.834338][T16652] should_fail_ex+0x40c/0x560 [ 623.834366][T16652] should_failslab+0xa8/0x100 [ 623.834393][T16652] ? __pfx_ip6_dst_gc+0x10/0x10 [ 623.834414][T16652] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 623.834436][T16652] ? lock_acquire+0x106/0x350 [ 623.834461][T16652] ? dst_alloc+0x105/0x170 [ 623.834481][T16652] ? dst_alloc+0x105/0x170 [ 623.834505][T16652] ? __pfx_ip6_dst_gc+0x10/0x10 [ 623.834525][T16652] dst_alloc+0x105/0x170 [ 623.834551][T16652] ip6_pol_route+0xba1/0x14d0 [ 623.834574][T16652] ? ip6_pol_route+0x163/0x14d0 [ 623.834600][T16652] ? __pfx_ip6_pol_route+0x10/0x10 [ 623.834621][T16652] ? __lock_acquire+0x683/0x2cf0 [ 623.834651][T16652] ? ip6_addr_string+0x263/0x300 [ 623.834677][T16652] fib6_rule_lookup+0x222/0x730 [ 623.834700][T16652] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 623.834723][T16652] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 623.834745][T16652] ? ip6_route_output_flags+0x2e/0x5d0 [ 623.834770][T16652] ? ip6_route_output_flags+0x2e/0x5d0 [ 623.834812][T16652] ip6_route_output_flags+0x364/0x5d0 [ 623.834835][T16652] ? ip6_route_output_flags+0x2e/0x5d0 [ 623.834860][T16652] ip6_dst_lookup_tail+0x1a1/0x1610 [ 623.834888][T16652] ? txopt_get+0x79/0x3f0 [ 623.834915][T16652] ? txopt_get+0x79/0x3f0 [ 623.834945][T16652] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 623.834970][T16652] ? txopt_get+0x79/0x3f0 [ 623.834996][T16652] ? txopt_get+0x79/0x3f0 [ 623.835019][T16652] ? txopt_get+0x79/0x3f0 [ 623.835046][T16652] ? txopt_get+0x343/0x3f0 [ 623.835074][T16652] ? __pfx_txopt_get+0x10/0x10 [ 623.835104][T16652] ip6_dst_lookup_flow+0x89/0x150 [ 623.835132][T16652] rawv6_sendmsg+0xdd0/0x18c0 [ 623.835171][T16652] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 623.835245][T16652] ? sock_rps_record_flow+0x19/0x350 [ 623.835276][T16652] ? inet_sendmsg+0x298/0x320 [ 623.835310][T16652] ? __pfx_inet_sendmsg+0x10/0x10 [ 623.835335][T16652] sock_sendmsg_nosec+0x10e/0x180 [ 623.835364][T16652] ____sys_sendmsg+0x54e/0x850 [ 623.835389][T16652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.835418][T16652] ? import_iovec+0x73/0xa0 [ 623.835449][T16652] ___sys_sendmsg+0x2a5/0x360 [ 623.835468][T16652] ? __lock_acquire+0x683/0x2cf0 [ 623.835497][T16652] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.835522][T16652] ? kstrtouint+0x6e/0xe0 [ 623.835571][T16652] ? __fget_files+0x2a/0x420 [ 623.835594][T16652] ? __fget_files+0x3a2/0x420 [ 623.835629][T16652] __sys_sendmmsg+0x273/0x4d0 [ 623.835655][T16652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 623.835684][T16652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 623.835723][T16652] ? rcu_is_watching+0x15/0xb0 [ 623.835761][T16652] __x64_sys_sendmmsg+0xa0/0xc0 [ 623.835782][T16652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.835801][T16652] do_syscall_64+0x174/0x580 [ 623.835823][T16652] ? clear_bhb_loop+0x40/0x90 [ 623.835846][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.835865][T16652] RIP: 0033:0x7f00d0f9de99 [ 623.835884][T16652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.835900][T16652] RSP: 002b:00007f00d1e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.835920][T16652] RAX: ffffffffffffffda RBX: 00007f00d1225fa0 RCX: 00007f00d0f9de99 [ 623.835934][T16652] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 623.835946][T16652] RBP: 00007f00d1e95090 R08: 0000000000000000 R09: 0000000000000000 [ 623.835958][T16652] R10: 0000000000009090 R11: 0000000000000246 R12: 0000000000000001 [ 623.835969][T16652] R13: 00007f00d1226038 R14: 00007f00d1225fa0 R15: 00007f00d134fa48 [ 623.836000][T16652] [ 624.265654][ T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 624.277075][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input92 [ 624.294428][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.306694][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.392879][ T9] usb 2-1: USB disconnect, device number 12 [ 624.398914][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 624.399862][ T5722] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 624.444871][T16656] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 624.581655][T16656] bridge2: entered promiscuous mode [ 624.690172][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3213'. [ 624.700662][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.714942][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.731901][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.753372][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 624.807117][ T5722] usb 4-1: USB disconnect, device number 108 [ 624.888176][ T5699] usbhid 1-1:0.0: can't add hid device: -71 [ 624.894285][ T5699] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 624.921640][ T5699] usb 1-1: USB disconnect, device number 17 [ 624.959759][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.069295][T16678] FAULT_INJECTION: forcing a failure. [ 625.069295][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 625.087061][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz.3.3217 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.087092][T16678] Tainted: [L]=SOFTLOCKUP [ 625.087098][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 625.087108][T16678] Call Trace: [ 625.087114][T16678] [ 625.087122][T16678] dump_stack_lvl+0xe8/0x150 [ 625.087155][T16678] should_fail_ex+0x40c/0x560 [ 625.087180][T16678] should_failslab+0xa8/0x100 [ 625.087219][T16678] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 625.087240][T16678] ? local_lock_release+0x9c/0x160 [ 625.087267][T16678] ? __alloc_skb+0x1d7/0x7a0 [ 625.087290][T16678] ? __alloc_skb+0x1d7/0x7a0 [ 625.087319][T16678] __alloc_skb+0x1d7/0x7a0 [ 625.087347][T16678] netlink_ack+0x136/0xb30 [ 625.087365][T16678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.087392][T16678] ? ref_tracker_free+0x689/0x830 [ 625.087418][T16678] ? __pfx_ref_tracker_free+0x10/0x10 [ 625.087439][T16678] ? __asan_memcpy+0x40/0x70 [ 625.087465][T16678] netlink_rcv_skb+0x2a4/0x4a0 [ 625.087485][T16678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.087511][T16678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.087540][T16678] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.087558][T16678] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.087582][T16678] netlink_unicast+0x7bb/0x940 [ 625.087616][T16678] netlink_sendmsg+0x813/0xb40 [ 625.087644][T16678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.087665][T16678] ? aa_sock_msg_perm+0xf1/0x1b0 [ 625.087690][T16678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.087707][T16678] sock_sendmsg_nosec+0x13a/0x180 [ 625.087733][T16678] ____sys_sendmsg+0x54e/0x850 [ 625.087756][T16678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.087783][T16678] ? import_iovec+0x73/0xa0 [ 625.087812][T16678] ___sys_sendmsg+0x2a5/0x360 [ 625.087829][T16678] ? __lock_acquire+0x683/0x2cf0 [ 625.087857][T16678] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.087904][T16678] ? __fget_files+0x2a/0x420 [ 625.087927][T16678] ? __fget_files+0x3a2/0x420 [ 625.087961][T16678] __x64_sys_sendmsg+0x1b1/0x290 [ 625.087982][T16678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.088018][T16678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.088039][T16678] do_syscall_64+0x174/0x580 [ 625.088058][T16678] ? trace_irq_disable+0x3b/0x140 [ 625.088080][T16678] ? clear_bhb_loop+0x40/0x90 [ 625.088103][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.088121][T16678] RIP: 0033:0x7f542ef9de99 [ 625.088140][T16678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.088156][T16678] RSP: 002b:00007f542feef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.088176][T16678] RAX: ffffffffffffffda RBX: 00007f542f225fa0 RCX: 00007f542ef9de99 [ 625.088190][T16678] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 625.088209][T16678] RBP: 00007f542feef090 R08: 0000000000000000 R09: 0000000000000000 [ 625.088221][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.088233][T16678] R13: 00007f542f226038 R14: 00007f542f225fa0 R15: 00007f542f34fa48 [ 625.088262][T16678] [ 625.724832][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.855630][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3223'. [ 625.892365][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 626.217163][T16705] loop4: detected capacity change from 0 to 7 [ 626.238321][T16705] Dev loop4: unable to read RDB block 7 [ 626.250947][T16705] loop4: unable to read partition table [ 626.277963][T16705] loop4: partition table beyond EOD, truncated [ 626.288030][T16705] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 626.437837][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.758499][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.787389][ T5699] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 626.799289][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 626.957390][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 626.962629][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 626.970381][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.983187][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.994714][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.007862][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.019537][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.035912][ T5699] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.046429][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 627.056024][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.064238][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.072530][ T9] usb 5-1: Product: syz [ 627.076708][ T9] usb 5-1: Manufacturer: syz [ 627.082650][ T9] usb 5-1: SerialNumber: syz [ 627.088151][ T5699] usb 4-1: config 0 descriptor?? [ 627.456568][T16728] netlink: 'syz.1.3232': attribute type 1 has an invalid length. [ 627.537325][T10141] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 