last executing test programs: 1m36.245696873s ago: executing program 3 (id=3303): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r2, 0x1, 0xee8354ed8d75d464, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0500330002000000080032000700000008003100fc030000080034"], 0x44}, 0x1, 0x0, 0x0, 0x44040015}, 0x80) 1m35.919536206s ago: executing program 3 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000eb5000/0x3000)=nil, 0x3000, 0x64) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000208000b4000000000200004801c0001800b00018065787468647200000c00028008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xbc}}, 0x0) 1m35.706312967s ago: executing program 3 (id=3308): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m35.535278582s ago: executing program 3 (id=3309): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r5 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x3}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x3d, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x3, @svalue=0x939}, {0x3, @svalue=0x5}, {0x0, @svalue=0x50}]}, 0xe6}]}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5c00000014006b030231a6080c000af32cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4918037e786a6d1000000e6657594f1817db3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r7}, 0x10) 1m34.434369629s ago: executing program 3 (id=3313): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x3, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0xe8, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00b22c00fe8000000000000000000008000000bbfe8000000000000000000000000000aa88"], 0x0) 1m33.637707327s ago: executing program 3 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000fff0000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1m32.995698521s ago: executing program 32 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000fff0000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 11.197553991s ago: executing program 1 (id=3716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x33) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000004"], 0x48}}, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000da1bf4e5052b611d5afda8835c84740000876827cf079ac70237e33fad71813a2fab7eddcd2c76cace896bf4308452afbcc86c06", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) syz_usb_ep_write(r1, 0x3, 0xc9, &(0x7f0000000100)="043023e3cd7639a2f2cabcb9d85c11918e0fcbfc94a4948559a54fef99e14ae878a3c294590f3fc4e48848dce59ce341aefd541d2b99781ebd9cd06ae069bfab66179fb227c0f626bb65c767a4b7b185fbfe6b6c75f2763083fdbc4b7cc4dcd6a698fef52883d4752cc43c40aa663b950f27c186a7542244246cb51087db045f64fecc39fc1b1b0b3adad8db36a777265e8e25c1d246b47e256946765e081379822225f86392803b26dde6619c53f8d42529887c70c94dbd184a808167fe6e3a79fc6bc23d62f06568") r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023, 0x0, 0x4}]}) r7 = openat(r5, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) lseek(r7, 0x1, 0x0) getdents64(r7, &(0x7f00000003c0)=""/31, 0xfffffffffffffe44) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0xfffffffffffffffe}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x251, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 8.184758061s ago: executing program 5 (id=3736): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x9c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010120, 0x0, 0x33}, 0x2, @in6=@private2, 0x3507, 0x1, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80}, 0x1c) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"('], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x9c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xc1}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010120, 0x0, 0x33}, 0x2, @in6=@private2, 0x3507, 0x1, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80}, 0x1c) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"('], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 7.857774316s ago: executing program 1 (id=3737): set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100400008000300"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 7.527333171s ago: executing program 1 (id=3738): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xd3, 0x4, 0x10001, 0x5, 0x9]}, &(0x7f00000003c0)=0x78) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="bc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x1d2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x1cfc, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xd}}, @TCA_BASIC_ACT={0x1ce4, 0x3, [@m_ct={0x2c, 0x16, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x1cb4, 0x4, 0x0, 0x0, {{0xb}, {0x1c88, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3efb, 0x9, 0x0, 0x7, 0x0, 0x1ff, 0xfffffc01, 0x10001, 0x0, 0x40ae457a, 0x69d2, 0xfffffffe, 0x8, 0x3, 0x6, 0x3, 0x0, 0xffffffff, 0x8a12, 0xffffffff, 0x0, 0x5, 0x9, 0xf, 0xffff52d9, 0x100, 0x6, 0x80000000, 0x6, 0x8, 0x8, 0x4, 0x2, 0x2, 0x2, 0x3ff, 0x1, 0xfff, 0xffff, 0x7, 0x9, 0x902f, 0x8, 0x1ff, 0x3, 0x4, 0x0, 0x2, 0x1000, 0x8, 0x446d4ca1, 0x6, 0xfff, 0xbb, 0x7, 0x9, 0x9477, 0x88a2, 0xb69d, 0xfffffff8, 0xed, 0x3, 0x3, 0xe, 0x7, 0x8, 0x10, 0xfb, 0x0, 0x1ff, 0x9, 0x890b, 0x5, 0x7, 0xd, 0x6, 0x6, 0x3ff, 0x9, 0x3, 0x200, 0x200, 0x3, 0xfffff52d, 0x7, 0x2, 0x2, 0x10001, 0x8, 0x6, 0x8, 0xc000, 0xa, 0x2, 0xbd94, 0x7d, 0x72c0, 0x7, 0x3, 0x2, 0x6, 0x472, 0x5, 0x1, 0x3, 0x4, 0x8000, 0xff, 0x9, 0x8, 0x80000000, 0x1, 0x0, 0x4, 0x3d, 0x0, 0x7, 0x4, 0x9d8, 0x3, 0x6, 0x0, 0xffffffc0, 0x6, 0x8, 0xf20787c, 0x3d, 0x0, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0xc, 0x1000, 0x9, 0x4, 0x2, 0xc, 0xec, 0x51f1, 0x9, 0x7, 0x6, 0x800, 0x1, 0xee, 0x4, 0x2, 0x7, 0x6c57, 0xffffffff, 0x10000, 0x9, 0x0, 0x401, 0x3ff, 0x3, 0x7, 0x5, 0x6, 0xe69, 0x10, 0x8a22, 0x1ff, 0x1, 0x7, 0x10, 0xfffffffa, 0xb901, 0x8, 0x5, 0x0, 0x7, 0x6, 0x8, 0x0, 0x24, 0x54, 0x8, 0x7, 0x8, 0x9, 0x101, 0x93, 0x2, 0x4, 0xff, 0x8, 0x6, 0x80, 0x4fe, 0xfff, 0x80000000, 0x80000001, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0xd, 0x5, 0x6, 0x2, 0x7, 0x3, 0x1, 0x10, 0x8000, 0x5, 0x10, 0xf, 0x80, 0x1, 0x401, 0x3, 0x8, 0x3, 0x8001, 0x18, 0x75, 0x9, 0x3, 0x7, 0x1, 0x65a, 0x100, 0x4, 0xa0, 0xffff, 0x5, 0x8, 0x3, 0xd40, 0x7ff, 0x101, 0x1, 0x1ff, 0x5, 0xafc, 0x9, 0x3ff, 0x7, 0x81, 0x3, 0x3, 0x7ff, 0xaed, 0x8, 0x7fffffff, 0x6, 0x8000, 0x7, 0x6, 0x46, 0x1e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1ad7, 0x5, 0x8, 0x3, 0x6, 0xa, 0x17140, 0x4, 0x0, 0x8, 0x3, 0x7, 0x3, 0xad2f, 0x1, 0xd1, 0x10000, 0x8, 0x6, 0x4, 0xf, 0xd, 0xcd, 0xe1, 0x7ff, 0x9, 0xd, 0x1, 0x6, 0x9cbf, 0x7, 0x4, 0x800, 0x2, 0xaa2, 0x0, 0x0, 0xfffffff8, 0x2, 0x70000, 0x5, 0x3, 0x7, 0x1, 0x3, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x800, 0x7ff, 0x92, 0x0, 0x0, 0x2c806931, 0x9, 0x4, 0x401, 0xfffffffc, 0x10000, 0x6, 0x1, 0x0, 0xfffffffa, 0x4, 0x3, 0x7, 0xfffffffe, 0x4, 0x100, 0x3, 0x5, 0x0, 0x7, 0x10001, 0xfffffffb, 0x7, 0x1, 0x80000000, 0x4, 0xbf2c, 0x85e, 0x6b, 0x0, 0x7fff, 0x0, 0x6, 0xffffffff, 0x2, 0x6, 0x832, 0x6, 0x3, 0x1, 0x7, 0x1000, 0x6, 0x9000000, 0x4, 0xf04, 0xa516, 0xfffffffd, 0x2, 0x3, 0x8, 0xfffffffb, 0x3, 0x882b, 0x100, 0xfffffeff, 0x1, 0x100, 0x0, 0x34919b6b, 0xa452, 0x6, 0x7, 0x1, 0x4, 0x1, 0xbd, 0x10001, 0x526, 0x5, 0xa063, 0x60, 0xffff8000, 0xd, 0x7, 0xfff, 0x10, 0x6, 0x3, 0x1, 0x5, 0x10, 0x3f8e, 0xee21, 0x6, 0x400, 0x7ff, 0xffffffff, 0xa5fc, 0xe, 0x3, 0x4, 0x4, 0x81, 0x100, 0x2, 0x0, 0xffff, 0x194, 0x40, 0x6, 0xffffffff, 0x3, 0x10001, 0x8000, 0x8, 0x4, 0x5577, 0x469, 0x1ff, 0x3, 0x1, 0x648, 0xe, 0x3, 0x3, 0x800, 0x4, 0x5, 0x100, 0x8001, 0xe19, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x8000, 0x3, 0x0, 0xffff, 0xf997, 0x4, 0x40, 0xd, 0x7, 0x6, 0x8, 0x0, 0x1, 0x6, 0x5, 0x7ff, 0x6, 0xeb34, 0x7, 0x7, 0xfffffff8, 0x0, 0x6, 0x6, 0x7, 0xa8c, 0x401, 0x13, 0x2, 0x3, 0x6, 0x10, 0x8, 0x7, 0x8, 0x1, 0x821e, 0x1, 0x8001, 0x8, 0x504, 0xbd1, 0x9, 0xfffff000, 0x9, 0x1, 0xe15, 0x8, 0x8, 0x6, 0x1000, 0x1, 0x80000001, 0x1, 0x5, 0x959, 0x4, 0x4, 0x7, 0xe31, 0x1, 0x6, 0x54, 0x5, 0x80, 0x9e5, 0x7ff, 0xbe3, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x80000000, 0xe, 0x6, 0x4, 0x4, 0x6, 0x8, 0x2, 0x4, 0x81, 0x1, 0x9, 0x0, 0x81, 0xff, 0x40, 0x4, 0x8, 0x4, 0x6, 0x6, 0x3, 0x3ade, 0x800, 0x8, 0x5, 0x5, 0xa61d, 0xb228, 0x61874111, 0x200, 0xfffffffa, 0x5, 0x7, 0x2, 0x7, 0x99b5, 0xb, 0x8000, 0x0, 0x7ff, 0x5, 0x200, 0xb48, 0x2, 0x9, 0x7, 0x0, 0x100, 0x40, 0x695, 0x5, 0x5, 0x7, 0x10, 0x1, 0x4, 0x401, 0x41d9, 0x7, 0xedd6, 0x45, 0xe00000, 0x1000, 0x3, 0x9, 0x8, 0x9, 0x80000001, 0x87, 0x6, 0x4, 0x80000001, 0x8, 0x10001, 0x5, 0x3, 0xc3, 0x0, 0x1, 0x5, 0x546, 0x0, 0x8, 0x9, 0x0, 0x7, 0x3, 0x5, 0x8000, 0x7ff, 0x7, 0xb, 0x5, 0x8, 0x1, 0x4, 0x8, 0x1, 0xffffffff, 0x8, 0x1, 0x101, 0x62, 0xfff, 0x984, 0xc, 0xa3e, 0x6, 0x3ff, 0x8, 0x9, 0xbc, 0x9086, 0x9, 0x9, 0x8, 0x4dc, 0x200, 0x1, 0x7, 0x5, 0x7, 0x5b9, 0x4, 0x80000001, 0x1, 0x4, 0x0, 0xe, 0x8000, 0x8, 0x2, 0x8, 0x7, 0x1, 0x5, 0x4, 0x1, 0x1, 0x1053, 0x2, 0xd8, 0x0, 0x8, 0x7f, 0xd, 0x2, 0xfffffffa, 0x2, 0x4, 0x3db, 0x670, 0x4d28, 0x8, 0x7fffffff, 0x2, 0xfff, 0x40, 0xc, 0x8, 0xa, 0x1, 0x7, 0x100, 0xb, 0x5, 0xffffffff, 0x9, 0x429, 0x120000, 0x9c7, 0x8, 0x1, 0xaecf, 0x1ff, 0x101, 0x2, 0x5, 0x80000000, 0x5, 0x9, 0x800, 0x101, 0x4, 0x6, 0x1ff, 0x8179104, 0xfac5, 0x6, 0x7, 0xe7, 0xb, 0xfffffff8, 0x5, 0x1, 0x2, 0x7, 0x1, 0xff, 0x7, 0x7d45, 0x6, 0x0, 0xc, 0x7, 0x7f, 0x90f, 0x9, 0x1cff4574, 0x845b, 0x3, 0x8, 0x7, 0x1, 0x5, 0x1, 0x80, 0x4, 0x1, 0x90000, 0x4, 0x8, 0x400, 0x401, 0xa, 0x746, 0x0, 0xffffffff, 0x55c, 0x10, 0xfffffe00, 0x37, 0x10000, 0x6, 0x1, 0xe, 0xfffffff7, 0x1, 0x8001, 0xb6a, 0x59ce1367, 0x5, 0x5, 0xa, 0x2, 0x3, 0x8, 0x10, 0x0, 0x4, 0x1, 0x9, 0xffff, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x93, 0x5, 0x3ff, 0x8000, 0x1, 0x1, 0x4, 0x10, 0x5, 0x8, 0x0, 0xb0, 0x7fff, 0xfff, 0x3, 0x4, 0x5, 0x652, 0x2, 0x1ff, 0x4, 0x7, 0x2, 0xe, 0x3, 0x1bb5, 0xfffffffe, 0x0, 0x4, 0x2, 0x400, 0x8, 0xfffffffa, 0x1, 0x1, 0x7, 0x2, 0x1ff, 0x4, 0x7, 0x4, 0x3, 0x6, 0xfffffffd, 0x7ff, 0x101, 0x41c, 0x8, 0x2, 0x3e, 0x1c00000, 0x3, 0x6, 0x7, 0xd, 0x1, 0x6, 0x80000001, 0x10001, 0x401, 0xa, 0x5, 0x1, 0xfffffffe, 0x7, 0x1ff, 0x8001, 0x3d, 0x8000, 0x0, 0x7ff, 0x0, 0x3, 0x1, 0x6, 0x5, 0x1e, 0x8, 0xeb6, 0x6, 0xc, 0x0, 0xc6d, 0x53, 0x9, 0x8b35, 0x1, 0x96, 0x7, 0x80, 0x1, 0x2, 0x0, 0x6, 0x10, 0x1, 0x7fffffff, 0xffffff81, 0xfff, 0x5, 0x1, 0xc6ba, 0xac, 0x1, 0x7df, 0x9, 0x3, 0x1, 0x4a5, 0x9, 0x4, 0x7, 0x7, 0x5c8, 0x66, 0x1, 0xd5e, 0x80000001, 0xc, 0x6a, 0x553549cf, 0xffffff01, 0x6, 0x507, 0x4, 0x2, 0x101, 0x0, 0xb202, 0x2, 0x2, 0x2, 0x81, 0x4, 0x33b, 0x5c000, 0x101, 0x9f6, 0x619, 0x4, 0x2b, 0x2, 0x8001, 0x5, 0x4, 0x8, 0x2, 0x7fffffff, 0x1, 0x10001, 0x0, 0x2, 0x104aba9f, 0x3, 0x1000000, 0x1, 0x8cb, 0xfffffffb, 0x1, 0xffff96c5, 0x6, 0xa58d, 0x1418, 0xed1, 0x5, 0x0, 0x6, 0x8000, 0x1, 0x5, 0x4, 0xd, 0x1077, 0x3, 0x1, 0x400, 0x3, 0x2, 0xd1b, 0x6, 0x3, 0xe632, 0xc7, 0x0, 0x5, 0x5, 0x80000001, 0x8, 0xff, 0x1, 0x1000, 0x0, 0x0, 0x1, 0x69, 0x4a, 0xc, 0x7, 0x3, 0x8, 0x400, 0x0, 0xa, 0x8, 0x1, 0x0, 0x5, 0xffffff81, 0x4, 0xf6, 0x7, 0x5, 0x800, 0xffff, 0x3, 0x8000, 0x3, 0x401, 0xffff, 0x200, 0x7fab, 0x10, 0x8, 0x2, 0x10000, 0x2, 0xfffff3b4, 0xae2a, 0x7ff, 0x7, 0x8aa, 0x4, 0x3, 0xd3, 0x7fffffff, 0x6, 0x7, 0x2, 0x3, 0x400, 0x27, 0x15, 0xfffffff7, 0x80, 0x1667, 0x8000, 0x8, 0x3, 0x7, 0x101, 0xa99c, 0xf, 0x58, 0x40, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xb, 0xffff, 0x3, 0xfffffffe, 0x8001, 0x3, 0x3, 0x6, 0x7fff, 0x9, 0x5, 0x8000, 0x6, 0x1, 0xd, 0x3, 0x0, 0x0, 0x6, 0x1, 0xbc, 0x10000, 0x5, 0x0, 0x6, 0xe2, 0x3a5, 0xf, 0x3, 0x80000000, 0xe, 0x0, 0x6774, 0x60, 0x5, 0x7, 0xa035, 0xa4, 0x401, 0x10001, 0x8, 0x6, 0x40, 0x0, 0x20, 0x3, 0x1, 0xff, 0xffffff61, 0x7, 0x4, 0x5, 0x1, 0x1, 0x0, 0x8, 0x0, 0x8, 0x4, 0xfffffffb, 0xc, 0x7, 0x81, 0x8, 0x1, 0x8, 0xff, 0x7fff, 0x4, 0x9, 0xb0b, 0x8, 0x3b72, 0xd, 0x7fffffff, 0x6, 0x4, 0xffffffff, 0x6, 0xfffff7fb, 0x58, 0x4, 0x1, 0x5, 0x80000001, 0xfffffffa, 0x8, 0x9, 0x5, 0x5, 0x437c, 0x1, 0xcd, 0x4, 0x3ff, 0x10000, 0x8, 0x7, 0x8, 0x80000001, 0x6, 0x5, 0xff, 0x8, 0xa54, 0x0, 0x1000, 0x3, 0x4, 0x9, 0xad66, 0x2, 0x0, 0xfff, 0xffff8000, 0x8, 0x7, 0x3, 0x6, 0x8001, 0xce54, 0x1, 0x7, 0x5, 0x4cc7, 0x6, 0x53, 0x8, 0x5, 0x200, 0x5, 0x1, 0x0, 0x9, 0x3, 0x7, 0xffff7fff, 0x7fff, 0xfffffffe, 0x7, 0x6, 0xffff0001, 0x7, 0x5, 0x8, 0x4, 0xffffffff, 0x4, 0x3b, 0x1aad, 0xe, 0x5, 0x8, 0x8, 0x4, 0x5bde, 0xf, 0x0, 0x10000, 0x0, 0x6, 0xbb, 0x6, 0x6, 0x1, 0x9, 0x1, 0x3, 0x1287, 0x9, 0x4, 0x7, 0x3, 0x5, 0xa, 0x6, 0x800, 0x3, 0x4, 0x1, 0x6, 0xe4bc, 0x4, 0xfff, 0x9d3, 0x7, 0x3c8a, 0xe, 0xfffffff0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x3, 0x5, 0x2, 0x0, 0x40, 0x8, 0x5, 0xfffffffa, 0x6, 0x155, 0xd36, 0xf4, 0x5, 0x510, 0x1, 0x50, 0x8, 0x6, 0x7f, 0x6, 0xa0a, 0x4, 0xf, 0xffffff64, 0x9, 0x8, 0xa58, 0x3, 0xb, 0x4, 0x563ea11a, 0xe, 0x8001, 0x7, 0x800, 0xfff, 0x7, 0x7, 0xfffffff9, 0x400, 0x3, 0x921, 0x7ff, 0x8, 0x2, 0x7fffffff, 0x7, 0x1, 0x7fff, 0x0, 0x8, 0x7fff, 0x5, 0x6, 0x200, 0x5, 0x9, 0x8, 0x4f1, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d, 0xc, 0x6, 0x9, 0x9, 0x4, 0x2a, 0xace, 0xc, 0x7, 0x7fffffff, 0x1, 0x2, 0x7fff, 0x0, 0x7, 0x6, 0x5, 0x1, 0x8, 0x5, 0x0, 0xe, 0xffffffff, 0x8, 0x7fffffff, 0x2, 0x7, 0x10000, 0x3, 0x200, 0x83, 0x4, 0x800, 0x4, 0x6a, 0x100, 0x7, 0x200000a, 0x1000, 0xe947, 0xfff, 0x8, 0x7fd1, 0x6, 0x6d, 0x40, 0x6, 0x2, 0x8, 0x3, 0x1, 0x636, 0xfffffff7, 0x7, 0x7, 0x6, 0x8001, 0x7, 0x6, 0x2e6b800, 0xf, 0x40, 0xa, 0x7, 0xdd, 0x6, 0x3a3, 0x0, 0xfff, 0xd, 0x7, 0x7ff, 0x9, 0x564, 0xd1, 0x8, 0x8, 0x6, 0x7, 0x8, 0x4, 0x0, 0x7, 0x8, 0x8, 0x2d8f, 0x5, 0xc0b, 0x4d, 0x4ab, 0x6, 0xacf, 0xdfad, 0x2, 0x405, 0xffffffff, 0x1, 0x7, 0x3, 0x5, 0x4, 0x80, 0x5000000, 0x7, 0x0, 0x7, 0x4, 0x100, 0xa5e, 0x71, 0x6, 0xb7, 0x80, 0x101, 0x2, 0x2, 0x7, 0x8001, 0x1004000, 0x100, 0x5, 0x73, 0x80000000, 0xfffeffff, 0x1, 0x1, 0x5, 0x9, 0x83a5, 0x2, 0x2, 0x4, 0x8, 0x4, 0x5, 0x8001, 0x1f, 0x4, 0x200, 0x3, 0x1800000, 0x1000, 0x9, 0x3, 0x5, 0xc3a9, 0x6, 0x5, 0x1, 0x8, 0x0, 0x7fff, 0x402, 0xff, 0x3, 0x7, 0x9, 0x2, 0x2, 0x7, 0x4, 0x8, 0xfffffffd, 0x7f, 0xb7b, 0x7, 0x1, 0x0, 0x3, 0x5, 0x4, 0x1, 0x100, 0x7, 0x6, 0x2, 0x2, 0x10, 0x80, 0x7, 0xb, 0x23c, 0x3, 0x6, 0x7, 0x30f, 0xffffffff, 0x8, 0x1, 0x971, 0xf59, 0x0, 0x1, 0x8, 0x7ff, 0x0, 0x4, 0x0, 0x1ff, 0xed6, 0xfe, 0x1, 0x5, 0x6, 0x2, 0xb, 0x10, 0x5, 0x5, 0x3, 0x3, 0x4, 0x2, 0x0, 0x8ed, 0x81, 0xffffffa5, 0x0, 0x2, 0x4, 0x6, 0x5, 0x8, 0x6, 0x5, 0x2, 0x9, 0x7, 0x4, 0x8, 0x77f, 0x6, 0xf8000000, 0x38a35b26, 0x4, 0x0, 0x0, 0x18000, 0xc7, 0x5, 0xc0000000, 0x2, 0x4, 0x10000, 0x7fffffff, 0xbb66, 0x7, 0x80, 0x40, 0x0, 0xffffffff, 0x6, 0x2, 0x3, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0xe, 0xcc9, 0x3, 0x0, 0x543, 0xc367, 0x6, 0x7, 0x1ce4dbb7, 0x6e, 0x7f, 0x0, 0x2, 0xd, 0xffc0000, 0x8, 0xf4aa, 0x3ff, 0x68, 0xe56, 0x0, 0xffffffff, 0xfffff001, 0x9, 0x5, 0x8, 0x76, 0x3ff, 0x4, 0x2, 0x5, 0x80000000, 0x6ffe01de, 0xbdee, 0x5, 0x0, 0x5, 0x2, 0x3, 0x7f, 0xd, 0x2, 0x10001, 0xb, 0x28, 0x3, 0x8, 0x2, 0x7fffffff, 0x9, 0x8000, 0x6, 0x2, 0x5, 0x7, 0x7, 0x2, 0x4, 0x100, 0x6, 0x800, 0xfff, 0x53e2, 0xfffffffc, 0x3, 0x100, 0x24, 0xfffffff4, 0x9, 0x1, 0xff, 0xffffff58, 0x6, 0x4, 0x8, 0x9, 0x7, 0x35, 0x8000, 0x6, 0x3, 0x7fffffff, 0x1, 0x2, 0xfff, 0x4, 0x8, 0x17, 0x5, 0xc, 0x28d0e453, 0xffffff33, 0x7, 0x1000, 0xffffffe7, 0xb, 0x8, 0x0, 0x5, 0x400, 0x9, 0x9, 0x7, 0x4, 0x1, 0x3, 0x3ff, 0xde, 0x9e, 0x5, 0x1000, 0xd, 0xffffff01, 0x4, 0x5b, 0x60000, 0x2, 0x80000000, 0x8, 0x7fffffff, 0x8, 0x9, 0x5, 0x6, 0x3, 0x40, 0x2, 0xffff, 0x7fffffff, 0x3, 0x4, 0x800, 0x8001, 0x9, 0x3c, 0x4, 0x2, 0x4ec, 0x1, 0x3, 0x1, 0x8, 0x5, 0x1ff, 0x15, 0x81, 0xc, 0x40, 0x400, 0x4, 0x3, 0x8, 0x7, 0xa, 0xfffffff7, 0x3, 0x400, 0x7fff, 0x1, 0x5, 0x80000001, 0x81, 0x5, 0x4, 0xffffffff, 0x14, 0x9, 0xc0000000, 0x8, 0x6, 0x8, 0x4, 0x4, 0x12, 0x7fff, 0x106, 0x3, 0xdc, 0x8, 0x9, 0x4, 0x8, 0x7fffffff, 0x7f, 0x81, 0xf, 0x7, 0x4, 0x8, 0x9, 0x3, 0x8, 0x8001, 0x7f, 0xf72, 0x1, 0x1, 0x1, 0x6, 0x3, 0x5, 0x1, 0x401, 0x0, 0x81, 0x9, 0x868, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x2, 0x4, 0xcf, 0x8, 0x8, 0x3, 0xfb800000, 0x0, 0x3800000, 0x6, 0xa68, 0x40, 0x1, 0xc, 0x0, 0x3, 0x151c3a2c, 0x6, 0x6, 0x401, 0xb, 0x81, 0x2, 0x4, 0x5, 0x9, 0xc580, 0x6, 0xc00, 0x80000001, 0xf05, 0x800, 0x1, 0x9, 0x2, 0x6, 0x4, 0x0, 0x6, 0x9, 0x1]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1d2c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x7ffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) 6.76616805s ago: executing program 5 (id=3742): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x4, 0x4, 0x1, 0xf, 0xfd7, 0xb, 0x2}, 0x1c) syz_emit_ethernet(0xc1, &(0x7f0000000000)={@random="72149b17a4ac", @empty, @void, {@llc_tr={0x11, {@snap={0xab, 0xab, '`', 'fmY', 0x806, "a9cbde775d8ef909476346f62c8b8b689f7fbc5ffbc9246bbd9cdc23136631ccd64198b2a03296adb5ffa20a3dcaca9395fb4c8f69f96386132ed8c1a3a08d1bc74206f6c4b972bf9fe6f8b8723cd00d24730a5133fb0ad35568cd6f7f1904cbf7621e46e260def78ea132c25b6b45e739e422a260d0dde3d8731b2dd69aebae564ca8e4e4e1859c9b9914e31ea06703dfa7155b6092fe27090f935cfb4babca3058610bc39cdbd0b5ce40"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0x53, 0xfc5, 0x2fa, 0xe77]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 6.529557664s ago: executing program 5 (id=3743): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="ee", 0x1}, {0x0}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfffffeac}, 0x40004) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1, 0x4}, {0x7c, 0x0, 0x0, 0x7981}, {0x6}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000001b00)=[{{&(0x7f0000000300)=@ll, 0xffffffffffffffb7, &(0x7f0000000400)=[{&(0x7f0000000380)=""/117, 0x75}], 0x1, &(0x7f0000001b40)=""/4096, 0x1000}, 0x40}], 0x1, 0x2000000022, &(0x7f00000001c0)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xe1, 0xa03b717f0919041f) 5.023912698s ago: executing program 1 (id=3748): set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100004008000300"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 4.991325243s ago: executing program 5 (id=3749): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x76, &(0x7f0000000500)={0x3, 0x400, 0x820e, 0x100009, 0xfffffffc, 0x8, 0x400, 0x8}, &(0x7f0000000280)=0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r4) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00P', @ANYRES16=r1, @ANYBLOB="10002cbd7000ffdbdf25160000000c00990009000000390000000a00060008021100000000000a00060008021100000000000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a001a000802110000000000"], 0x68}}, 0x8004804) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r8 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r9, 0x0, r8, &(0x7f0000000140)=0x8008, 0x4, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 4.765466207s ago: executing program 1 (id=3750): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="4013200000009c"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="4013200000009c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xb4, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0xa, 0xf}, {0xa, 0xffe3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x20000040) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0xa, 0xf}, {0xa, 0xffe3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x20000040) r5 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.817411733s ago: executing program 2 (id=3756): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda116b1d34e47473f39aa995a813a710dae914618c4d6fe5ba44aca3e0570dd32977ed521baedf6801196e24f18640f84add06d5a3d091db19c0afcfc4fe365e11e5c9b82d02b079c934b9324386f08f8f13b68e630f47ac96b480f"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) socket(0x11, 0x6, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000001140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x70b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x1, 0x400, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000001100)={@hyper, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) 3.816653282s ago: executing program 5 (id=3757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000800)=[{0x63, 0xc810, 0x0, 0x0}], 0x1}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, &(0x7f0000000000)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r5, &(0x7f00000000c0), 0xc) syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x1, {0x110a}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRES64=r8, @ANYRES32, @ANYRESHEX=r6], 0x0) 3.001275707s ago: executing program 2 (id=3759): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0xbfe, 0x38, 0x8, 0x70, 0x6e}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0xa, 0xafe, 0x0, 0x3, 0x80000000, 0x4, 0x7}, {0x2, 0x62940916, 0x3, 0x2, 0x0, 0xffffffff, 0xa}]}) 2.821753026s ago: executing program 4 (id=3760): set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.821328089s ago: executing program 2 (id=3761): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, [@generic={0x81, 0x1, 