last executing test programs: 5m12.351140781s ago: executing program 4 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01c21668f6d1d66edb251c00000718000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m12.093348643s ago: executing program 4 (id=743): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) semget$private(0x0, 0x2, 0x491) 5m11.944927823s ago: executing program 4 (id=745): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, 0x0, &(0x7f0000000080)) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000500)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}], 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io$printer(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0xb, 0x7a, {0x7a, 0x8, "00d86957d7f47e531997c486d84265772ca37153f7e71b6bca8f532a0c6e25f3e9c870a66f870ea976638274e54666d984f409fa01ad7c84b0f0790782eb5d2172042bfce7a6c1d9fbb1316de188d07c1c0567f3258e4299b6e1a9f662a07d526090a03b27ffb63a31c3dc5f30e4753a8af53ec76fed0728"}}, &(0x7f0000000600)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "2bb32a79778096d0ab8548835f4ec057d08af6055280f17ed3348c050f5f2fc610c0b4df4b2450e17ab3a2563a"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0xd, 0x12, "9d0102fd3422f83df683d2eb34369b5044df"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x0, 0x9d, {0x9b, "1419c4b0d0d216d1878bd33c729a563698dd9a4e4e6449ba0f5f2d1e684440cf945318f2f23ac8f333eab48010098cb7cbf5f1a84f3a8fa58a05a228f202e3909f95aa7f0f4b49d678be7d4be3f54af5fd64a6d6d0a44f0f1705206ec121a570f8fc2f29edad15b7954eaf56ab654a747d0d0da32ad2b7bc08ca73fe27067eead434f59c91eab45b40a3f6b2a58fc4b8e282f040411d7308d730e3"}}, &(0x7f0000000540)={0x20, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x20}}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, @loopback, @private=0xa010100}}}}) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x0) 5m9.583140116s ago: executing program 4 (id=754): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r1, &(0x7f0000001140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2c}, 0x80) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$admmidi(0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000200)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x20040c91) shutdown(r5, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x4000800) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0x80000001, 0x6, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x2e4, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x9}, [@generic="daa6b237de5fb9e3e26022164ccaf54ccf49d6fae8d1b396ffd9e6b75bcf9649b790c59aa4487508248ed5649d6df99b6dc1f24cc106ffa60faf1648019fb3148681a030f29b3245bdd06695926d0ccef6f1da2d2e21fc2b4d27b662abdeb56b3fa2da67b29978df5ed051a99bafdb474fbf566ab3f768e58f6861ff4c91e04ff689d07771fc4f2c064a49b95e258df4b2ddafd2fe092754ca62d6804f27e50463e2b9903ff5a5587f8bb68a7477ddc7dcc27a01d71ba0c4c2d327b52ac9be2f6ac69f3b721e03f9adad", @generic="aeb362b537d5a4254c4e28e36d0dbf96435de9321a30cc3ad53135c63e843811ad48485efb72433725ec79b9c72e1700e1194448284777289a7d0038095dde2714065ad5906fbd9525f3a898beba412848b418e1c6a11196330366f0d24a66d760d3", @generic="c4fc95d86caa82f7b0d8aed8643fd760c05ea3fffa873fdc8a0855d76105aa9c69af26ec57ced3a576ee4ddfe19b028242de3e39be0724a854ce658a3127c5814e24a1053d14370903a304dd6c0ff234d580eab9db384cf24ebc4ab4a29ccb60452fc0", @typed={0x9, 0x7, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x133, 0xe, 0x0, 0x1, [@nested={0x4, 0x13c}, @typed={0x4, 0x10f}, @nested={0x4, 0x29}, @nested={0x4, 0xe8}, @generic="d1442e6eb04c87445cf14e6ea176eaca278f240c324d66db36e9949bb9bd7fa67fc48239d1935dc913ee673ddf41868355a073b2fd5c697b03bebea77c72c9ee237c63d5e133409ca49d66c6839f44b54ff69f31d9e5a2b9972aa0d68ddd24f38e14eb86e1e91e91907a7656f6fe9bbbce54d1c05968080d1bb25e42193b4ad9414d2cf7b874d428bfc9a1fffafdd2b4468e5068df0e2cab7ef7af571d50b7a4c6b5fdbbb04629a11ee6ebf937e3e9dda6f46f15f0b967af0c6ea6174d71055311713479107e9e9d491a50ec72b76b1c034b", @generic="951f17e9b6f99f22214196e7627ecc47e411ff4faf210e3c73980490dd9ea7667e256a26f6e88edb71e4ab69b7ebbe6b1845eafd0667d4fa7206", @generic="c41be55152fa74df6daeb1", @typed={0x8, 0x3f, 0x0, 0x0, @uid}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000822}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 5m7.919128599s ago: executing program 4 (id=759): socket$packet(0x11, 0x3, 0x300) socket(0x22, 0x6, 0x8000) listen(0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xfffffffe) r1 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000100)={0xfff7, 0x60e6, 0x4, 0x7}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000240)={0x0, 0x4, 0x1902, 0x7}, 0x8) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x7be1851b86a0911f, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="91b9ea2a", @ANYRES16=r4, @ANYBLOB="08002bbd7000fcdbdf254c0000000e00a90066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x2000080}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) syz_clone3(&(0x7f0000000480)={0x61000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x23}, &(0x7f00000003c0)=""/20, 0x14, &(0x7f0000000400)=""/28, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) move_pages(r8, 0x2, &(0x7f0000000500)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000540)=[0x40, 0xfff, 0x7, 0x1, 0xfffffff3, 0x8, 0xffffff62, 0x7, 0x1], &(0x7f0000000580), 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket(0x1, 0x4, 0x1) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x20, 0x0, 0x0, 0x8001, 0x20, 0x89, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x4}}, "08000400d6292500"}}}}}, 0x0) 5m5.600446682s ago: executing program 4 (id=764): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r1], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000040)=""/1, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000002c0)={0x0, r8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) connect$inet6(r10, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x84100) 4m50.420552575s ago: executing program 32 (id=764): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r1], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000040)=""/1, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000002c0)={0x0, r8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) connect$inet6(r10, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x84100) 8.181685056s ago: executing program 1 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.478998907s ago: executing program 1 (id=1658): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="a905000000017464000100000000000700e5c06417e436a10699050000003102", 0x20}], 0x1}}], 0x1, 0x40000) 7.418034623s ago: executing program 2 (id=1659): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 7.111438833s ago: executing program 2 (id=1660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) accept(r3, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r3, &(0x7f0000000580)="3f031c00ffff140006001e0082e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x7, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000040)=""/169, 0xa9}], 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffe}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r5, 0xfffffffffffffff8, "9311cde8d5e257b35480637884d011fbf9aa7108eefff0db4853a7d2659f699e4ecc989fd94e902395d095b615faea95dcc6cb7a3e5517ea73fcd0f39d60eb7e1670bd6fa23ea252b38c6cb670182286d275f3f7886c88cc2669cf23b9118802fb4b82e008ad7e27a5db0900000076a8f18e346eeb0247962a6071454675112aabf004b5c0f189c71eb3a2a7e01f8708e7e9e33f3e9cdf8aaec283ba71d44ac1d3b2eea5187b866dec19985543b1ce7840316c9bccb66f6dbc0ed563c71cfa90b21b37e9abd8ac173fdb9fa52df909898f1667b464dff57ad6183714607136564f4e084745e2f6"}, &(0x7f00000000c0)=0xef) 7.064073588s ago: executing program 1 (id=1661): socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) r3 = dup(r1) write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x80, 0x4, 0x5}}, 0x14) syz_open_procfs(0x0, &(0x7f0000001200)='net/raw\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x48001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001240)="864b7b23f49c38b95d79157e549451afc6c5ddad1cde17e3635b0c7d8689fca397051dbf82bd45440ca0776820ffeddb7933f8b9b81f41bc17cf80554c1969eecc276a945ef310e2008fa46bc55c8338ff8316525e65e5723c9dbf91f9157434f032ca5a11b55941f8b629f57a2de20d8697f1c9e47e2ac39f12e927f7897d00d6b95981e54f97048098dc00e7a659c0e2e4e476a34df720657bc11b1c", 0x9d}, {&(0x7f0000001480)="9b2a473dc388133ddce63c7d9b281cacaa9ae3", 0x13}, {&(0x7f0000002f80)="2fa3a3f004a73b1eb88db4747435c5c126ed107f0ac174d157e7a7f516e4e2b4d0f2d3586bf8eb4bc3e9583642f79b0e8d33778db48c97cae4fdd033e0b63a78981bc297ce41a0cdc215301fc762e31971bef2288aef9e84f545bd0794d3e38e3278af6a81195fc22f8c340ef4c2b130124c500d0108d40b8c66c81c3bff4f49b628f9de3d66cff89cf33246fbae554f315bf463e5bd97c52d671356cab49c05c599f7d90fad3ce8256fc8a4335b6010419a85226921c5e30104e24a62208d759d66c529d7c4e8ceb3679673ecc076fe2ce2969d8c9a2f5212e1cf0ec9626e0e18cee6214f83523a941b81868447b1ae51037a283dab2e5a1038f875d4b274543eff982682f8f8cfd1f99e32c6ab7d57a4907ee2056b3bc1b8ad4fb8a05cf9501ef46b6053e3975d3e46d8e488971ee649e7cfaf971635a248c929528cc43629dbe2bda5e0dbf132dfa69d365efce9213784da1a741c550aa58307869bcd5c18d0062120fc4902fdcbf98de9ace8041df8cc8abb8c212194dfbbc1833579eb4d591862e8f2fed5a9c799a70b551aaa0882e1c2bdb428ed8b3c07b3605416e346d6aaf16861edc26ff221fd91d4bcbf4ba24be472fd044974a283e9dd2388efb1bf086063cf8500dcc66460eec7e9a98a19346be2e85a812e13bf080ddc0cc063d9a5158e5744ba700e29b05063157cd8fde4f651b5ae76621d95ab26f24aa434e75087907a9c1114cd4dd6b707cdc7e8892e31628194ad5111c9afc82740d960652a2770aceae9668458c038df98e67651f5adc5e239332e61bedfb5e46f3d77a72ccbb4253a642cc2ae45eb6ea8331134761d0504b06404dd963a6b0bea3b18c5db75dec2af3a0e9759f77bbc608e8205e1852ce2701b59e473efa4ce8f9dd510cc24f6b4776de57d37f2047bd1887880d0a617748ac8baa798cd87c28f924223447890ff55f6b0a06d277ac2372f5404c9d27c57ff72b7b4b0299264b84bf1c452b6668c5dc67900d692dda0d5b802fe1016616ca4918d438f819bee163260b21213a849b8531d21450504bb325cf1bfcd09fb4cee0ae8d7227f7a04ff1b4172f5be06fef1979cd2e639de81525be6cf6d73f0b23f7f1219af9739d89443654f4e5809266a6260b8a73d9c889d3e0643fbc8b40bdb3cfb475466899b4ea6ff453716fd483473c74ae34563fc951e8e7a2154096054957465ba231a9de3fc7111cd9d9ffdfc8035fd7bc801178942e0a843bd7a4afd70f2bce61197d8b6b1ac777141d80f7acd59a0bd57773bec75e6bcdf7bbc0de919b6afa68a7ec9b1fa635b3e7687f366bca76045ce2c84abb1cac7fe5eecac555f9b33a7f3c3471f50005a26e9cec65afc3eb14299d57a69d543bd4e0e4287aef1a634c259c7578b22111b60f8095f414e5826eb9ad6b5981fb54175d0c7d137438f25d4a65a1a9f78339bb1356ae80e5efc09d5b35437c44bbe8c5768bb0a48663920bbc35d6671041bee2fd14376b31c4677799e5f22821f5c99bb314163a7987620c0b519a8480118ac59891ff9c54c4a25f7a5c99f1726a4e33c88ccacbf97915cf50a38aea1ca06df01b2cfa5716962c23b712ae865cb86a0422f1e33ab4e92ffac43f041f1e9a70bd0b369643364f44a7c1ff02fbe2d02a22536231242a82f177f723ce779631c138894a1f77116dc64f492f826fcc32eda78447b37576a993e9bb0d917bfc376a53cdd219ce763f6f52a23af23d5a255e1df52cc3fe1b4e1b1a0e66764173fe50fe245c3baf5946edd26c6d498df04a3e2c1786d9328fcf5f1f4725d6648db43f9ba05cf1dc7e7e3fd4c4e69924af37dfc6e2d8d6a5bc512ac3267180c82b50f1043bdf418d1c26610b29964331f73022b04913ee8074060d5f8148d7555e2d16ead647af9b6c5b9bb26c5704c053ac0e5b554d50e03ad246ca572a9c9ba599999a24287be445c697796d48b8b0987997353f2650f25838211597449bf2bcb1bd5f84c5589960c073a3c48cc8d80f72ca2d384be45a12fab49b106ba3fd6bd7239b8227f58850af2135de36fd10507de3e6892f4f68ce57b96870e30db236ed4fb77184178b88c6715069cc762599f6cb963b7271e0cda20dd07c2fb65d58219c722b862460c3a549e09182254d9fefcc58b9e52acd4ab431568a58f8693425fe158496bd34fd05c3abf20f6081713a34158a7b2247c631b8bf0109688e24a4ea3e63cf3e8669976544607e282e2c6735e1f8545a30a77f628697af0f055318f63230df0803760674b70cfca26940a24473f7535b13c46ea8e6280df10c439d5711b203de36c00b7f920f9a96d1578e6f0015e4dd0247e7d253af33bfd8f2475c8459768182b6bfbfbafb897cbde8765d60639affd210c2dc7ef56f1148f98a4852cf37d8392eb55a2ee7ba6d2657aa1afc185cf3fef1666e81d9592109b0ce7dff03737655fefa8b708b2f796a7a90e172b964cedc64a8b1458f6deb94c01aa3c6ccd1c5b8301259dfdf8f2ba93d7243ffd45caa4ef3b52d41045ff9bb7f61185592c96c3c3b00f38a761cb8c4ac11cd825d481c33de90ef8eb9837b6cc8db8df1f79439a88735846afa0336b2a382b2ef5b37bd49c484b173bad6cfac1c7d656a3e23f3b3878551def3e13cff4f91351db91a1187c2c515bbecd351201d804df4c0e92fd99204337ddcb1329034236449ea98a98a97face96138062c23248929aef6771f928b8e2fbe9f265a71914f7a59837f6f588b41f4103c2eecaeb0f5123a803265c2dbc8538c60a2f74f4f7e5ada01028131b658fa159844602bfe1444f24943139b598dfcbca9209b9734803ad255465ce9e200012c52722261c37f0663811fe2facd85c85d24845eb079a37ec02b13bd8b2e4ad6a3b737c8780610dd627d9d50afe24eafb8801605a3963479174e2322a93f479747d73deefa1fbd94f0674c394fa5fe1595b3fb915638461c9747985074a8515f08ab0609ed44ff4ee757fa880ef1e6542f5d0145f9be8d61f4f58f13e67c8ebdc27fc5a61254db6c9a4764f0e9d967117cb5d64c25a5195c87fe330f60b4ab34477354f57452e51c809291f13220d4f2f144bbe8f29783a9aef39a819789b4f8aaaf8f7c8c00f473884a03b6d0bfd7b1c3da62c3f6d3f7358870326facac6a2bd46c70673125c1997a17e56e81e8b078f3be065ad911ef16a240196891187ec8f0f7a6afc00dfdc5d13a6e72c8e5deb0bac31d51a9c6998540137f41ef2795741f4f3914f655ffd0713eafa5a8e0d13952498a9c431ab5d26231bc8d6715ca6c454a90b2118a7624b14eb4821151f64f4a3e6de4980836e92a3c551384dbba570c736c47920075b3eab3a21b519a454e57fb6599e01283fd94b2fce9c460c6f79a2ff9b93c0a43e68e8ab852c4f6b4351f8e0c10682f2c01411b0aa2daf7d153aab46ba3dade8539d6cb98bb83b9fa5bd47bdf7f2da080dbcffc662d397d3810a05d3e7db0c8ed268cee2ed2faeda7a437bd7f83759f51d004296380e3221b957ff9ed649bfab244431a6dcb8fefe447f7e79674a96769604205af8fee2ed212b1faeb2a7e633a9d0c195fabf31f483d67175217411088564951aac6fe09d9eeede9afcc029fd8d4067378411db87a22d5c147886474afd9d173bfe05b00dae6d297aab59b585ea71ca64458e6f512871566e628e691c5487af8ab9e65125322a1bd61cfa8170f9a6a4a1f4fe109a4177b90d11dc1367f36dffd702e4a9c70e9068ec4de9ff1efe57a3202accc13107e77b0349c4f70845a34b1ad62910b8efc0d5c7d062f25c31c698d545a48d90c6606a546c1db21fb1c806f1b0d64d4180306db84cdc42dee6733ca85751f20d2676ea2a3373b3d2ae11c1b02154e88ab6923fc6392d8510ceb18691a4c594b33974a5646130ab5573943772ace803b242bbb4bdd0ac68f83eaf2d4f7e2afc320c4566ce2ddc1020de991a79bf735a818f2ecf794de17358311a14c087a86d5bb9dc850ada69ffad4604439e325ee87e34f8f452978ae250e2af0b7e241c90c79cea5d8f184c78b6e01e7350ed67165be037ebb16a636e4569682e86b738343c30ee5bf0f0a95419d50ade98c0e76777ec367b4a5c872c006f1758ea3180e1bd5c233902b07f955c4521737bf6ac1977f56c808634527c59536a9e934bfb3885ad93b7b40160f660fee58bea1d936023018d973edd8c251d5e5cf228a6ca7aa2370fe6c7564df482a821930b34ad6e5186c97675ce0427e24b86cd56ec60c03becaf82f0dcbc104524d06220bf5442a9fdd4cb5f920f28fee2d05dc33ad877b96f8a69acb0aab476b53e75902315fe7d3c12295e992a6ae2899d8c07995e4dc4c4faf6c7a0a7e6906883a04ccec9ca16b3a96b5b548a0523e187bb2047215d2cfdb3625bad2df1786512fa046d16f9c1e2ac8900370e801297b1b47e102f6b9a3261bd0d357b6be3b9fe82caf6a7d5c31b0f7948b11a96e16a4c3262ba9c7f19a5384ae3d093d2299d864346ffe19e901a75add46c75f57fce0f85c8fa65fd41e94bcaf314ad7ec0d102f548799d106aafc969c4ae92d1e007a39780e83e2da1aaba9ab90ae0f4187b4e33f51d408189329ffc24a1456cf2da5b51cdc805de763901dcb04ac51c7d859691a3700d29a00cb2675363cf18521bbdb5b7d54ce5091a6839277d441edab6e9d20e99781a07f9cd42a678f3899ae9e1d6cce2151324f4164c6cd25cfd19045b4dad5c81d8f46704c12fe525b8a541ef155512637d039b690dcc9bffef88c828fa58085ad39fd8a2613308062630178252682f69490607597ab6ec472f5ebbb22b63e16aa0eac901dafaeeb8d3ad0dcecf0a7354038fafa01a43a2b0b7dce5adda64b1a31ab402999ad26eb2e4b4c898f4776390b92b7a7804b620d53ce59e4150632000b1dd79d50d355672e2d8290f99ac80adc94148fbba5a6e02bcb6fae63c58685fa609d81604e73036e1532fc4386585ff0dedbc6ba2bca43691a2145dd74869e17dd3d2c9880112b72e6fd82429dd9ea882d743b47678b45a200747a797d34b356fe696b19706b392617d37a91278d9141a5107e08498f47d7631cc8cfd1b6a406699fe6a9c1a610a3f489fd1a23a1e2ccdb5a3e9f59debf57add85b41fd4a9550d7ad866b89fdbb4eec26915ec25307004432a425f21edcc8cdb7e9d12757e1dd6852830b803d15729b8ec37b9c4c23f3f65e5bfc97b92d5494c30ae1b9dc44d7ab7290b0b7eddb7d4a964a0de21960ec0086774f53800503b59d7b29d619e5d529bc803783bb4b0f7c49742cf70829baae43f26d232b0c2669cd6abda80445670e450c2447b7504e416f33d48f6f4e7694b4222f9e57b02508ee9731b2857249f28635a401f32a9b66fa1aa16c1ae6723572fadbc9cbe91780f72dd7c936aaf133290bd79250b964a37a", 0xf00}, {&(0x7f0000001340)="d3133f06c2e5b17e727b85d451de73780dfa772bf20a618aad8d90acaa0e3c1342ed74859b893b0b97c8ff384ae5466b4a69f1c997923ec4d8e0ded6fe8f90f03caca1f107efe8401c38d0b9f2e231ea72a8174f4d96a1831c85567b75eceb3fda9b7ab8fee9505dd558ba923e3ba60c455013b3135378f0e949016f00fb67403331450d7806034dba42c29003f4b2aac730ebc297cd8d6a34c5d8fa9b2ce7", 0x9f}, {&(0x7f0000003f80)="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", 0xffe}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xd6}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0xff}, {0xe}, 0x2005, 0xbfbf}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000f0701010000000000000000010000091400078008000140000000060800024000000001"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) 6.902173771s ago: executing program 2 (id=1662): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r8, 0x0, &(0x7f0000002700)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdb", @ANYRES32=r7, @ANYBLOB="b88079f4db21d0608285953aae4d6214f1a48cac4173f228f25096c39737af06231ebbeb2dc3f3b97c2ba0bbcc1c27425cb150900da0c8c85e168916ce1a093d50f4175029e7dec0657f657cf50ef7b95e1477b7cff2e749d35b00221be634b1d5f951069376b5d318f731ae0ffa1318c5ebda88e74304faef4a21d8a80d1fb3ff91c81fe53a2077da3f6511b089207e0c570c98b4b3211ad1d77173d782fb371f536650e45ebb"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00'}) 6.328442555s ago: executing program 0 (id=1664): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000000000)="f8bfff0f0f8f2dcd81381e9298bd4930c4b15be9ceb703697dc8e4b7694ff218ab75813f95f6e1bb9eaea0623cade5aeaaf8b6203f5bc5996a1ba0a5088cb37273", 0x41}, {&(0x7f0000001100)="34f5ecd08b1d3ce2b30be8b514a55254f49558de6f9a586268cff1a57665c27dc6ac5a18ab45fc8f56cb162328df2e47cd25b9ab04c784f955b62d3d5116b053050a384a3730452e08eb411a01b787c39a028cd75de81f9f07169545430e377dd44cda6e4511d50ffa6b6655fddb251d6beb4986ec14a1264c8f20c90debe6c765aaba92bdcd3e4abe8571dc9526483d2334d8711782a31cb058188b2a0811ea4217", 0xa2}], 0x3, 0x4, 0x7) 6.168795514s ago: executing program 0 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x61b1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xfffe, 0x8001}, &(0x7f0000000300)=0x90) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x2080, @local}, 0x10) socket(0x400000000010, 0x80002, 0x2000) socket$unix(0x1, 