last executing test programs: 43.768991348s ago: executing program 1 (id=3931): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x4, 0x9, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2}], 0xf}) 43.509817251s ago: executing program 1 (id=3932): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) (async, rerun: 32) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x5b) (async, rerun: 32) read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) keyctl$revoke(0x3, r2) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 32) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x100082, 0x20000006, 0x4d, 0x6, 0x3, 0x10000, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 42.475723893s ago: executing program 1 (id=3935): r0 = socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000440)=0x10) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, 0x0, 0x0, 0x601, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000080)="446a66d7de7fad67c2af9c1eab2ea25f3a4eda04cddc51c3969a171f596911c1a46d4a8e157f8cb5ee8e6e", 0x2b, 0x5, 0x0, 0x1, r1}]) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x800) readv(r4, &(0x7f0000000800)=[{&(0x7f0000000700)=""/189, 0xbd}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x66, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x84bf, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x10000004, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0xa506, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x80, 0x8, 0x8, 0x53, 0x6, 0x4, 0x404, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x403, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40898}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 42.175579223s ago: executing program 1 (id=3940): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x120) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00') ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000140)={0x9, "4f066966d85b1f9e28ffd01d07e559bcb1e0c9f267f1c1f9dd1273503405061f8e96e1a794761b53e66a7068d739b35146a1189033e779d0cc5c15199b18cafa"}) mprotect(&(0x7f000086d000/0x1000)=nil, 0x1000, 0x0) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000100)=@id, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'batadv_slave_0\x00', {0x1}, 0x81}) 41.719251984s ago: executing program 1 (id=3943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) 41.480202677s ago: executing program 1 (id=3945): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r10, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) r11 = socket(0x10, 0x803, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1104000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) socket$nl_netfilter(0x10, 0x3, 0xc) 41.170241157s ago: executing program 32 (id=3945): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r10, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) r11 = socket(0x10, 0x803, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1104000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) socket$nl_netfilter(0x10, 0x3, 0xc) 7.796454825s ago: executing program 2 (id=4104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000400004e78da8d0018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) 6.260106291s ago: executing program 4 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x833a1000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000173400128009000100626f6e64000000002400028008000300741900000800080004"], 0x54}}, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sync_file_range(r3, 0x7, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c2776655f30007f8538841c808adfd38c16a900080004000e800000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 5.606602661s ago: executing program 2 (id=4112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af807b0000000bfa200000000000007020000f8fffffdb703000008000000b704000002000000850000000c00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 5.52102826s ago: executing program 2 (id=4113): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r5}) r7 = dup(r0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x0, 0x5, 0x4018, 0x2, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xe3, 0xb0, 0x39, 0x40, 0x2c7c, 0x800, 0xe552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xc, 0x80, 0x80, "", [{{0x9, 0x4, 0xc1, 0x9, 0x0, 0xff, 0xff, 0xff, 0xc2}}]}}]}}, 0x0) 5.26219709s ago: executing program 4 (id=4115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_ct={0x30, 0x1c, 0x0, 0x0, {{0x7}, {0x4}, {0x8, 0x6, "053b318c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x34, 0x1, [@m_skbmod={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x7c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r9, &(0x7f0000000400)=[{&(0x7f0000002180)=""/168, 0xa8}], 0x1, 0x24, 0x8080) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x9}, @IFE_META_PRIO={0x0, 0x3, @void}]}, @TCA_IFE_SMAC={0xa}]}, {0x4}, {0xfffffffffffffcad}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.916218574s ago: executing program 4 (id=4116): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0xfffffffffffffe5d, &(0x7f00000005c0)={0x20, 0x2, 0x28, {0x28, 0xf, "83efb930f0187ff0478fa22a61a54607b71ea9e442359c479c37f525cde38bf4fd6ef4366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xa5c, 0x47425247, 0x8, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) socket$pppl2tp(0x18, 0x1, 0x1) 4.617740501s ago: executing program 5 (id=4119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10090}, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x50) sync() sync() sync() sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x8804) sync() sync() r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x103302) writev(r4, &(0x7f0000000180), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000200)='memory.oom.group\x00', 0x2, 0x0) set_mempolicy(0x8000, &(0x7f00000003c0)=0x484, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) socket$inet6_sctp(0xa, 0x1, 0x84) 4.106843022s ago: executing program 2 (id=4120): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1", 0x2}], 0x1}}], 0x2, 0x4000) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 4.097233977s ago: executing program 5 (id=4121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) preadv2(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000001380)=""/129, 0xa9}, {&(0x7f0000000640)=""/147, 0x93}], 0x3, 0x0, 0x0, 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000380)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r5], 0x15, 0x800}}], 0x1, 0x20040804) accept4$unix(r4, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x100) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0xfffffffffffffec3) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0xfffffffd}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x23, &(0x7f0000000280)={0x2, 0x3, 0x7, 0x390, 0xffffffffffffffff}) bind$tipc(r7, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 3.999638521s ago: executing program 3 (id=4122): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = memfd_create(&(0x7f0000000400)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9){\xb8\xce\xeb\x9b\x84F\xbc2\xb2\x98Ms\xcb\x01\x90>n\xbf\xddN\xeeG\xb1\x85\xee\xec;\xff\x9cx\xf4\xces\xae\xc0\xcfB\x80=B.