0x1, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000300004000401"], 0x28}, 0x4004004) 2.695929079s ago: executing program 2 (id=3762): futex_waitv(&(0x7f0000001fc0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000002040), 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r10 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r10, 0x40f, 0x2) r11 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r11, &(0x7f0000000480)={0x2020}, 0x2020) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x40, 0x5, 0xde, 0x1}, {0x9, 0x5, 0x7, 0x2, 0x1cf, 0x6, 0x4, 0x6}, {0x9, 0x5, 0xb, 0x3, 0x40, 0x1, 0x1, 0xe7}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc094) 2.615165215s ago: executing program 4 (id=3763): r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x240408c0) read(r1, &(0x7f00000011c0)=""/221, 0x8) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000200)={[{0x5, 0x4e00, "90aab6a3e3"}]}) 1.556616754s ago: executing program 0 (id=3765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/43, 0x2b}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x6, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x80f, 0x0, 0x1ff}, {0x83e, 0x0, 0x3}, {0x832}, {0x838, 0x0, 0x100000}, {0x6e0, 0x0, 0x1000000}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x832, 0x0, 0x20000}, {0x838, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x832, 0x0, 0x40000}, {0x6e0, 0x0, 0x2000000}]}) 1.401796013s ago: executing program 2 (id=3766): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258, 0x5, 0x0, [{0x1}, {}, {0x5}, {0x0, 0xff}, {}, {0x0, 0x5}, {}, {0x0, 0xcef}]}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258, 0x5, 0x0, [{0x1}, {}, {0x5}, {0x0, 0xff}, {}, {0x0, 0x5}, {}, {0x0, 0xcef}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) 1.401159541s ago: executing program 1 (id=3767): r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x1, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000d3b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b02000/0x3000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000bcd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x0, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r4, 0x2219, 0xcf74, 0x52, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x61) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100)="71f488df3ca26229f202077c6d6dfc5bd07304b6e2559969f2b2fde4e689c76c02390d300613a93c30cfca3071ae06e26ab5056e78aaeecc2c7e022714afdd7c366ad9f68e8b1ed0b13794207a40e1987e93965bc6d5413197be555105747280b6c751ddca875c8a11bac4ee9260663eaa8d5b08722bc2c9893af60aa98fd10eac200a89e0b44fddcc6361d1edcb564ce298096045645dfd2fa93ec12ef1ef09102b4e0f476d03319c5e237b9eb3", &(0x7f0000000200)=@udp6=r1, 0x1}, 0x20) mprotect(&(0x7f000097c000/0x2000)=nil, 0x2000, 0x8) timer_create(0x3, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 1.400279735s ago: executing program 0 (id=3768): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84480) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @hyper, 0xb, 0x0, 0x8000000, 0x0, 0x6}) splice(r3, &(0x7f0000000240)=0xffffffffffffffd9, r2, 0x0, 0x1fe, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x3) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f00000000c0)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x1c7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x0, 0x5, 0x50, {0x50, 0x22, "98c1ea65eae6754fa38a5cb15245478ad675783415e8d7d64716c972d2e583ee4fe4b55bcf23824c8e694bfdafc3c1e95f5f3bb1004fa2dfde93e8d364ea12e78c243c74b72833fb9fff98587818"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000440)={0x40, 0x5, 0xbb, "b15bbaca38b845a15919d763ee1bf68279558066e7736e470104bac489f50134f22f1dcf396c33a65ba956a2b3399604493909bc538a58d5f5c2053aaa0dbc540995beb1e01ad3ab5340eb6db1bac9aedf472418428afaac5029ab64a53f28e9ab66a4a284a553be0eb5998456d9d01d71307118225966debc5472715e563fa7dfda5d611d04d830e63a1b58908b5094a0e78dc843941463324ec9a8539bb59c7b44535793de05b7bb4cb24104a1a7f6b43ba8744a538e11449b3a"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000bc0)}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r7 = openat$cgroup_ro(r0, &(0x7f0000001480)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) mmap(&(0x7f00002a1000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r8, &(0x7f0000000040), 0x6) 1.150555952s ago: executing program 4 (id=3769): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x41000, 0x8, 0x5f, 0x10, 0xe4, 0x40, 0x3, 0x0, 0x20, 0x19}, {0x41000, 0xa000, 0xa, 0x4, 0x40, 0x5, 0x7d, 0xa, 0x1, 0x3, 0xff}, {0x54000, 0x40000, 0xb, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0x2b, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x4, 0x40, 0x5, 0x43, 0x9, 0xfb, 0x80, 0x6, 0xe}, {0xdddd0000, 0x7000, 0xb, 0x2d, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x3, 0xf9, 0x5}, {0x1000, 0x80a0000, 0x8, 0x7, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x4b, 0x0, 0x7b, 0x7e, 0x6, 0x70}, {0xffff1000, 0xb000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x16, 0x2, 0x3, 0xb, 0x9}, {0x1000, 0x2d}, {0x100000, 0x3ff}, 0x80000031, 0x0, 0x5000, 0x42024, 0x4000000b, 0x9501, 0x54000, [0x6840000000000002, 0x7, 0x91, 0xfb]}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xec}, 0xff}, 0x20) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0xb, 0x4) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0xec}, 0x1}, 0x20) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0xec}, 0xff}, 0x20) sendmsg$can_j1939(r8, &(0x7f0000000200)={&(0x7f0000000280)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000300)={&(0x7f0000000340)="000102030f05060708090a0b93376a26848fd22cbd3f0c0d0e0f", 0x1a}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5000000}, 0x0) recvmsg$can_j1939(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800), 0x100}], 0x1}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000658000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e21, 0xfffffc00, @private2, 0x4004}, 0x1c, 0x0}, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 1.090238772s ago: executing program 4 (id=3770): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="1dcf3c", &(0x7f0000000180)="86b9be6c4f8557a6936be91186be53a3cfd2fe3f2bed511fcbce8f462e733e5f436adb0f7a2b55708b72bfc6773b8612d457db5fc874d10f2d5301a0c0e7daaacd8a6bcffc34b595f90c9e7402ac380ff6b1e47ca5df118131c5db9e706b24fbaba0f84a3a6c3ab5585fe437"}}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000080), 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt(r1, 0xffff3c4a, 0x83, 0x0, 0x0) 674.61677ms ago: executing program 5 (id=3771): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x321803) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x7ff) (async) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa2c0000e00000059078ac1414ff0a0101008902000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000075c0)={0x44, &(0x7f0000000240)={0x40, 0xa, 0x43, "7457acce1c59410565f300ea2a90c59b01b4cbbc1ce72e8f55991acf3d43e7060137e1c993fd3c39487ccfd4538cb2756b9c86e16d16542edd004d823613f782972287"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 673.999861ms ago: executing program 0 (id=3772): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x18800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x4}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 481.969371ms ago: executing program 0 (id=3773): set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 350.524741ms ago: executing program 0 (id=3774): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) r1 = socket(0x400000000010, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 266.42441ms ago: executing program 2 (id=3775): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) listen(r1, 0x0) syz_usb_connect(0x6, 0xdfc, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x94, 0x66, 0x49, 0x10, 0x586, 0x1500, 0xe0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdea, 0x3, 0x2, 0x4, 0x40, 0x32, "", [{{0x9, 0x4, 0x51, 0x4, 0x9, 0x8b, 0x8b, 0xc9, 0x1, [], [{{0x9, 0x5, 0xe, 0xc, 0x400, 0xe, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x23, 0x8, 0xe1}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x9e, 0x1, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x61, 0x4, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xb}, @generic={0xa3, 0x30, "c9bba2e2b369b5d545eb48e3c7438325410468923d7e719e36a717aaa5f3688045320f3752070df98100fdb26e7d3199cb9c8ac60e64a13c45abc9511d70d7b081ceb9c3c45c726179aae877f758e9e22d186f9a8ba7cb11d930cb3ea46db7ccbca92fada3dc9807be7a37f11d445a883ce53dacf3c8750858000d1ca2856c1162eab28a3e34633221b5761c61e99a3beb32b83cb86a7fa0dc351ec9827ad473bc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xf3, 0x7, 0x3, [@generic={0x47, 0x7, "8a7af31c4c0743384322f34bd2bf208b6a2ccd5a0bf33928a3be4b7987504692d2693bbfba3eda0eaeaa511c34e33c09c9fe47d512d84efe08507264aebd70742a76b3229a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xb, 0xfc, 0x9, [@generic={0x13, 0xf, "b977b1b8274fdd7dcd8136a702edaaf2cb"}, @generic={0xd7, 0xd, "efdba3da5170d373d277b39eaadd1a20ef91fe0dea27355fc19391ba225fbecc0987cbc0a65cc3983707a8d649c071d98311b1ee7e88b55e0b5cb22a7d51c1bb494e8de4de8a990de22785e50d91c31ca88773ff98c0eea1f9d70dba015570eb1d91ecf150a3f99e966ffaa3558a515cb6777abb7cbc75cde1bf97cb1b24371ea831eb63385891582fc743c930a8d55a848f3be7b8dc37561e1e3c04967121011277d957464905f8b20561d978e440912c3a81abf00afb900ea63a714609b29fca48f7c19fed080fd6fd152bb00d2f0ad04eecb0bc"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x11, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xa4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xa, 0x2, 0x7, [@generic={0x5e, 0x2, "435cd23e99e65fb87a3b140171552db12f882ca1a31e933121af908a49b8aefad2a64172080262d0c2437afbd103f761fa22c0aa349f231c3253c12d9efdc6220a1c97632b76eae51ef2bb6e2a76d2ea94730e899ddde1cc90ea848c"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0xc, 0xc6, 0xbc, 0xf3, 0x10, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b0ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x36, 0x5, 0x3b}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x5, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x2, [0x9, 0xa, 0x5, 0x9, 0xf6, 0x1]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x6f, 0x22}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x2f}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0xfb, "5bef02"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x3, 0x1, "2016d385dd43"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x1, 0x3, 0xfc}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}]}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xf3d2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x3, 0xa, [@generic={0xaf, 0xd, "b361030d0c1f5674fb7ec646d6c3f74c6c782bc48fc3f94ef8ac93ac357560ae3d84fc26644700a9f719f5af350f66de884e423696476944d28c72f3973136076aca473d0d58798e4d5ac2de9386c9f6382aba940c6405b9a226d88215cdbcfd9e3c1ebd86588de2699cf76378785686fcb430544c58c07f4273f3c637d06022bd39db3984c2ee4753010ec1d9eb77c09ce1375e4b0d2aae3122ed4d90f5ba6f2727a651c8816c7e49c28c9f9b"}, @uac_iso={0x7, 0x25, 0x1, 0xe27437f3753dd881, 0x7, 0x800}]}}, {{0x9, 0x5, 0xb, 0xc, 0xdf, 0x0, 0x3, 0xfb, [@generic={0xee, 0x7, "c59e37f73644b2e71b8a4a1650dc5489167ddbbd48507bddd8d6f8a19365fd995ca71366ad7cd9b7c53e124910f85cdd40aeb76108c9613d6f432ad2bf8e59f6b9a1131227983f7701e52358dec60d9783f32e1f555d24bff92f3d6235bb50fdbf64d4ce7b67cbb6707895a8575073d6760e5197cfc04dd4956b2d21a86c66d2c8542a8cb8ad07935d6faeba2d37c686fdf5f36eec3eb93d134bbc231f05f3a5876d46079995e5d210f392d2cb46e4b71ff3c6f79c775022be001c5a651821b0250c74b2be53e348c66c51525b84933bf1cbea0015e52bcc3e3ab04ae18f870920c822c9ebb729d84801fe85"}]}}, {{0x9, 0x5, 0xa1b2df65fed39fd0, 0x1, 0x20, 0x58, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x5, 0x9, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0x0, 0x8}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xe, 0x7, 0x3, [@generic={0x8, 0x22, "2149c32c08bf"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x18, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x13, 0x7}, @generic={0x8, 0x7, "7a9527297656"}]}}, {{0x9, 0x5, 0x9a, 0x10, 0x400, 0x4, 0x2, 0x0, [@generic={0xb5, 0xb, "c412d29ef78601289b4a22d21f0705c2fc9e91349096cbfab3998988996037930f28348a8863d845ade33ea65e4ad57dbf0aa91723a6abb23ddfa96c9c846d97103ecb1ed86815f8c37abeaaa01f3c8d6ea57d3071fc45b3a116f44dae03851376df3d5fcebc1808e4f9144cf01484ea78fe2d5b92ed21243fcc0122ed933797b7df8e1b627a734974bcdb4a57d38dea256a459ec67e1c68df9114a8e597fec5a7e3fad4c996bd57fcd548f49fa5368d494c87"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x71, 0x35, 0x1, [@generic={0x4b, 0x22, "160230b784d8f2026a1f1a59ea7077c9883018fcc5afe8ff44e3cb8acc9043410f49da0e660116a3a17c6d3e2b3d79414e65824bcef1499824f57cf4978888db103352c2e61ba484da"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x0, 0x1, 0x7f}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x80, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4}, @generic={0xda, 0xf, "d0a5522315465e4667aaab08da65d10feb19064b355e3c94ea8032f757e7946e0ebb76776529fe3e3c899d48456454939185a7944ad7c17c160126b62310ff354cf35a818ce3197961459cd05a519e287803ca8d21ed6a72f9a8bc822ca7fce0ae580c495696d246ab2369756ce28546c2e3087f4c5b082c18aeb54126055857c10331538bbdfee406c78f4f3c139c888b0a438e3c31a09cff237ad2ce967e758b19593962cdf10ed19e8aa41e0ddf90dc8a54f5f99888053a5f33f822001eef0fc2c7ab61f148dbd67bdc172230840ffdaa61a49b15f3d7"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0xfa, 0x2}}]}}, {{0x9, 0x4, 0x71, 0x4, 0xc, 0xe4, 0x15, 0xf2, 0x3, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x2, 0x6, 0x0, [@generic={0xae, 0x5, "59b1168a017d15fc0079f5711692358e4b49e51ce359703b823c3e5e39b2029616981e7488368f382e0a0baf375cef4ad1ddd37fba3eac678269dc9c5c748bbbaf9b816cb009cdec6df2313e07f154b33b4331b39b3599c4c88c4807808a6addc0a9b0624630d2c3d506b1166ffaf8fdf7907b9f13112b21bb019ddcb7bae63c18301002fa5537dcfcb98a5ef7413774bb07a6cf41d98856fd474021a5a8f6920c42d8ceeb9bf22554b81d69"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x4, 0x3, 0x80, [@generic={0x8d, 0x8, "df05a0239c44a61b552db061508a58d2f7bcb2443f887130ed5fdd9f178ec531756f10d127eff01ae69a756e62066a81a3d4ac4e96fb37508924ca9e32c1e5191186d083199b814d5fd6df2fff72ced1000914e738213551e8930100eab8cb2c57d8f89c9a32ecba3b2113ac6fe06ee0ef2d959cf5f219de00a656128b43426d6b60a5c1fbd1e0a844f34e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0xc2, 0x81, [@generic={0x1d, 0xb, "a447eb58781d5eb98c7371be8c5cee7adf33ea07a651fd6c6c4fe0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x6, 0xf, [@generic={0xbd, 0x5, "96df22c2f18ba9507c4a4a592ef7544ff142bc44eefe9d9c66f5f9464eb8b9ce24e7a9f1d96a1ffa5dff11972926cc3a066f983763d346073a3821fa3528bf10973a8ee4208531d77d89e038f6bc1551858436ee90a07e0ef232112a276dffb1d51d5f9c54b2d84637ea588b074531d2ff4a8e7a51f186b63dc38aba1783998d79ecbfdf93d53682b14500458753e4dccd95f57970f2d2b8ae23b17760edb8b3fc72c814dbfeb956d885d35dbe40f3c714d660ab09044c590fd08b"}, @generic={0xc3, 0xa, "5f5eaa3288a3c97cbeb4fa74ddf43b601e06ee19c92bf7d89d66f3f6da9a28b862069be386891202073a59bdd2cabeed24af8b2bd3b2b8fa723b4c4c38087b34ac11c92b834ceed464a9db89a78cad4e1cbaef823acb1c5d5c854fb256eccefa772b2b16cdac69ef4f7d2ab5725982dfeb294d2526a02c41eb1f8024137a2714402df6e089df0823bcec5a7c772d01d4598b40adf064d7d2d1c5b55f1bfb2deaa982e97936d697e4cac07bbf18c348813ea2f4d6758bdd05adb8b8a6815d571d86"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x30, 0x3, 0xf9, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfe}, @generic={0x6d, 0xf, "0ebb45d5d843bc06811edc9623c3ac5dde5869bb46fb8978221ce3926424beb6df7c0c6bd4e45eaf5d0ab6d748c8004f8177d41397aa7cc515d14ec4f264a547fb582ad5eacff60e3fb2da49daaa1632bc1faad65b9e5ec334588bddb7dbb9ce2a84decdc86fcb4098c79c"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x1, 0x9, 0x0, [@generic={0xd, 0x4, "d8a72085e02bcfde338279"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x648, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x8, 0xf, [@generic={0x6f, 0xc, "8c73f1b9bd4be4da7866706f3ec85cf9523cd32a4704ff39f7e0b290cbd64b2f386ed8f813bbd60b0bc3a57379b4dc8c431e5339316dbd36c6fb7002f4e6f071227c0335642bc77987ef508cf87c8e9b697018c5af08c18eead8bd50cc151536f2fb89f24af492c8911f5aba50"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0x5a}, @generic={0x7f, 0x21, "d78bdd5bed778817f935c1c1a56d7db5676f5c46980bb6507c6ff01f582f9d03beed32491a1e5b5e37eca266e05863a8cfe88f5fb58895aff9996dd50537bc773a06ea78221d96831d5132bcbf03af7e6870e0fbb924a00b02114974b4c3a98fb30201cb808fd11667b4a0aa89131fd462e87c97c3f89d921fe8cec75b"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x8, 0x7b, 0x0, [@generic={0x5b, 0x30, "081fa5a7586053e6e4e380c08b1da34ff58f375efb17f7e38a6ea1dd44b856f5920ad17c08b201b7d5bc68794c8c39c84483cead72903704191d6c82b9666c8c2ab8c8090af8e447ef85fe8e01fcd36df5258b68ad992d7e4c"}, @generic={0xac, 0x0, "e5098d4d533567c4190dffeb4411e01a5802b16e842205dc0e07108598d123fc62c8861c82dbac5ebb22cb6833dab3367b0ddd1f76bdb9216c442e4497331d76f96c6d2d7ef860ef91600aa306e3c409a61efd585d8d24b930a8827f85e7e40f92ab902cbaedba10537001e68d6ac915932dd0a9b3124a5f4bb40de5e3bce1c2965d190cf2cd2385ccd9c456dca90f07f8007283651df332d57d77f328c61b4f02b29c73c946ac5713d4"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x3, 0x2, [@generic={0xbe, 0x8, "2f808c803c970a0a74e9649183ac0798b1ba6531dbff59dab83635ab7ecdfaf9c5d7baa5bd9775fed00668e63cd57670b07dff08d120ec04f09ceab977c9ff21134564bf95114edc3e0e2414e6231421360d690ca3f74436154260965f397d4f794f916f55f84e5860a17d07238d09b8a86850f14a2f8f302b19eaaf608aded1db3aaaf7dbebbe3694b46438a55c5483d1ba4fe7010b75e074865a7bf14ef0fd3b4f536cd8439be20b692a0173c930839029b748dc48ef0511493602"}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0x4, 0xf8, 0xb5, 0x40, 0x5}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc1a}}, {0xd6, &(0x7f0000001340)=@string={0xd6, 0x3, "f4d03911a5f54a562e7da25d97b8829e5a781423388f7b32616cb7a26b9086afcb4fa20fe28540bd570e1b25a14a5fc2c5623fce5f23ec4dcabc96028d54cdf598097fe81be77f752818a644da6a3af6ca678e578f3fc6f9d04f9c61ae70d5ae9071a4b6c74d4679b4ccbc37b5e5dbbc271d01585144e96c8c211c0ab47cd54516d5983cca58983620e635b31dd520b384293ff49e58ce723791a06564eb135299708f98e65195618b77e6c12037b11cf3f5c6768f6a244ccddbfc0a37c6a4c525fcbeacbf32b67b31f72c9966028535bf23919a"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x180c}}, {0x5e, &(0x7f00000014c0)=@string={0x5e, 0x3, "a26aece711c26286b6c037c02a26adcde59c2ea36d16d045dccd25a52d566f4cb6035ceb455b8962f84545a501c306342ac1231a84594c6d9fb18211dede31176a65f8aa54947ebebb93394c3f19e8bc3a99145f2a45a21b7502828f"}}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x473a, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x2, "2702"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) (async) listen(r1, 0x0) (async) syz_usb_connect(0x6, 0xdfc, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x94, 0x66, 0x49, 0x10, 0x586, 0x1500, 0xe0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdea, 0x3, 0x2, 0x4, 0x40, 0x32, "", [{{0x9, 0x4, 0x51, 0x4, 0x9, 0x8b, 0x8b, 0xc9, 0x1, [], [{{0x9, 0x5, 0xe, 0xc, 0x400, 0xe, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x23, 0x8, 0xe1}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x9e, 0x1, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x61, 0x4, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xb}, @generic={0xa3, 0x30, "c9bba2e2b369b5d545eb48e3c7438325410468923d7e719e36a717aaa5f3688045320f3752070df98100fdb26e7d3199cb9c8ac60e64a13c45abc9511d70d7b081ceb9c3c45c726179aae877f758e9e22d186f9a8ba7cb11d930cb3ea46db7ccbca92fada3dc9807be7a37f11d445a883ce53dacf3c8750858000d1ca2856c1162eab28a3e34633221b5761c61e99a3beb32b83cb86a7fa0dc351ec9827ad473bc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xf3, 0x7, 0x3, [@generic={0x47, 0x7, "8a7af31c4c0743384322f34bd2bf208b6a2ccd5a0bf33928a3be4b7987504692d2693bbfba3eda0eaeaa511c34e33c09c9fe47d512d84efe08507264aebd70742a76b3229a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xb, 0xfc, 0x9, [@generic={0x13, 0xf, "b977b1b8274fdd7dcd8136a702edaaf2cb"}, @generic={0xd7, 0xd, "efdba3da5170d373d277b39eaadd1a20ef91fe0dea27355fc19391ba225fbecc0987cbc0a65cc3983707a8d649c071d98311b1ee7e88b55e0b5cb22a7d51c1bb494e8de4de8a990de22785e50d91c31ca88773ff98c0eea1f9d70dba015570eb1d91ecf150a3f99e966ffaa3558a515cb6777abb7cbc75cde1bf97cb1b24371ea831eb63385891582fc743c930a8d55a848f3be7b8dc37561e1e3c04967121011277d957464905f8b20561d978e440912c3a81abf00afb900ea63a714609b29fca48f7c19fed080fd6fd152bb00d2f0ad04eecb0bc"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x11, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xa4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xa, 0x2, 0x7, [@generic={0x5e, 0x2, "435cd23e99e65fb87a3b140171552db12f882ca1a31e933121af908a49b8aefad2a64172080262d0c2437afbd103f761fa22c0aa349f231c3253c12d9efdc6220a1c97632b76eae51ef2bb6e2a76d2ea94730e899ddde1cc90ea848c"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0xc, 