627.552642][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 627.694973][T10141] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 627.722408][T10141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.739106][T10141] usb 3-1: config 0 has no interface number 0 [ 627.753079][T10141] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 627.776075][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 627.795848][T10141] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 627.808671][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.813174][ T9] usb 5-1: USB disconnect, device number 117 [ 627.844486][T10141] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 627.868103][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.889943][T10141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.905284][T10141] usb 3-1: Product: syz [ 627.919173][ T5699] usbhid 4-1:0.0: can't add hid device: -71 [ 627.928200][T10141] usb 3-1: Manufacturer: syz [ 627.934483][ T5699] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 627.946543][T10141] usb 3-1: SerialNumber: syz [ 627.970324][T10141] usb 3-1: config 0 descriptor?? [ 627.978130][ T5699] usb 4-1: USB disconnect, device number 109 [ 627.990328][T16730] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 628.044412][T10141] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 628.066740][T10141] vmk80xx 3-1:0.6: probe with driver vmk80xx failed with error -22 [ 628.230100][T16741] netlink: 'syz.4.3236': attribute type 4 has an invalid length. [ 628.311890][T10153] usb 3-1: USB disconnect, device number 6 [ 628.488782][ T5722] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 628.499583][T16748] fuse: Bad value for 'fd' [ 628.637764][T16752] loop4: detected capacity change from 0 to 7 [ 628.655134][T16752] Dev loop4: unable to read RDB block 7 [ 628.662695][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 628.669255][T16752] loop4: unable to read partition table [ 628.679199][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 628.692905][T16752] loop4: partition table beyond EOD, truncated [ 628.702763][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 628.712640][T16752] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 628.728855][ T5722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 628.739558][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 628.787878][ T5722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 628.810285][ T5722] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 628.821319][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.847627][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.862113][ T5722] usb 5-1: config 0 descriptor?? [ 628.886719][T16741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 629.028105][T16757] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 629.040058][T16755] input: syz0 as /devices/virtual/input/input93 [ 629.053907][T16755] input: failed to attach handler leds to device input93, error: -6 [ 629.159317][T16761] loop4: detected capacity change from 0 to 7 [ 629.165833][T16757] bridge2: entered promiscuous mode [ 629.175926][T16761] Dev loop4: unable to read RDB block 7 [ 629.212519][T16761] loop4: unable to read partition table [ 629.229571][T16761] loop4: partition table beyond EOD, truncated [ 629.282535][T16761] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 629.344267][ T5700] kworker/1:3 (5700) used greatest stack depth: 16072 bytes left [ 629.484223][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.498120][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'. [ 629.576510][ T5635] Bluetooth: hci0: Opcode 0x0c03 failed: -19 [ 629.584782][ T9] usb 5-1: USB disconnect, device number 118 [ 629.669870][T16772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.680193][ T5699] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 629.691395][T16773] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 629.731290][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.740575][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.748995][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.757352][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.765713][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.774081][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.782461][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.790824][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.799180][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.807557][T16773] tc action pedit unable to extract header offset for header type (0x5) [ 629.815909][T16773] 0: reclassify loop, rule prio 0, protocol 800 [ 629.822201][T16773] 0: reclassify loop, rule prio 0, protocol 800 [ 629.849465][ T5699] usb 3-1: descriptor type invalid, skip [ 629.855213][ T5699] usb 3-1: descriptor type invalid, skip [ 629.861982][ T5699] usb 3-1: descriptor type invalid, skip [ 629.871428][ T5699] usb 3-1: string descriptor 0 read error: -22 [ 629.877974][T10141] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 629.886753][ T5699] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 629.898052][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.899642][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.921823][ T5699] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.928921][ T5699] usb 3-1: MIDIStreaming interface descriptor not found [ 629.957491][ T5722] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 630.055676][T10141] usb 2-1: Using ep0 maxpacket: 8 [ 630.065434][T10141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.078996][T10141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.090630][T10141] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 630.102120][T10141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.110609][T10141] usb 2-1: Product: syz [ 630.114803][T10141] usb 2-1: Manufacturer: syz [ 630.118883][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.129758][T10141] usb 2-1: SerialNumber: syz [ 630.140673][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 630.152330][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.166881][ T5722] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 630.179260][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.202697][ T5699] usb 3-1: USB disconnect, device number 7 [ 630.210022][ T5722] usb 4-1: config 0 descriptor?? [ 630.221502][T16775] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 630.320442][T16781] loop4: detected capacity change from 0 to 7 [ 630.330911][T16781] Dev loop4: unable to read RDB block 7 [ 630.336565][T16781] loop4: unable to read partition table [ 630.343274][T16781] loop4: partition table beyond EOD, truncated [ 630.354034][T16781] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 630.432097][ T4991] Dev loop4: unable to read RDB block 7 [ 630.450829][ T4991] loop4: unable to read partition table [ 630.464420][ T4991] loop4: partition table beyond EOD, truncated [ 630.600555][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.608741][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.652635][ T5722] usbhid 4-1:0.0: can't add hid device: -71 [ 630.654284][T10141] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 630.668375][ T5722] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 630.686394][ T5722] usb 4-1: USB disconnect, device number 110 [ 630.843143][T10141] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 630.876058][T10141] usb 2-1: USB disconnect, device number 13 [ 630.921868][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.965527][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.089725][ T42] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 631.216024][T16803] loop4: detected capacity change from 0 to 7 [ 631.240816][T16803] Dev loop4: unable to read RDB block 7 [ 631.252376][T16803] loop4: unable to read partition table [ 631.260645][T16803] loop4: partition table beyond EOD, truncated [ 631.267080][T16803] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 631.280701][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 631.313445][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.328150][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 631.354795][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.381668][ T42] usb 3-1: config 0 descriptor?? [ 631.396533][ T42] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 631.490024][T16810] netlink: 'syz.0.3259': attribute type 6 has an invalid length. [ 631.497924][T16809] netlink: 'syz.0.3259': attribute type 6 has an invalid length. [ 631.587331][T10141] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 631.677361][ T5699] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 631.749323][T10141] usb 4-1: Using ep0 maxpacket: 32 [ 631.760818][T10141] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 631.777311][T10141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.805755][T10141] usb 4-1: config 0 descriptor?? [ 631.821569][T10141] gspca_main: sq930x-2.14.0 probing 041e:403c [ 631.828918][ T5699] usb 5-1: device descriptor read/64, error -71 [ 631.927343][T10148] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 631.969312][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.077447][ T5699] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 632.097362][T10148] usb 2-1: Using ep0 maxpacket: 8 [ 632.105541][T10148] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 632.124138][T10148] usb 2-1: config 0 has no interface number 1 [ 632.135839][T10148] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.152574][T10148] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 632.172202][T10148] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 632.185090][T10148] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 632.196628][T10148] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.211075][T10148] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 632.224411][ T5699] usb 5-1: device descriptor read/64, error -71 [ 