0x1, 0x0) 6.12144274s ago: executing program 1 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000001c00)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.862906823s ago: executing program 5 (id=1667): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0xf) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180"], 0x64}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000006a0001002abd7000ffdbdf250081000000000000", @ANYBLOB="147b30da568102e5887263e03af700798683f732e83e32bfb1ff977afdca823bc54aa10235bbc450cd88977c5ea099d37cd1f6f5f68160818a218b02eef0cea513cd715427ce1526ae3686ab94edcb5e23c9e9b4b9768912eb54c9c56607f5485bea6d9cc1b16560695e2fe17dcceda5401a2bee2c4f46", @ANYRES32=r2, @ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="ac2696eb8fa2b776e691cd1fbb1731df475cdb7dfbcf137cc859890dee2c2b931a7226b34b7a1fbdb622b5988a8325c471bb80e2e4870545f6814428c23cccffbff15f0f972ff42049d27678d13defff022bc92ce2db09e05ee0a25b37bff4c8489b3e38628415b9fdfdf6262118285a9e5e88b6ec2c09f512a1657c4f3d9b7148b26cc58d423ee5", 0x88, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRESDEC], 0x50) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000005c0)={0xffff1000, 0x1000, 0x3, 0x0, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.39126774s ago: executing program 5 (id=1670): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 5.1159067s ago: executing program 2 (id=1671): syz_io_uring_setup(0xd6, 0x0, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000500)=[{0x18, 0x4000, 0x0, &(0x7f00000001c0)}], 0x1}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.081062044s ago: executing program 0 (id=1672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x80}, 0x0) 4.941123177s ago: executing program 5 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.868577412s ago: executing program 0 (id=1674): syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x403) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$inet_sctp(0x2, 0x5, 0x84) dup(r0) memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000701) r3 = open(0x0, 0x4427e, 0x9a) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket(0x23, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) 4.866788504s ago: executing program 1 (id=1675): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000000000)="f8bfff0f0f8f2dcd81381e9298bd4930c4b15be9ceb703697dc8e4b7694ff218ab75813f95f6e1bb9eaea0623cade5aeaaf8b6203f5bc5996a1ba0a5088cb37273", 0x41}], 0x2, 0x4, 0x7) 4.786872568s ago: executing program 5 (id=1676): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8f650000", 0x4) 4.669216814s ago: executing program 0 (id=1677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0x1fc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './mnt\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r7, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2011800, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB="050000b000000000823d", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) 4.417996222s ago: executing program 1 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) dup(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) close(0x4) mq_open(&(0x7f0000000680)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+\xbb \xcb\be\xf4\x87\xedl\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\xb0\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x9avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3M\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc1m\x17\b\xe4\xb1b\x13\xc74Z#E\x91\xbe\x93\x0f\xaf\xa7\xf9\"\x02\xb2\x12\xc5A\x1e\xe2\xe1\x13\xfey8\xe1\xa8Zu\xf1\x0f\x1dC)T)Z\xec\x1d_)?\xbab\xda\xec\x81\xf7\x97\x1f\xc5\xa1T\xb9\x9e\xa3\xe1\x901[\xfa_Y\xa2\x1f\x1c\x7f\xf0\x0eW(\xdf\xc2\xc0p\xb2\xe4\xe4\xcd\'\x03\xaf\x8d\x1c_\xde\xa6\x9cV\x98\x06\x1e4R\xa0\xc9\xcfC\xf8\xaf\x14P\x15]\xa9#/w\x0elPo\x9c\x8c$\xb2t\b\x9atA1\xa6y\xd0\x19\x9e\x96\xaa\xb5\t\xe6cR~?\xb4T\xc0\xa1\xb2\x8a\xef\xc2|\x18p\x1f\xb7\xf5\xb5\x11{h\x8e\xab\b\x8e)\xc1\x12N\xea\x1a\x9e\xcf\x1f\xe5\xac\x9d\xb0?\xe1*D\xe3\a\x9b\x1el\xa6\xf2.VA\xc5\xef\x8a\xf2R\xd0\x9cu\xdat.U\x8c\xc1m\x14S\x8c%ll\x01\x82\xcc\x88a,n\xf9\xd0F\\', 0x42, 0xa8, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0x0, 0x3010, 0x0, 0xdb}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x23, 0x8e, 0x2}}]}, 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x6}}, 0x28) 4.41580092s ago: executing program 5 (id=1679): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="163a00", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf253700000008005700ce0500000800570005000000080026006c09000008009f00199b211a0800220110030000050018011c00000008002201050300000800a100260500000800a1000700000008002201d3020000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x87) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$sequencer(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffc, 0x259, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x627, 0xc104effd, 0x43, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302000a"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.980317737s ago: executing program 2 (id=1680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0xf) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180"], 0x64}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000006a0001002abd7000ffdbdf250081000000000000", @ANYBLOB="147b30da568102e5887263e03af700798683f732e83e32bfb1ff977afdca823bc54aa10235bbc450cd88977c5ea099d37cd1f6f5f68160818a218b02eef0cea513cd715427ce1526ae3686ab94edcb5e23c9e9b4b9768912eb54c9c56607f5485bea6d9cc1b16560695e2fe17dcceda5401a2bee2c4f46", @ANYRES32=r2, @ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="ac2696eb8fa2b776e691cd1fbb1731df475cdb7dfbcf137cc859890dee2c2b931a7226b34b7a1fbdb622b5988a8325c471bb80e2e4870545f6814428c23cccffbff15f0f972ff42049d27678d13defff022bc92ce2db09e05ee0a25b37bff4c8489b3e38628415b9fdfdf6262118285a9e5e88b6ec2c09f512a1657c4f3d9b7148b26cc58d423ee5", 0x88, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRESDEC], 0x50) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000005c0)={0xffff1000, 0x1000, 0x3, 0x0, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.751904109s ago: executing program 2 (id=1681): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="163a0000", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf253700000008005700ce0500000800570005000000080026006c09000008009f00199b211a0800220110030000050018011c00000008002201050300000800a100260500000800a1000700000008002201d3020000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x87) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$sequencer(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffc, 0x259, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x627, 0xc104effd, 0x43, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302000a"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1.836489993s ago: executing program 3 (id=1682): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xed0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xea4, 0x2, [@TCA_FW_ACT={0xea0, 0x4, [@m_pedit={0xe9c, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0xfca2, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xed0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.52787757s ago: executing program 3 (id=1683): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.02952318s ago: executing program 3 (id=1684): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@generic={0xfe}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x170, 0x29, 0x36, {0x5e, 0x2a, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdb, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x0]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2b0}}], 0x1, 0x4040c94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 721.942455ms ago: executing program 5 (id=1685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000200)={0x10, 0x0, [{0x1ff, 0x0, 0x9}, {0x40, 0x0, 0x6}, {0x7ffe, 0x0, 0x2f50}, {0xe, 0x0, 0x9}, {0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xffffffffffffffff}, {0x1b2, 0x0, 0xffffffffff800000}, {0x10401, 0x0, 0x9}, {0x84e, 0x0, 0x9}, {0x4, 0x0, 0x81}, {0x2, 0x0, 0x28}, {0xf, 0x0, 0x6}, {0x10000, 0x0, 0xd}, {0x5, 0x0, 0x77c}, {0x8, 0x0, 0x57}, {0x6, 0x0, 0xa16}]}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x0, r6, r7, 0x3, 0x6, 0x8}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r9 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r9, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, 0x0, 0xff00) socket$inet_tcp(0x2, 0x1, 0x0) 628.91437ms ago: executing program 0 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000001c00)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 519.745045ms ago: executing program 3 (id=1687): syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x403) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$inet_sctp(0x2, 0x5, 0x84) dup(r0) memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000701) r3 = open(0x0, 0x4427e, 0x9a) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket(0x23, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) 165.334531ms ago: executing program 3 (id=1688): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, 0x4, 0x7) 0s ago: executing program 3 (id=1689): keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) kernel console output (not intermixed with test programs): 0x130 [ 484.413015][T10488] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 484.413032][T10488] ? security_sctp_bind_connect+0x7e/0x2e0 [ 484.413049][T10488] sctp_sendmsg+0x155c/0x2840 [ 484.413072][T10488] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.413085][T10488] ? aa_sk_perm+0x15f/0x920 [ 484.413105][T10488] ? aa_sk_perm+0x7ee/0x920 [ 484.413129][T10488] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.413150][T10488] ? sock_rps_record_flow+0x19/0x410 [ 484.413173][T10488] ? inet_sendmsg+0x2f4/0x370 [ 484.413196][T10488] __sock_sendmsg+0x19c/0x270 [ 484.413222][T10488] __sys_sendto+0x3bd/0x520 [ 484.413240][T10488] ? __pfx___sys_sendto+0x10/0x10 [ 484.413255][T10488] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 484.413281][T10488] ? __fget_files+0x3a0/0x420 [ 484.413309][T10488] ? ksys_write+0x22a/0x250 [ 484.413326][T10488] ? __pfx_ksys_write+0x10/0x10 [ 484.413344][T10488] __x64_sys_sendto+0xde/0x100 [ 484.413364][T10488] do_syscall_64+0xec/0xf80 [ 484.413380][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.413394][T10488] ? trace_irq_disable+0x37/0x100 [ 484.413415][T10488] ? clear_bhb_loop+0x60/0xb0 [ 484.413433][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.413448][T10488] RIP: 0033:0x7f33beb8f749 [ 484.413463][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.413476][T10488] RSP: 002b:00007f33bfacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.413492][T10488] RAX: ffffffffffffffda RBX: 00007f33bede5fa0 RCX: 00007f33beb8f749 [ 484.413504][T10488] RDX: 000000000000fffd RSI: 0000200000000040 RDI: 0000000000000003 [ 484.413514][T10488] RBP: 00007f33bfacc090 R08: 0000200000000100 R09: 000000000000001c [ 484.413525][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.413533][T10488] R13: 00007f33bede6038 R14: 00007f33bede5fa0 R15: 00007f33bef0fa28 [ 484.413558][T10488] [ 484.580113][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.139582][ T6073] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 485.299578][ T6073] usb 6-1: Using ep0 maxpacket: 32 [ 485.315468][ T6073] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 485.332570][ T6073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.348967][ T6073] usb 6-1: Product: syz [ 485.357803][ T6073] usb 6-1: Manufacturer: syz [ 485.363353][ T6073] usb 6-1: SerialNumber: syz [ 485.377827][ T6073] usb 6-1: config 0 descriptor?? [ 485.394375][ T6073] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 485.402304][ T6073] dvb-usb: bulk message failed: -22 (2/0) [ 485.416892][ T6073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.465726][ T6073] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 485.474238][ T6073] usb 6-1: media controller created [ 485.528903][ T6073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.548179][ T6073] usb 6-1: selecting invalid altsetting 7 [ 485.555386][ T6073] cxusb: set interface failed [ 485.561935][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 485.589112][T10490] dvb-usb: bulk message failed: -22 (3/0) [ 485.659954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.750579][ T6073] DVB: Unable to find symbol lgdt330x_attach() [ 485.756952][ T6073] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 485.948426][T10507] cxusb: i2c wr: len=8192 is too big! [ 485.948426][T10507] [ 485.973321][ T6073] rc_core: IR keymap rc-dvico-portable not found [ 486.007404][ T6073] Registered IR keymap rc-empty [ 486.081948][ T6073] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 486.124757][ T6073] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input30 [ 486.231875][ T6073] dvb-usb: schedule remote query interval to 100 msecs. [ 486.247183][ T6073] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 486.355075][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 486.500673][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 486.670873][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 486.709661][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 486.780414][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 486.899905][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.020042][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.099721][ T977] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 487.140060][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.249615][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 487.256163][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.263568][ T977] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 487.287237][ T977] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 487.305816][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 487.326824][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 487.340243][ T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 487.353956][T10524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.378575][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 487.400047][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.412268][ T977] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 487.440628][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.481705][ T977] usb 4-1: config 0 descriptor?? [ 487.509786][ T6073] dvb-usb: bulk message failed: -22 (1/0) [ 487.583820][ T6073] usb 6-1: USB disconnect, device number 20 [ 487.724357][ T977] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 487.739983][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 487.782955][ T6073] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 487.818666][ T977] usb 4-1: USB disconnect, device number 50 [ 487.874101][ T977] usblp0: removed [ 488.056926][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1191'. [ 488.139791][ T6073] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 488.250230][ T977] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 488.312314][ T6073] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.326498][ T6073] usb 6-1: config 0 has no interface number 0 [ 488.337006][ T6073] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 488.347088][ T6073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.355556][ T6073] usb 6-1: Product: syz [ 488.360430][ T6073] usb 6-1: Manufacturer: syz [ 488.365151][ T6073] usb 6-1: SerialNumber: syz [ 488.380555][ T6073] usb 6-1: config 0 descriptor?? [ 488.409785][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 488.418221][ T977] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 488.428095][ T977] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 488.447345][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 488.469750][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 488.484093][ T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 488.494476][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 488.508467][ T977] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 488.518177][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.538133][ T977] usb 4-1: config 0 descriptor?? [ 488.596193][ T6073] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 488.700340][ T5905] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 488.756353][ T977] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 488.780067][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.870035][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 488.882512][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 488.897328][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 488.912906][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.932700][ T5905] usb 2-1: Product: syz [ 488.937088][ T5905] usb 2-1: Manufacturer: syz [ 488.942459][ T5905] usb 2-1: SerialNumber: syz [ 488.953555][ T5905] usb 2-1: config 0 descriptor?? [ 488.971163][ T5905] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 488.988194][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.998369][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 488.998388][ T30] audit: type=1326 audit(1766477567.595:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.2.1193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33beb8f749 code=0x0 [ 489.027997][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.040356][ T6073] usb 4-1: USB disconnect, device number 51 [ 489.063974][ T6073] usblp0: removed [ 489.819690][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 490.195344][ T5905] gspca_zc3xx: reg_w_i err -71 [ 490.409735][T10534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1192'. [ 490.737159][T10551] netlink: 'syz.2.1195': attribute type 21 has an invalid length. [ 490.755927][T10551] netlink: 'syz.2.1195': attribute type 6 has an invalid length. [ 490.806943][T10551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1195'. [ 490.820272][ T5905] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 490.836832][ T5905] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 490.858385][ T5906] usb 6-1: USB disconnect, device number 21 [ 490.864546][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 490.940231][ T6073] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 