0xc6, 0xbc, 0xf3, 0x10, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b0ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x36, 0x5, 0x3b}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x5, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x2, [0x9, 0xa, 0x5, 0x9, 0xf6, 0x1]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x6f, 0x22}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x2f}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0xfb, "5bef02"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x3, 0x1, "2016d385dd43"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x1, 0x3, 0xfc}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}]}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xf3d2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x3, 0xa, [@generic={0xaf, 0xd, "b361030d0c1f5674fb7ec646d6c3f74c6c782bc48fc3f94ef8ac93ac357560ae3d84fc26644700a9f719f5af350f66de884e423696476944d28c72f3973136076aca473d0d58798e4d5ac2de9386c9f6382aba940c6405b9a226d88215cdbcfd9e3c1ebd86588de2699cf76378785686fcb430544c58c07f4273f3c637d06022bd39db3984c2ee4753010ec1d9eb77c09ce1375e4b0d2aae3122ed4d90f5ba6f2727a651c8816c7e49c28c9f9b"}, @uac_iso={0x7, 0x25, 0x1, 0xe27437f3753dd881, 0x7, 0x800}]}}, {{0x9, 0x5, 0xb, 0xc, 0xdf, 0x0, 0x3, 0xfb, [@generic={0xee, 0x7, "c59e37f73644b2e71b8a4a1650dc5489167ddbbd48507bddd8d6f8a19365fd995ca71366ad7cd9b7c53e124910f85cdd40aeb76108c9613d6f432ad2bf8e59f6b9a1131227983f7701e52358dec60d9783f32e1f555d24bff92f3d6235bb50fdbf64d4ce7b67cbb6707895a8575073d6760e5197cfc04dd4956b2d21a86c66d2c8542a8cb8ad07935d6faeba2d37c686fdf5f36eec3eb93d134bbc231f05f3a5876d46079995e5d210f392d2cb46e4b71ff3c6f79c775022be001c5a651821b0250c74b2be53e348c66c51525b84933bf1cbea0015e52bcc3e3ab04ae18f870920c822c9ebb729d84801fe85"}]}}, {{0x9, 0x5, 0xa1b2df65fed39fd0, 0x1, 0x20, 0x58, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x5, 0x9, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0x0, 0x8}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xe, 0x7, 0x3, [@generic={0x8, 0x22, "2149c32c08bf"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x18, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x13, 0x7}, @generic={0x8, 0x7, "7a9527297656"}]}}, {{0x9, 0x5, 0x9a, 0x10, 0x400, 0x4, 0x2, 0x0, [@generic={0xb5, 0xb, "c412d29ef78601289b4a22d21f0705c2fc9e91349096cbfab3998988996037930f28348a8863d845ade33ea65e4ad57dbf0aa91723a6abb23ddfa96c9c846d97103ecb1ed86815f8c37abeaaa01f3c8d6ea57d3071fc45b3a116f44dae03851376df3d5fcebc1808e4f9144cf01484ea78fe2d5b92ed21243fcc0122ed933797b7df8e1b627a734974bcdb4a57d38dea256a459ec67e1c68df9114a8e597fec5a7e3fad4c996bd57fcd548f49fa5368d494c87"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x71, 0x35, 0x1, [@generic={0x4b, 0x22, "160230b784d8f2026a1f1a59ea7077c9883018fcc5afe8ff44e3cb8acc9043410f49da0e660116a3a17c6d3e2b3d79414e65824bcef1499824f57cf4978888db103352c2e61ba484da"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x0, 0x1, 0x7f}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x80, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4}, @generic={0xda, 0xf, "d0a5522315465e4667aaab08da65d10feb19064b355e3c94ea8032f757e7946e0ebb76776529fe3e3c899d48456454939185a7944ad7c17c160126b62310ff354cf35a818ce3197961459cd05a519e287803ca8d21ed6a72f9a8bc822ca7fce0ae580c495696d246ab2369756ce28546c2e3087f4c5b082c18aeb54126055857c10331538bbdfee406c78f4f3c139c888b0a438e3c31a09cff237ad2ce967e758b19593962cdf10ed19e8aa41e0ddf90dc8a54f5f99888053a5f33f822001eef0fc2c7ab61f148dbd67bdc172230840ffdaa61a49b15f3d7"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0xfa, 0x2}}]}}, {{0x9, 0x4, 0x71, 0x4, 0xc, 0xe4, 0x15, 0xf2, 0x3, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x2, 0x6, 0x0, [@generic={0xae, 0x5, "59b1168a017d15fc0079f5711692358e4b49e51ce359703b823c3e5e39b2029616981e7488368f382e0a0baf375cef4ad1ddd37fba3eac678269dc9c5c748bbbaf9b816cb009cdec6df2313e07f154b33b4331b39b3599c4c88c4807808a6addc0a9b0624630d2c3d506b1166ffaf8fdf7907b9f13112b21bb019ddcb7bae63c18301002fa5537dcfcb98a5ef7413774bb07a6cf41d98856fd474021a5a8f6920c42d8ceeb9bf22554b81d69"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x4, 0x3, 0x80, [@generic={0x8d, 0x8, "df05a0239c44a61b552db061508a58d2f7bcb2443f887130ed5fdd9f178ec531756f10d127eff01ae69a756e62066a81a3d4ac4e96fb37508924ca9e32c1e5191186d083199b814d5fd6df2fff72ced1000914e738213551e8930100eab8cb2c57d8f89c9a32ecba3b2113ac6fe06ee0ef2d959cf5f219de00a656128b43426d6b60a5c1fbd1e0a844f34e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0xc2, 0x81, [@generic={0x1d, 0xb, "a447eb58781d5eb98c7371be8c5cee7adf33ea07a651fd6c6c4fe0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x6, 0xf, [@generic={0xbd, 0x5, "96df22c2f18ba9507c4a4a592ef7544ff142bc44eefe9d9c66f5f9464eb8b9ce24e7a9f1d96a1ffa5dff11972926cc3a066f983763d346073a3821fa3528bf10973a8ee4208531d77d89e038f6bc1551858436ee90a07e0ef232112a276dffb1d51d5f9c54b2d84637ea588b074531d2ff4a8e7a51f186b63dc38aba1783998d79ecbfdf93d53682b14500458753e4dccd95f57970f2d2b8ae23b17760edb8b3fc72c814dbfeb956d885d35dbe40f3c714d660ab09044c590fd08b"}, @generic={0xc3, 0xa, "5f5eaa3288a3c97cbeb4fa74ddf43b601e06ee19c92bf7d89d66f3f6da9a28b862069be386891202073a59bdd2cabeed24af8b2bd3b2b8fa723b4c4c38087b34ac11c92b834ceed464a9db89a78cad4e1cbaef823acb1c5d5c854fb256eccefa772b2b16cdac69ef4f7d2ab5725982dfeb294d2526a02c41eb1f8024137a2714402df6e089df0823bcec5a7c772d01d4598b40adf064d7d2d1c5b55f1bfb2deaa982e97936d697e4cac07bbf18c348813ea2f4d6758bdd05adb8b8a6815d571d86"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x30, 0x3, 0xf9, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfe}, @generic={0x6d, 0xf, "0ebb45d5d843bc06811edc9623c3ac5dde5869bb46fb8978221ce3926424beb6df7c0c6bd4e45eaf5d0ab6d748c8004f8177d41397aa7cc515d14ec4f264a547fb582ad5eacff60e3fb2da49daaa1632bc1faad65b9e5ec334588bddb7dbb9ce2a84decdc86fcb4098c79c"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x1, 0x9, 0x0, [@generic={0xd, 0x4, "d8a72085e02bcfde338279"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x648, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x8, 0xf, [@generic={0x6f, 0xc, "8c73f1b9bd4be4da7866706f3ec85cf9523cd32a4704ff39f7e0b290cbd64b2f386ed8f813bbd60b0bc3a57379b4dc8c431e5339316dbd36c6fb7002f4e6f071227c0335642bc77987ef508cf87c8e9b697018c5af08c18eead8bd50cc151536f2fb89f24af492c8911f5aba50"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0x5a}, @generic={0x7f, 0x21, "d78bdd5bed778817f935c1c1a56d7db5676f5c46980bb6507c6ff01f582f9d03beed32491a1e5b5e37eca266e05863a8cfe88f5fb58895aff9996dd50537bc773a06ea78221d96831d5132bcbf03af7e6870e0fbb924a00b02114974b4c3a98fb30201cb808fd11667b4a0aa89131fd462e87c97c3f89d921fe8cec75b"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x8, 0x7b, 0x0, [@generic={0x5b, 0x30, "081fa5a7586053e6e4e380c08b1da34ff58f375efb17f7e38a6ea1dd44b856f5920ad17c08b201b7d5bc68794c8c39c84483cead72903704191d6c82b9666c8c2ab8c8090af8e447ef85fe8e01fcd36df5258b68ad992d7e4c"}, @generic={0xac, 0x0, "e5098d4d533567c4190dffeb4411e01a5802b16e842205dc0e07108598d123fc62c8861c82dbac5ebb22cb6833dab3367b0ddd1f76bdb9216c442e4497331d76f96c6d2d7ef860ef91600aa306e3c409a61efd585d8d24b930a8827f85e7e40f92ab902cbaedba10537001e68d6ac915932dd0a9b3124a5f4bb40de5e3bce1c2965d190cf2cd2385ccd9c456dca90f07f8007283651df332d57d77f328c61b4f02b29c73c946ac5713d4"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x3, 0x2, [@generic={0xbe, 0x8, "2f808c803c970a0a74e9649183ac0798b1ba6531dbff59dab83635ab7ecdfaf9c5d7baa5bd9775fed00668e63cd57670b07dff08d120ec04f09ceab977c9ff21134564bf95114edc3e0e2414e6231421360d690ca3f74436154260965f397d4f794f916f55f84e5860a17d07238d09b8a86850f14a2f8f302b19eaaf608aded1db3aaaf7dbebbe3694b46438a55c5483d1ba4fe7010b75e074865a7bf14ef0fd3b4f536cd8439be20b692a0173c930839029b748dc48ef0511493602"}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0x4, 0xf8, 0xb5, 0x40, 0x5}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xc1a}}, {0xd6, &(0x7f0000001340)=@string={0xd6, 0x3, "f4d03911a5f54a562e7da25d97b8829e5a781423388f7b32616cb7a26b9086afcb4fa20fe28540bd570e1b25a14a5fc2c5623fce5f23ec4dcabc96028d54cdf598097fe81be77f752818a644da6a3af6ca678e578f3fc6f9d04f9c61ae70d5ae9071a4b6c74d4679b4ccbc37b5e5dbbc271d01585144e96c8c211c0ab47cd54516d5983cca58983620e635b31dd520b384293ff49e58ce723791a06564eb135299708f98e65195618b77e6c12037b11cf3f5c6768f6a244ccddbfc0a37c6a4c525fcbeacbf32b67b31f72c9966028535bf23919a"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x180c}}, {0x5e, &(0x7f00000014c0)=@string={0x5e, 0x3, "a26aece711c26286b6c037c02a26adcde59c2ea36d16d045dccd25a52d566f4cb6035ceb455b8962f84545a501c306342ac1231a84594c6d9fb18211dede31176a65f8aa54947ebebb93394c3f19e8bc3a99145f2a45a21b7502828f"}}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x473a, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x2, "2702"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) (async) 97.549624ms ago: executing program 4 (id=3776): r0 = gettid() sigaltstack(&(0x7f0000000040)={&(0x7f0000000280)=""/4142, 0x80000001, 0x102e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000e103010800000000000000000a0000010500010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000001440)=ANY=[@ANYBLOB="4400000015b60a1400210400000000dec17af6b2000000cd7e088d446f0be8e5af13c8e8ef27599ad111f9c85f5dcc342f30b1f6f693e54fd711d5e65e53aef82fb54383d7992404e627752b093949e9ceb793c9b792711236180fa0d54c51517c44de9dafce6d81cde8715a40759cd34f030efeb618364ec03b3791dc2c45268772096d8a71cb59b1bec3647af218704e0eaca38493df9402e2e32524afe992800f325b948424b8cb764eb6bae475b1e40ae0059cb0549f55e087ae14cf7fbecfbf66abe13ecdd2d53d0eac187300828ac170734aabd6d97df912f1620171b6cab857aaa6", @ANYRES32=0x0, @ANYBLOB="0000000040020000180012800e00010069703665727370616e000000040002800a000100bbbbbbbbbbbb0000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xc7, 0x9, 0x12, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x40, 0xb, 0x5}}) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1e}) process_madvise(0xffffffffffffffff, &(0x7f0000001400)=[{0xffffffffffffffff}], 0x1, 0x19, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0xfffffd94, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000100), 0x4) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', 0x88900) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x1a, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000180)={0x3, 0x5, 0x0, 0x4, "322af64a03d870fa03c77f7686d1de547460ff890a998ade6525f9bd5627b341"}) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x22, &(0x7f00000012c0)={@link_local, @random="ece65fbcee55", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "3380b9583b606c4a"}}}}, 0x0) r10 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r10, 0x0, 0x1, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 54.454861ms ago: executing program 0 (id=3777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) ioctl(r3, 0x4048aec9, &(0x7f0000000200)="01000000000000000900"/72) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f000000b000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x1, 0x0, 0x9000, 0x1000, &(0x7f000000c000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl(r3, 0x3, &(0x7f0000000300)="0000010000000000001000000000000031000000000000000000000000008000e8000000000000000000000000000000eeffffff00"/72) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r1, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 0s ago: executing program 4 (id=3778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0xa15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) (async) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000340)=@echo=0xfffffeff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4004054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f88c0ef91a445c7a81fbf1f737e6c177"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "955cb2f2ec98e55ffa04b3c86a388e12"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) kernel console output (not intermixed with test programs): controlC3/../uevent} for writing: No such file or directory [ 801.666444][T18522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3385'. [ 801.725164][T18522] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 801.921405][T18530] bridge3: entered promiscuous mode [ 801.971182][ T5692] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 802.141297][T18537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'. [ 802.173754][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 802.202704][ T5692] usb 2-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 802.248150][ T5692] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 167, changing to 4 [ 802.279323][ T5692] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 802.358958][ T5692] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 802.405520][ T5692] usb 2-1: string descriptor 0 read error: -22 [ 802.417389][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.485462][ T5692] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 802.523745][ T5692] usb 2-1: MIDIStreaming interface descriptor not found [ 802.665010][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 802.859375][T18516] hsr_slave_1 (unregistering): left promiscuous mode [ 803.037329][T15418] usb 2-1: USB disconnect, device number 65 [ 803.122237][T10291] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 803.291398][T10291] usb 3-1: device descriptor read/64, error -71 [ 803.551244][T10291] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 803.571696][ T5692] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 803.602824][T18562] loop5: detected capacity change from 0 to 7 [ 803.613791][T18562] buffer_io_error: 14 callbacks suppressed [ 803.613802][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.639997][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.649986][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.659638][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.668171][T10290] net_ratelimit: 2 callbacks suppressed [ 803.668184][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.685168][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.693629][T10291] usb 3-1: device descriptor read/64, error -71 [ 803.700127][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.708367][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.717523][T18562] ldm_validate_partition_table(): Disk read failed. [ 803.727171][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.736790][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.746045][T18562] Buffer I/O error on dev loop5, logical block 0, async page read [ 803.755728][T18562] Dev loop5: unable to read RDB block 0 [ 803.761959][ T5692] usb 6-1: Using ep0 maxpacket: 8 [ 803.763264][T18562] loop5: unable to read partition table [ 803.773231][T18562] loop5: partition table beyond EOD, truncated [ 803.775879][ T5692] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 803.794750][ T5692] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 803.800381][T18562] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 803.811121][ T5692] usb 6-1: config 0 has no interface number 0 [ 803.817956][T10291] usb usb3-port1: attempt power cycle [ 803.837602][T18566] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3397'. [ 803.850663][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.887455][ T5692] usb 6-1: Product: syz [ 803.905195][ T5692] usb 6-1: Manufacturer: syz [ 803.914659][ T5692] usb 6-1: SerialNumber: syz [ 803.936130][ T5692] usb 6-1: config 0 descriptor?? [ 803.969896][ T5692] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 803.981577][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.030914][T18572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3400'. [ 804.045965][T18572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3400'. [ 804.177437][T10291] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 804.204163][T10291] usb 3-1: device descriptor read/8, error -71 [ 804.451167][T10291] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 804.481991][T10291] usb 3-1: device descriptor read/8, error -71 [ 804.602466][T10291] usb usb3-port1: unable to enumerate USB device [ 804.703156][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.928000][T18591] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.380760][T18596] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3406'. [ 805.500730][T18596] ip6erspan0: entered promiscuous mode [ 805.510284][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.536427][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.548916][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.749362][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.879009][T18604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3409'. [ 806.059258][T18605] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 806.111353][T10291] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 806.142570][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.158251][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.169172][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.272165][T10291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 806.289182][T10291] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 806.307317][T10291] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 806.326223][T10291] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.344699][T10291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 806.353692][T10291] usb 3-1: Product: syz [ 806.358791][T10291] usb 3-1: Manufacturer: syz [ 806.363864][T10291] usb 3-1: SerialNumber: syz [ 806.385616][T18556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.405692][T18556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.580412][T10291] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 806.691327][ T5692] gspca_sonixj: reg_w1 err -110 [ 806.741440][ T5692] sonixj 6-1:0.64: probe with driver sonixj failed with error -110 [ 806.814270][T18601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3408'. [ 806.826594][T10290] usb 6-1: USB disconnect, device number 4 [ 807.432248][ T5692] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 807.635844][ T5692] usb 1-1: device descriptor read/64, error -71 [ 807.665960][T18634] bridge1: entered promiscuous mode [ 807.852815][T18638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3414'. [ 807.931157][ T5692] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 808.103435][ T5692] usb 1-1: device descriptor read/64, error -71 [ 808.239837][ T5692] usb usb1-port1: attempt power cycle [ 808.624286][ T5692] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 808.692496][ T5692] usb 1-1: device descriptor read/8, error -71 [ 808.705284][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.712020][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.971212][ T5692] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 809.034970][ T5692] usb 1-1: device descriptor read/8, error -71 [ 809.054020][T10306] usb 3-1: USB disconnect, device number 87 [ 809.098255][T10306] usblp0: removed [ 809.163483][ T5692] usb usb1-port1: unable to enumerate USB device [ 809.251292][T10290] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 809.281434][T10291] net_ratelimit: 3 callbacks suppressed [ 809.281451][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.336001][T18667] syzkaller0: entered promiscuous mode [ 809.368089][T18667] syzkaller0: entered allmulticast mode [ 809.405332][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3420'. [ 809.452076][T10290] usb 5-1: Using ep0 maxpacket: 16 [ 809.465447][T10290] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 809.508593][T10290] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.524136][T10290] usb 5-1: config 0 interface 0 has no altsetting 0 [ 809.539280][T10290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.555948][T10290] usb 5-1: config 0 descriptor?? [ 809.602289][T10306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 809.772254][T10306] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 809.793325][T10306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.832657][T10306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.841298][T10291] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 809.844091][T10306] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 809.878687][T10306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.900615][T10306] usb 6-1: Product: syz [ 809.915866][T10306] usb 6-1: Manufacturer: syz [ 809.947317][T10306] usb 6-1: SerialNumber: syz [ 810.001898][T10291] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 810.048301][T10291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.062347][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.070991][T10291] usb 3-1: Product: syz [ 810.079808][T10290] nzxt-smart2 0003:1E71:2009.0072: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 