632.241888][T10148] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 187 [ 632.260028][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.276596][T10148] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 632.290559][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.299039][T10148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.308967][T10148] usb 2-1: Product: syz [ 632.318715][T10148] usb 2-1: Manufacturer: syz [ 632.336624][T10148] usb 2-1: SerialNumber: syz [ 632.342381][ T5699] usb usb5-port1: attempt power cycle [ 632.391669][T10148] usb 2-1: config 0 descriptor?? [ 632.424876][T16821] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 632.439109][T10148] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.491076][T10148] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.537593][T10141] gspca_sq930x: ucbus_write failed -110 [ 632.549774][T10141] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 632.618117][ T42] gspca_vc032x: reg_w err -71 [ 632.630483][ T42] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 632.678203][ T42] usb 3-1: USB disconnect, device number 8 [ 632.689275][ T5699] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 632.734283][ T5699] usb 5-1: device descriptor read/8, error -71 [ 632.835022][T10148] usb 4-1: USB disconnect, device number 111 [ 632.987426][ T5699] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 632.997882][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.009907][ T5699] usb 5-1: device descriptor read/8, error -71 [ 633.105716][T16839] netlink: 'syz.0.3268': attribute type 10 has an invalid length. [ 633.128795][ T5699] usb usb5-port1: unable to enumerate USB device [ 633.210616][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.254038][T16839] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 633.274280][T16842] netlink: 'syz.2.3269': attribute type 6 has an invalid length. [ 633.294201][T16842] netlink: 'syz.2.3269': attribute type 7 has an invalid length. [ 633.317099][T16842] netlink: 'syz.2.3269': attribute type 8 has an invalid length. [ 633.332340][T16842] netlink: 'syz.2.3269': attribute type 15 has an invalid length. [ 633.364795][T16843] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3269'. [ 633.424708][T16842] ALSA: mixer_oss: invalid OSS volume '' [ 633.446991][T16842] ALSA: mixer_oss: invalid OSS volume '' [ 633.463431][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 633.476983][T16845] loop4: detected capacity change from 0 to 7 [ 633.485084][T16845] Dev loop4: unable to read RDB block 7 [ 633.491930][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 633.491939][T16845] loop4: unable to read partition table [ 633.492126][T16845] loop4: partition table beyond EOD, truncated [ 633.514182][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 633.514845][T16845] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 633.531363][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 633.538814][T16842] ALSA: mixer_oss: invalid OSS volume '/8' [ 633.544781][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 633.561354][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 633.582274][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 633.599505][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 633.613953][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 633.628144][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 633.643105][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 633.649865][T10141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.662143][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.668616][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.675093][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.683280][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.690697][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.697503][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.704735][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.711692][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.720272][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.737920][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.754076][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.764388][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.775520][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.788073][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.804157][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.825773][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.841358][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.854035][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.864961][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.881049][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.897293][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.908331][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.922055][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.939989][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.946031][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.954703][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.962574][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.972737][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.980937][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 633.991868][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.008663][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.019769][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.030464][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.049151][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.057654][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.067323][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.086282][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.113302][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.131057][T16852] tipc: Started in network mode [ 634.131219][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.142061][T16852] tipc: Node identity 5a1839f237f7, cluster identity 4711 [ 634.155964][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.168907][T16852] tipc: Enabled bearer , priority 0 [ 634.182051][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.198111][T16853] syzkaller0: entered promiscuous mode [ 634.204566][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.222567][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.234788][T16853] syzkaller0: entered allmulticast mode [ 634.246064][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.261746][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.289267][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.302261][T16852] tipc: Resetting bearer [ 634.314111][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.326601][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.339939][T16851] tipc: Resetting bearer [ 634.349029][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.381707][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.394388][T16851] tipc: Disabling bearer [ 634.412922][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.425394][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.464021][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.502236][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.533763][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.561458][T10148] usb 2-1: USB disconnect, device number 14 [ 634.568231][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.603779][T16842] ALSA: mixer_oss: invalid OSS volume '/24' [ 634.618457][T16855] syzkaller0: entered promiscuous mode [ 634.626527][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.642650][T16855] syzkaller0: entered allmulticast mode [ 634.647374][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.700198][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.726912][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.733308][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.745333][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.756562][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.769123][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.775100][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.796049][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.822229][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.837703][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.843942][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.858021][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.870603][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.878954][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.886114][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.927365][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 634.951450][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 634.985215][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.004507][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.017189][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.028464][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.039683][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.050707][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.065215][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.081095][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.089783][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.095834][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.102394][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.112931][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.119150][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.135318][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.153337][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.167431][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.186278][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.212344][T10148] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 