490.969060][ T5905] usb 2-1: USB disconnect, device number 56 [ 491.899736][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 492.080812][ T7033] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 492.291730][ T7033] usb 6-1: config 1 has an invalid descriptor of length 132, skipping remainder of the config [ 492.302769][ T7033] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.359350][ T7033] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.375283][ T7033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.386268][ T7033] usb 6-1: SerialNumber: syz [ 492.618213][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.637316][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.665161][ T7033] usb 6-1: USB disconnect, device number 22 [ 492.939649][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.503375][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 493.979844][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.046634][T10588] binder: 10587:10588 unknown command 2021053001 [ 494.053258][T10588] binder: 10587:10588 ioctl c0306201 200000000080 returned -22 [ 494.609753][ T6073] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 494.790491][ T6073] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.802882][ T6073] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 494.828693][ T6073] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.840331][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.857242][ T6073] usb 4-1: Product: syz [ 494.861825][ T6073] usb 4-1: Manufacturer: syz [ 494.866556][ T6073] usb 4-1: SerialNumber: syz [ 494.898382][ T6073] cdc_mbim 4-1:1.0: skipping garbage [ 495.019625][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 495.102075][T10594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.499610][ T7033] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 495.659709][ T7033] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.667779][ T7033] usb 6-1: config 0 has no interface number 0 [ 495.698098][ T7033] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 495.719582][ T7033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.733424][T10594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.741738][ T6073] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 495.760027][ T7033] usb 6-1: Product: syz [ 495.761351][ T6073] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 495.764621][ T7033] usb 6-1: Manufacturer: syz [ 495.789733][ T7033] usb 6-1: SerialNumber: syz [ 495.816164][ T6073] wwan wwan0: port wwan0mbim0 attached [ 495.826021][ T7033] usb 6-1: config 0 descriptor?? [ 495.861494][ T6073] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 76:9f:00:c2:b9:0c [ 495.959833][ T6073] usb 4-1: USB disconnect, device number 52 [ 495.971971][ T6073] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 496.036341][ T7033] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 496.059682][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 496.126066][ T7033] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 496.162345][ T6073] wwan wwan0: port wwan0mbim0 disconnected [ 496.184822][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 496.245751][ T7033] usb 6-1: media controller created [ 496.289177][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.051950][T10615] netlink: 'syz.2.1213': attribute type 21 has an invalid length. [ 497.095371][T10615] netlink: 'syz.2.1213': attribute type 6 has an invalid length. [ 497.100077][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 497.192048][T10615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 497.370076][ T7033] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 497.768952][ T7033] usb 6-1: USB disconnect, device number 23 [ 498.139641][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.185539][T10626] binder: 10625:10626 unknown command 2021053001 [ 498.196086][T10626] binder: 10625:10626 ioctl c0306201 200000000080 returned -22 [ 498.341033][ T7033] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 498.389086][T10628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.421924][T10630] bond_slave_0: entered promiscuous mode [ 498.427959][T10630] bond_slave_1: entered promiscuous mode [ 498.484063][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.489882][ T7033] usb 6-1: device descriptor read/64, error -71 [ 498.533980][T10630] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 498.740111][ T7033] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 498.979952][ T7033] usb 6-1: device descriptor read/64, error -71 [ 499.091763][ T7033] usb usb6-port1: attempt power cycle [ 499.189640][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.449598][ T7033] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 499.471606][ T7033] usb 6-1: device descriptor read/8, error -71 [ 499.719620][ T7033] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 499.760984][ T7033] usb 6-1: device descriptor read/8, error -71 [ 499.890194][ T7033] usb usb6-port1: unable to enumerate USB device [ 500.219651][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 500.390190][ T7033] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 500.582991][ T7033] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.594166][ T7033] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.607168][ T7033] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.626774][ T7033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.666764][ T7033] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.684822][ T7033] usb 4-1: invalid MIDI out EP 0 [ 500.830701][ T9123] udevd[9123]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.866793][T10654] delete_channel: no stack [ 500.910798][ T7033] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 501.259661][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 501.850642][T10670] binder: 10669:10670 unknown command 2021053001 [ 501.873781][T10670] binder: 10669:10670 ioctl c0306201 200000000080 returned -22 [ 502.299645][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.349663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.720824][ T7033] usb 4-1: USB disconnect, device number 53 [ 504.379664][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.698806][T10698] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 504.718332][T10698] netlink: 'syz.3.1233': attribute type 6 has an invalid length. [ 504.746219][T10698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1233'. [ 505.429653][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.026087][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 506.459659][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.759610][ T977] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 506.784421][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.791000][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.912190][T10725] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1243'. [ 506.921400][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 506.932016][ T977] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 506.972326][ T977] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 506.991612][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.021831][ T977] usb 6-1: Product: syz [ 507.028939][ T977] usb 6-1: Manufacturer: syz [ 507.035030][ T977] usb 6-1: SerialNumber: syz [ 507.051516][ T977] usb 6-1: config 0 descriptor?? [ 507.132343][ T977] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 507.224763][ T977] usb 6-1: setting power ON [ 507.229364][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 507.255903][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.290829][ T977] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 507.299336][ T977] usb 6-1: media controller created [ 507.313721][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.499899][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 507.596618][T10717] dvb-usb: bulk message failed: -22 (3/0) [ 507.602995][T10717] dvb-usb: bulk message failed: -22 (4/0) [ 507.608771][T10717] cxusb: i2c read failed [ 507.685815][ T977] usb 6-1: selecting invalid altsetting 6 [ 507.700772][ T977] usb 6-1: digital interface selection failed (-22) [ 507.712110][ T977] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 507.730460][ T977] usb 6-1: setting power OFF [ 507.740782][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 507.757613][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 507.778696][ T977] (NULL device *): no alternate interface [ 508.539721][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.579683][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.981932][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 509.993462][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.002924][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.012681][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.022152][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.031684][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.041355][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.097318][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.106945][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.116615][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 510.567457][T10772] netlink: 'syz.0.1254': attribute type 21 has an invalid length. [ 510.629698][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.785905][T10772] netlink: 'syz.0.1254': attribute type 6 has an invalid length. [ 511.153747][T10785] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 511.166100][T10785] Cannot find add_set index 0 as target [ 511.181668][T10785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.191075][T10785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.380490][ T7033] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 511.563152][ T7033] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.572193][ T7033] usb 2-1: config 0 has no interface number 0 [ 511.585190][ T7033] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 511.594840][ T7033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.607343][ T7033] usb 2-1: Product: syz [ 511.618837][ T7033] usb 2-1: Manufacturer: syz [ 511.634196][ T7033] usb 2-1: SerialNumber: syz [ 511.659632][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 511.673539][ T7033] usb 2-1: config 0 descriptor?? [ 511.894645][ T7033] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 512.699657][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 512.825299][ T30] audit: type=1326 audit(1766477591.415:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 512.859770][ T5906] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 512.886101][ T30] audit: type=1326 audit(1766477591.415:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 512.910699][ T30] audit: type=1326 audit(1766477591.415:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 512.955785][ T30] audit: type=1326 audit(1766477591.415:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 512.979177][ T30] audit: type=1326 audit(1766477591.415:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 513.013956][ T30] audit: type=1326 audit(1766477591.415:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 513.049684][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 513.080014][ T5906] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.095176][ T5906] usb 3-1: config 0 has no interface number 0 [ 513.113429][ T30] audit: type=1326 audit(1766477591.415:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 513.150211][ T5906] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.171142][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.181293][ T30] audit: type=1326 audit(1766477591.425:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.3.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f787ef8f749 code=0x7ffc0000 [ 513.205164][ T5906] usb 3-1: Product: syz [ 513.209878][ T5906] usb 3-1: Manufacturer: syz [ 513.214801][ T5906] usb 3-1: SerialNumber: syz [ 513.224455][ T5906] usb 3-1: config 0 descriptor?? [ 513.238352][ T5906] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 513.447101][ T5906] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 513.525740][ T5906] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 513.638428][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 513.640359][ T7033] usb 3-1: USB disconnect, device number 42 [ 513.667471][ T7033] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 513.684030][ T7033] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.697095][ T7033] quatech2 3-1:0.51: device disconnected [ 513.739754][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 514.103866][ T5906] usb 2-1: USB disconnect, device number 57 [ 514.779638][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 515.343419][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.364505][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.819670][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 516.234597][T10848] __nla_validate_parse: 32 callbacks suppressed [ 516.234612][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1277'. [ 516.431809][T10843] netlink: 'syz.0.1276': attribute type 21 has an invalid length. [ 516.453595][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.496362][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.745968][T10843] netlink: 'syz.0.1276': attribute type 6 has an invalid length. [ 516.824921][T10843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1276'. [ 516.859658][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 517.160084][ T6073] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 517.391865][ T6073] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.402454][ T6073] usb 4-1: config 0 has no interface number 0 [ 517.414659][ T6073] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 517.424834][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.434529][ T6073] usb 4-1: Product: syz [ 517.444548][ T6073] usb 4-1: Manufacturer: syz [ 517.449390][ T6073] usb 4-1: SerialNumber: syz [ 517.466757][ T6073] usb 4-1: config 0 descriptor?? [ 517.678900][ T6073] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 517.688875][ T6073] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 517.709711][ T6073] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 517.899651][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.367721][T10865] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1281'. [ 518.377597][T10865] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 518.939628][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.663258][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 519.979685][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 521.029739][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 521.272356][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1292'. [ 521.305742][T10908] hub 9-0:1.0: USB hub found [ 521.316378][T10908] hub 9-0:1.0: 1 port detected [ 522.059637][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 522.552597][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1295'. [ 522.786010][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.796450][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.099660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 524.139674][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 524.853236][T10944] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1302'. [ 525.179632][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 525.897503][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.920751][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.219655][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 526.824935][T10960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1308'. [ 526.990777][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1310'. [ 527.012773][T10968] hub 9-0:1.0: USB hub found [ 527.018043][T10968] hub 9-0:1.0: 1 port detected [ 527.259813][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.531604][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1314'. [ 528.201318][T10983] FAULT_INJECTION: forcing a failure. [ 528.201318][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 528.217470][T10983] CPU: 1 UID: 0 PID: 10983 Comm: syz.3.