810.109165][T10291] usb 3-1: Manufacturer: syz [ 810.122111][T10291] usb 3-1: SerialNumber: syz [ 810.163125][T10300] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 810.172509][T10290] nzxt-smart2 0003:1E71:2009.0072: init_device failed: -38 [ 810.208708][T10290] nzxt-smart2 0003:1E71:2009.0072: probe with driver nzxt-smart2 failed with error -38 [ 810.243770][T18662] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 810.301484][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.348915][T10300] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 810.409760][T10300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.487391][T10300] usb-storage 2-1:32.0: USB Mass Storage device detected [ 810.543880][T10300] usb-storage 2-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 810.628423][T10291] rtl8150 3-1:1.0: couldn't reset the device [ 810.638136][T10291] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 810.654600][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.671248][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.689289][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.717389][T18662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.733511][T10291] usb 3-1: USB disconnect, device number 88 [ 810.780213][T18662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.873900][T10290] usb 5-1: USB disconnect, device number 79 [ 811.271573][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.280970][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.290625][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.832864][T18722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.952425][T18722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.099322][T18722] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 812.132669][T10291] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 812.192950][T18722] bond0 (unregistering): Released all slaves [ 812.293553][T10291] usb 1-1: Using ep0 maxpacket: 16 [ 812.324253][T10291] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 812.358580][T10306] usb 6-1: USB disconnect, device number 5 [ 812.358652][ C0] usb 6-1: comm data receiver aborted. [ 812.361436][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.387727][T10291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.437388][T10291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 812.509319][T10291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.587105][T10291] usb 1-1: config 0 descriptor?? [ 812.783557][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 812.783596][ T30] audit: type=1326 audit(1787689260.724:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.2.3431" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fae43b97e57 code=0x0 [ 812.822516][T18745] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3432'. [ 813.057808][T10291] kye 0003:0458:5005.0073: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 813.096452][T10291] kye 0003:0458:5005.0073: reserved main item tag 0xd [ 813.157907][T10291] kye 0003:0458:5005.0073: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 813.184273][T10291] kye 0003:0458:5005.0073: tablet-enabling feature report not found [ 813.201269][T10291] kye 0003:0458:5005.0073: tablet enabling failed [ 813.210675][T16261] usb 2-1: USB disconnect, device number 66 [ 813.688440][T10306] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 813.734697][T18777] netlink: 'syz.1.3437': attribute type 5 has an invalid length. [ 813.886303][T10306] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 813.905957][T10306] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 813.919059][T10306] usb 6-1: config 179 has no interface number 0 [ 813.957757][T10306] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 813.985076][T10306] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 814.003884][T10306] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 814.015816][T10306] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 814.021353][T10291] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 814.028079][T10306] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 814.055526][T10306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.075287][T18716] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 814.103100][T10306] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 814.127952][T10306] xpad 6-1:179.65: probe with driver xpad failed with error -90 [ 814.181325][T10291] usb 3-1: device descriptor read/64, error -71 [ 814.245295][T18784] IPv6: Can't replace route, no match found [ 814.300812][T10306] usb 6-1: USB disconnect, device number 6 [ 814.375054][T18787] fuse: Bad value for 'fd' [ 814.441246][T10291] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 814.463551][T10300] net_ratelimit: 2 callbacks suppressed [ 814.463565][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.581656][T10291] usb 3-1: device descriptor read/64, error -71 [ 814.661160][T10290] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 814.691442][T10291] usb usb3-port1: attempt power cycle [ 814.811866][T10290] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 814.834523][T10290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.849304][T10290] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.871355][T10290] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 814.887516][T10290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.898726][T10290] usb 5-1: Product: syz [ 814.903067][T10290] usb 5-1: Manufacturer: syz [ 814.907936][T10290] usb 5-1: SerialNumber: syz [ 815.054491][T10291] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 815.092010][T10291] usb 3-1: device descriptor read/8, error -71 [ 815.132758][T18789] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3442'. [ 815.331519][T16260] usb 1-1: USB disconnect, device number 71 [ 815.334204][T18801] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 815.369745][T18801] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3446'. [ 815.373553][T10291] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 815.388357][ C1] usb 5-1: received EP1 urb->status = -2 [ 815.397135][T10290] usb 5-1: unable to init card! (ret=-110) [ 815.410748][T10290] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 815.472508][T10291] usb 3-1: device descriptor read/8, error -71 [ 815.501927][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.564641][T18809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.567705][T18812] Invalid argument reading file caps for ./file0 [ 815.613188][T16261] usb 5-1: USB disconnect, device number 80 [ 815.621754][T10291] usb usb3-port1: unable to enumerate USB device [ 815.766928][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 815.921149][T16260] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 816.101964][T16260] usb 1-1: Using ep0 maxpacket: 16 [ 816.116698][T16260] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 816.142002][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.164718][T16260] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.195175][T16260] usb 1-1: config 0 has no interface number 0 [ 816.219838][T16260] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 816.258857][T16260] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 816.286167][T18820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3452'. [ 816.314717][T16260] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.324076][T18822] fuse: Unexpected value for 'default_permissions' [ 816.333471][T16260] usb 1-1: config 0 has no interface number 0 [ 816.349784][T16260] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 816.371495][T16260] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 816.382958][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.392434][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.407997][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.420349][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.440793][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.469593][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.491665][T16260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.508801][T16260] usb 1-1: Product: syz [ 816.523074][T16260] usb 1-1: Manufacturer: syz [ 816.534780][T16260] usb 1-1: SerialNumber: syz [ 816.563699][T16260] usb 1-1: config 0 descriptor?? [ 816.581214][T16261] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 816.583608][T16260] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.600707][T18819] bridge2: entered promiscuous mode [ 816.774345][T16261] usb 5-1: not running at top speed; connect to a high speed hub [ 816.805363][T16261] usb 5-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 816.831556][T16260] usb 1-1: USB disconnect, device number 72 [ 816.866824][T16261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.889480][T16261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 816.901259][T16261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.938581][T16261] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:d970) [ 816.980653][T18828] tipc: Started in network mode [ 817.000812][T18828] tipc: Node identity 2ef8eea673fa, cluster identity 4711 [ 817.021036][T18828] tipc: Enabled bearer , priority 0 [ 817.040410][T18829] syzkaller0: entered promiscuous mode [ 817.077066][T18829] syzkaller0: entered allmulticast mode [ 817.122382][T16261] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 817.133573][T18828] tipc: Resetting bearer [ 817.144487][T16261] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 817.176777][T18827] tipc: Resetting bearer [ 817.224383][T16261] usb 5-1: USB disconnect, device number 81 [ 817.261036][T18827] tipc: Disabling bearer [ 817.504119][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.588724][T18839] syzkaller0: entered promiscuous mode [ 817.655043][T18839] syzkaller0: entered allmulticast mode [ 817.880271][ T30] audit: type=1326 audit(1787689265.814:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.2.3462" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x0 [ 818.211203][T16260] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 818.361479][T16260] usb 6-1: Using ep0 maxpacket: 32 [ 818.367688][T16260] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 818.380185][T16260] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 818.390911][T16260] usb 6-1: config 0 has no interface number 0 [ 818.399756][T16260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.408957][T16260] usb 6-1: Product: syz [ 818.415573][T16260] usb 6-1: Manufacturer: syz [ 818.420310][T16260] usb 6-1: SerialNumber: syz [ 818.433410][T16260] usb 6-1: config 0 descriptor?? [ 818.443168][T16260] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 818.649646][T16260] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 818.672957][T16260] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 819.006179][T18872] kvm: kvm [18871]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 819.318965][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 819.329151][T16260] usb 6-1: USB disconnect, device number 7 [ 819.344202][ T2241] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 819.389489][T16260] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 819.458450][T16260] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 819.506875][T16260] quatech2 6-1:0.51: device disconnected [ 819.527181][ T2241] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 819.568036][ T2241] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 819.586253][T10290] net_ratelimit: 2 callbacks suppressed [ 819.586271][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.604645][ T2241] usb 1-1: config 0 has no interface number 0 [ 819.636483][ T2241] usb 1-1: config 0 interface 41 has no altsetting 0 [ 819.726410][ T2241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.768429][ T2241] usb 1-1: Product: syz [ 819.779374][ T2241] usb 1-1: Manufacturer: syz [ 819.797094][ T2241] usb 1-1: SerialNumber: syz [ 819.813705][T18872] bridge1: left promiscuous mode [ 819.821913][ T2241] usb 1-1: config 0 descriptor?? [ 819.842409][T18872] bridge2: left promiscuous mode [ 819.862884][T18872] bridge3: left promiscuous mode [ 819.962950][T10290] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 820.022801][T16261] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 820.121853][T10290] usb 2-1: Using ep0 maxpacket: 32 [ 820.132659][T10290] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 820.146236][T10290] usb 2-1: config 0 has no interfaces? [ 820.161229][T10290] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 820.171173][T16261] usb 3-1: device descriptor read/64, error -71 [ 820.183344][T10290] usb 2-1: Product: syz [ 820.200038][T10290] usb 2-1: Manufacturer: syz [ 820.219788][T10290] usb 2-1: SerialNumber: syz [ 820.240451][T10290] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 820.262777][T10290] usb 2-1: no configuration chosen from 1 choice [ 820.291730][T18872] Invalid argument reading file caps for ./file0 [ 820.424384][T16261] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 820.561367][T16261] usb 3-1: device descriptor read/64, error -71 [ 820.571191][T10290] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 820.626159][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.682084][T16261] usb usb3-port1: attempt power cycle [ 820.720588][ T2241] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 820.721636][T10290] usb 5-1: Using ep0 maxpacket: 8 [ 820.740274][ T2241] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 820.754950][T10290] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 820.761192][ T2241] usb 1-1: USB disconnect, device number 73 [ 820.768037][T10290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.786337][T10290] usb 5-1: Product: syz [ 820.790716][T10290] usb 5-1: Manufacturer: syz [ 820.796638][T10290] usb 5-1: SerialNumber: syz [ 820.871300][T10306] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 821.020037][T10290] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 821.032941][T16261] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 821.040753][T10306] usb 6-1: Using ep0 maxpacket: 32 [ 821.048538][T10306] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 821.060036][T10306] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 821.068613][T10306] usb 6-1: config 0 has no interface number 0 [ 821.075342][T16261] usb 3-1: device descriptor read/8, error -71 [ 821.082381][T10306] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 821.086017][T10290] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 821.093270][T10306] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.112167][T10306] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.118774][T10290] usb 5-1: USB disconnect, device number 82 [ 821.122784][T10306] usb 6-1: config 0 interface 196 has no altsetting 0 [ 821.138325][T10306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.150462][T10306] usb 6-1: Product: syz [ 821.157223][T10306] usb 6-1: Manufacturer: syz [ 821.162870][T10306] usb 6-1: SerialNumber: syz [ 821.166334][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.195894][T10306] usb 6-1: config 0 descriptor?? [ 821.204453][T18905] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 821.341372][T16261] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 821.373175][T16261] usb 3-1: device descriptor read/8, error -71 [ 821.419205][T10306] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 821.427867][T10306] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 821.440994][T10306] usb 6-1: USB disconnect, device number 8 [ 821.483385][T16261] usb usb3-port1: unable to enumerate USB device [ 821.673172][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.981165][T10290] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 822.145219][T10290] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 822.160805][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.174590][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.186481][T10290] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 822.201921][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.210286][T10290] usb 5-1: config 0 interface 0 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.225488][T10290] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.233189][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.234514][T10290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.253500][T10290] usb 5-1: config 0 descriptor?? [ 822.346795][T18924] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3486'. [ 822.359363][T18924] gretap0: entered promiscuous mode [ 822.381019][T18924] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3486'. [ 822.393421][T18924] 0{X: renamed from gretap0 [ 822.400393][T18924] 0{X: left promiscuous mode [ 822.406681][T18924] 0{X: entered allmulticast mode [ 822.634482][T16260] usb 2-1: USB disconnect, device number 67 [ 822.677194][T10290] usb 5-1: string descriptor 0 read error: -71 [ 822.694460][T10290] usb 5-1: USB disconnect, device number 83 [ 822.717178][T18932] bridge2: entered promiscuous mode [ 822.729608][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3489'. [ 822.741182][T10300] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 822.817170][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 822.903726][T10300] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 822.916932][T10300] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.932441][T10300] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.948015][T10300] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.960118][T10300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.973948][T18929] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 823.262062][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.805923][T10300] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 823.840690][T10300] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input76 [ 823.952086][T16260] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 824.028709][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 824.050336][T10300] usb 1-1: USB disconnect, device number 74 [ 824.069653][T18963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3497'. [ 824.141608][T16260] usb 6-1: Using ep0 maxpacket: 16 [ 824.171046][T16260] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 824.226735][T16260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.265084][T16260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.294974][T16260] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.324369][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.348037][T16260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.396540][T16260] usb 6-1: config 0 descriptor?? [ 824.514849][ T7458] IPVS: starting estimator thread 0... [ 824.625398][T18972] IPVS: using max 31 ests per chain, 74400 per kthread [ 824.771398][T10300] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 824.941632][T10300] usb 1-1: Using ep0 maxpacket: 32 [ 824.958336][T10300] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 824.995811][T10300] usb 1-1: config 0 has no interfaces? [ 825.028022][T10300] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 825.048325][T10300] usb 1-1: Product: syz [ 825.066055][T10300] usb 1-1: Manufacturer: syz [ 825.088592][T10300] usb 1-1: SerialNumber: syz [ 825.116847][T10300] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 825.149141][T10300] usb 1-1: no configuration chosen from 1 choice [ 825.261430][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.342898][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.620736][T18992] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3503'. [ 825.983789][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.067928][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 826.078041][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 826.106645][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 826.116704][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 826.117448][ T7458] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.148500][ T7458] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.183174][ T7458] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.203961][ T7458] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.382935][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.525185][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055580c00: rx timeout, send abort [ 826.539367][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055580c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 826.735950][T16260] usbhid 6-1:0.0: can't add hid device: -71 [ 826.763267][T16260] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 