635.226616][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.244299][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.283906][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.306911][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.328335][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.344017][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.359970][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.377300][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.391867][T10148] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 635.397277][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.410314][T10148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.431832][T16842] ALSA: mixer_oss: invalid OSS volume '+--' [ 635.439631][T10148] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 635.454291][T10148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.466471][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.476154][T10148] usb 4-1: Product: syz [ 635.476164][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.476181][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.499962][T10148] usb 4-1: Manufacturer: syz [ 635.509142][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.515228][T10148] usb 4-1: SerialNumber: syz [ 635.523779][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.533757][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.544773][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.561390][T10148] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input94 [ 635.584624][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.613525][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.632984][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.647488][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.656812][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.673906][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.711719][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.746493][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.764773][T16847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.784331][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.817368][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.822401][T16847] geneve2: entered allmulticast mode [ 635.854055][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.868822][ T4976] bcm5974 4-1:1.0: could not read from device [ 635.894399][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.922578][T10148] bcm5974 4-1:1.0: could not read from device [ 635.948746][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 635.967057][ T4976] bcm5974 4-1:1.0: could not read from device [ 635.978100][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 635.995295][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 636.004335][T16842] ALSA: mixer_oss: invalid OSS volume '|--' [ 636.015584][T10148] input: failed to attach handler mousedev to device input94, error: -5 [ 636.029726][T16842] ALSA: mixer_oss: invalid OSS volume '/32' [ 636.052277][ T4976] bcm5974 4-1:1.0: could not read from device [ 636.062962][T16842] ALSA: mixer_oss: invalid OSS volume '' [ 636.075913][T10148] usb 4-1: USB disconnect, device number 112 [ 636.082612][ T5699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 636.131987][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.168590][ T4976] bcm5974 4-1:1.0: could not read from device [ 636.177143][ T5637] bcm5974 4-1:1.0: could not read from device [ 636.228481][ T5637] udevd[5637]: Error opening device "/dev/input/event4": No such file or directory [ 636.253293][ T5637] udevd[5637]: Unable to EVIOCGABS device "/dev/input/event4" [ 636.269427][ T5637] udevd[5637]: Unable to EVIOCGABS device "/dev/input/event4" [ 636.287007][ T5699] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 636.303445][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.314446][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.329350][ T5637] udevd[5637]: Unable to EVIOCGABS device "/dev/input/event4" [ 636.346521][ T5637] udevd[5637]: Unable to EVIOCGABS device "/dev/input/event4" [ 636.365897][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.376222][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.388537][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.404271][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.412568][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.423947][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.436144][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.455853][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.469301][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.481000][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.496370][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.515719][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.544947][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.572942][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.593845][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.627025][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.651967][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.678248][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.686702][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.702272][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.711662][ T5699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.734039][ T5699] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.745143][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.770772][ T5699] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 636.785870][ T5699] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 636.813981][ T5699] usb 2-1: Product: syz [ 636.832992][ T5699] usb 2-1: Manufacturer: syz [ 636.848779][ T5699] usb 2-1: SerialNumber: syz [ 636.875563][ T5699] usb 2-1: config 0 descriptor?? [ 636.906707][ T5699] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 637.026527][T16887] FAULT_INJECTION: forcing a failure. [ 637.026527][T16887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.080987][T16887] CPU: 0 UID: 0 PID: 16887 Comm: syz.2.3283 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.081016][T16887] Tainted: [L]=SOFTLOCKUP [ 637.081023][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.081034][T16887] Call Trace: [ 637.081042][T16887] [ 637.081050][T16887] dump_stack_lvl+0xe8/0x150 [ 637.081086][T16887] should_fail_ex+0x40c/0x560 [ 637.081113][T16887] _copy_from_user+0x2d/0xb0 [ 637.081131][T16887] ___sys_recvmsg+0x173/0x5a0 [ 637.081146][T16887] ? __pfx____sys_recvmsg+0x10/0x10 [ 637.081159][T16887] ? __fget_files+0x2a/0x420 [ 637.081186][T16887] do_recvmmsg+0x31a/0x7f0 [ 637.081201][T16887] ? __pfx_do_recvmmsg+0x10/0x10 [ 637.081218][T16887] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.081230][T16887] ? __fget_files+0x3a2/0x420 [ 637.081248][T16887] __x64_sys_recvmmsg+0x198/0x250 [ 637.081260][T16887] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 637.081276][T16887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.081287][T16887] do_syscall_64+0x174/0x580 [ 637.081298][T16887] ? clear_bhb_loop+0x40/0x90 [ 637.081311][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.081321][T16887] RIP: 0033:0x7f00d0f9de99 [ 637.081332][T16887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.081341][T16887] RSP: 002b:00007f00d1e74028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 637.081359][T16887] RAX: ffffffffffffffda RBX: 00007f00d1226090 RCX: 00007f00d0f9de99 [ 637.081372][T16887] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000006 [ 637.081384][T16887] RBP: 00007f00d1e74090 R08: 0000000000000000 R09: 0000000000000000 [ 637.081395][T16887] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 637.081406][T16887] R13: 00007f00d1226128 R14: 00007f00d1226090 R15: 00007f00d134fa48 [ 637.081425][T16887] [ 637.275098][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.277250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 637.548347][ T5699] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 637.558283][ T9] usb 2-1: USB disconnect, device number 15 [ 637.568375][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 637.709177][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 637.722893][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.743737][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 637.754840][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 637.766775][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.800857][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 637.823900][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 637.842949][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 637.865555][ T5699] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 637.875124][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.891815][ T5699] usb 4-1: Product: syz [ 637.906248][ T5699] usb 4-1: Manufacturer: syz [ 637.911001][T10148] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 637.919224][ T5699] usb 4-1: SerialNumber: syz [ 637.938662][ T5699] usb 4-1: config 0 descriptor?? [ 637.947008][ T5699] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.069664][T10148] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 638.097445][T10153] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 638.097458][T10148] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 638.097486][T10148] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.097508][T10148] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 638.146601][T10148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 638.160598][T16889] openvswitch: netlink: Duplicate or invalid key (type 0). [ 638.168775][T16889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.180431][T16889] syzkaller1: entered promiscuous mode [ 638.188389][T16889] syzkaller1: entered allmulticast