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.217508][T10983] Tainted: [L]=SOFTLOCKUP [ 528.217517][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.217531][T10983] Call Trace: [ 528.217540][T10983] [ 528.217549][T10983] dump_stack_lvl+0xe8/0x150 [ 528.217583][T10983] should_fail_ex+0x414/0x560 [ 528.217624][T10983] should_failslab+0xa8/0x100 [ 528.217653][T10983] kmem_cache_alloc_noprof+0x88/0x710 [ 528.217686][T10983] ? __pfx_vfs_write+0x10/0x10 [ 528.217707][T10983] ? getname_flags+0xb8/0x540 [ 528.217746][T10983] getname_flags+0xb8/0x540 [ 528.217778][T10983] do_sys_openat2+0xbc/0x200 [ 528.217810][T10983] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.217842][T10983] ? ksys_write+0x22a/0x250 [ 528.217865][T10983] ? __pfx_ksys_write+0x10/0x10 [ 528.217890][T10983] __x64_sys_openat+0x138/0x170 [ 528.217924][T10983] do_syscall_64+0xec/0xf80 [ 528.217945][T10983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.217965][T10983] ? trace_irq_disable+0x37/0x100 [ 528.217994][T10983] ? clear_bhb_loop+0x60/0xb0 [ 528.218020][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.218042][T10983] RIP: 0033:0x7f787ef8f749 [ 528.218062][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.218081][T10983] RSP: 002b:00007f787fdf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.218106][T10983] RAX: ffffffffffffffda RBX: 00007f787f1e6090 RCX: 00007f787ef8f749 [ 528.218122][T10983] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 528.218138][T10983] RBP: 00007f787fdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 528.218152][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.218165][T10983] R13: 00007f787f1e6128 R14: 00007f787f1e6090 R15: 00007f787f30fa28 [ 528.218199][T10983] [ 528.320104][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 528.798788][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'. [ 529.339654][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 529.509733][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 529.519601][ T5960] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 529.672098][ T5960] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.683217][ T5960] usb 3-1: config 0 has no interface number 0 [ 529.689940][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 529.698767][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.708039][ T5960] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 529.718372][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.728656][ T5960] usb 3-1: Product: syz [ 529.735270][ T5960] usb 3-1: Manufacturer: syz [ 529.738597][ T5906] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 529.753248][ T5960] usb 3-1: SerialNumber: syz [ 529.769667][ T5906] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 529.777208][ T5960] usb 3-1: config 0 descriptor?? [ 529.804415][ T5906] usb 2-1: config 8 interface 0 has no altsetting 0 [ 529.827750][ T5906] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 529.839982][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.867387][ T5906] usb 2-1: Product: syz [ 529.884769][ T5906] usb 2-1: Manufacturer: syz [ 529.898579][ T5906] usb 2-1: SerialNumber: syz [ 529.991531][ T5960] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 530.018414][ T5960] usb 3-1: USB disconnect, device number 43 [ 530.379712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 530.414583][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1324'. [ 531.108269][ T5920] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 531.337388][ T5920] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 531.351793][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.364622][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 531.413259][ T5920] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.439696][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 531.484706][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 531.517306][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.589863][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.605796][ T5920] usb 1-1: invalid MIDI out EP 0 [ 531.965761][ T5920] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 532.459886][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 532.870755][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 533.499626][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 533.715387][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.821969][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.863060][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.924413][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.145700][ T7036] usb 1-1: USB disconnect, device number 55 [ 534.183022][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.193100][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.242215][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.299796][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.401421][T11042] binder: 11041:11042 unknown command 2021053001 [ 534.428320][T11042] binder: 11041:11042 ioctl c0306201 200000000080 returned -22 [ 534.539674][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.565617][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.602053][ T5906] usb 2-1: selecting invalid altsetting 0 [ 534.694425][ T5906] usb 2-1: USB disconnect, device number 58 [ 535.487236][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1339'. [ 535.579661][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 535.840168][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.849019][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.896593][ T5906] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 535.898010][T11081] netlink: 'syz.0.1340': attribute type 21 has an invalid length. [ 535.950795][T11081] netlink: 'syz.0.1340': attribute type 6 has an invalid length. [ 535.999593][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1340'. [ 536.217964][ T5906] usb 3-1: config 0 has no interfaces? [ 536.305003][ T5906] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 536.325142][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.335685][ T5906] usb 3-1: Product: syz [ 536.413688][ T5906] usb 3-1: Manufacturer: syz [ 536.420912][ T5906] usb 3-1: SerialNumber: syz [ 536.471043][ T5906] usb 3-1: config 0 descriptor?? [ 536.619648][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 537.193947][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 537.530372][T11090] binder: 11089:11090 unknown command 2021053001 [ 537.536986][T11090] binder: 11089:11090 ioctl c0306201 200000000080 returned -22 [ 537.659630][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 538.654368][ T7036] usb 3-1: USB disconnect, device number 44 [ 538.699645][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 539.079692][ T5906] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 539.262012][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.272699][ T5906] usb 3-1: config 0 has no interface number 0 [ 539.294738][ T5906] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 539.317536][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.355284][ T5906] usb 3-1: Product: syz [ 539.363060][ T5906] usb 3-1: Manufacturer: syz [ 539.399061][ T5906] usb 3-1: SerialNumber: syz [ 539.421657][ T5906] usb 3-1: config 0 descriptor?? [ 539.697107][ T5906] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 539.713755][ T5906] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 539.739645][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 539.749139][ T5906] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 539.767086][ T5906] usb 3-1: media controller created [ 539.916907][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.995289][ T5906] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 540.354469][ T5906] usb 3-1: USB disconnect, device number 45 [ 540.667728][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1354'. [ 540.678691][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 540.779991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.819623][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.944533][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.983940][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.859653][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 543.899742][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 544.939647][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.451627][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 545.461204][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 545.979615][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 546.402689][ T7033] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 546.631932][ T7033] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.641988][ T7033] usb 1-1: config 0 has no interface number 0 [ 546.668203][ T7033] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 546.781321][ T7033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.801225][ T7033] usb 1-1: Product: syz [ 546.816276][ T7033] usb 1-1: Manufacturer: syz [ 546.829292][ T7033] usb 1-1: SerialNumber: syz [ 546.861556][ T7033] usb 1-1: config 0 descriptor?? [ 546.917854][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.935883][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.019663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 547.186574][ T7033] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 547.210613][ T7033] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 547.237520][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 547.258279][ T7033] usb 1-1: media controller created [ 547.302761][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.520542][ T7033] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 547.622944][ T7033] usb 1-1: USB disconnect, device number 56 [ 547.740222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.059660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.099633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.552638][ T30] audit: type=1326 audit(1766477628.125:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 549.814790][ T30] audit: type=1326 audit(1766477628.125:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 549.894894][ T30] audit: type=1326 audit(1766477628.125:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.055861][ T30] audit: type=1326 audit(1766477628.125:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.139663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 550.192456][ T30] audit: type=1326 audit(1766477628.125:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.278962][ T30] audit: type=1326 audit(1766477628.125:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.354159][ T30] audit: type=1326 audit(1766477628.135:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.473123][ T30] audit: type=1326 audit(1766477628.135:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.550933][ T30] audit: type=1326 audit(1766477628.135:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.626402][ T30] audit: type=1326 audit(1766477628.135:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a878f749 code=0x7ffc0000 [ 550.989641][ T7033] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 551.142561][ T7033] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.151420][ T7033] usb 3-1: config 0 has no interface number 0 [ 551.166576][ T7033] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 551.179660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.188682][ T7033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.209262][ T7033] usb 3-1: Product: syz [ 551.220588][ T7033] usb 3-1: Manufacturer: syz [ 551.232577][ T7033] usb 3-1: SerialNumber: syz [ 551.266068][ T7033] usb 3-1: config 0 descriptor?? [ 551.513528][ T7033] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 551.571343][ T7033] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.609846][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 551.619676][ T7033] usb 3-1: media controller created [ 551.642919][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.720462][ T7033] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 551.755984][ T7033] usb 3-1: USB disconnect, device number 46 [ 552.219624][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 552.290013][ T7033] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 552.489323][ T7033] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.498035][ T7033] usb 1-1: config 0 has no interface number 0 [ 552.536130][ T7033] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 552.547022][ T7033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.561575][ T7033] usb 1-1: Product: syz [ 552.565894][ T7033] usb 1-1: Manufacturer: syz [ 552.577373][ T7033] usb 1-1: SerialNumber: syz [ 552.587671][ T7033] usb 1-1: config 0 descriptor?? [ 552.807359][ T7033] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 552.819290][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 552.837954][ T7033] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 552.861921][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 552.882243][ T7033] usb 1-1: media controller created [ 552.945225][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.052558][ T7033] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 553.229114][ T7033] usb 1-1: USB disconnect, device number 57 [ 553.259620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 554.020726][T11269] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 554.299663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.339635][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.888690][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 556.269875][ T5906] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 556.379625][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 556.419891][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 556.427471][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 556.437150][ T5906] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 556.448741][ T5906] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 556.459600][ T5906] usb 2-1: config 8 interface 0 has no altsetting 0 [ 556.474824][ T5906] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 556.484486][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.492937][ T5906] usb 2-1: Product: syz [ 556.497349][ T5906] usb 2-1: Manufacturer: syz [ 556.502327][ T5906] usb 2-1: SerialNumber: syz [ 557.316194][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1408'. [ 557.429639][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.779725][ T7033] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 557.933354][ T7033] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.941969][ T7033] usb 1-1: config 0 has no interface number 0 [ 557.952183][ T7015] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 557.960362][ T7033] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 557.969915][ T7033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.979231][ T7033] usb 1-1: Product: syz [ 557.987698][ T7033] usb 1-1: Manufacturer: syz [ 557.993490][ T7033] usb 1-1: SerialNumber: syz [ 558.003362][ T7033] usb 1-1: config 0 descriptor?? [ 558.122590][ T7015] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.131103][ T7015] usb 3-1: config 0 has no interface number 0 [ 558.144183][ T7015] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.157333][ T7015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.165794][ T7015] usb 3-1: Product: syz [ 558.170458][ T7015] usb 3-1: Manufacturer: syz [ 558.175167][ T7015] usb 3-1: SerialNumber: syz [ 558.188035][ T7015] usb 3-1: config 0 descriptor?? [ 558.325137][ T7033] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 558.344458][ T7033] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 558.410525][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 558.420914][ T7033] usb 1-1: media controller created [ 558.424785][ T7015] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 558.447928][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.459647][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 558.471704][ T7015] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 558.616845][ T7015] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 558.639065][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.645297][ T7033] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 558.671715][ T7015] usb 3-1: media controller created [ 558.700673][ T5906] usb 2-1: selecting invalid altsetting 0 [ 558.761614][ T7015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.811452][ T5906] usb 2-1: USB disconnect, device number 59 [ 558.871767][ T7015] i2c i2c-3: ec100: i2c rd failed=-32 reg=33 [ 558.941671][ T7033] usb 1-1: USB disconnect, device number 58 [ 559.295306][T11324] udevd[11324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.472875][ T7015] usb 3-1: USB disconnect, device number 47 [ 559.499861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 559.639742][ T7033] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 560.098711][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1419'. [ 560.292017][ T7033] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.304334][ T7033] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.536291][ T7033] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.549633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.596223][ T7033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.656142][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.809845][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.813639][ T7033] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.853174][ T7033] usb 2-1: invalid MIDI out EP 0 [ 560.974924][T11329] fuse: Unknown parameter 'rootmod' [ 561.077072][T11324] udevd[11324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.121854][ T7033] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 561.209747][ T7033] usb 2-1: USB disconnect, device number 60 [ 561.589607][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 562.177330][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.260711][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.619656][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 562.830598][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1429'. [ 562.979932][ T5906] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 563.151498][ T5906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.169893][ T5906] usb 2-1: config 0 has no interface number 0 [ 563.199430][ T5906] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 563.218021][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.229858][ T5906] usb 2-1: Product: syz [ 563.238707][ T5906] usb 2-1: Manufacturer: syz [ 563.248927][ T5906] usb 2-1: SerialNumber: syz [ 563.262485][ T5906] usb 2-1: config 0 descriptor?? [ 563.369013][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.381022][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.492927][ T5906] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 563.506713][ T5906] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 563.517482][ T5906] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 563.525620][ T5906] usb 2-1: media controller created [ 563.544784][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.556792][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1432'. [ 563.668071][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.669992][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.693307][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.710593][ T5906] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 563.894294][ T5906] usb 2-1: USB disconnect, device number 61 [ 564.119890][ T7033] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 564.364443][ T7033] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.372745][ T7033] usb 1-1: config 0 has no interface number 0 [ 564.463448][ T7033] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 564.476954][ T7033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.494535][ T7033] usb 1-1: Product: syz [ 564.507613][ T7033] usb 1-1: Manufacturer: syz [ 564.517221][ T7033] usb 1-1: SerialNumber: syz [ 564.533915][ T7033] usb 1-1: config 0 descriptor?? [ 564.709623][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 564.760725][ T7033] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 564.873537][T11395] FAULT_INJECTION: forcing a failure. [ 564.873537][T11395] name failslab, interval 1, probability 0, space 0, times 0 [ 564.989665][T11395] CPU: 0 UID: 0 PID: 11395 Comm: syz.1.