826.790376][T16260] usb 6-1: USB disconnect, device number 9 [ 827.332615][T19024] ALSA: mixer_oss: invalid OSS volume '' [ 827.338380][T19024] ALSA: mixer_oss: invalid OSS volume ']b#oDticJ]xD\Z' [ 827.349613][T19024] ALSA: mixer_oss: invalid OSS volume '73KY*@X,ebفLkJDris' [ 827.358175][T19024] ALSA: mixer_oss: invalid OSS volume '=' [ 827.365809][T19024] ALSA: mixer_oss: invalid OSS volume 'cW$u}<\Lu|GKiLО"' [ 827.376884][T19024] ALSA: mixer_oss: invalid OSS volume ',`! Q$9hy7zj;' [ 827.385817][T19024] ALSA: mixer_oss: invalid OSS volume 's' [ 827.393388][T19024] ALSA: mixer_oss: invalid OSS volume 'n(\bʬc_2&tg| 3' [ 827.455524][T19024] ALSA: mixer_oss: invalid OSS volume 's)dŹ-Ç<2~]/' [ 827.464030][T19024] ALSA: mixer_oss: invalid OSS volume '33Ѵe1?' [ 827.470807][T19024] ALSA: mixer_oss: invalid OSS volume 'P/Ǡ6{<`lN' [ 827.479509][T19024] ALSA: mixer_oss: invalid OSS volume 'W^5}愔˵_N[T[o\' [ 827.490033][T19024] ALSA: mixer_oss: invalid OSS volume '' [ 827.493186][T16260] usb 1-1: USB disconnect, device number 75 [ 827.651462][T10291] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 827.745435][T19037] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 827.814122][T10291] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 827.830359][T10291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.852729][T10291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.883952][T10291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 827.903214][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.914967][T10291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.916607][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.932452][T16260] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 827.946224][T10291] usb 3-1: config 0 descriptor?? [ 827.968362][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.052156][T19041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.121777][T16260] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 828.133975][T16260] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 828.143189][T16260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.158238][T16260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.166719][T16260] usb 1-1: Product: syz [ 828.170925][T16260] usb 1-1: Manufacturer: syz [ 828.175670][T16260] usb 1-1: SerialNumber: syz [ 828.184055][T16260] usb 1-1: config 0 descriptor?? [ 828.196003][T16260] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 828.202910][T16260] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 828.302088][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.311727][T16261] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 828.405500][T19024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.414864][T19024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.427152][T10291] ortek 0003:1223:3F07.0074: Fixing up logical maximum in report descriptor (Skycable) [ 828.437750][T10291] hid_parser_main: 470 callbacks suppressed [ 828.437793][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.451423][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.458852][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x1 [ 828.466035][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.472971][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.479846][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.481290][T16261] usb 5-1: Using ep0 maxpacket: 16 [ 828.486912][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.498596][T16261] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 828.498833][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.513667][T15418] usb 1-1: USB disconnect, device number 76 [ 828.520871][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.526755][T16261] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 828.536089][T10291] ortek 0003:1223:3F07.0074: unknown main item tag 0x0 [ 828.541417][T16261] usb 5-1: config 1 has no interface number 0 [ 828.545085][T10291] ortek 0003:1223:3F07.0074: unexpected long global item [ 828.557367][T10291] ortek 0003:1223:3F07.0074: probe with driver ortek failed with error -22 [ 828.565409][T16261] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 828.576482][T16261] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 828.587548][T16261] usb 5-1: config 1 interface 105 has no altsetting 0 [ 828.597135][T16261] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 828.606534][T16261] usb 5-1: Product: syz [ 828.610769][T16261] usb 5-1: Manufacturer: syz [ 828.616075][T16261] usb 5-1: SerialNumber: syz [ 828.623907][T19049] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 828.633540][T19049] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 828.646217][T10291] usb 3-1: USB disconnect, device number 97 [ 828.844194][T16261] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 828.864711][T16261] usb 5-1: USB disconnect, device number 84 [ 829.022998][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.258761][T19067] __nla_validate_parse: 131 callbacks suppressed [ 829.258774][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3525'. [ 829.287725][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3525'. [ 829.342097][T16261] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 829.351181][T10291] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 829.481950][T10291] usb 6-1: device descriptor read/64, error -71 [ 829.491215][T16261] usb 1-1: Using ep0 maxpacket: 32 [ 829.499106][T19074] fuse: Bad value for 'fd' [ 829.501810][T16261] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 829.525667][T16261] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 829.543823][T16261] usb 1-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 829.561164][T16261] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 829.581202][T16261] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 829.606793][T16261] usb 1-1: config 0 interface 0 has no altsetting 0 [ 829.620656][T16261] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 829.639702][T16261] usb 1-1: Product: syz [ 829.644003][T16261] usb 1-1: Manufacturer: syz [ 829.659942][T16261] usb 1-1: SerialNumber: syz [ 829.667619][T16261] usb 1-1: config 0 descriptor?? [ 829.685190][T16261] ldusb 1-1:0.0: Interrupt in endpoint not found [ 829.731151][T10291] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 829.883062][T10291] usb 6-1: device descriptor read/64, error -71 [ 829.894052][T16261] usb 1-1: USB disconnect, device number 77 [ 830.001996][T10291] usb usb6-port1: attempt power cycle [ 830.311723][T10306] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 830.351245][T10291] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 830.382229][T10291] usb 6-1: device descriptor read/8, error -71 [ 830.474698][T10306] usb 5-1: not running at top speed; connect to a high speed hub [ 830.483533][T10306] usb 5-1: New USB device found, idVendor=2572, idProduct=0041, bcdDevice=a7.d5 [ 830.504851][T10306] usb 5-1: config 2 has an invalid interface number: 85 but max is 0 [ 830.513205][ T141] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.513248][ T141] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.513416][ T141] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.514713][ T8267] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.532799][T10306] usb 5-1: config 2 has no interface number 0 [ 830.540218][T10300] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 830.559944][T10306] usb 5-1: config 2 interface 85 has no altsetting 0 [ 830.605590][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 830.615732][T10306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.624355][T10306] usb 5-1: Product: syz [ 830.631327][T10291] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 830.640623][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 830.649884][T10306] usb 5-1: Manufacturer: syz [ 830.655012][T19094] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.3533'. [ 830.664494][T10306] usb 5-1: SerialNumber: syz [ 830.665108][T10291] usb 6-1: device descriptor read/8, error -71 [ 830.678921][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'. [ 830.725406][T10300] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 830.741580][T10300] usb 2-1: config 0 interface 0 has no altsetting 0 [ 830.749748][T10300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.767598][T10300] usb 2-1: config 0 descriptor?? [ 830.806026][T10291] usb usb6-port1: unable to enumerate USB device [ 830.851172][T10290] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 830.884512][T19080] fuse: Bad value for 'user_id' [ 830.889654][T19080] fuse: Bad value for 'user_id' [ 830.896487][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3529'. [ 830.913176][ T30] audit: type=1326 audit(1787689278.854:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 830.961791][ T30] audit: type=1326 audit(1787689278.874:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.002800][T19080] fuse: Bad value for 'fd' [ 831.016606][T10290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 831.033082][T10290] usb 1-1: not running at top speed; connect to a high speed hub [ 831.041337][ T30] audit: type=1326 audit(1787689278.874:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.075982][T10290] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 831.093729][T10290] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 4 [ 831.106858][ T1217] net_ratelimit: 1 callbacks suppressed [ 831.106886][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.127999][ T30] audit: type=1326 audit(1787689278.874:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.161745][T10290] usb 1-1: language id specifier not provided by device, defaulting to English [ 831.184683][T10290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.193471][T10290] usb 1-1: Product: syz [ 831.200949][T10290] usb 1-1: Manufacturer: ໐ꆊ蜍ꗴ䀗ᬌ힎쀚㹥췖撿ᱷꎏ⏬봱噸ဤ䣖쉕䨲剦ꮃ跶䢜⪳ᩴv [ 831.220865][ T30] audit: type=1326 audit(1787689278.884:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.247016][T19099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.261854][T10290] usb 1-1: SerialNumber: syz [ 831.273052][T19099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.290831][T10290] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 831.309438][ T30] audit: type=1326 audit(1787689278.894:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.343221][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.346479][T10290] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 831.370828][ T30] audit: type=1326 audit(1787689278.894:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47afd5e90e code=0x7ffc0000 [ 831.426589][T19099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.450550][ T30] audit: type=1326 audit(1787689278.894:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.504470][T10290] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 831.518997][T19099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.524555][T19096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.549038][ T30] audit: type=1326 audit(1787689278.894:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.583451][T19096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.595474][ T30] audit: type=1326 audit(1787689278.894:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.4.3529" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 831.659172][T19100] netlink: 'syz.1.3530': attribute type 1 has an invalid length. [ 831.680969][T10290] usb 1-1: USB disconnect, device number 78 [ 831.716912][T11009] udevd[11009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.785519][T10306] usb 5-1: USB disconnect, device number 85 [ 831.798813][T10300] usbhid 2-1:0.0: can't add hid device: -71 [ 831.807635][T10300] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 831.856708][T10300] usb 2-1: USB disconnect, device number 68 [ 832.144024][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.477529][T19128] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3542'. [ 832.536803][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 832.552899][T19127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3541'. [ 832.681552][T15418] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 832.823895][T15418] usb 6-1: device descriptor read/64, error -71 [ 832.951837][T10306] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 833.103819][T15418] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 833.131919][T10306] usb 2-1: Using ep0 maxpacket: 32 [ 833.138374][T10306] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 833.157531][T10306] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 833.182204][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.187134][T10306] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 833.251143][T10306] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 833.263399][T15418] usb 6-1: device descriptor read/64, error -71 [ 833.312234][T10306] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 833.321999][T10300] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 833.343000][T10306] usb 2-1: config 0 interface 0 has no altsetting 0 [ 833.353477][T10306] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 833.362185][T10306] usb 2-1: Product: syz [ 833.366426][T10306] usb 2-1: Manufacturer: syz [ 833.371371][T10306] usb 2-1: SerialNumber: syz [ 833.392083][T10306] usb 2-1: config 0 descriptor?? [ 833.402147][T15418] usb usb6-port1: attempt power cycle [ 833.410512][T10306] ldusb 2-1:0.0: Interrupt in endpoint not found [ 833.543897][T10300] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 833.583226][T10300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.601481][T10300] usb 3-1: config 0 descriptor?? [ 833.629635][T19154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 833.648340][T10306] usb 2-1: USB disconnect, device number 69 [ 833.662775][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.672105][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.699519][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.752800][T15418] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 833.782832][T15418] usb 6-1: device descriptor read/8, error -71 [ 833.820317][T10300] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 833.834819][T10300] [drm:udl_init] *ERROR* Selecting channel failed [ 833.872542][T10300] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 833.892206][T10300] [drm] Initialized udl on minor 1 [ 833.911305][T10300] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 833.924129][T10300] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 833.944115][T10300] usb 3-1: USB disconnect, device number 98 [ 834.021235][T15418] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 834.043812][T15418] usb 6-1: device descriptor read/8, error -71 [ 834.156774][T15418] usb usb6-port1: unable to enumerate USB device [ 834.279990][T19180] ip6t_REJECT: ECHOREPLY is not supported [ 834.382048][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.503850][T19187] __nla_validate_parse: 2 callbacks suppressed [ 834.503877][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3558'. [ 834.561182][T15418] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 834.651016][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 834.665887][T19191] openvswitch: netlink: Flow actions attr not present in new flow. [ 834.721186][T15418] usb 1-1: device descriptor read/64, error -71 [ 834.911512][T10300] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 834.961275][T15418] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 835.071262][T10300] usb 3-1: Using ep0 maxpacket: 8 [ 835.081836][T10300] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.101233][T15418] usb 1-1: device descriptor read/64, error -71 [ 835.102291][T10300] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.129485][T10300] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.149763][T10300] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 835.186220][T10300] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 835.207894][T10300] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 835.222581][T15418] usb usb1-port1: attempt power cycle [ 835.228604][T10300] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.251333][T10300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.477564][T10300] usb 3-1: GET_CAPABILITIES returned 0 [ 835.485757][T10300] usbtmc 3-1:16.0: can't read capabilities [ 835.561731][T15418] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 835.584116][T15418] usb 1-1: device descriptor read/8, error -71 [ 835.687398][T16260] usb 3-1: USB disconnect, device number 99 [ 835.751547][T16261] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 835.831302][T15418] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 835.853120][T15418] usb 1-1: device descriptor read/8, error -71 [ 835.872421][T19209] syzkaller0: entered promiscuous mode [ 835.877924][T19209] syzkaller0: entered allmulticast mode [ 835.901878][T16261] usb 5-1: Using ep0 maxpacket: 32 [ 835.907514][T16261] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 835.917737][T16261] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 835.926073][ T5692] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 835.933823][T16261] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 835.944527][T16261] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 835.956149][T16261] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 835.969925][T15418] usb usb1-port1: unable to enumerate USB device [ 835.976347][T16261] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.985759][T16261] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 835.994365][T16261] usb 5-1: Product: syz [ 835.998574][T16261] usb 5-1: Manufacturer: syz [ 836.003249][T16261] usb 5-1: SerialNumber: syz [ 836.009683][T16261] usb 5-1: config 0 descriptor?? [ 836.018807][T16261] ldusb 5-1:0.0: Interrupt in endpoint not found [ 836.101664][ T5692] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 836.112758][ T5692] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 836.124354][ T5692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 836.136203][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.144880][ T5692] usb 6-1: Product: syz [ 836.149126][ T5692] usb 6-1: Manufacturer: syz [ 836.153891][ T5692] usb 6-1: SerialNumber: syz [ 836.160557][ T5692] usb 6-1: config 0 descriptor?? [ 836.226383][T16261] usb 5-1: USB disconnect, device number 86 [ 836.385482][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 836.600152][T16260] usb 6-1: USB disconnect, device number 18 [ 836.794245][T10290] net_ratelimit: 3 callbacks suppressed [ 836.794261][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.858783][T19220] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3570'. [ 837.253449][T19226] netlink: 'syz.5.3571': attribute type 31 has an invalid length. [ 837.421902][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.507193][T10290] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 837.661576][T10290] usb 3-1: device descriptor read/64, error -71 [ 837.731368][ T5692] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 837.821991][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.895017][ T5692] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 837.911405][T10290] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 837.918572][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.931603][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.961611][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 837.989822][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.017851][ T5692] usb 5-1: config 0 descriptor?? [ 838.063304][T10290] usb 3-1: device descriptor read/64, error -71 [ 838.173605][T10290] usb usb3-port1: attempt power cycle [ 838.306191][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3579'. [ 838.444715][ T5692] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 838.521221][T10290] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 838.554094][T10290] usb 3-1: device descriptor read/8, error -71 [ 838.811181][T10290] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 838.832221][T10290] usb 3-1: device descriptor read/8, error -71 [ 838.852598][ T1217] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 838.861757][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.953801][T10290] usb usb3-port1: unable to enumerate USB device [ 839.001450][ T1217] usb 1-1: device descriptor read/64, error -71 [ 839.241235][ T1217] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 839.381150][ T1217] usb 1-1: device descriptor read/64, error -71 [ 839.422305][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.431419][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.440207][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.502649][ T1217] usb usb1-port1: attempt power cycle [ 839.679338][T19272] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 839.711390][T19272] bond2: entered promiscuous mode [ 839.716946][T19272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.737014][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 839.737029][ T30] audit: type=1326 audit(1787689287.674:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19271 comm="syz.1.3587" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19bd79e0d9 code=0x0 [ 839.841162][ T1217] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 839.861787][ T1217] usb 1-1: device descriptor read/8, error -71 [ 840.101175][ T1217] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 840.121820][ T1217] usb 1-1: device descriptor read/8, error -71 [ 840.231745][ T1217] usb usb1-port1: unable to enumerate USB device [ 840.433047][T10300] usb 5-1: USB disconnect, device number 87 [ 840.465304][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.473555][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.546608][T19286] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3590'. [ 840.566550][T19285] netlink: 384 bytes leftover after parsing attributes in process `syz.4.3591'. [ 840.684825][T19294] tipc: Started in network mode [ 840.689880][T19294] tipc: Node identity 167d56f06378, cluster identity 4711 [ 840.697329][T19294] tipc: Enabled bearer , priority 0 [ 840.707111][T19294] syzkaller0: MTU too low for tipc bearer [ 840.713587][T19294] tipc: Disabling bearer [ 840.851271][T15418] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 841.001667][T15418] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 841.013186][T15418] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.021492][T15418] usb 2-1: config 0 has no interface number 0 [ 841.029231][T15418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.037645][T15418] usb 2-1: Product: syz [ 841.041879][T15418] usb 2-1: Manufacturer: syz [ 841.046573][T15418] usb 2-1: SerialNumber: syz [ 841.054305][T15418] usb 2-1: config 0 descriptor?? [ 841.062263][T15418] usb 2-1: selecting invalid altsetting 1 [ 841.068160][T15418] dvb_ttusb_budget: ttusb_init_controller: error [ 841.074700][T15418] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 841.115943][T15418] DVB: Unable to find symbol stv0299_attach() [ 841.162827][T15418] DVB: Unable to find symbol tda8083_attach() [ 841.169078][T15418] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 841.291342][T19292] batadv_slave_1: entered promiscuous mode [ 841.317142][T19292] batadv_slave_1: left promiscuous mode [ 841.370813][T15418] usb 2-1: USB disconnect, device number 70 [ 841.501396][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.718950][T19321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3600'. [ 841.750271][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 841.838803][T19321] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 842.307415][T19349] JFS: charset not found [ 842.551573][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.665059][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 842.680591][T19352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 842.732158][ T8265] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 842.742323][ T8265] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.764374][ T8265] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.821575][ T8267] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.180805][ T30] audit: type=1326 audit(1787689291.114:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.288823][ T30] audit: type=1326 audit(1787689291.114:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.418079][ T30] audit: type=1326 audit(1787689291.114:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.514455][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.544308][ T30] audit: type=1326 audit(1787689291.114:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.590907][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.616390][T19372] xt_TPROXY: Can be used only with -p tcp or -p udp [ 843.631477][ T30] audit: type=1326 audit(1787689291.114:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.692910][ T30] audit: type=1326 audit(1787689291.114:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.700243][T19372] tipc: MTU too low for tipc bearer [ 843.741217][T15418] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 843.752063][ T30] audit: type=1326 audit(1787689291.114:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.798881][T19374] syzkaller0: entered promiscuous mode [ 843.818406][T19374] syzkaller0: entered allmulticast mode [ 843.828095][ T30] audit: type=1326 audit(1787689291.114:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.842989][T19374] tipc: Enabled bearer , priority 0 [ 843.854806][ T30] audit: type=1326 audit(1787689291.114:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19361 comm="syz.2.3612" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 843.908664][T15418] usb 5-1: not running at top speed; connect to a high speed hub [ 843.917244][T15418] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 843.929222][T15418] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.940943][T15418] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 843.959069][T15418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.004417][T15418] uvcvideo 5-1:1.0: Found UVC 0.00 device (046d:0825) [ 844.041158][T15418] uvcvideo 5-1:1.0: No valid video chain found. [ 844.207904][T15418] usb 5-1: USB disconnect, device number 88 [ 844.290268][T19382] bridge3: entered promiscuous mode [ 844.348050][T19373] tipc: Resetting bearer [ 844.389008][T19373] tipc: Disabling bearer [ 844.442671][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3619'. [ 844.513732][T10290] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 844.621852][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.629204][T19390] FAULT_INJECTION: forcing a failure. [ 844.629204][T19390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.720353][T10290] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 844.736770][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.1.3621 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.736798][T19390] Tainted: [L]=SOFTLOCKUP [ 844.736805][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.736816][T19390] Call Trace: [ 844.736825][T19390] [ 844.736832][T19390] dump_stack_lvl+0xe8/0x150 [ 844.736866][T19390] should_fail_ex+0x410/0x560 [ 844.736894][T19390] _copy_from_user+0x2d/0xb0 [ 844.736918][T19390] copy_from_sockptr_offset+0x66/0xa0 [ 844.737021][T19390] tls_setsockopt+0xf73/0x1710 [ 844.737050][T19390] ? __pfx_tls_setsockopt+0x10/0x10 [ 844.737077][T19390] ? aa_sock_opt_perm+0x105/0x1b0 [ 844.737101][T19390] ? sock_common_setsockopt+0x36/0xc0 [ 844.737128][T19390] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 844.737154][T19390] do_sock_setsockopt+0x17c/0x1b0 [ 844.737178][T19390] __x64_sys_setsockopt+0x13d/0x1b0 [ 844.737198][T19390] do_syscall_64+0x166/0x520 [ 844.737220][T19390] ? trace_irq_disable+0x3b/0x140 [ 844.737240][T19390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.737258][T19390] ? clear_bhb_loop+0x70/0xc0 [ 844.737280][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.737298][T19390] RIP: 0033:0x7f19bd79e0d9 [ 844.737316][T19390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.737332][T19390] RSP: 002b:00007f19be590028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.737352][T19390] RAX: ffffffffffffffda RBX: 00007f19bda25fa0 RCX: 00007f19bd79e0d9 [ 844.737366][T19390] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000005 [ 844.737378][T19390] RBP: 00007f19be590090 R08: 0000000000000028 R09: 0000000000000000 [ 844.737390][T19390] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 844.737401][T19390] R13: 00007f19bda26038 R14: 00007f19bda25fa0 R15: 00007f19bdb4fa48 [ 844.737431][T19390] [ 845.162607][T10290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.175960][T10290] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 845.188968][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.197160][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.206216][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.215803][T10290] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.229120][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.289619][T10290] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 845.324254][T10290] usb 1-1: Manufacturer: syz [ 845.356607][T10290] usb 1-1: config 0 descriptor?? [ 845.383496][T10290] hub 1-1:0.0: bad descriptor, ignoring hub [ 845.392614][T10290] hub 1-1:0.0: probe with driver hub failed with error -5 [ 845.425769][T10290] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 845.673752][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 845.673769][ T30] audit: type=1326 audit(1787689293.614:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4a6b9e0d9 code=0x0 [ 845.837280][T19410] syzkaller0: entered promiscuous mode [ 845.844475][T19410] syzkaller0: entered allmulticast mode [ 845.854352][T19380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.868314][T19380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.981962][ T5692] usb 1-1: USB disconnect, device number 87 [ 846.011239][T16261] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 846.242557][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 846.303939][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.491327][T16261] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 846.542012][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.654486][T19435] bridge4: entered promiscuous mode [ 846.663321][T16261] usb 2-1: Using ep0 maxpacket: 16 [ 846.683739][T16261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.712908][T16261] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 846.738216][T16261] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 846.756178][T16261] usb 2-1: can't read configurations, error -71 [ 846.767429][T16261] usb usb2-port1: attempt power cycle [ 846.781218][ T5692] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 846.875798][T19437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3633'. [ 846.929081][T19439] FAULT_INJECTION: forcing a failure. [ 846.929081][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.944383][ T5692] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 846.970806][ T5692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.986311][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.0.3634 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.986340][T19439] Tainted: [L]=SOFTLOCKUP [ 846.986346][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.986354][T19439] Call Trace: [ 846.986361][T19439] [ 846.986368][T19439] dump_stack_lvl+0xe8/0x150 [ 846.986397][T19439] should_fail_ex+0x410/0x560 [ 846.986419][T19439] _copy_from_user+0x2d/0xb0 [ 846.986440][T19439] ___sys_sendmsg+0x1c6/0x360 [ 846.986460][T19439] ? __lock_acquire+0x683/0x2cf0 [ 846.986487][T19439] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.986536][T19439] ? __fget_files+0x2a/0x420 [ 846.986557][T19439] ? __fget_files+0x3a2/0x420 [ 846.986586][T19439] __x64_sys_sendmsg+0x1b1/0x290 [ 846.986610][T19439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 846.986648][T19439] do_syscall_64+0x166/0x520 [ 846.986672][T19439] ? trace_irq_disable+0x3b/0x140 [ 846.986696][T19439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.986718][T19439] ? clear_bhb_loop+0x70/0xc0 [ 846.986740][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.986765][T19439] RIP: 0033:0x7f5d9b59e0d9 [ 846.986782][T19439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.986798][T19439] RSP: 002b:00007f5d9c491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.986818][T19439] RAX: ffffffffffffffda RBX: 00007f5d9b825fa0 RCX: 00007f5d9b59e0d9 [ 846.986830][T19439] RDX: 0000000004000010 RSI: 0000200000000600 RDI: 0000000000000003 [ 846.986841][T19439] RBP: 00007f5d9c491090 R08: 0000000000000000 R09: 0000000000000000 [ 846.986853][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.986863][T19439] R13: 00007f5d9b826038 R14: 00007f5d9b825fa0 R15: 00007f5d9b94fa48 [ 846.986893][T19439] [ 847.177654][ T5692] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 847.201687][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.236271][ T5692] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 847.765928][T19455] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[17121] was attempted by ""[19455] [ 848.384553][T16260] net_ratelimit: 1 callbacks suppressed [ 848.384572][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.851179][T16261] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 849.022333][T16261] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 849.043787][T16261] usb 3-1: config 101 has too many interfaces: 115, using maximum allowed: 32 [ 849.061537][T16261] usb 3-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config [ 849.076306][T16261] usb 3-1: config 101 has 0 interfaces, different from the descriptor's value: 115 [ 849.104270][T16261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.112610][T16261] usb 3-1: Product: syz [ 849.122714][T16261] usb 3-1: Manufacturer: syz [ 849.127436][T16261] usb 3-1: SerialNumber: syz [ 849.315958][ T5692] usb 5-1: USB disconnect, device number 89 [ 849.357882][ T5692] idmouse 5-1:1.0: disconnected [ 849.421671][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.511679][T16261] usb 3-1: USB disconnect, device number 104 [ 849.583125][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.662548][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 849.781945][T16260] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 849.952033][T16260] usb 1-1: Using ep0 maxpacket: 16 [ 849.971671][T16260] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 849.993430][T16260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.014195][T16260] usb 1-1: config 0 descriptor?? [ 850.064686][T16260] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 850.427988][T19495] syzkaller0: entered promiscuous mode [ 850.449206][T19480] nftables ruleset with unbound set [ 850.453172][T19495] syzkaller0: entered allmulticast mode [ 850.461515][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.481203][T10300] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 850.496175][T19495] tipc: Enabled bearer , priority 0 [ 850.505152][T19498] tipc: Enabling of bearer rejected, already enabled [ 850.516742][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3648'. [ 850.548084][T19494] tipc: Resetting bearer [ 850.552136][T16261] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 850.584669][T19494] tipc: Disabling bearer [ 850.663946][T10300] usb 3-1: Using ep0 maxpacket: 16 [ 850.674525][T10300] usb 3-1: unable to get BOS descriptor or descriptor too short [ 850.686057][T10300] usb 3-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=fb.34 [ 850.704057][T10300] usb 3-1: config 251 has an invalid interface number: 139 but max is 0 [ 850.711308][T16261] usb 2-1: Using ep0 maxpacket: 16 [ 850.724342][T10300] usb 3-1: config 251 has no interface number 0 [ 850.730754][T10300] usb 3-1: config 251 interface 139 altsetting 64 endpoint 0x9 has an invalid bInterval 255, changing to 11 [ 850.735657][T16261] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 850.745298][T10300] usb 3-1: config 251 interface 139 has no altsetting 0 [ 850.778106][T16261] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 850.795288][T16261] usb 2-1: config 252 has no interface number 0 [ 850.804217][T16261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.813485][T16261] usb 2-1: Product: syz [ 850.817720][T16261] usb 2-1: Manufacturer: syz [ 850.818680][T10300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.822535][T16261] usb 2-1: SerialNumber: syz [ 850.836389][T10300] usb 3-1: Product: syz [ 850.840640][T10300] usb 3-1: Manufacturer: syz [ 850.869128][T10300] usb 3-1: SerialNumber: syz [ 850.873313][T16261] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 850.951903][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.963583][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.972776][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.011201][T15418] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 851.043015][ T8267] usb 2-1: Failed to submit usb control message: -71 [ 851.043438][ T1217] usb 2-1: USB disconnect, device number 74 [ 851.054021][ T8267] usb 2-1: unable to send the bmi data to the device: -71 [ 851.067465][ T8267] usb 2-1: unable to get target info from device [ 851.073942][ T8267] usb 2-1: could not get target info (-71) [ 851.079913][ T8267] usb 2-1: could not probe fw (-71) [ 851.118814][T10300] ldusb 3-1:251.139: Interrupt in endpoint not found [ 851.158378][T10300] usb 3-1: USB disconnect, device number 105 [ 851.171946][T15418] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.183261][T15418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.195354][T15418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.205431][T15418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 851.220100][T15418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.234012][T15418] usb 6-1: config 0 descriptor?? [ 851.741960][ T4931] Bluetooth: hci1: command 0x0406 tx timeout [ 851.850389][T15418] usbhid 6-1:0.0: can't add hid device: -71 [ 851.862385][T16260] gspca_sonixj: i2c_w8 err -110 [ 851.868168][T15418] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 851.881454][T16260] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 851.884463][T15418] usb 6-1: USB disconnect, device number 19 [ 851.983440][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.995365][T19522] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 852.059057][T19525] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3655'. [ 852.106828][T19522] nvme nvme0: failed to connect socket: -111 [ 852.275726][T15418] usb 1-1: USB disconnect, device number 88 [ 852.461368][T10300] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 852.621454][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.635153][T10300] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 852.666033][T10300] usb 3-1: config 0 has no interfaces? [ 852.671813][ T1217] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 852.693076][T10300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.717545][T10300] usb 3-1: config 0 descriptor?? [ 852.841924][ T1217] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 852.865503][ T1217] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 852.885450][ T1217] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.926193][ T1217] usb 6-1: config 0 has no interface number 0 [ 852.955049][ T1217] usb 6-1: config 0 interface 2 has no altsetting 0 [ 852.967729][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.981114][ T1217] usb 6-1: Product: syz [ 852.990525][ T1217] usb 6-1: Manufacturer: syz [ 853.000482][T15418] usb 3-1: USB disconnect, device number 106 [ 853.001757][ T1217] usb 6-1: SerialNumber: syz [ 853.037174][ T1217] usb 6-1: config 0 descriptor?? [ 853.458161][T16260] usb 6-1: USB disconnect, device number 20 [ 853.491906][T16260] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 853.508667][T15418] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 853.667661][T15418] usb 5-1: device descriptor read/64, error -71 [ 853.676865][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3663'. [ 853.711737][ T141] bond0: (slave bond_slave_0): interface is now down [ 853.731821][ T141] bond0: (slave bond_slave_1): interface is now down [ 853.796201][ T141] bond0: now running without any active interface! [ 853.834119][T16261] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 853.911186][T15418] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 853.993071][T16261] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 854.012998][T16261] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 854.031126][T16261] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 854.049420][T15418] usb 5-1: device descriptor read/64, error -71 [ 854.055540][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3665'. [ 854.059085][T16261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.076387][T10300] net_ratelimit: 1 callbacks suppressed [ 854.076405][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.091351][T16261] usb 2-1: Product: syz [ 854.099843][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 854.105457][T16261] usb 2-1: Manufacturer: syz [ 854.130147][T16261] usb 2-1: SerialNumber: syz [ 854.163931][T16261] usb 2-1: config 0 descriptor?? [ 854.169059][T15418] usb