mode [ 638.194008][T10148] usb 1-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 638.232297][T10148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.268761][T10153] usb 2-1: Using ep0 maxpacket: 8 [ 638.282681][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.296083][T10153] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 638.298811][T10148] usb 1-1: config 0 descriptor?? [ 638.306350][T10153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.323286][T10153] usb 2-1: Product: syz [ 638.329010][T10153] usb 2-1: Manufacturer: syz [ 638.329784][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.333886][T10153] usb 2-1: SerialNumber: syz [ 638.365963][ T5722] usb 4-1: USB disconnect, device number 113 [ 638.401769][T10153] usb 2-1: config 0 descriptor?? [ 638.614256][T10153] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 638.823632][T10148] usbhid 1-1:0.0: can't add hid device: -71 [ 638.829693][T10148] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 638.839197][ T42] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 638.850636][T10148] usb 1-1: USB disconnect, device number 18 [ 638.992380][ T42] usb 3-1: device descriptor read/64, error -71 [ 639.219609][T16920] loop5: detected capacity change from 0 to 7 [ 639.229250][T16920] Dev loop5: unable to read RDB block 7 [ 639.234842][T16920] loop5: unable to read partition table [ 639.241026][T16920] loop5: partition table beyond EOD, truncated [ 639.247353][ T42] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 639.247595][T16920] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.319460][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.378067][ T29] audit: type=1326 audit(1784897218.291:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.427517][ T42] usb 3-1: device descriptor read/64, error -71 [ 639.471631][ T29] audit: type=1326 audit(1784897218.311:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.561523][ T42] usb usb3-port1: attempt power cycle [ 639.584376][ T29] audit: type=1326 audit(1784897218.311:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.715992][T16925] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 639.726778][ T29] audit: type=1326 audit(1784897218.311:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.780881][T10148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.821552][ T29] audit: type=1326 audit(1784897218.311:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.847843][ T29] audit: type=1326 audit(1784897218.311:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.873230][ T29] audit: type=1326 audit(1784897218.311:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.899535][ T29] audit: type=1326 audit(1784897218.311:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e1b95e6ce code=0x7ffc0000 [ 639.924185][ T29] audit: type=1326 audit(1784897218.311:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 639.949226][ T42] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 639.970692][ T29] audit: type=1326 audit(1784897218.311:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16922 comm="syz.0.3294" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e1b99de99 code=0x7ffc0000 [ 640.005668][T16932] ip6t_rpfilter: unknown options [ 640.011738][ T42] usb 3-1: device descriptor read/8, error -71 [ 640.052688][T16897] vivid-000: disconnect [ 640.057500][T16896] vivid-000: reconnect [ 640.064125][T10153] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 640.092897][T10153] usb 2-1: USB disconnect, device number 16 [ 640.107167][T16930] bridge1: entered promiscuous mode [ 640.159605][T16930] bond1: (slave bridge1): making interface the new active one [ 640.181623][T16930] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 640.240029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.258318][ T42] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 640.298065][ T42] usb 3-1: device descriptor read/8, error -71 [ 640.363950][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.427860][T16940] loop4: detected capacity change from 0 to 7 [ 640.437925][ T42] usb usb3-port1: unable to enumerate USB device [ 640.452211][T16940] Dev loop4: unable to read RDB block 7 [ 640.468849][T16940] loop4: unable to read partition table [ 640.475337][T16940] loop4: partition table beyond EOD, truncated [ 640.486167][T16940] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 640.709302][T16951] tipc: Enabled bearer , priority 0 [ 640.725587][T16951] syzkaller0: entered promiscuous mode [ 640.737171][T16951] syzkaller0: entered allmulticast mode [ 640.753618][T16951] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 640.813159][T16951] tipc: Resetting bearer [ 640.844006][T16950] tipc: Resetting bearer [ 640.887847][T16950] tipc: Disabling bearer [ 641.302917][T16975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.389094][T10153] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 641.423735][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.547779][T10153] usb 1-1: device descriptor read/64, error -71 [ 641.642053][T16984] netlink: 'syz.2.3312': attribute type 1 has an invalid length. [ 641.661661][T10146] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 641.750395][T16984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.774293][T16987] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 641.808143][T10153] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 641.839617][T10146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 641.858049][T10146] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 641.887129][T10146] usb 4-1: config 160 has no interface number 0 [ 641.946538][T10146] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 641.968392][T10153] usb 1-1: device descriptor read/64, error -71 [ 641.995267][T10146] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 642.054661][T10146] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 642.099884][T10146] usb 4-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 642.118306][T10153] usb usb1-port1: attempt power cycle [ 642.154505][T10146] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 642.207729][T10146] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 642.248004][T10146] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 642.271353][T10146] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 642.304083][T10146] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 642.327319][T10148] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 642.353307][T10146] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 642.380591][T16995] loop4: detected capacity change from 0 to 7 [ 642.387065][T10146] usb 4-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 642.414566][T16995] Dev loop4: unable to read RDB block 7 [ 642.422284][T10146] usb 4-1: config 160 interface 168 has no altsetting 0 [ 642.433894][T16995] loop4: unable to read partition table [ 642.440021][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.454359][T10146] usb 4-1: string descriptor 0 read error: -22 [ 642.462055][T10146] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 642.467545][T16995] loop4: partition table beyond EOD, truncated [ 642.481825][T16995] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 642.497355][T10148] usb 3-1: Using ep0 maxpacket: 32 [ 642.504419][T10148] usb 3-1: config index 0 descriptor too short (expected 12592, got 36) [ 642.513961][T10148] usb 3-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 642.517312][T10153] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 642.535012][T10148] usb 3-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 642.535170][T10146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.582326][T10148] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 642.598164][T10153] usb 1-1: device descriptor read/8, error -71 [ 642.610374][T16978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.627827][T16978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.645821][T16978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.646722][T10148] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 642.669944][T10148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 642.683752][T16978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.692575][T10148] usb 3-1: Product: syz [ 642.702842][T10148] usb 3-1: Manufacturer: syz [ 642.705259][T10146] io_edgeport 4-1:160.168: EPiC device converter detected [ 642.709095][T10148] usb 3-1: SerialNumber: syz [ 642.749397][T10146] usb 4-1: detected [ 642.837457][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.872175][T16998] bond1 (unregistering): Released all slaves [ 642.878350][T10153] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 642.918892][T10153] usb 1-1: device descriptor read/8, error -71 [ 642.928550][T10146] usb 4-1: EPiC device converter now attached to ttyUSB0 [ 642.972743][T10148] usb 3-1: USB disconnect, device number 13 [ 643.067756][T10153] usb usb1-port1: unable to enumerate USB device [ 643.094472][T16997] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 643.155759][T16978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.172932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.275136][ T9] usb 4-1: USB disconnect, device number 114 [ 643.275268][ C1] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 643.315746][ T9] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 643.336907][ T9] io_edgeport 4-1:160.168: device disconnected [ 643.363625][T17006] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 643.392813][T17006] bridge2: entered promiscuous mode [ 643.413465][T17006] bond2: (slave bridge2): making interface the new active one [ 643.431018][T17006] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 643.477835][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.726004][T17016] kvm: pic: non byte read [ 643.746775][T17016] kvm: pic: level sensitive irq not supported [ 643.746832][T17016] kvm: pic: non byte read [ 