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.989703][T11395] Tainted: [L]=SOFTLOCKUP [ 564.989711][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.989724][T11395] Call Trace: [ 564.989733][T11395] [ 564.989743][T11395] dump_stack_lvl+0xe8/0x150 [ 564.989775][T11395] should_fail_ex+0x414/0x560 [ 564.989815][T11395] should_failslab+0xa8/0x100 [ 564.989836][T11395] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 564.989867][T11395] ? __alloc_skb+0x1dc/0x3a0 [ 564.989888][T11395] __alloc_skb+0x1dc/0x3a0 [ 564.989907][T11395] tcp_stream_alloc_skb+0x3d/0x350 [ 564.989967][T11395] tcp_connect+0x14ce/0x4f50 [ 564.990029][T11395] ? __pfx_tcp_connect+0x10/0x10 [ 564.990056][T11395] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 564.990081][T11395] ? lockdep_hardirqs_on+0x7b/0x110 [ 564.990098][T11395] ? ktime_get_with_offset+0x93/0x2a0 [ 564.990120][T11395] ? seqcount_lockdep_reader_access+0xea/0x100 [ 564.990150][T11395] ? __asan_memset+0x22/0x50 [ 564.990177][T11395] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 564.990210][T11395] ? inet6_hash_connect+0xd8/0x170 [ 564.990232][T11395] tcp_v6_connect+0x1222/0x18a0 [ 564.990258][T11395] ? __pfx_tcp_v6_connect+0x10/0x10 [ 564.990273][T11395] ? look_up_lock_class+0x57/0x110 [ 564.990289][T11395] ? register_lock_class+0x31/0x2e0 [ 564.990324][T11395] __inet_stream_connect+0x2ae/0xe70 [ 564.990350][T11395] ? do_raw_spin_lock+0x121/0x290 [ 564.990370][T11395] ? lock_sock_nested+0x6a/0x100 [ 564.990398][T11395] ? __pfx___inet_stream_connect+0x10/0x10 [ 564.990426][T11395] ? __local_bh_enable_ip+0xd0/0x130 [ 564.990446][T11395] inet_stream_connect+0x66/0xa0 [ 564.990469][T11395] kernel_connect+0x116/0x180 [ 564.990492][T11395] ? __pfx_kernel_connect+0x10/0x10 [ 564.990511][T11395] ? do_raw_spin_lock+0x121/0x290 [ 564.990544][T11395] ? __local_bh_enable_ip+0xd0/0x130 [ 564.990563][T11395] smc_connect+0x7a5/0xd90 [ 564.990592][T11395] __sys_connect+0x316/0x440 [ 564.990608][T11395] ? __fget_files+0x3a0/0x420 [ 564.990629][T11395] ? __pfx___sys_connect+0x10/0x10 [ 564.990654][T11395] ? __pfx_ksys_write+0x10/0x10 [ 564.990675][T11395] __x64_sys_connect+0x7a/0x90 [ 564.990691][T11395] do_syscall_64+0xec/0xf80 [ 564.990707][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.990721][T11395] ? trace_irq_disable+0x37/0x100 [ 564.990742][T11395] ? clear_bhb_loop+0x60/0xb0 [ 564.990761][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.990775][T11395] RIP: 0033:0x7f09e6b8f749 [ 564.990789][T11395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.990803][T11395] RSP: 002b:00007f09e7967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 564.990820][T11395] RAX: ffffffffffffffda RBX: 00007f09e6de5fa0 RCX: 00007f09e6b8f749 [ 564.990831][T11395] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 564.990841][T11395] RBP: 00007f09e7967090 R08: 0000000000000000 R09: 0000000000000000 [ 564.990851][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.990865][T11395] R13: 00007f09e6de6038 R14: 00007f09e6de5fa0 R15: 00007f09e6f0fa28 [ 564.990890][T11395] [ 565.739640][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 566.725079][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.737509][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.779639][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 566.808628][T11418] fuse: Unknown parameter 'rootmod' [ 567.246834][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'. [ 567.560298][T11420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1440'. [ 567.591693][T11420] geneve0: entered promiscuous mode [ 567.827527][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 567.830026][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.969375][T11427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1441'. [ 568.289196][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.298008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.859954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.644547][T11435] netlink: 'syz.0.1442': attribute type 13 has an invalid length. [ 569.899661][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.290176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.799615][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 570.839809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.939643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.962221][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.971242][ T24] usb 3-1: config 0 has no interface number 0 [ 571.002618][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 571.048919][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.092780][ T24] usb 3-1: Product: syz [ 571.103947][ T24] usb 3-1: Manufacturer: syz [ 571.115866][ T24] usb 3-1: SerialNumber: syz [ 571.185057][ T24] usb 3-1: config 0 descriptor?? [ 571.402534][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 571.979757][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 573.020054][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 573.919539][T11483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1454'. [ 574.059698][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 574.090124][ T5833] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 574.585923][ T5833] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.600287][ T5833] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.669243][ T5833] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.687485][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.745053][ T5833] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.768362][ T5833] usb 2-1: invalid MIDI out EP 0 [ 574.969935][T11485] fuse: Unknown parameter 'rootmod' [ 575.017791][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.055873][ T5833] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 575.099689][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.217272][ T44] usb 2-1: USB disconnect, device number 62 [ 576.139656][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.179681][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.411680][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.447922][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.919845][ T5905] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 578.079844][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 578.090206][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.109821][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.132162][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.142015][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.150475][ T5905] usb 2-1: Product: syz [ 578.155965][ T5905] usb 2-1: Manufacturer: syz [ 578.160712][ T5905] usb 2-1: SerialNumber: syz [ 578.219680][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 578.491607][ T24] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 578.499885][ T6073] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 578.508833][ T7033] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 578.526599][ T5905] usb 2-1: 0:2 : does not exist [ 578.547352][ T6073] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 578.557118][ T24] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 578.582223][ T6073] usb 4-1: USB disconnect, device number 54 [ 578.592332][ T24] usb 3-1: USB disconnect, device number 48 [ 578.595985][ T5905] usb 2-1: USB disconnect, device number 63 [ 578.605677][ T7033] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 578.675901][ T9233] udevd[9233]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.856696][ T7033] usb 1-1: USB disconnect, device number 59 [ 579.019933][ T6073] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 579.099882][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 579.171882][ T6073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.185316][ T6073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.209394][ T6073] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 579.229997][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.250775][ T6073] usb 4-1: SerialNumber: syz [ 579.259711][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 579.266649][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 579.270061][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 579.291600][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 579.319103][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.346003][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 579.381253][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 579.395362][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.419009][ T24] usb 3-1: Product: syz [ 579.453395][ T24] usb 3-1: Manufacturer: syz [ 579.467697][ T24] usb 3-1: SerialNumber: syz [ 579.515140][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 579.566312][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input32 [ 579.574953][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 579.596717][T11524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.657602][T11524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.739607][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 579.748200][ T24] (id 0x00) [ 579.875212][ T6073] usb 4-1: 0:2 : does not exist [ 579.955782][ T6073] usb 4-1: USB disconnect, device number 55 [ 579.969560][ T24] rc_core: IR keymap rc-imon-pad not found [ 579.988486][ T24] Registered IR keymap rc-empty [ 580.001091][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 580.022679][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 580.065349][T11324] udevd[11324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.103722][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 580.132691][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input33 [ 580.188077][ T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:49> initialized [ 580.285531][ T6073] usb 3-1: USB disconnect, device number 49 [ 580.299650][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 580.889799][ T5833] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 581.054264][ T5833] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 581.072432][ T5833] usb 4-1: config 0 has no interface number 0 [ 581.092401][ T5833] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 581.102879][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.111683][ T5833] usb 4-1: Product: syz [ 581.118236][ T5833] usb 4-1: Manufacturer: syz [ 581.127049][ T5833] usb 4-1: SerialNumber: syz [ 581.158054][ T5833] usb 4-1: config 0 descriptor?? [ 581.310045][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 581.349662][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 581.373097][ T5833] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 581.399969][ T5833] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.411019][ T5833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 581.419177][ T5833] usb 4-1: media controller created [ 581.442713][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.546853][ T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 581.561000][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.569071][ T24] usb 3-1: Product: syz [ 581.599061][ T24] usb 3-1: Manufacturer: syz [ 581.606333][ T24] usb 3-1: SerialNumber: syz [ 581.624579][ T24] usb 3-1: config 0 descriptor?? [ 581.634372][ T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 050 [ 581.642168][ T5833] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 581.743263][ T5833] usb 4-1: USB disconnect, device number 56 [ 581.779651][ T44] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 581.841832][ T24] (null): failure setting delay to 10us [ 581.855322][ T24] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 581.883801][ T24] usb 3-1: USB disconnect, device number 50 [ 582.002915][ T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.043953][ T44] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.084207][ T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.122968][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.194241][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.236236][ T44] usb 1-1: invalid MIDI out EP 0 [ 582.360996][T11550] fuse: Unknown parameter 'rootmod' [ 582.379687][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 582.420426][ T44] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 582.554415][T11324] udevd[11324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.604658][ T5833] usb 1-1: USB disconnect, device number 60 [ 582.622430][T11560] binder: 11559:11560 unknown command 2021053001 [ 582.628942][T11560] binder: 11559:11560 ioctl c0306201 200000000080 returned -22 [ 583.068147][T11573] vivid-007: disconnect [ 583.429643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 583.652933][T11580] fuse: Bad value for 'fd' [ 583.822701][T11573] vivid-007: reconnect [ 584.021296][ T5833] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 584.189588][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 584.249966][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 584.260784][ T5833] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 584.270206][ T5833] usb 3-1: config 0 has no interface number 0 [ 584.276340][ T5833] usb 3-1: config 0 interface 155 has no altsetting 0 [ 584.302452][ T5833] usb 3-1: New USB device found, idVendor=0d5c, idProduct=a002, bcdDevice=b1.cd [ 584.340339][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.369603][ T5833] usb 3-1: Product: syz [ 584.453937][ T5833] usb 3-1: Manufacturer: syz [ 584.459663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 584.487526][ T5833] usb 3-1: SerialNumber: syz [ 584.512858][ T5833] usb 3-1: config 0 descriptor?? [ 584.517023][T11583] FAULT_INJECTION: forcing a failure. [ 584.517023][T11583] name failslab, interval 1, probability 0, space 0, times 0 [ 584.530916][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.1.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.530950][T11583] Tainted: [L]=SOFTLOCKUP [ 584.530959][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.530973][T11583] Call Trace: [ 584.530983][T11583] [ 584.530993][T11583] dump_stack_lvl+0xe8/0x150 [ 584.531027][T11583] should_fail_ex+0x414/0x560 [ 584.531068][T11583] should_failslab+0xa8/0x100 [ 584.531097][T11583] __kmalloc_noprof+0xdf/0x800 [ 584.531120][T11583] ? kfree+0x4d/0x660 [ 584.531148][T11583] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.531186][T11583] tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.531218][T11583] ? tomoyo_domain+0xd8/0x130 [ 584.531256][T11583] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 584.531281][T11583] tomoyo_path_number_perm+0x1e8/0x5a0 [ 584.531316][T11583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 584.531340][T11583] ? __lock_acquire+0x6b6/0x2cf0 [ 584.531379][T11583] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 584.531428][T11583] ? __fget_files+0x2a/0x420 [ 584.531460][T11583] ? __fget_files+0x2a/0x420 [ 584.531486][T11583] ? __fget_files+0x3a0/0x420 [ 584.531512][T11583] ? __fget_files+0x2a/0x420 [ 584.531545][T11583] security_file_ioctl+0xcb/0x2d0 [ 584.531570][T11583] __se_sys_ioctl+0x47/0x170 [ 584.531608][T11583] do_syscall_64+0xec/0xf80 [ 584.531631][T11583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.531652][T11583] ? trace_irq_disable+0x37/0x100 [ 584.531683][T11583] ? clear_bhb_loop+0x60/0xb0 [ 584.531710][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.531732][T11583] RIP: 0033:0x7f09e6b8f749 [ 584.531753][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.531773][T11583] RSP: 002b:00007f09e7946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.531796][T11583] RAX: ffffffffffffffda RBX: 00007f09e6de6090 RCX: 00007f09e6b8f749 [ 584.531814][T11583] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 584.531829][T11583] RBP: 00007f09e7946090 R08: 0000000000000000 R09: 0000000000000000 [ 584.531843][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.531857][T11583] R13: 00007f09e6de6128 R14: 00007f09e6de6090 R15: 00007f09e6f0fa28 [ 584.531893][T11583] [ 584.531902][T11583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.850195][ T5833] usb 3-1: USB disconnect, device number 51 [ 585.499650][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 586.132167][ T7033] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 586.274149][T11605] usb usb8: usbfs: process 11605 (syz.2.1489) did not claim interface 0 before use [ 586.308020][T11605] xt_connbytes: Forcing CT accounting to be enabled [ 586.320960][T11605] Cannot find del_set index 1 as target [ 586.355547][ T7033] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 586.367339][ T7033] usb 2-1: config 0 has no interface number 0 [ 586.539636][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 586.639754][ T7033] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 586.679561][ T7033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.719533][ T7033] usb 2-1: Product: syz [ 586.729601][ T7033] usb 2-1: Manufacturer: syz [ 586.739910][ T7033] usb 2-1: SerialNumber: syz [ 586.761471][ T7033] usb 2-1: config 0 descriptor?? [ 586.905955][T11607] binder: 11606:11607 unknown command 2021053001 [ 586.921831][T11607] binder: 11606:11607 ioctl c0306201 200000000080 returned -22 [ 586.972871][ T7033] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 587.004534][ T7033] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 587.031552][ T7033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 587.055442][ T7033] usb 2-1: media controller created [ 587.103285][ T7033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.174352][ T7033] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 587.414393][ T7033] usb 2-1: USB disconnect, device number 64 [ 587.579705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.660841][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'. [ 588.179566][ T7033] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 588.369547][ T7033] usb 1-1: Using ep0 maxpacket: 8 [ 588.382140][ T7033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.403948][ T7033] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 588.429775][ T7033] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 588.502082][ T7033] usb 1-1: config 8 interface 0 has no altsetting 0 [ 588.549014][ T7033] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 588.589958][ T7033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.629638][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 588.680669][ T7033] usb 1-1: Product: syz [ 588.697290][ T7033] usb 1-1: Manufacturer: syz [ 588.724747][ T7033] usb 1-1: SerialNumber: syz [ 589.053078][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 589.479098][T11633] FAULT_INJECTION: forcing a failure. [ 589.479098][T11633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.551197][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.5.