usb5-port1: attempt power cycle [ 854.207050][T16261] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 854.355254][T10300] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 854.512166][T10300] usb 6-1: Using ep0 maxpacket: 8 [ 854.518298][T10300] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 854.528740][T10300] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.531833][ T5692] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 854.539455][T10300] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 854.562088][T15418] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 854.563432][T10300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.578323][T10300] usb 6-1: Product: syz [ 854.582653][T10300] usb 6-1: Manufacturer: syz [ 854.587288][T10300] usb 6-1: SerialNumber: syz [ 854.593365][T15418] usb 5-1: device descriptor read/8, error -71 [ 854.596514][T10300] usb 6-1: config 0 descriptor?? [ 854.611139][T10300] radioshark 6-1:0.0: Invalid radioSHARK device [ 854.617404][T10300] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 854.626374][T10300] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 854.711943][ T5692] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 854.722804][ T5692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.738667][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.749205][ T5692] usb 3-1: Product: syz [ 854.754429][ T5692] usb 3-1: Manufacturer: syz [ 854.759936][ T5692] usb 3-1: SerialNumber: syz [ 854.777788][ T5692] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 854.788923][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.800726][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 854.831223][T15418] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 854.852501][T15418] usb 5-1: device descriptor read/8, error -71 [ 854.852544][T19558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.937316][T19557] loop5: detected capacity change from 0 to 7 [ 854.971719][T15418] usb usb5-port1: unable to enumerate USB device [ 855.112387][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.372762][T10291] usb 6-1: USB disconnect, device number 21 [ 855.446840][ T5692] gspca_mr97310a: reg write [19] error -71 [ 855.481521][T16260] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 855.484018][ T5692] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 855.569568][ T5692] usb 3-1: USB disconnect, device number 107 [ 855.662799][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.684868][T19569] fuse: Bad value for 'user_id' [ 855.697268][T19569] fuse: Bad value for 'user_id' [ 856.024912][ T30] audit: type=1326 audit(1787689303.964:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19577 comm="syz.2.3672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae43b9e0d9 code=0x0 [ 856.141346][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.181229][T16260] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 856.334434][T16260] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 856.366151][T16260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.372878][T19584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.382495][T16260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.393398][T16260] usb 1-1: Product: syz [ 856.399350][T16260] usb 1-1: Manufacturer: syz [ 856.404465][T16260] usb 1-1: SerialNumber: syz [ 856.416390][T16260] usb 1-1: config 0 descriptor?? [ 856.425577][T16260] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 856.473172][T19588] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3675'. [ 856.490473][T19588] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3675'. [ 856.499731][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'. [ 856.570274][T19590] @0: renamed from dummy0 (while UP) [ 856.726526][T16261] usb 2-1: USB disconnect, device number 75 [ 857.052675][T19572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.072122][T19572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.083196][T16260] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 857.093803][T16260] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 857.114096][T16260] usb 1-1: USB disconnect, device number 90 [ 857.181305][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.198890][T19605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3680'. [ 857.282585][T10300] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 857.451782][T10300] usb 6-1: Using ep0 maxpacket: 32 [ 857.466919][T10300] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 857.496626][T10300] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 857.520464][T10300] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 857.558354][T10300] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 857.600482][T10300] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 857.649839][T10300] usb 6-1: config 0 interface 0 has no altsetting 0 [ 857.699741][T10300] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 857.756196][T10300] usb 6-1: Product: syz [ 857.784291][T10300] usb 6-1: Manufacturer: syz [ 857.809356][T10300] usb 6-1: SerialNumber: syz [ 857.854439][T10300] usb 6-1: config 0 descriptor?? [ 857.878261][T10300] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 857.913725][T10300] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 857.985111][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 858.223050][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.382083][T10306] usb 6-1: USB disconnect, device number 22 [ 858.401730][T10306] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 858.491755][ T5692] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 858.661521][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 858.678210][ T5692] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 858.701990][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.721301][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.738251][ T5692] usb 3-1: Product: syz [ 858.748100][ T5692] usb 3-1: Manufacturer: syz [ 858.758145][ T5692] usb 3-1: SerialNumber: syz [ 858.841451][T10306] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 859.027684][T19621] fuse: Invalid rootmode [ 859.043026][T10306] usb 6-1: Using ep0 maxpacket: 32 [ 859.063100][T10306] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 859.096706][ T5692] ems_usb 3-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 859.117656][T10306] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 859.139157][ T5692] ems_usb 3-1:91.0: probe with driver ems_usb failed with error -22 [ 859.149223][T10306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 859.166689][ T5692] usb 3-1: USB disconnect, device number 108 [ 859.174006][T10306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.202821][T10306] usb 6-1: config 0 descriptor?? [ 859.238048][T19631] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 859.261407][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.469412][T19649] netlink: 'syz.4.3692': attribute type 6 has an invalid length. [ 859.488496][T19649] bridge1: entered promiscuous mode [ 859.495305][T10300] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 859.502979][T19649] bridge1: entered allmulticast mode [ 859.511987][T19649] team0: Port device bridge1 added [ 859.521526][T19649] bridge0: port 3(team0) entered blocking state [ 859.527899][T19649] bridge0: port 3(team0) entered disabled state [ 859.534964][T19649] team0: entered allmulticast mode [ 859.540136][T19649] team_slave_0: entered allmulticast mode [ 859.546138][T19649] team_slave_1: entered allmulticast mode [ 859.563754][T19649] team0: entered promiscuous mode [ 859.568820][T19649] team_slave_0: entered promiscuous mode [ 859.575231][T19649] team_slave_1: entered promiscuous mode [ 859.584572][T19649] bridge0: port 3(team0) entered blocking state [ 859.590911][T19649] bridge0: port 3(team0) entered forwarding state [ 859.612986][T19650] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 859.626857][T19650] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 859.630781][T10306] kye 0003:0458:5010.0076: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 859.651205][T10300] usb 2-1: Using ep0 maxpacket: 32 [ 859.665163][T10306] kye 0003:0458:5010.0076: unbalanced delimiter at end of report description [ 859.677196][T10306] kye 0003:0458:5010.0076: parse failed [ 859.686020][T10306] kye 0003:0458:5010.0076: probe with driver kye failed with error -22 [ 859.993326][T10300] usb 2-1: unable to get BOS descriptor or descriptor too short [ 860.015018][T10300] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 860.045610][T10300] usb 2-1: too many configurations: 80, using maximum allowed: 8 [ 860.066285][T10300] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 860.087751][T10300] usb 2-1: can't read configurations, error -71 [ 860.155370][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'. [ 860.177642][T15418] usb 6-1: USB disconnect, device number 23 [ 860.294776][T19675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3698'. [ 860.314843][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.644302][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'. [ 860.768397][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3700'. [ 861.341595][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.742351][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.811322][T10300] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 862.044954][T10300] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.073696][T10300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.098049][T10300] usb 5-1: Product: syz [ 862.117882][T10300] usb 5-1: Manufacturer: syz [ 862.129611][T10300] usb 5-1: SerialNumber: syz [ 862.149881][T10300] usb 5-1: config 0 descriptor?? [ 862.308244][T19712] syzkaller1: entered promiscuous mode [ 862.317434][T19712] syzkaller1: entered allmulticast mode [ 862.372971][T19698] Invalid argument reading file caps for ./file0 [ 862.381500][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.394870][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.414225][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.449426][T10300] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 862.461397][T15418] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 862.467599][T10300] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 862.485293][T10300] usb 5-1: USB disconnect, device number 94 [ 862.662615][T15418] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 862.682189][T15418] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.703184][T15418] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 862.725075][T15418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.738732][T15418] usb 3-1: Product: syz [ 862.751121][T15418] usb 3-1: Manufacturer: syz [ 862.761762][T15418] usb 3-1: SerialNumber: syz [ 862.801414][ T5692] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 862.971263][ T5692] usb 6-1: device descriptor read/64, error -71 [ 863.090048][T10291] hid_parser_main: 7 callbacks suppressed [ 863.090069][T10291] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 863.167886][T10291] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 863.202554][T19728] FAULT_INJECTION: forcing a failure. [ 863.202554][T19728] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 863.261235][ T5692] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 863.332080][T19731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3714'. [ 863.367680][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.0.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.367710][T19728] Tainted: [L]=SOFTLOCKUP [ 863.367717][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.367728][T19728] Call Trace: [ 863.367742][T19728] [ 863.367751][T19728] dump_stack_lvl+0xe8/0x150 [ 863.367784][T19728] should_fail_ex+0x410/0x560 [ 863.367808][T19728] prepare_alloc_pages+0x223/0x600 [ 863.367842][T19728] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 863.367883][T19728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 863.367917][T19728] ? __pfx_policy_nodemask+0x10/0x10 [ 863.367936][T19728] ? mlock_new_folio+0x12a/0x8e0 [ 863.367968][T19728] alloc_pages_mpol+0x21e/0x390 [ 863.367993][T19728] folio_alloc_mpol_noprof+0x39/0x160 [ 863.368014][T19728] vma_alloc_folio_noprof+0xe1/0x1e0 [ 863.368035][T19728] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 863.368065][T19728] do_wp_page+0x117d/0x4b80 [ 863.368101][T19728] ? __pfx_do_wp_page+0x10/0x10 [ 863.368119][T19728] ? do_raw_spin_lock+0x12b/0x2f0 [ 863.368143][T19728] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 863.368182][T19728] handle_mm_fault+0x1576/0x3720 [ 863.368211][T19728] ? handle_mm_fault+0xf4/0x3720 [ 863.368238][T19728] ? __pfx_handle_mm_fault+0x10/0x10 [ 863.368262][T19728] ? follow_page_pte+0xc8f/0xf10 [ 863.368289][T19728] ? __pfx_follow_page_pte+0x10/0x10 [ 863.368328][T19728] __get_user_pages+0x1675/0x2750 [ 863.368383][T19728] populate_vma_page_range+0x2be/0x3c0 [ 863.368405][T19728] ? __pfx_populate_vma_page_range+0x10/0x10 [ 863.368427][T19728] ? down_read+0x2be/0x330 [ 863.368452][T19728] ? rwsem_wake+0xe8/0x130 [ 863.368476][T19728] __mm_populate+0x25f/0x390 [ 863.368501][T19728] ? __pfx___mm_populate+0x10/0x10 [ 863.368528][T19728] do_mlock+0x622/0x730 [ 863.368546][T19728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 863.368584][T19728] ? __pfx_do_mlock+0x10/0x10 [ 863.368601][T19728] ? fput+0xa0/0xd0 [ 863.368619][T19728] ? ksys_write+0x242/0x270 [ 863.368643][T19728] ? __pfx_ksys_write+0x10/0x10 [ 863.368669][T19728] __x64_sys_mlock+0x77/0xa0 [ 863.368698][T19728] do_syscall_64+0x166/0x520 [ 863.368722][T19728] ? trace_irq_disable+0x3b/0x140 [ 863.368746][T19728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.368765][T19728] ? clear_bhb_loop+0x70/0xc0 [ 863.368787][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.368806][T19728] RIP: 0033:0x7f5d9b59e0d9 [ 863.368824][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.368840][T19728] RSP: 002b:00007f5d9c470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 863.368860][T19728] RAX: ffffffffffffffda RBX: 00007f5d9b826090 RCX: 00007f5d9b59e0d9 [ 863.368874][T19728] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 863.368886][T19728] RBP: 00007f5d9c470090 R08: 0000000000000000 R09: 0000000000000000 [ 863.368897][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.368909][T19728] R13: 00007f5d9b826128 R14: 00007f5d9b826090 R15: 00007f5d9b94fa48 [ 863.368937][T19728] [ 863.437773][ T5692] usb 6-1: device descriptor read/64, error -71 [ 863.715367][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.961544][ T5692] usb usb6-port1: attempt power cycle [ 864.301716][ T5692] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 864.333656][ T5692] usb 6-1: device descriptor read/8, error -71 [ 864.385464][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.591309][ T5692] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 864.612360][ T5692] usb 6-1: device descriptor read/8, error -71 [ 864.724586][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 864.734009][ T5692] usb usb6-port1: unable to enumerate USB device [ 864.783468][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.791687][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.023697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.189617][T15418] usb 3-1: 0:1 : does not exist [ 865.198734][T15418] usb 3-1: unit 1 not found! [ 865.203902][T15418] usb 3-1: unit 64 not found! [ 865.272498][ T2241] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 865.288657][T15418] usb 3-1: USB disconnect, device number 109 [ 865.338914][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.443382][ T2241] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 865.459618][ T2241] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.483049][ T2241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 865.495243][ T2241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 865.517525][ T2241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.533456][ T2241] usb 2-1: Product: syz [ 865.540159][ T2241] usb 2-1: Manufacturer: syz [ 865.552775][ T2241] usb 2-1: SerialNumber: syz [ 865.569463][ T2241] usb 2-1: config 0 descriptor?? [ 865.580065][T19741] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 865.649507][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3725'. [ 865.771410][ T2241] rc_core: IR keymap rc-streamzap not found [ 865.784872][ T2241] Registered IR keymap rc-empty [ 865.797303][ T2241] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 865.824247][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.850717][ T2241] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input77 [ 866.313286][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.327510][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.411136][T19784] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3727'. [ 866.615033][ T30] audit: type=1326 audit(1787689314.554:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.652205][ T30] audit: type=1326 audit(1787689314.574:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.681141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 866.706574][ T30] audit: type=1326 audit(1787689314.574:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.768164][ T30] audit: type=1326 audit(1787689314.574:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.799022][ T30] audit: type=1326 audit(1787689314.574:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.832855][ T30] audit: type=1326 audit(1787689314.584:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.861724][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.873921][ T30] audit: type=1326 audit(1787689314.584:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.905250][ T30] audit: type=1326 audit(1787689314.584:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.931584][ T30] audit: type=1326 audit(1787689314.584:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 866.963374][ T30] audit: type=1326 audit(1787689314.584:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19785 comm="syz.5.