643.768332][T17016] kvm: pic: level sensitive irq not supported [ 643.768398][T17016] kvm: pic: non byte read [ 643.790796][T17016] kvm: pic: level sensitive irq not supported [ 643.791460][T17016] kvm: pic: non byte read [ 643.845958][T17016] kvm: pic: level sensitive irq not supported [ 643.846004][T17016] kvm: pic: non byte read [ 643.875983][T17016] kvm: pic: level sensitive irq not supported [ 643.876029][T17016] kvm: pic: non byte read [ 643.902804][T17016] kvm: pic: level sensitive irq not supported [ 643.902850][T17016] kvm: pic: non byte read [ 643.956647][T17016] kvm: pic: level sensitive irq not supported [ 643.960100][T17016] kvm: pic: non byte read [ 644.049416][T17016] kvm: pic: level sensitive irq not supported [ 644.055222][T17016] kvm: pic: non byte read [ 644.288091][T17038] batadv0: entered promiscuous mode [ 644.313376][T17038] macsec0: entered promiscuous mode [ 644.346130][T17038] macsec0: entered allmulticast mode [ 644.354691][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3329'. [ 644.372388][T17038] batadv0: entered allmulticast mode [ 644.381623][T17038] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 644.475542][T17042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.570250][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.605208][T17047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.618236][T17047] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 644.640738][T17047] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 644.679690][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.708327][T10146] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 644.867323][T10146] usb 1-1: Using ep0 maxpacket: 32 [ 644.882896][T10146] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 644.902016][T10146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.914880][T10146] usb 1-1: config 0 has no interface number 0 [ 644.921205][T10146] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 644.931336][T10146] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 644.958529][T10146] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 644.980569][T10146] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 644.998795][T10146] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 645.010855][T10154] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 645.055390][T10146] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 645.100380][T10146] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 645.140186][T10146] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 645.157138][T10146] usb 1-1: config 0 interface 239 has no altsetting 0 [ 645.166927][T10146] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 645.176650][T10146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.184808][T10146] usb 1-1: Product: syz [ 645.189496][T10154] usb 5-1: Using ep0 maxpacket: 32 [ 645.206098][T10154] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 645.215764][T10146] usb 1-1: Manufacturer: syz [ 645.221298][T10154] usb 5-1: config 0 has no interface number 0 [ 645.229570][T10146] usb 1-1: SerialNumber: syz [ 645.248236][T10154] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.267078][T10146] usb 1-1: config 0 descriptor?? [ 645.273003][T10154] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 645.287663][T17045] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 645.296390][T17045] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 645.325945][T10154] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 645.346665][ T5635] Bluetooth: hci0: urb ffff88805408ec00 submission failed (90) [ 645.348136][T10154] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.445475][T10154] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 645.478115][T10154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.510058][T10154] usb 5-1: Product: syz [ 645.534865][T10154] usb 5-1: Manufacturer: syz [ 645.565641][T10154] usb 5-1: SerialNumber: syz [ 645.598117][T10154] usb 5-1: config 0 descriptor?? [ 645.620286][T17053] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 645.638503][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.656104][T17074] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3337'. [ 645.670390][T10154] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input95 [ 645.682548][ T4976] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 645.877630][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.895232][T10154] usb 5-1: USB disconnect, device number 123 [ 646.237316][T10146] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 646.409287][T10146] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.442866][T10146] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 646.499907][T10146] usb 2-1: config 1 interface 0 has no altsetting 0 [ 646.541295][T10146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.582693][T10146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 646.606046][T10146] usb 2-1: SerialNumber: syz [ 646.625459][T10146] hub 2-1:1.0: bad descriptor, ignoring hub [ 646.636180][T10146] hub 2-1:1.0: probe with driver hub failed with error -5 [ 646.645814][T10146] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 646.666030][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 646.677877][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.869663][T10146] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 646.938417][T10146] usb 2-1: USB disconnect, device number 17 [ 647.731949][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.056312][T17102] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 648.234120][T17105] bridge2: entered promiscuous mode [ 648.459905][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 648.499854][T17114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.508596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.619720][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 648.634275][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.646098][ T9] usb 5-1: config 0 descriptor?? [ 648.655997][ T9] cp210x 5-1:0.0: cp210x converter detected [ 648.735962][T10146] usb 1-1: USB disconnect, device number 23 [ 648.764796][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.917611][T10141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.956448][T17121] sctp: [Deprecated]: syz.0.3350 (pid 17121) Use of int in max_burst socket option deprecated. [ 648.956448][T17121] Use struct sctp_assoc_value instead [ 648.992467][T17121] fuse: Bad value for 'user_id' [ 648.999529][T17121] fuse: Bad value for 'user_id' [ 649.127462][ T5699] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 649.287551][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 649.309000][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.332379][ T5699] usb 2-1: config 4 interface 0 has no altsetting 0 [ 649.355522][ T5699] usb 2-1: string descriptor 0 read error: -22 [ 649.369330][ T5699] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 649.398060][ T5699] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 649.454634][ T5699] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 649.505480][ T5699] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.540463][ T5699] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 649.570818][ T5699] usb 2-1: media controller created [ 649.616591][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.713938][ T5699] zl10353_read_register: readreg error (reg=127, ret==0) [ 649.801904][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.812947][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.904471][ T5699] usb 2-1: USB disconnect, device number 18 [ 650.317416][T10146] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 650.357880][T17146] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3358'. [ 650.408064][T17146] syzkaller0: entered promiscuous mode [ 650.413571][T17146] syzkaller0: entered allmulticast mode [ 650.477815][T10146] usb 4-1: Using ep0 maxpacket: 16 [ 650.492237][T10146] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 650.525954][T10146] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 650.552358][T10146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.584016][T10146] usb 4-1: config 0 descriptor?? [ 650.822214][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 650.838318][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.863263][T17143] trusted_key: syz.3.3357 sent an empty control message without MSG_MORE. [ 651.114911][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.136654][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.145403][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.537675][T17162] loop4: detected capacity change from 0 to 7 [ 651.546210][T17162] Dev loop4: unable to read RDB block 7 [ 651.552534][T17162] loop4: unable to read partition table [ 651.574263][T17162] loop4: partition table beyond EOD, truncated [ 651.580909][T17162] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 651.675947][T17142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.689545][ T4991] Dev loop4: unable to read RDB block 7 [ 651.695190][ T4991] loop4: unable to read partition table [ 651.701777][ T4991] loop4: partition table beyond EOD, truncated [ 651.724696][T17142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.783855][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 651.794113][T10146] usbhid 4-1:0.0: can't add hid device: -71 [ 651.806757][ T9] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 651.820133][T10146] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 651.841956][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 651.844552][T10146] usb 4-1: USB disconnect, device number 115 [ 651.890506][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.891291][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 651.944766][ T9] usb 5-1: USB disconnect, device number 124 [ 651.972329][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.001023][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 