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.551235][T11633] Tainted: [L]=SOFTLOCKUP [ 589.551243][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.551256][T11633] Call Trace: [ 589.551265][T11633] [ 589.551281][T11633] dump_stack_lvl+0xe8/0x150 [ 589.551306][T11633] should_fail_ex+0x414/0x560 [ 589.551356][T11633] _copy_from_user+0x2d/0xb0 [ 589.551387][T11633] io_submit_one+0xc2/0x1430 [ 589.551412][T11633] ? irqentry_exit+0x5dd/0x660 [ 589.551435][T11633] ? lockdep_hardirqs_on+0x7b/0x110 [ 589.551459][T11633] ? irqentry_exit+0x5dd/0x660 [ 589.551478][T11633] ? __pfx_io_submit_one+0x10/0x10 [ 589.551493][T11633] ? __might_fault+0xb0/0x130 [ 589.551552][T11633] ? __might_fault+0xb0/0x130 [ 589.551588][T11633] __se_sys_io_submit+0x185/0x320 [ 589.551623][T11633] ? __pfx___se_sys_io_submit+0x10/0x10 [ 589.551644][T11633] ? ksys_write+0x22a/0x250 [ 589.551728][T11633] do_syscall_64+0xec/0xf80 [ 589.551751][T11633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.551775][T11633] ? trace_irq_disable+0x37/0x100 [ 589.551802][T11633] ? clear_bhb_loop+0x60/0xb0 [ 589.551847][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.551871][T11633] RIP: 0033:0x7f64a878f749 [ 589.551891][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.551910][T11633] RSP: 002b:00007f64a96d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 589.551937][T11633] RAX: ffffffffffffffda RBX: 00007f64a89e5fa0 RCX: 00007f64a878f749 [ 589.551950][T11633] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 00007f64a9609000 [ 589.551961][T11633] RBP: 00007f64a96d9090 R08: 0000000000000000 R09: 0000000000000000 [ 589.551971][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.551981][T11633] R13: 00007f64a89e6038 R14: 00007f64a89e5fa0 R15: 00007f64a8b0fa28 [ 589.552030][T11633] [ 589.756911][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 589.949523][ T7015] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 590.231842][ T7015] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.277626][ T7015] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.319507][ T7015] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 590.361235][ T7015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.547537][ T7015] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.585238][ T7015] usb 4-1: invalid MIDI out EP 0 [ 590.692352][T11634] fuse: Unknown parameter 'rootmod' [ 590.746465][ T7015] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 590.789836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 590.920130][ T7015] usb 4-1: USB disconnect, device number 57 [ 590.932917][ T9233] udevd[9233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.575306][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.604401][ T7033] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.634798][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.690928][ T7033] usb 1-1: selecting invalid altsetting 0 [ 591.829643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 591.907196][ T7033] usb 1-1: USB disconnect, device number 61 [ 591.968228][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.152889][T11654] binder: 11653:11654 unknown command 2021053001 [ 592.167265][T11654] binder: 11653:11654 ioctl c0306201 200000000080 returned -22 [ 592.860145][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 593.324941][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1505'. [ 593.402494][T11665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.411580][T11665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.899757][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.719602][ T5833] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 594.939814][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.947424][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 594.963946][ T5833] usb 2-1: config 0 has no interfaces? [ 594.990027][ T5833] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 595.016700][ T5833] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 595.047947][ T5833] usb 2-1: Manufacturer: syz [ 595.083850][ T5833] usb 2-1: config 0 descriptor?? [ 595.527038][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'. [ 595.829720][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1509'. [ 595.989607][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.137826][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1512'. [ 596.539695][ T7033] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 596.719607][ T7033] usb 4-1: Using ep0 maxpacket: 8 [ 596.763164][ T7033] usb 4-1: unable to get BOS descriptor or descriptor too short [ 596.820240][ T7033] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 596.847037][ T7033] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 596.920836][ T7033] usb 4-1: config 8 interface 0 has no altsetting 0 [ 596.976468][ T7033] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 597.020337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 597.090859][ T7033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.106222][ T7033] usb 4-1: Product: syz [ 597.113657][ T7033] usb 4-1: Manufacturer: syz [ 597.169305][ T7033] usb 4-1: SerialNumber: syz [ 597.240446][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.259233][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.269817][T11714] fuse: Unknown parameter 'rootmod' [ 597.320407][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 598.059617][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.099830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.341723][ T7033] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 599.370929][ T7033] usb 4-1: selecting invalid altsetting 0 [ 599.398778][ T6073] usb 2-1: USB disconnect, device number 65 [ 599.582425][ T7033] usb 4-1: USB disconnect, device number 58 [ 599.756230][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 599.778006][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.149630][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.105790][T11746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'. [ 601.119562][T11746] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1526'. [ 601.131996][T11746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'. [ 601.141188][T11746] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1526'. [ 601.151117][T11746] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 601.179799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 602.229663][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 602.810518][ T44] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 602.982033][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 602.991338][ T44] usb 3-1: config 0 has no interface number 0 [ 603.010421][ T44] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 603.030214][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.038326][ T44] usb 3-1: Product: syz [ 603.043089][ T44] usb 3-1: Manufacturer: syz [ 603.047698][ T44] usb 3-1: SerialNumber: syz [ 603.205518][ T44] usb 3-1: config 0 descriptor?? [ 603.259808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.446264][ T44] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 603.464767][ T44] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 603.485783][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 603.487368][ T7015] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 603.527966][ T44] usb 3-1: media controller created [ 603.560066][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.678218][ T44] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 603.919668][ T7015] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.931153][ T7015] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.944225][ T7015] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.953303][ T7015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.028526][ T7015] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.047560][ T7015] usb 4-1: invalid MIDI out EP 0 [ 604.116626][ T44] usb 3-1: USB disconnect, device number 52 [ 604.299598][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 604.326506][T11325] udevd[11325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.346906][T11768] fuse: Unknown parameter 'rootmod' [ 604.446965][ T7015] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 604.536501][T11772] vivid-007: disconnect [ 605.339959][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 605.474205][T11769] vivid-007: reconnect [ 606.379633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.661258][ T7015] usb 4-1: USB disconnect, device number 59 [ 606.999756][ T5905] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 607.189911][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 607.197541][ T5905] usb 3-1: config 5 has an invalid interface number: 122 but max is 3 [ 607.419974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.509366][ T5905] usb 3-1: config 5 has an invalid interface number: 224 but max is 3 [ 607.650210][ T5905] usb 3-1: config 5 has an invalid interface number: 169 but max is 3 [ 607.658430][ T5905] usb 3-1: config 5 has no interface number 0 [ 607.664815][ T5905] usb 3-1: config 5 has no interface number 1 [ 607.671638][ T5905] usb 3-1: config 5 has no interface number 2 [ 607.677770][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has a duplicate endpoint with address 0x6, skipping [ 607.689200][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 607.774413][ T5905] usb 3-1: config 5 interface 122 altsetting 114 endpoint 0x3 has invalid maxpacket 1007, setting to 64 [ 607.803603][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has a duplicate endpoint with address 0xA, skipping [ 607.815465][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 607.836696][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 607.918606][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has a duplicate endpoint with address 0x1, skipping [ 607.943472][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 608.028149][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 608.048010][ T5905] usb 3-1: config 5 interface 122 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 608.300976][ T5905] usb 3-1: config 5 interface 224 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 608.354287][ T5905] usb 3-1: config 5 interface 224 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 608.391176][ T5905] usb 3-1: config 5 interface 169 altsetting 211 has a duplicate endpoint with address 0xE, skipping [ 608.459627][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 608.479704][ T5905] usb 3-1: config 5 interface 169 altsetting 211 has a duplicate endpoint with address 0x2, skipping [ 608.539600][ T5905] usb 3-1: config 5 interface 169 altsetting 211 has an endpoint descriptor with address 0x6B, changing to 0xB [ 608.579883][ T5905] usb 3-1: config 5 interface 169 altsetting 211 endpoint 0xB has invalid maxpacket 34391, setting to 1024 [ 608.609786][ T5905] usb 3-1: config 5 interface 169 altsetting 211 bulk endpoint 0xB has invalid maxpacket 1024 [ 608.629641][ T5905] usb 3-1: config 5 interface 169 altsetting 211 has an invalid descriptor for endpoint zero, skipping [ 608.780239][ T5905] usb 3-1: config 5 interface 169 altsetting 211 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 608.809908][ T7033] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 608.848246][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 608.894338][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 608.928801][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 608.959562][ T7033] usb 4-1: device descriptor read/64, error -71 [ 608.965984][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 609.017453][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 609.084303][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 609.144871][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 609.173013][ T5905] usb 3-1: config 5 interface 3 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 609.209663][ T5905] usb 3-1: config 5 interface 122 has no altsetting 0 [ 609.217523][ T5905] usb 3-1: config 5 interface 224 has no altsetting 0 [ 609.237960][ T7033] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 609.256294][ T5905] usb 3-1: config 5 interface 169 has no altsetting 0 [ 609.277979][ T5905] usb 3-1: config 5 interface 3 has no altsetting 0 [ 609.311131][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=58.0c [ 609.340865][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.352704][ T5905] usb 3-1: Product: ⠍ [ 609.356940][ T5905] usb 3-1: Manufacturer: ь [ 609.368444][ T5905] usb 3-1: SerialNumber: 㐊 [ 609.388881][T11785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.397002][T11785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.409602][ T7033] usb 4-1: device descriptor read/64, error -71 [ 609.499886][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 609.856397][ T5833] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 609.915177][ T7033] usb usb4-port1: attempt power cycle [ 610.091414][ T5833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.101344][ T5833] usb 1-1: config 0 has no interface number 0 [ 610.401641][ T5833] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 610.419501][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.448578][ T5833] usb 1-1: Product: syz [ 610.473568][ T5833] usb 1-1: Manufacturer: syz [ 610.478247][ T5833] usb 1-1: SerialNumber: syz [ 610.500630][ T5905] usb 3-1: USB disconnect, device number 53 [ 610.539603][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 610.612982][ T5833] usb 1-1: config 0 descriptor?? [ 610.840919][ T5833] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 610.868232][ T5833] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 610.891935][ T5833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 610.921812][ T5833] usb 1-1: media controller created [ 610.980310][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.051913][ T5833] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 611.109792][ T5905] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 611.137397][ T5833] usb 1-1: USB disconnect, device number 62 [ 611.289757][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.303370][T11832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.316004][ T5905] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.329693][T11832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.338293][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.348126][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.412984][T11832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.431806][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.441213][T11832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.452250][ T5905] usb 3-1: invalid MIDI out EP 0 [ 611.527755][ T5905] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 611.579756][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 611.605506][T11828] fuse: Unknown parameter 'rootmod' [ 611.620733][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.629707][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.929582][ T5833] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 613.069552][ T5833] usb 2-1: device descriptor read/64, error -71 [ 613.350026][ T5833] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 613.499645][ T5833] usb 2-1: device descriptor read/64, error -71 [ 613.619950][ T5833] usb usb2-port1: attempt power cycle [ 613.659978][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 613.916301][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 613.916322][ T30] audit: type=1326 audit(1766477692.505:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f787ef8f749 code=0x0 [ 613.961658][ T5833] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 613.990140][ T5833] usb 2-1: device descriptor read/8, error -71 [ 614.163768][T11038] usb 3-1: USB disconnect, device number 54 [ 614.239918][ T5833] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 614.281722][ T5833] usb 2-1: device descriptor read/8, error -71 [ 614.311730][T11873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.331664][T11873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.550311][ T5833] usb usb2-port1: unable to enumerate USB device [ 614.699577][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.739752][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.792192][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 616.133278][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.146172][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.398811][T11904] netlink: 'syz.3.1572': attribute type 21 has an invalid length. [ 616.417071][T11904] netlink: 'syz.3.1572': attribute type 6 has an invalid length. [ 616.439224][T11904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1572'. [ 616.779596][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.901509][T11914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.910935][T11914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.921210][T11914] fuse: Unknown parameter 'rootmod' [ 617.689576][ T7033] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 617.819778][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 617.840845][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 617.938844][ T7033] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 618.146773][ T7033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.419719][ T44] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 618.463528][ T7033] usb 1-1: config 0 descriptor?? [ 618.597086][ T7033] usb 1-1: bad CDC descriptors [ 618.670142][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 618.683583][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 618.693417][ T44] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 618.705374][ T44] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 618.741340][ T44] usb 3-1: config 8 interface 0 has no altsetting 0 [ 618.771426][ T44] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 618.780767][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.788779][ T44] usb 3-1: Product: syz [ 618.794495][ T44] usb 3-1: Manufacturer: syz [ 618.799268][ T44] usb 3-1: SerialNumber: syz [ 618.859593][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 619.270051][ T7019] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 619.440003][ T7019] usb 4-1: Using ep0 maxpacket: 16 [ 619.450033][ T7019] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.461694][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 619.469992][ T7019] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 619.491349][ T7019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.532759][ T7019] usb 4-1: config 0 descriptor?? [ 619.899787][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.036485][ T7019] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 620.421604][T11038] usb 4-1: USB disconnect, device number 63 [ 620.491847][T11928] fido_id[11928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 620.939632][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 621.213596][T11038] usb 1-1: USB disconnect, device number 63 [ 621.518140][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.553825][ T44] usb 3-1: selecting invalid altsetting 0 [ 621.703520][ T44] usb 3-1: USB disconnect, device number 55 [ 621.849040][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.979933][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.681533][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.691099][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.701447][T11964] fuse: Unknown parameter 'rootmod' [ 622.776032][T11963] vivid-002: disconnect [ 622.893160][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 622.956733][T11970] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1592'. [ 623.019585][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 623.459569][T11038] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 623.629574][T11038] usb 4-1: Using ep0 maxpacket: 16 [ 623.662752][T11038] usb 4-1: config 252 has an invalid interface number: 231 but max is 0 [ 623.853394][T11038] usb 4-1: config 252 has no interface number 0 [ 623.860213][T11038] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=83.eb [ 623.869604][T11038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.059824][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.803195][T11977] FAULT_INJECTION: forcing a failure. [ 624.803195][T11977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.837739][T11977] CPU: 1 UID: 0 PID: 11977 Comm: syz.0.