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a6b9e0d9 code=0x7ffc0000 [ 867.215952][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 867.670757][T19803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3734'. [ 867.822432][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.902572][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.094112][ T2241] usb 2-1: USB disconnect, device number 78 [ 868.112305][ T5692] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 868.162743][ T1217] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 868.264539][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'. [ 868.304337][ T5692] usb 6-1: Using ep0 maxpacket: 16 [ 868.312224][T19809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3737'. [ 868.321781][ T5692] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 868.332748][ T5692] usb 6-1: config 0 interface 0 has no altsetting 0 [ 868.339543][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.378023][ T1217] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 868.384690][ T5692] usb 6-1: config 0 descriptor?? [ 868.471843][ T1217] usb 5-1: config 0 interface 0 has no altsetting 0 [ 868.525363][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 868.548738][ T1217] usb 5-1: Product: syz [ 868.550390][T19812] ip_tables: iptables: counters copy to user failed while replacing table [ 868.597000][ T1217] usb 5-1: config 0 descriptor?? [ 868.628380][ T1217] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 868.725103][T19815] syzkaller0: entered promiscuous mode [ 868.741270][T19815] syzkaller0: entered allmulticast mode [ 868.845063][ T2241] usb 5-1: USB disconnect, device number 95 [ 868.860570][T19807] hsr0: entered allmulticast mode [ 868.869595][T19807] hsr_slave_0: entered allmulticast mode [ 868.884656][T19807] hsr_slave_1: entered allmulticast mode [ 868.899190][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3736'. [ 868.916504][T19807] hsr_slave_0: left promiscuous mode [ 868.923547][T19807] hsr_slave_1: left promiscuous mode [ 868.935625][T19807] hsr0 (unregistering): left allmulticast mode [ 868.943041][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.071254][ T1217] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 869.154098][T19807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.165573][T19807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.192855][ T5692] usbhid 6-1:0.0: can't add hid device: -71 [ 869.204881][ T5692] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 869.225020][ T1217] usb 1-1: Using ep0 maxpacket: 32 [ 869.228673][ T5692] usb 6-1: USB disconnect, device number 28 [ 869.240779][ T1217] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 869.261683][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.282084][T16260] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 869.293540][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.307968][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.328902][ T1217] usb 1-1: config 0 descriptor?? [ 869.337134][T19825] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 869.461986][T16260] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 869.475415][T16260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.504613][T16260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.539220][T16260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.592526][T16260] usb 2-1: config 0 descriptor?? [ 869.791758][ T1217] savu 0003:1E7D:2D5A.0078: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 869.981599][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.031300][T16260] usbhid 2-1:0.0: can't add hid device: -71 [ 870.050684][T16260] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 870.064105][ T5692] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 870.115462][T16260] usb 2-1: USB disconnect, device number 79 [ 870.143664][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.150375][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.241218][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 870.249476][ T5692] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 870.267830][ T5692] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 870.278582][ T5692] usb 3-1: config 0 has no interface number 0 [ 870.285116][ T5692] usb 3-1: config 0 interface 12 has no altsetting 0 [ 870.299656][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.309479][ T5692] usb 3-1: Product: syz [ 870.315061][ T5692] usb 3-1: Manufacturer: syz [ 870.322551][ T5692] usb 3-1: SerialNumber: syz [ 870.332301][ T5692] usb 3-1: config 0 descriptor?? [ 870.862173][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.974415][T19843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3747'. [ 871.021689][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.060591][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 871.096608][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3748'. [ 871.109817][T19845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3748'. [ 871.672804][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 871.672820][ T30] audit: type=1326 audit(1787689319.614:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19831 comm="syz.2.3745" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fae43b5e90e code=0x7ffc0000 [ 871.804115][ T30] audit: type=1326 audit(1787689319.744:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19831 comm="syz.2.3745" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fae43b5e90e code=0x7ffc0000 [ 871.844570][T16260] usb 1-1: USB disconnect, device number 91 [ 871.904441][ T30] audit: type=1326 audit(1787689319.844:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19831 comm="syz.2.3745" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fae43b5e90e code=0x7ffc0000 [ 872.004759][ T30] audit: type=1326 audit(1787689319.944:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19831 comm="syz.2.3745" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fae43b9e0d9 code=0x7ffc0000 [ 872.021316][ T2241] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 872.071456][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.083177][ T5692] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 872.119134][ T5692] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 872.138512][ T5692] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 872.167529][ T5692] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 872.179269][T19870] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 872.198121][ T5692] usb 3-1: USB disconnect, device number 110 [ 872.271510][T16260] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 872.275218][ T2241] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 872.323140][ T2241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.337997][ T2241] usb 2-1: Product: syz [ 872.343733][ T2241] usb 2-1: Manufacturer: syz [ 872.352149][ T2241] usb 2-1: SerialNumber: syz [ 872.357794][T19870] bond1: entered promiscuous mode [ 872.369152][ T2241] usb 2-1: config 0 descriptor?? [ 872.380928][T19870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.394765][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 872.459490][T16260] usb 1-1: unable to get BOS descriptor or descriptor too short [ 872.485450][T16260] usb 1-1: not running at top speed; connect to a high speed hub [ 872.493471][T19875] vlan2: entered allmulticast mode [ 872.493495][T19875] bond1: entered allmulticast mode [ 872.521215][T16260] usb 1-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 872.535286][T16260] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 872.536733][T10306] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 872.546514][T16260] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.583767][T16260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.593382][T16260] usb 1-1: Product: syz [ 872.601416][T16260] usb 1-1: Manufacturer: syz [ 872.612029][T16260] usb 1-1: SerialNumber: syz [ 872.639311][ T2241] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 872.711487][T10306] usb 6-1: device descriptor read/64, error -71 [ 872.764840][ T30] audit: type=1326 audit(1787689320.704:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 872.802513][ T30] audit: type=1326 audit(1787689320.704:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 872.830326][ T30] audit: type=1326 audit(1787689320.704:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 872.869161][T16260] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 872.881162][ T30] audit: type=1326 audit(1787689320.704:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 872.911278][T16260] imon 1-1:5.0: unable to initialize intf0, err -19 [ 872.917934][T16260] imon:imon_probe: failed to initialize context! [ 872.925124][T16260] imon 1-1:5.0: unable to register, err -19 [ 872.941634][T16260] usb 1-1: USB disconnect, device number 92 [ 872.965769][T10306] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 872.985149][ T30] audit: type=1326 audit(1787689320.704:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 873.029910][ T30] audit: type=1326 audit(1787689320.704:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.4.3758" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47afd9e0d9 code=0x7ffc0000 [ 873.101580][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.153410][T10306] usb 6-1: device descriptor read/64, error -71 [ 873.247815][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3760'. [ 873.259102][T19886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3760'. [ 873.278334][T10306] usb usb6-port1: attempt power cycle [ 873.289223][ T2241] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 873.632348][T10306] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 873.641197][T16260] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 873.652226][T10306] usb 6-1: device descriptor read/8, error -71 [ 873.781256][T10290] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 873.802214][T16260] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 873.812505][T16260] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 873.821363][T16260] usb 5-1: config 0 has no interface number 0 [ 873.827535][T16260] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.842229][T16260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.850249][T16260] usb 5-1: Product: syz [ 873.855213][T16260] usb 5-1: Manufacturer: syz [ 873.859841][T16260] usb 5-1: SerialNumber: syz [ 873.866542][T16260] usb 5-1: config 0 descriptor?? [ 873.875355][T16260] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 873.892150][T10306] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 873.902004][ T2241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.913362][T10306] usb 6-1: device descriptor read/8, error -71 [ 873.940647][T10290] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 873.955207][T10290] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 873.962944][T10290] usb 3-1: can't read configurations, error -71 [ 873.982373][T16261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.023542][T10306] usb usb6-port1: unable to enumerate USB device [ 874.090059][ C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 874.151354][T16260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.294865][T16260] usb 5-1: USB disconnect, device number 96 [ 874.307128][T16260] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 874.527040][T16260] usb 2-1: USB disconnect, device number 80 [ 874.931272][T16260] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 875.011779][T10290] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 875.061206][T16260] usb 2-1: device descriptor read/64, error -71 [ 875.164589][T10290] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 875.176746][T10290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.201329][T10300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.210046][T10290] usb 3-1: config 0 descriptor?? [ 875.242227][T10290] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 875.301159][T16260] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 875.431880][T16260] usb 2-1: device descriptor read/64, error -71 [ 875.541800][T16260] usb usb2-port1: attempt power cycle [ 875.561575][T19922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 875.570995][T19922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3773'. [ 875.629655][T10290] gspca_cpia1: usb_control_msg 03, error -32 [ 875.635932][T10300] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 875.687594][T10290] gspca_cpia1: usb_control_msg 03, error -71 [ 875.708568][T10290] gspca_cpia1: usb_control_msg 01, error -71 [ 875.723150][T10290] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 875.755732][T10290] usb 3-1: USB disconnect, device number 112 [ 875.801142][T10300] usb 6-1: Using ep0 maxpacket: 8 [ 875.809433][T10300] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 875.825198][T10300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.843434][T10300] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 875.855186][T10300] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 875.868074][T10300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.877342][T10300] usb 6-1: Product: syz [ 875.884256][T10300] usb 6-1: Manufacturer: syz [ 875.889038][T10300] usb 6-1: SerialNumber: syz [ 875.901405][T16260] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 875.934621][T16260] usb 2-1: device descriptor read/8, error -71 [ 876.020716][T19934] ------------[ cut here ]------------ [ 876.027008][T19934] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 876.027042][T19934] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.0.3777/19934 [ 876.046019][T19934] Modules linked in: [ 876.050981][T19934] CPU: 0 UID: 0 PID: 19934 Comm: syz.0.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.062119][T19934] Tainted: [L]=SOFTLOCKUP [ 876.066516][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.076928][T19934] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 876.083293][T19934] Code: c6 05 cb 4c 22 0f 01 48 c7 c7 83 3d 45 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 4b 27 62 00 e9 81 ee ff ff e8 51 76 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 876.103130][T19934] RSP: 0018:ffffc90012bdf320 EFLAGS: 00010287 [ 876.109280][T19934] RAX: ffffffff8140c80f RBX: ffff888000000000 RCX: 0000000000080000 [ 876.117436][T19934] RDX: ffffc90017dfe000 RSI: 00000000000019dc RDI: 00000000000019dd [ 876.125643][T19934] RBP: ffffc90012bdf4b8 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 876.133946][T19934] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff9200257be78 [ 876.142204][T19934] R13: ffff88804fa11198 R14: ffff888000000000 R15: ffffffffffffff01 [ 876.150253][T19934] FS: 00007f5d9c4916c0(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 876.151320][T10290] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 876.159310][T19934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.173719][T19934] CR2: 00007f47afc70000 CR3: 000000003e7d4000 CR4: 00000000003526f0 [ 876.182032][T19934] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 876.190268][T19934] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 876.198364][T19934] Call Trace: [ 876.201722][T19934] [ 876.204700][T19934] ? lockdep_hardirqs_on+0x7b/0x110 [ 876.210047][T19934] ? seqcount_lockdep_reader_access+0xea/0x100 [ 876.211231][T16260] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 876.216320][T19934] ? kvm_get_walltime_and_clockread+0x2d7/0x370 [ 876.230251][T19934] ? kvm_gpc_refresh+0x31/0x110 [ 876.235230][T19934] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 876.240805][T19934] kvm_gpc_refresh+0xe1/0x110 [ 876.245604][T19934] kvm_xen_inject_pending_events+0xfb/0x540 [ 876.251659][T19934] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 876.258235][T19934] ? __vmx_complete_interrupts+0xe7/0x640 [ 876.264078][T19934] vcpu_run+0x664f/0x7950 [ 876.268487][T19934] ? vcpu_run+0x362a/0x7950 [ 876.273145][T19934] ? __pfx_vcpu_run+0x10/0x10 [ 876.278102][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.284084][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.284548][T16260] usb 2-1: device descriptor read/8, error -71 [ 876.289864][T19934] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 876.289905][T19934] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 876.308133][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.314018][T19934] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 876.320060][T19934] ? __lock_acquire+0x683/0x2cf0 [ 876.325133][T19934] ? __mutex_lock+0x30b/0x1550 [ 876.329966][T19934] ? kasan_quarantine_put+0xbb/0x1f0 [ 876.335400][T19934] ? do_raw_write_lock+0x11d/0x260 [ 876.340589][T19934] kvm_vcpu_ioctl+0xa61/0xfd0 [ 876.345405][T19934] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.350661][T19934] ? hook_file_ioctl+0x1f2/0x600 [ 876.355734][T19934] ? __fget_files+0x2a/0x420 [ 876.360376][T19934] ? __fget_files+0x2a/0x420 [ 876.365064][T19934] ? __fget_files+0x3a2/0x420 [ 876.369792][T19934] ? __fget_files+0x2a/0x420 [ 876.374484][T19934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 876.379476][T19934] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.385206][T19934] __se_sys_ioctl+0xfc/0x170 [ 876.390073][T19934] do_syscall_64+0x166/0x520 [ 876.394781][T19934] ? trace_irq_disable+0x3b/0x140 [ 876.399870][T19934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.406071][T19934] ? clear_bhb_loop+0x70/0xc0 [ 876.410808][T19934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.413911][T16260] usb usb2-port1: unable to enumerate USB device [ 876.416802][T19934] RIP: 0033:0x7f5d9b59e0d9 [ 876.427656][T19934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.447459][T19934] RSP: 002b:00007f5d9c491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.456011][T19934] RAX: ffffffffffffffda RBX: 00007f5d9b825fa0 RCX: 00007f5d9b59e0d9 [ 876.464445][T19934] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 876.468902][T19936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.472655][T19934] RBP: 00007f5d9b635024 R08: 0000000000000000 R09: 0000000000000000 [ 876.472674][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.472688][T19934] R13: 00007f5d9b826038 R14: 00007f5d9b825fa0 R15: 00007f5d9b94fa48 [ 876.472720][T19934] [ 876.472746][T19934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 876.472764][T19934] CPU: 0 UID: 0 PID: 19934 Comm: syz.0.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.472790][T19934] Tainted: [L]=SOFTLOCKUP [ 876.472798][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.472810][T19934] Call Trace: [ 876.472818][T19934] [ 876.472827][T19934] vpanic+0x56d/0xa60 [ 876.472859][T19934] ? __pfx__printk+0x10/0x10 [ 876.472880][T19934] ? __pfx_vpanic+0x10/0x10 [ 876.472902][T19934] ? is_bpf_text_address+0x292/0x2b0 [ 876.472922][T19934] ? is_bpf_text_address+0x26/0x2b0 [ 876.472951][T19934] panic+0xc5/0xd0 [ 876.472977][T19934] ? __pfx_panic+0x10/0x10 [ 876.473018][T19934] __warn+0x315/0x4c0 [ 876.473043][T19934] ? __kvm_gpc_refresh+0x1510/0x1710 [ 876.473075][T19934] ? __kvm_gpc_refresh+0x1510/0x1710 [ 876.473103][T19934] __report_bug+0x276/0x570 [ 876.473230][T19934] ? __kvm_gpc_refresh+0x1510/0x1710 [ 876.473261][T19934] ? __pfx___report_bug+0x10/0x10 [ 876.473287][T19934] ? __lock_acquire+0x683/0x2cf0 [ 876.473319][T19934] ? __lock_acquire+0x683/0x2cf0 [ 876.473354][T19934] ? __kvm_gpc_refresh+0x1510/0x1710 [ 876.473382][T19934] report_bug+0x16b/0x220 [ 876.473407][T19934] ? __kvm_gpc_refresh+0x1510/0x1710 [ 876.473434][T19934] ? __kvm_gpc_refresh+0x1512/0x1710 [ 876.473461][T19934] handle_bug+0x9c/0x200 [ 876.473481][T19934] exc_invalid_op+0x1a/0x50 [ 876.473499][T19934] asm_exc_invalid_op+0x1a/0x20 [ 876.473519][T19934] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 876.473547][T19934] Code: c6 05 cb 4c 22 0f 01 48 c7 c7 83 3d 45 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 4b 27 62 00 e9 81 ee ff ff e8 51 76 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 876.473564][T19934] RSP: 0018:ffffc90012bdf320 EFLAGS: 00010287 [ 876.473583][T19934] RAX: ffffffff8140c80f RBX: ffff888000000000 RCX: 0000000000080000 [ 876.473598][T19934] RDX: ffffc90017dfe000 RSI: 00000000000019dc RDI: 00000000000019dd [ 876.473611][T19934] RBP: ffffc90012bdf4b8 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 876.473630][T19934] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff9200257be78 [ 876.473652][T19934] R13: ffff88804fa11198 R14: ffff888000000000 R15: ffffffffffffff01 [ 876.473675][T19934] ? __kvm_gpc_refresh+0x150f/0x1710 [ 876.473711][T19934] ? lockdep_hardirqs_on+0x7b/0x110 [ 876.473737][T19934] ? seqcount_lockdep_reader_access+0xea/0x100 [ 876.473763][T19934] ? kvm_get_walltime_and_clockread+0x2d7/0x370 [ 876.473789][T19934] ? kvm_gpc_refresh+0x31/0x110 [ 876.473817][T19934] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 876.473865][T19934] kvm_gpc_refresh+0xe1/0x110 [ 876.473895][T19934] kvm_xen_inject_pending_events+0xfb/0x540 [ 876.473922][T19934] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 876.473950][T19934] ? __vmx_complete_interrupts+0xe7/0x640 [ 876.473983][T19934] vcpu_run+0x664f/0x7950 [ 876.474026][T19934] ? vcpu_run+0x362a/0x7950 [ 876.474092][T19934] ? __pfx_vcpu_run+0x10/0x10 [ 876.474114][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.474138][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.474163][T19934] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 876.474195][T19934] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 876.474231][T19934] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 876.474254][T19934] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 876.474281][T19934] ? __lock_acquire+0x683/0x2cf0 [ 876.474313][T19934] ? __mutex_lock+0x30b/0x1550 [ 876.474342][T19934] ? kasan_quarantine_put+0xbb/0x1f0 [ 876.474380][T19934] ? do_raw_write_lock+0x11d/0x260 [ 876.474418][T19934] kvm_vcpu_ioctl+0xa61/0xfd0 [ 876.474445][T19934] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.474464][T19934] ? hook_file_ioctl+0x1f2/0x600 [ 876.474504][T19934] ? __fget_files+0x2a/0x420 [ 876.474528][T19934] ? __fget_files+0x2a/0x420 [ 876.474548][T19934] ? __fget_files+0x3a2/0x420 [ 876.474568][T19934] ? __fget_files+0x2a/0x420 [ 876.474592][T19934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 876.474614][T19934] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.474640][T19934] __se_sys_ioctl+0xfc/0x170 [ 876.474669][T19934] do_syscall_64+0x166/0x520 [ 876.474695][T19934] ? trace_irq_disable+0x3b/0x140 [ 876.474720][T19934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.474739][T19934] ? clear_bhb_loop+0x70/0xc0 [ 876.474763][T19934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.474783][T19934] RIP: 0033:0x7f5d9b59e0d9 [ 876.474800][T19934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.474816][T19934] RSP: 002b:00007f5d9c491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.474837][T19934] RAX: ffffffffffffffda RBX: 00007f5d9b825fa0 RCX: 00007f5d9b59e0d9 [ 876.474851][T19934] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 876.474864][T19934] RBP: 00007f5d9b635024 R08: 0000000000000000 R09: 0000000000000000 [ 876.474877][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.474890][T19934] R13: 00007f5d9b826038 R14: 00007f5d9b825fa0 R15: 00007f5d9b94fa48 [ 876.474920][T19934] [ 876.479732][T19934] Kernel Offset: disabled