652.013368][ T9] cp210x 5-1:0.0: device disconnected [ 652.198806][T17174] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 652.677958][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 652.847342][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 652.856127][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 652.866499][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 652.878987][ T9] usb 4-1: string descriptor 0 read error: -22 [ 652.885340][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 652.894998][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 652.918211][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.920541][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 652.948107][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 652.958916][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 652.966382][ T9] usb 4-1: media controller created [ 652.992639][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.983707][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.039994][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 654.118202][ T9] usb 4-1: USB disconnect, device number 116 [ 654.360432][T17174] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 654.368013][T17175] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 654.384220][T17176] bridge4: entered promiscuous mode [ 654.737559][T17192] loop4: detected capacity change from 0 to 7 [ 654.761240][T17192] Dev loop4: unable to read RDB block 7 [ 654.772046][ T5699] bridge0: entered promiscuous mode [ 654.786785][T17192] loop4: unable to read partition table [ 654.793642][T17192] loop4: partition table beyond EOD, truncated [ 654.807333][T17192] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 654.833094][ T4991] Dev loop4: unable to read RDB block 7 [ 654.838983][ T4991] loop4: unable to read partition table [ 654.845200][ T4991] loop4: partition table beyond EOD, truncated [ 655.093249][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3375'. [ 655.116117][T17200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.277329][ T9] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 655.449471][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.474031][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.507032][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.522496][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.531059][ T9] usb 4-1: Product: syz [ 655.535542][ T9] usb 4-1: Manufacturer: syz [ 655.540602][ T9] usb 4-1: SerialNumber: syz [ 655.566294][ T9] usb 4-1: 0:2 : does not exist [ 655.573402][ T9] usb 4-1: unit 9 not found! [ 655.971818][ T9] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 655.984729][T17218] bond2: entered allmulticast mode [ 655.995763][T17218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.006680][ T9] usb 4-1: 4:0: cannot get min/max values for control 10 (id 4) [ 656.037840][T10146] net_ratelimit: 3 callbacks suppressed [ 656.037853][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.134564][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 656.134580][ T29] audit: type=1326 audit(1784897235.041:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.158054][ T9] usb 4-1: USB disconnect, device number 117 [ 656.174016][ T29] audit: type=1326 audit(1784897235.041:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.201923][ T29] audit: type=1326 audit(1784897235.071:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.234115][ T29] audit: type=1326 audit(1784897235.071:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.269722][ T29] audit: type=1326 audit(1784897235.071:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.327027][T17226] IPVS: Scheduler module ip_vs_ not found [ 656.335596][T17228] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 656.342714][ T29] audit: type=1326 audit(1784897235.251:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.380622][ T29] audit: type=1326 audit(1784897235.251:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.3382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c79de99 code=0x7ffc0000 [ 656.397751][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.079660][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.276525][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 657.382566][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3390'. [ 657.583807][T17270] loop4: detected capacity change from 0 to 7 [ 657.655609][T17270] Dev loop4: unable to read RDB block 7 [ 657.667983][T17270] loop4: unable to read partition table [ 657.675571][T17270] loop4: partition table beyond EOD, truncated [ 657.701053][T17270] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.039093][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.119513][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.310256][T17288] bond3: option min_links: invalid value (18446744073709551608) [ 658.366803][T17288] bond3: option min_links: allowed values 0 - 2147483647 [ 658.424586][T17288] bond3 (unregistering): Released all slaves [ 658.477308][T10154] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 658.678924][T10154] usb 2-1: Using ep0 maxpacket: 16 [ 658.687794][ T5699] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 658.783127][T10154] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 658.797355][T10154] usb 2-1: config 0 has no interface number 0 [ 658.811276][T10154] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.848118][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 658.858338][T10154] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 658.887467][T10154] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 658.913754][T10154] usb 2-1: Product: syz [ 658.934119][ T5699] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 658.947776][T10154] usb 2-1: SerialNumber: syz [ 658.984542][T10154] usb 2-1: config 0 descriptor?? [ 659.004198][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.023624][T10154] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 659.055884][T10154] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input96 [ 659.083941][ T5699] usb 5-1: Product: syz [ 659.101088][ T5699] usb 5-1: Manufacturer: syz [ 659.122772][ T5699] usb 5-1: SerialNumber: syz [ 659.143124][ T5699] usb 5-1: config 0 descriptor?? [ 659.164327][ T5699] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 659.220803][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.234892][T17310] loop4: detected capacity change from 0 to 7 [ 659.300574][T17310] Dev loop4: unable to read RDB block 7 [ 659.336717][T17310] loop4: unable to read partition table [ 659.346717][T17310] loop4: partition table beyond EOD, truncated [ 659.370872][T17310] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.389988][ T5699] usb 5-1: USB disconnect, device number 125 [ 659.397102][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'. [ 659.417789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.429412][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'. [ 659.442628][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3407'. [ 659.541001][T17314] ip6erspan0: entered allmulticast mode [ 659.558182][ T5635] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 659.569252][ T5635] Bluetooth: hci1: Injecting HCI hardware error event [ 659.580445][ T5631] Bluetooth: hci1: hardware error 0x00 [ 659.857681][T10153] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 659.917327][T10154] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 659.964727][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 659.971826][ C1] ------------[ cut here ]------------ [ 659.977777][ C1] URB ffff88802bc1b600 submitted while active [ 659.983856][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: syz.1.3397/17287 [ 659.994126][ C1] Modules linked in: [ 659.998571][ C1] CPU: 1 UID: 0 PID: 17287 Comm: syz.1.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.009520][ C1] Tainted: [L]=SOFTLOCKUP [ 660.013837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 660.023896][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 660.029372][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 08 d3 fa 49 83 3e 00 74 40 e8 8e 75 65 fa 48 8d 3d 67 7d 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 73 75 65 fa eb 05 e8 6c 75 [ 660.048976][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010087 [ 660.055047][ C1] RAX: ffffffff8760fbf2 RBX: ffff88802bc1b600 RCX: 0000000000040000 [ 660.063021][ C1] RDX: ffffc90002282000 RSI: ffff88802bc1b600 RDI: ffffffff90657960 [ 660.071005][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 660.078966][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: ffff88807f059848 [ 660.086929][ C1] R13: ffff88807f059830 R14: ffff88802bc1b608 R15: 0000000000000820 [ 660.094890][ C1] FS: 0000000000000000(0000) GS:ffff888125052000(0000) knlGS:0000000000000000 [ 660.103813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.110391][ C1] CR2: 00007f2e1b9eb580 CR3: 0000000034ff0000 CR4: 00000000003526f0 [ 660.118384][ C1] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 660.126351][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 660.134311][ C1] Call Trace: [ 660.137582][ C1] [ 660.140421][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 660.146255][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 660.151733][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 660.157099][ C1] dummy_timer+0xac3/0x4b40 [ 660.161684][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 660.166710][ C1] ? __lock_acquire+0x683/0x2cf0 [ 660.171651][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.177019][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.181950][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.187756][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.192689][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 660.197892][ C1] hrtimer_run_softirq+0x17a/0x240 [ 