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.837780][T11977] Tainted: [L]=SOFTLOCKUP [ 624.837788][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.837800][T11977] Call Trace: [ 624.837810][T11977] [ 624.837819][T11977] dump_stack_lvl+0xe8/0x150 [ 624.837852][T11977] should_fail_ex+0x414/0x560 [ 624.837891][T11977] _copy_from_user+0x2d/0xb0 [ 624.837918][T11977] scsi_ioctl+0x489/0x1fb0 [ 624.837950][T11977] ? __pfx_scsi_ioctl+0x10/0x10 [ 624.837998][T11977] ? irqentry_exit+0x5dd/0x660 [ 624.838021][T11977] ? lockdep_hardirqs_on+0x7b/0x110 [ 624.838042][T11977] ? irqentry_exit+0x5dd/0x660 [ 624.838084][T11977] ? scsi_block_when_processing_errors+0x390/0x470 [ 624.838123][T11977] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 624.838175][T11977] sg_ioctl+0x1886/0x2230 [ 624.838208][T11977] ? __pfx_sg_ioctl+0x10/0x10 [ 624.838232][T11977] ? __fget_files+0x2a/0x420 [ 624.838263][T11977] ? __fget_files+0x2a/0x420 [ 624.838289][T11977] ? __fget_files+0x3a0/0x420 [ 624.838315][T11977] ? __fget_files+0x2a/0x420 [ 624.838347][T11977] ? bpf_lsm_file_ioctl+0x9/0x20 [ 624.838371][T11977] ? __pfx_sg_ioctl+0x10/0x10 [ 624.838391][T11977] __se_sys_ioctl+0xfc/0x170 [ 624.838427][T11977] do_syscall_64+0xec/0xf80 [ 624.838450][T11977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.838472][T11977] ? trace_irq_disable+0x37/0x100 [ 624.838501][T11977] ? clear_bhb_loop+0x60/0xb0 [ 624.838527][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.838549][T11977] RIP: 0033:0x7fd2cb18f749 [ 624.838567][T11977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.838588][T11977] RSP: 002b:00007fd2cc012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.838610][T11977] RAX: ffffffffffffffda RBX: 00007fd2cb3e5fa0 RCX: 00007fd2cb18f749 [ 624.838628][T11977] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 624.838642][T11977] RBP: 00007fd2cc012090 R08: 0000000000000000 R09: 0000000000000000 [ 624.838655][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.838669][T11977] R13: 00007fd2cb3e6038 R14: 00007fd2cb3e5fa0 R15: 00007fd2cb50fa28 [ 624.838702][T11977] [ 625.099610][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 625.606047][T11038] usb 4-1: string descriptor 0 read error: -71 [ 625.613438][T11962] vivid-002: reconnect [ 625.642193][T11038] usb 4-1: USB disconnect, device number 64 [ 626.098861][T11974] syz.2.1593 (11974): drop_caches: 2 [ 626.139795][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 627.179964][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 628.169233][ T7033] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 628.219783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 628.355242][ T7033] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.365475][ T7033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.394558][ T7033] usb 1-1: config 0 descriptor?? [ 628.441504][ T7033] cp210x 1-1:0.0: cp210x converter detected [ 628.838900][ T7033] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 628.921158][ T7033] usb 1-1: cp210x converter now attached to ttyUSB0 [ 629.087932][ T7033] usb 1-1: USB disconnect, device number 64 [ 629.128809][ T7033] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 629.259579][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.363116][ T7033] cp210x 1-1:0.0: device disconnected [ 629.680692][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.688033][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.269573][ T7019] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 630.299732][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.399948][ T7036] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 630.441735][ T7019] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.455455][ T7019] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 630.465344][ T7019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.483672][ T7019] usb 2-1: Product: syz [ 630.504168][ T7019] usb 2-1: Manufacturer: syz [ 630.519809][ T7019] usb 2-1: SerialNumber: syz [ 630.536248][ T7019] usb 2-1: config 0 descriptor?? [ 630.592205][ T7019] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 630.601764][ T7036] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.628621][ T7036] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.651868][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 630.683309][ T7036] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.748528][ T7036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.761585][ T7019] usb 2-1: USB disconnect, device number 70 [ 630.817183][ T7036] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.842976][ T7036] usb 4-1: invalid MIDI out EP 0 [ 631.068742][T12025] fuse: Unknown parameter 'rootmod' [ 631.152081][ T7036] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 631.349630][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 631.640349][T12046] fuse: Bad value for 'fd' [ 631.650559][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 632.379833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 633.419838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 633.485979][T12061] binder: 12060:12061 unknown command 2021053001 [ 633.532785][T12061] binder: 12060:12061 ioctl c0306201 200000000080 returned -22 [ 633.683029][ T5833] usb 4-1: USB disconnect, device number 65 [ 633.799945][ T7019] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 633.955515][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1618'. [ 634.001620][ T7019] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.031639][T12072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.043614][T12072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.044151][ T7019] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 634.069813][ T7019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.077978][ T7019] usb 3-1: Product: syz [ 634.315354][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1620'. [ 634.324499][ T5833] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 634.336568][ T7019] usb 3-1: Manufacturer: syz [ 634.352833][ T7019] usb 3-1: SerialNumber: syz [ 634.378319][ T7019] usb 3-1: config 0 descriptor?? [ 634.407415][ T7019] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 634.429850][ T7019] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 634.469776][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.499521][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 634.521483][ T5833] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 634.531212][ T5833] usb 4-1: can't read configurations, error -22 [ 634.624534][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.665274][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.679599][ T5833] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 634.899928][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 634.910131][ T5833] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 634.945272][ T5833] usb 4-1: can't read configurations, error -22 [ 634.955725][ T5833] usb usb4-port1: attempt power cycle [ 635.309892][ T5833] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 635.443095][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 635.457403][ T7036] usb 3-1: USB disconnect, device number 56 [ 635.499624][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 635.540026][ T5833] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 635.548112][ T5833] usb 4-1: can't read configurations, error -22 [ 635.704331][ T5833] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 635.772612][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 635.799952][ T5833] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 635.828631][ T5833] usb 4-1: can't read configurations, error -22 [ 635.852640][ T5833] usb usb4-port1: unable to enumerate USB device [ 636.101940][T12096] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 636.146642][T12096] netlink: 'syz.2.1624': attribute type 6 has an invalid length. [ 636.198588][T12096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1624'. [ 636.539979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.200550][ T30] audit: type=1326 audit(1766477715.795:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.1625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f787ef8f749 code=0x0 [ 637.326398][T12103] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 637.579602][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.699550][ T5833] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 637.759185][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 637.869566][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 637.914586][ T5833] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 637.924049][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.961100][ T5833] usb 4-1: Product: syz [ 637.973373][ T5833] usb 4-1: Manufacturer: syz [ 637.995143][ T5833] usb 4-1: SerialNumber: syz [ 638.026704][ T5833] usb 4-1: config 0 descriptor?? [ 638.037038][ T5833] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 638.528168][T12119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.536653][T12119] batadv_slave_0: entered promiscuous mode [ 638.620169][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.329789][T11038] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 639.493520][T11038] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 639.509989][T11038] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.549062][T11038] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.559853][ T5833] gspca_ov534_9: reg_w failed -110 [ 639.578204][T11038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.638048][T11038] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.646537][T11038] usb 1-1: invalid MIDI out EP 0 [ 639.659591][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.867141][ T5833] gspca_ov534_9: Unknown sensor 0000 [ 639.867233][ T5833] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 639.990361][T11038] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 640.041628][T12127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1631'. [ 640.117407][T12123] fuse: Unknown parameter 'rootmod' [ 640.431309][ T5833] usb 4-1: USB disconnect, device number 70 [ 640.699753][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 641.382381][T12142] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1635'. [ 641.411894][T12142] netlink: 'syz.5.1635': attribute type 7 has an invalid length. [ 641.435711][T12142] netlink: 'syz.5.1635': attribute type 8 has an invalid length. [ 641.496970][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'. [ 641.749591][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 641.774741][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.800852][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.998237][ T5833] usb 1-1: USB disconnect, device number 65 [ 642.779863][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.640443][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 643.803984][T12173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1642'. [ 643.819597][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 644.489540][ T7036] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 644.859811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 644.924058][ T7036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.958970][ T7036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.991940][ T7036] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.004983][ T7036] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 645.014192][ T7036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.098194][ T7036] usb 2-1: config 0 descriptor?? [ 645.554487][ T7036] dragonrise 0003:0079:0011.0013: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 645.909586][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.486069][T12190] syz_tun: entered allmulticast mode [ 646.543001][T12190] pimreg: entered allmulticast mode [ 646.588494][T12189] syz_tun: left allmulticast mode [ 646.754117][T12196] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1647'. [ 646.939731][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.976329][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 647.038588][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 647.084212][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 647.156440][T12199] pimreg: left allmulticast mode [ 647.469523][ T5833] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 647.829648][ T5833] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.849846][ T5833] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.927345][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 647.969852][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.979621][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.012752][ T5833] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.041100][ T5833] usb 3-1: invalid MIDI out EP 0 [ 648.100809][ T7036] usb 2-1: USB disconnect, device number 71 [ 648.206677][T12204] fuse: Unknown parameter 'rootmod' [ 648.258227][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1652'. [ 648.330017][ T9132] udevd[9132]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.349534][ T6073] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 648.367477][ T5833] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 648.416276][ T30] audit: type=1326 audit(1766477726.995:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.5.1652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a878f749 code=0x0 [ 648.545261][ T6073] usb 1-1: config 0 interface 0 has no altsetting 0 [ 648.553755][ T6073] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 648.574864][ T6073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.601197][ T6073] usb 1-1: config 0 descriptor?? [ 648.841726][ T6073] usbhid 1-1:0.0: can't add hid device: -32 [ 648.848384][ T6073] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 649.019782][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 649.162758][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.172194][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.059595][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.170517][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'. [ 650.398066][ T5833] usb 3-1: USB disconnect, device number 57 [ 650.581114][T12237] syz_tun: entered allmulticast mode [ 650.703858][T12236] syz_tun: left allmulticast mode [ 650.905820][T12242] binder: 12241:12242 ioctl c0306201 2000000003c0 returned -14 [ 651.099774][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 651.190302][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 651.275114][T11038] usb 1-1: USB disconnect, device number 66 [ 651.791126][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 651.980877][ T30] audit: type=1326 audit(1766477730.555:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.0.1665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2cb18f749 code=0x0 [ 652.139573][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.221508][T12263] binder: 12262:12263 unknown command 2021053001 [ 652.244148][T12263] binder: 12262:12263 ioctl c0306201 200000000080 returned -22 [ 652.470507][T12261] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1666'. [ 652.521868][T12270] syz_tun: entered allmulticast mode [ 652.543767][T12270] pimreg: entered allmulticast mode [ 652.816721][T12269] syz_tun: left allmulticast mode [ 652.924076][ T7036] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 653.039685][T11038] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 653.104910][ T7036] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 653.120640][ T7036] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.143885][ T7036] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 653.153775][ T7036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.179727][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 653.185833][ T7036] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.195835][ T7036] usb 4-1: invalid MIDI out EP 0 [ 653.203020][T11038] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.213372][T11038] usb 3-1: config 0 has no interface number 0 [ 653.230576][T11038] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 653.266562][T11038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.315852][T11038] usb 3-1: Product: syz [ 653.329632][T11038] usb 3-1: Manufacturer: syz [ 653.347750][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.353632][T11038] usb 3-1: SerialNumber: syz [ 653.374330][ T7036] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 653.390117][T12273] fuse: Unknown parameter 'rootmod' [ 653.460297][T11038] usb 3-1: config 0 descriptor?? [ 653.685089][T11038] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 653.702097][T11038] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 653.795529][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1679'. [ 653.872549][T11038] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 653.886456][T11038] usb 3-1: media controller created [ 653.976331][T11038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.132865][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.152539][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.229561][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.261185][T11038] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 654.317547][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 654.387544][T11038] usb 3-1: USB disconnect, device number 58 [ 654.937315][T12306] binder: 12305:12306 unknown command 2021053001 [ 654.949994][T12306] binder: 12305:12306 ioctl c0306201 200000000080 returned -22 [ 655.260715][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 655.327045][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 655.919904][ T7019] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 655.965543][T11038] usb 4-1: USB disconnect, device number 71 [ 656.089535][ T7019] usb 3-1: Using ep0 maxpacket: 8 [ 656.104009][ T7019] usb 3-1: unable to get BOS descriptor or descriptor too short [ 656.137362][ T7019] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 656.167050][ T7019] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 656.186687][ T7019] usb 3-1: config 8 interface 0 has no altsetting 0 [ 656.241164][ T7019] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 656.271948][ T7019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.299602][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.328948][ T7019] usb 3-1: Product: syz [ 656.344499][ T7019] usb 3-1: Manufacturer: syz [ 656.376738][ T7019] usb 3-1: SerialNumber: syz [ 656.444901][T12317] lo: entered allmulticast mode [ 656.623984][T12316] lo: left allmulticast mode [ 657.349868][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 657.531360][T12329] netlink: 'syz.5.1685': attribute type 12 has an invalid length. [ 657.594422][T12322] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1686'. [ 657.820047][ T31] INFO: task kworker/1:2:977 blocked for more than 143 seconds. [ 657.854719][ T31] Tainted: G L syzkaller #0 [ 657.884940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.903724][ T31] task:kworker/1:2 state:D stack:20040 pid:977 tgid:977 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 657.931701][ T31] Workqueue: usb_hub_wq hub_event [ 657.951489][ T31] Call Trace: [ 657.957958][ T31] [ 657.966907][ T31] __schedule+0x149b/0x4fd0 [ 657.977852][ T31] ? __pfx___schedule+0x10/0x10 [ 657.990155][ T31] ? schedule+0x91/0x360 [ 657.998793][ T31] schedule+0x165/0x360 [ 658.008910][ T31] schedule_timeout+0x9a/0x270 [ 658.031849][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 658.043213][ T31] ? do_raw_spin_lock+0x121/0x290 [ 658.056257][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.069391][ T31] ? wait_for_completion+0x267/0x5d0 [ 658.098058][ T31] wait_for_completion+0x2bf/0x5d0 [ 658.108806][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 658.130944][ T31] i2c_del_adapter+0x591/0x760 [ 658.379592][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.387421][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 658.393223][ T31] ? rcu_is_watching+0x15/0xb0 [ 658.532230][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 658.537793][ T31] ? kfree+0x4d/0x660 [ 658.565433][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 658.575266][ T31] dvb_usb_device_exit+0x1be/0x350 [ 658.584643][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 658.591378][ T31] cxusb_probe+0x603/0x700 [ 658.596132][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.605912][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 658.618264][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.637490][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 658.650902][ T31] usb_probe_interface+0x668/0xc90 [ 658.666523][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 658.677742][ T31] really_probe+0x26d/0xad0 [ 658.699375][ T31] __driver_probe_device+0x18c/0x320 [ 658.797865][ T31] driver_probe_device+0x4f/0x240 [ 658.816580][ T31] __device_attach_driver+0x279/0x430 [ 658.838459][ T31] bus_for_each_drv+0x251/0x2e0 [ 658.849265][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 658.880175][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 658.885778][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 658.893874][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.903977][ T31] __device_attach+0x2b8/0x430 [ 658.908948][ T31] ? __pfx___device_attach+0x10/0x10 [ 658.915351][ T31] ? _raw_spin_unlock+0x28/0x50 [ 658.929583][ T31] device_initial_probe+0xa1/0xd0 [ 658.935982][ T31] bus_probe_device+0x12a/0x220 [ 658.945850][ T31] ? device_add+0x726/0xb80 [ 658.959963][ T31] device_add+0x7b6/0xb80 [ 658.964525][ T31] usb_set_configuration+0x1a87/0x2110 [ 658.991779][ T31] usb_generic_driver_probe+0x8d/0x150 [ 659.009248][ T31] usb_probe_device+0x1c4/0x3c0 [ 659.015168][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 659.074093][ T31] really_probe+0x26d/0xad0 [ 659.126785][ T31] __driver_probe_device+0x18c/0x320 [ 659.158789][ T31] driver_probe_device+0x4f/0x240 [ 659.173989][ T7019] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.186888][ T31] __device_attach_driver+0x279/0x430 [ 659.196260][ T7019] usb 3-1: selecting invalid altsetting 0 [ 659.204517][ T31] bus_for_each_drv+0x251/0x2e0 [ 659.215905][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 659.229661][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 659.252406][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 659.272088][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 659.283921][ T7019] usb 3-1: USB disconnect, device number 59 [ 659.297885][ T31] __device_attach+0x2b8/0x430 [ 659.313033][ T31] ? __pfx___device_attach+0x10/0x10 [ 659.327077][ T31] ? _raw_spin_unlock+0x28/0x50 [ 659.339166][ T31] device_initial_probe+0xa1/0xd0 [ 659.344963][ T31] bus_probe_device+0x12a/0x220 [ 659.357545][ T31] ? device_add+0x726/0xb80 [ 659.364971][T11323] udevd[11323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.388429][ T31] device_add+0x7b6/0xb80 [ 659.395673][ T31] usb_new_device+0xa39/0x1720 [ 659.411068][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 659.420103][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.455388][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.464873][ T31] hub_event+0x29b1/0x4ef0 [ 659.471375][ T31] ? __pfx_hub_event+0x10/0x10 [ 659.476362][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 659.484688][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 659.490876][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 659.496751][ T31] process_scheduled_works+0xad1/0x1770 [ 659.504542][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.511360][ T31] ? do_raw_spin_lock+0x121/0x290 [ 659.516784][ T31] worker_thread+0x8a0/0xda0 [ 659.522804][ T31] kthread+0x711/0x8a0 [ 659.527071][ T31] ? __pfx_worker_thread+0x10/0x10 [ 659.534592][ T31] ? __pfx_kthread+0x10/0x10 [ 659.543076][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.548424][ T31] ? __pfx_kthread+0x10/0x10 [ 659.554382][ T31] ret_from_fork+0x510/0xa50 [ 659.561830][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 659.567253][ T31] ? __switch_to+0xc9e/0x1480 [ 659.572880][ T31] ? __pfx_kthread+0x10/0x10 [ 659.577830][ T31] ret_from_fork_asm+0x1a/0x30 [ 659.594556][ T31] [ 659.597908][ T31] [ 659.597908][ T31] Showing all locks held in the system: [ 659.717612][ T31] 1 lock held by khungtaskd/31: [ 659.723563][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 659.733866][ T31] 5 locks held by kworker/1:2/977: [ 659.739133][ T31] #0: ffff888142adf148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 659.779130][ T31] #1: ffffc90003befbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 659.828839][ T31] #2: ffff888144b7f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 659.851096][ T31] #3: ffff88802a889198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 659.878747][ T31] #4: ffff888029330160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 659.910514][ T31] 2 locks held by getty/5586: [ 659.918795][ T31] #0: ffff88802ffb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 659.938437][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 659.956822][ T31] 1 lock held by syz-executor/5844: [ 659.962180][ T31] #0: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 659.975713][ T31] 3 locks held by kworker/u8:16/5996: [ 659.985938][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 660.012178][ T31] #1: ffffc90004adfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 660.031040][ T31] #2: ffffffff8f311dc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 660.047861][ T31] 2 locks held by kworker/u8:17/6100: [ 660.057054][ T31] #0: ffff8881446c2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 660.078263][ T31] #1: ffffc90004f87bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 660.103888][ T31] 2 locks held by kworker/1:3/11038: [ 660.109243][ T31] 2 locks held by syz.3.1689/12333: [ 660.122863][ T31] #0: ffffffff8f311dc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 660.138561][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 660.159383][ T31] 2 locks held by syz.3.1689/12335: [ 660.168647][ T31] [ 660.183432][ T31] ============================================= [ 660.183432][ T31] [ 660.203442][ T31] NMI backtrace for cpu 0 [ 660.203469][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 660.203502][ T31] Tainted: [L]=SOFTLOCKUP [ 660.203508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.203519][ T31] Call Trace: [ 660.203526][ T31] [ 660.203533][ T31] dump_stack_lvl+0xe8/0x150 [ 660.203558][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 660.203581][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 660.203609][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 660.203633][ T31] sys_info+0x135/0x170 [ 660.203652][ T31] watchdog+0xf95/0xfe0 [ 660.203678][ T31] ? watchdog+0x20a/0xfe0 [ 660.203705][ T31] kthread+0x711/0x8a0 [ 660.203727][ T31] ? __pfx_watchdog+0x10/0x10 [ 660.203749][ T31] ? __pfx_kthread+0x10/0x10 [ 660.203772][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.203796][ T31] ? __pfx_kthread+0x10/0x10 [ 660.203817][ T31] ret_from_fork+0x510/0xa50 [ 660.203834][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 660.203848][ T31] ? __switch_to+0xc9e/0x1480 [ 660.203874][ T31] ? __pfx_kthread+0x10/0x10 [ 660.203895][ T31] ret_from_fork_asm+0x1a/0x30 [ 660.203928][ T31] [ 660.203934][ T31] Sending NMI from CPU 0 to CPUs 1: [ 660.332141][ C1] NMI backtrace for cpu 1 [ 660.332163][ C1] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 660.332191][ C1] Tainted: [L]=SOFTLOCKUP [ 660.332198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.332211][ C1] RIP: 0010:lock_acquire+0x0/0x340 [ 660.332234][ C1] Code: 05 85 22 e2 10 a9 00 ff ff 00 0f 95 c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 [ 660.332252][ C1] RSP: 0018:ffffc90000a088c8 EFLAGS: 00000246 [ 660.332269][ C1] RAX: 0000000000000001 RBX: ffffffff8238110a RCX: 0000000000000002 [ 660.332283][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df41aa0 [ 660.332296][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.332308][ C1] R10: ffffc90000a089f8 R11: ffffffff81acf3a0 R12: 1ffff92000141135 [ 660.332323][ C1] R13: ffffc90000a089e0 R14: ffffc90000a089a8 R15: ffffffff8173fd65 [ 660.332339][ C1] FS: 0000555555f13500(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 660.332355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.332369][ C1] CR2: 00007f09e6db6ad8 CR3: 000000007bb7e000 CR4: 00000000003526f0 [ 660.332387][ C1] Call Trace: [ 660.332395][ C1] [ 660.332402][ C1] unwind_next_frame+0xc2/0x23d0 [ 660.332432][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 660.332457][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 660.332479][ C1] ? sock_read_iter+0x231/0x2f0 [ 660.332503][ C1] ? vfs_read+0x55a/0xa30 [ 660.332521][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 660.332552][ C1] arch_stack_walk+0x11c/0x150 [ 660.332576][ C1] ? vfs_read+0x55a/0xa30 [ 660.332594][ C1] stack_trace_save+0x9c/0xe0 [ 660.332622][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 660.332650][ C1] ? stack_trace_save+0x9c/0xe0 [ 660.332679][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 660.332698][ C1] kasan_save_track+0x3e/0x80 [ 660.332716][ C1] ? kasan_save_track+0x3e/0x80 [ 660.332733][ C1] ? kasan_save_free_info+0x46/0x50 [ 660.332759][ C1] ? __kasan_slab_free+0x5c/0x80 [ 660.332777][ C1] ? kfree+0x1c0/0x660 [ 660.332802][ C1] ? slab_free_after_rcu_debug+0x5d/0x260 [ 660.332824][ C1] ? rcu_core+0xc8e/0x1720 [ 660.332843][ C1] ? handle_softirqs+0x22b/0x7c0 [ 660.332861][ C1] ? do_softirq+0x76/0xd0 [ 660.332878][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 660.332896][ C1] ? tcp_recvmsg+0x1f4/0x810 [ 660.332921][ C1] ? inet_recvmsg+0x147/0x250 [ 660.332944][ C1] ? sock_recvmsg+0x1a8/0x270 [ 660.332970][ C1] ? sock_read_iter+0x231/0x2f0 [ 660.332993][ C1] ? vfs_read+0x55a/0xa30 [ 660.333032][ C1] kasan_save_free_info+0x46/0x50 [ 660.333058][ C1] __kasan_slab_free+0x5c/0x80 [ 660.333078][ C1] ? slab_free_after_rcu_debug+0x5d/0x260 [ 660.333100][ C1] kfree+0x1c0/0x660 [ 660.333127][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 660.333149][ C1] ? rcu_core+0xc1a/0x1720 [ 660.333170][ C1] slab_free_after_rcu_debug+0x5d/0x260 [ 660.333194][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 660.333217][ C1] ? rcu_core+0xc1a/0x1720 [ 660.333237][ C1] rcu_core+0xc8e/0x1720 [ 660.333268][ C1] ? __pfx_rcu_core+0x10/0x10 [ 660.333287][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 660.333326][ C1] handle_softirqs+0x22b/0x7c0 [ 660.333346][ C1] ? do_softirq+0x76/0xd0 [ 660.333368][ C1] ? tcp_recvmsg+0x1f4/0x810 [ 660.333393][ C1] do_softirq+0x76/0xd0 [ 660.333416][ C1] [ 660.333423][ C1] [ 660.333430][ C1] __local_bh_enable_ip+0xf8/0x130 [ 660.333449][ C1] tcp_recvmsg+0x1f4/0x810 [ 660.333477][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 660.333505][ C1] ? aa_sk_perm+0x7ee/0x920 [ 660.333527][ C1] ? sock_rps_record_flow+0x19/0x410 [ 660.333553][ C1] inet_recvmsg+0x147/0x250 [ 660.333579][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 660.333605][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 660.333623][ C1] ? security_socket_recvmsg+0x7e/0x2e0 [ 660.333652][ C1] sock_recvmsg+0x1a8/0x270 [ 660.333682][ C1] sock_read_iter+0x231/0x2f0 [ 660.333708][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 660.333739][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 660.333759][ C1] ? security_file_permission+0x75/0x290 [ 660.333781][ C1] vfs_read+0x55a/0xa30 [ 660.333797][ C1] ? debug_object_free+0x2b2/0x400 [ 660.333829][ C1] ? __pfx_vfs_read+0x10/0x10 [ 660.333848][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 660.333876][ C1] ? irqentry_exit+0x5dd/0x660 [ 660.333900][ C1] ksys_read+0x145/0x250 [ 660.333918][ C1] ? __pfx_ksys_read+0x10/0x10 [ 660.333941][ C1] do_syscall_64+0xec/0xf80 [ 660.333960][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.333979][ C1] ? clear_bhb_loop+0x60/0xb0 [ 660.334000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.334018][ C1] RIP: 0033:0x7f5b76b8e11d [ 660.334034][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb bd e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 d4 22 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 660.334050][ C1] RSP: 002b:00007ffeef160e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.334068][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b76b8e11d [ 660.334081][ C1] RDX: 0000000000000004 RSI: 00007ffeef160e9c RDI: 0000000000000003 [ 660.334093][ C1] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 660.334106][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeef1612b0 [ 660.334119][ C1] R13: 0000000000000004 R14: 00007ffeef160e9c R15: 00007ffeef160f30 [ 660.334142][ C1] [ 660.462894][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.909641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 660.916549][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 660.927265][ T31] Tainted: [L]=SOFTLOCKUP [ 660.931646][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.941723][ T31] Call Trace: [ 660.945049][ T31] [ 660.948002][ T31] vpanic+0x1e0/0x670 [ 660.952022][ T31] panic+0xb9/0xc0 [ 660.955773][ T31] ? __pfx_panic+0x10/0x10 [ 660.960219][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 660.965615][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 660.971802][ T31] watchdog+0xfdf/0xfe0 [ 660.975994][ T31] ? watchdog+0x20a/0xfe0 [ 660.980365][ T31] kthread+0x711/0x8a0 [ 660.984470][ T31] ? __pfx_watchdog+0x10/0x10 [ 660.989175][ T31] ? __pfx_kthread+0x10/0x10 [ 660.993797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.999023][ T31] ? __pfx_kthread+0x10/0x10 [ 661.003640][ T31] ret_from_fork+0x510/0xa50 [ 661.008256][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 661.013389][ T31] ? __switch_to+0xc9e/0x1480 [ 661.018115][ T31] ? __pfx_kthread+0x10/0x10 [ 661.022742][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.027560][ T31] [ 661.031206][ T31] Kernel Offset: disabled [ 661.035541][ T31] Rebooting in 86400 seconds..