660.203002][ C1] handle_softirqs+0x225/0x840 [ 660.207765][ C1] ? __irq_exit_rcu+0xca/0x220 [ 660.212528][ C1] __irq_exit_rcu+0xca/0x220 [ 660.217107][ C1] irq_exit_rcu+0x9/0x30 [ 660.221336][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 660.226971][ C1] [ 660.229890][ C1] [ 660.232833][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.238804][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 660.245214][ C1] Code: f7 e8 ad fc cf f5 f7 c3 00 02 00 00 74 05 e8 a0 de fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 12 c1 f5 65 8b 05 ad 12 9a 07 85 c0 74 18 5b 41 5e e9 91 48 [ 660.264811][ C1] RSP: 0018:ffffc90003a6f6e8 EFLAGS: 00000206 [ 660.270877][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001 [ 660.278834][ C1] RDX: 0000000000000006 RSI: ffffffff8e22bab2 RDI: 0000000000000001 [ 660.287527][ C1] RBP: ffffc90003a6f7e0 R08: ffffffff90578af7 R09: 1ffffffff20af15e [ 660.297316][ C1] R10: dffffc0000000000 R11: fffffbfff20af15f R12: dffffc0000000000 [ 660.305312][ C1] R13: ffff88802a88ed00 R14: ffffffff8f8e0560 R15: 0000000000000001 [ 660.313298][ C1] usb_hcd_poll_rh_status+0x3e9/0x600 [ 660.318713][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 660.324610][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.330421][ C1] dummy_pullup+0xde/0x120 [ 660.334829][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 660.339842][ C1] usb_gadget_disconnect_locked+0x126/0x480 [ 660.345803][ C1] gadget_unbind_driver+0xc2/0x410 [ 660.350909][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 660.356647][ C1] device_release_driver_internal+0x48b/0x880 [ 660.362793][ C1] driver_detach+0x1f3/0x2d0 [ 660.367377][ C1] bus_remove_driver+0x226/0x320 [ 660.372367][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 660.378081][ C1] raw_release+0xd7/0x260 [ 660.382460][ C1] ? __pfx_raw_release+0x10/0x10 [ 660.387396][ C1] __fput+0x418/0xa50 [ 660.391383][ C1] task_work_run+0x1d9/0x270 [ 660.395973][ C1] ? __pfx_task_work_run+0x10/0x10 [ 660.401083][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 660.406236][ C1] do_exit+0x73a/0x2360 [ 660.410398][ C1] ? __pfx_do_exit+0x10/0x10 [ 660.414986][ C1] ? cgroup1_freezing+0x20/0x350 [ 660.420001][ C1] ? cgroup1_freezing+0x20/0x350 [ 660.424932][ C1] do_group_exit+0x22d/0x2f0 [ 660.429518][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.434719][ C1] get_signal+0x121b/0x12c0 [ 660.439226][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 660.444769][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 660.450927][ C1] exit_to_user_mode_loop+0x104/0x730 [ 660.456293][ C1] ? rcu_is_watching+0x15/0xb0 [ 660.461053][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.467117][ C1] do_syscall_64+0x353/0x580 [ 660.471786][ C1] ? trace_irq_disable+0x3b/0x140 [ 660.476811][ C1] ? clear_bhb_loop+0x40/0x90 [ 660.481487][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.487369][ C1] RIP: 0033:0x7fdf2c79de99 [ 660.491772][ C1] Code: Unable to access opcode bytes at 0x7fdf2c79de6f. [ 660.498840][ C1] RSP: 002b:00007fdf2d7530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 660.507244][ C1] RAX: fffffffffffffe00 RBX: 00007fdf2ca25fa8 RCX: 00007fdf2c79de99 [ 660.515296][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf2ca25fa8 [ 660.523259][ C1] RBP: 00007fdf2ca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 660.531225][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.539183][ C1] R13: 00007fdf2ca26038 R14: 00007fdf2cb4f960 R15: 00007fdf2cb4fa48 [ 660.547159][ C1] [ 660.550181][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.557448][ C1] CPU: 1 UID: 0 PID: 17287 Comm: syz.1.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.568370][ C1] Tainted: [L]=SOFTLOCKUP [ 660.572678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 660.582717][ C1] Call Trace: [ 660.586003][ C1] [ 660.588835][ C1] vpanic+0x56c/0xa60 [ 660.592823][ C1] ? __pfx__printk+0x10/0x10 [ 660.597425][ C1] ? __pfx_vpanic+0x10/0x10 [ 660.601963][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 660.607248][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 660.612452][ C1] panic+0xc5/0xd0 [ 660.616180][ C1] ? __pfx_panic+0x10/0x10 [ 660.620605][ C1] __warn+0x315/0x4c0 [ 660.624581][ C1] ? usb_submit_urb+0x79/0x18b0 [ 660.629425][ C1] ? usb_submit_urb+0x79/0x18b0 [ 660.634265][ C1] __report_bug+0x276/0x570 [ 660.638854][ C1] ? usb_submit_urb+0x79/0x18b0 [ 660.643701][ C1] ? __pfx___report_bug+0x10/0x10 [ 660.648732][ C1] ? __lock_acquire+0x683/0x2cf0 [ 660.653673][ C1] report_bug_entry+0x19a/0x290 [ 660.658514][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 660.663355][ C1] ? usb_submit_urb+0x81/0x18b0 [ 660.668208][ C1] handle_bug+0xce/0x200 [ 660.672444][ C1] exc_invalid_op+0x1a/0x50 [ 660.676937][ C1] asm_exc_invalid_op+0x1a/0x20 [ 660.681776][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 660.687236][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 08 d3 fa 49 83 3e 00 74 40 e8 8e 75 65 fa 48 8d 3d 67 7d 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 73 75 65 fa eb 05 e8 6c 75 [ 660.706834][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010087 [ 660.712897][ C1] RAX: ffffffff8760fbf2 RBX: ffff88802bc1b600 RCX: 0000000000040000 [ 660.720870][ C1] RDX: ffffc90002282000 RSI: ffff88802bc1b600 RDI: ffffffff90657960 [ 660.728832][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 660.736795][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: ffff88807f059848 [ 660.744759][ C1] R13: ffff88807f059830 R14: ffff88802bc1b608 R15: 0000000000000820 [ 660.752727][ C1] ? usb_submit_urb+0x72/0x18b0 [ 660.757586][ C1] ? usb_submit_urb+0x72/0x18b0 [ 660.762435][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 660.768244][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 660.773617][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 660.778990][ C1] dummy_timer+0xac3/0x4b40 [ 660.783498][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 660.788523][ C1] ? __lock_acquire+0x683/0x2cf0 [ 660.793466][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.798835][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.803767][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.809571][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.814503][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 660.819713][ C1] hrtimer_run_softirq+0x17a/0x240 [ 660.824822][ C1] handle_softirqs+0x225/0x840 [ 660.829580][ C1] ? __irq_exit_rcu+0xca/0x220 [ 660.834344][ C1] __irq_exit_rcu+0xca/0x220 [ 660.838932][ C1] irq_exit_rcu+0x9/0x30 [ 660.843178][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 660.848811][ C1] [ 660.851729][ C1] [ 660.854648][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.860619][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 660.867034][ C1] Code: f7 e8 ad fc cf f5 f7 c3 00 02 00 00 74 05 e8 a0 de fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 12 c1 f5 65 8b 05 ad 12 9a 07 85 c0 74 18 5b 41 5e e9 91 48 [ 660.886629][ C1] RSP: 0018:ffffc90003a6f6e8 EFLAGS: 00000206 [ 660.892689][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001 [ 660.900651][ C1] RDX: 0000000000000006 RSI: ffffffff8e22bab2 RDI: 0000000000000001 [ 660.908609][ C1] RBP: ffffc90003a6f7e0 R08: ffffffff90578af7 R09: 1ffffffff20af15e [ 660.916572][ C1] R10: dffffc0000000000 R11: fffffbfff20af15f R12: dffffc0000000000 [ 660.924541][ C1] R13: ffff88802a88ed00 R14: ffffffff8f8e0560 R15: 0000000000000001 [ 660.932518][ C1] usb_hcd_poll_rh_status+0x3e9/0x600 [ 660.937915][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 660.943909][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.949737][ C1] dummy_pullup+0xde/0x120 [ 660.954151][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 660.959196][ C1] usb_gadget_disconnect_locked+0x126/0x480 [ 660.965099][ C1] gadget_unbind_driver+0xc2/0x410 [ 660.970209][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 660.975941][ C1] device_release_driver_internal+0x48b/0x880 [ 660.982030][ C1] driver_detach+0x1f3/0x2d0 [ 660.986650][ C1] bus_remove_driver+0x226/0x320 [ 660.991588][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 660.997320][ C1] raw_release+0xd7/0x260 [ 661.001679][ C1] ? __pfx_raw_release+0x10/0x10 [ 661.006717][ C1] __fput+0x418/0xa50 [ 661.010707][ C1] task_work_run+0x1d9/0x270 [ 661.015670][ C1] ? __pfx_task_work_run+0x10/0x10 [ 661.020797][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 661.025914][ C1] do_exit+0x73a/0x2360 [ 661.030090][ C1] ? __pfx_do_exit+0x10/0x10 [ 661.034684][ C1] ? cgroup1_freezing+0x20/0x350 [ 661.039614][ C1] ? cgroup1_freezing+0x20/0x350 [ 661.044550][ C1] do_group_exit+0x22d/0x2f0 [ 661.049142][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.054340][ C1] get_signal+0x121b/0x12c0 [ 661.058853][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 661.064398][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.070583][ C1] exit_to_user_mode_loop+0x104/0x730 [ 661.075950][ C1] ? rcu_is_watching+0x15/0xb0 [ 661.080715][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.086780][ C1] do_syscall_64+0x353/0x580 [ 661.091362][ C1] ? trace_irq_disable+0x3b/0x140 [ 661.096381][ C1] ? clear_bhb_loop+0x40/0x90 [ 661.101048][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.106931][ C1] RIP: 0033:0x7fdf2c79de99 [ 661.111342][ C1] Code: Unable to access opcode bytes at 0x7fdf2c79de6f. [ 661.118356][ C1] RSP: 002b:00007fdf2d7530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 661.127568][ C1] RAX: fffffffffffffe00 RBX: 00007fdf2ca25fa8 RCX: 00007fdf2c79de99 [ 661.135552][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf2ca25fa8 [ 661.143517][ C1] RBP: 00007fdf2ca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 661.151491][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.159468][ C1] R13: 00007fdf2ca26038 R14: 00007fdf2cb4f960 R15: 00007fdf2cb4fa48 [ 661.167443][ C1] [ 661.170700][ C1] Kernel Offset: disabled [ 661.175006][ C1] Rebooting in 86400 seconds..