\x03\xc6\xb91\xa3\x96!\x87\xa6\xd7\\\x8a\xde\x19\x18I\xd9\xb4\x85j\xda,\x0e\xfcK\x19\xd5\x91\xab\xd5\x8aS27G\xc4\xebl\x00.tt\xa6\x860\xbe\x86\x9bj\xe0\x81=\x85\xbc\x1e\x00\x14V\xdf\x7f-I\x83\rU\xe0\\w\x89\x00drN\\\xd4\x1cs\xf4\x1c\xc7\xd8*\x8bzJ\xa9\x87\xcd\x90\x15\xfc\x1bO\xcf\xbf\x81 \x01\x9e\xc8\x01\x9c\"\x97\xd2D\xd5\x06\xb2\xdei\xd0>\xde\xc1\xf3)\x91k\xed:\xfa,!\xaa\xac\xcb\xbb\xea\xdc\xc0\x93\x80\xa3E{D\f\xb6\xc4 n\xf5\xce\xfe\x12e\xf2~\xa6ZT\x8fj\xdb`\x958O\x03\x14\xb6?\xb0\xc0\xadv\xf8\xe4\xe6\xbd\xe8', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x80086601, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000000000004000700000000001000000000000000000000000000008696cc9183883a8faf00f443644f2f5700"], 0x24, 0x3) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 3.832104897s ago: executing program 5 (id=4123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af807d0000000bfa200000000000007020000f8fffffdb703000008000000b704000002000000850000000c00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.658275701s ago: executing program 5 (id=4124): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fanotify_init(0x10, 0x101000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0xff, 0x2, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x300}]}}, {0x17, 0x7, 0x0, @multicast1}}}}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f00000001c0)={0x5, @win={{0x5, 0x2, 0x1, 0x7fff}, 0x8, 0x40, 0x0, 0xfff, 0x0, 0x8}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {0x6, 0x3}, {0x7, 0x5}}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xfff1, 0xffe0}, {0x6, 0xfff2}, {0x1, 0xffe0}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r14 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r14, 0xc010640c, &(0x7f0000000180)={0x10}) 3.086182147s ago: executing program 5 (id=4125): r0 = syz_usb_connect$hid(0x1, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000086d0493c200000000000109022400010000186bd75626c2e302c3b47ce3788a6de00609040000080300000009210800040122280009058103820800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e001400028008000100040000000800090001000000140035006d6163766c616e30"], 0x58}}, 0x8000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5, 0x4}, 0x8) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400f28000000280bb8b479a630dfcfda4f8f1bb1afc0f0dd0d3c7d484b0000000085bcf73b53f74aa69f5b16fd37"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.897403963s ago: executing program 2 (id=4127): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$dupfd(r3, 0x406, r3) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x8) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) connect$inet6(r8, 0x0, 0x0) sendmmsg$inet6(r8, 0x0, 0x0, 0x4404c880) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000037c0000080087196113c177b28e7a018004190500"], 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4c010) pidfd_send_signal(r2, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/0\\///\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf8}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x810}, 0x24004040) (async) r2 = epoll_create(0x3) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0xfffffffa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000340)={r2, r2, 0x4}) (async) r5 = syz_usb_connect$cdc_ecm(0x2, 0x64, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x7, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "4d2cf6a2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xae, 0x50ac, 0x1, 0x80}, [@country_functional={0xa, 0x24, 0x7, 0x7, 0xb905, [0x6, 0x6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x80, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x6, 0xca}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xc, 0x6, 0xe, 0x40, 0x48}, 0x4e, &(0x7f0000000440)={0x5, 0xf, 0x4e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "52aca46dc9bae32b1ee324472196c90c"}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "acd6f4dc8f503bec723dcbf06e1910ce"}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x9, 0x2, 0xef}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "bcf28d19333d34b9f75fc192d1eb6323"}]}, 0xa, [{0x8c, &(0x7f00000004c0)=@string={0x8c, 0x3, "bdd117dfdc7107d6a6b97b34aa1658ba0baf92ceff493b535a656e58e19439e2f0613b5de1e1497eacca4edb3b7f6aca5e37c6b32620c9ad57e778031f8a395f111ab333446b5500f48a5065c47d3c921f3dada85a9d63b3dc6b7f2f1e5d49b7dfdf2d6c0e583a0b872120be33d4db5ee5aafdf198af2533f488791da5699ad81d1d2dda7d34aaa275bf"}}, {0x3f, &(0x7f0000000580)=@string={0x3f, 0x3, "342676b68ffe118e83a5d3108872120bf8b2650418214ca330370a7677d78ad55ee02f4bbb44b8639200ce1a95a19708de1006f69fb18e0b638e6d2917"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x64, &(0x7f0000000600)=@string={0x64, 0x3, "959dcc638604eea9bab5672d239f8fa25e6ddd61364367fc8e892a49d28158430406ba603cd651d8193fb38a30dd62389139a5225442be7196ea624e517c72f67b2b81bb234974bbf7d18346460a9e620ce29a551f7d21ad5d4e729dcbc8316192f7"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x40f}}, {0xcb, &(0x7f00000006c0)=@string={0xcb, 0x3, "a0abffd51ce7acd816da4d895b77f34b5d00b2c05890234207520db8919c4b9d320e5230bc89a8a2064dcb7468f2e39fdde9aa2c83165b480c9cc3aeb9aae46ba22d862e5bdb4326e29ab4dc1989875cde8ea296d7197791050954a218eeb68d5c0f684f462df01f506014dc1fceec3be87418ccba970622c51092f5882b80a5bbbb7e9495f5d34cc74fd4701a3a6d495e596b6d5772f41a1b3e7f50f83d29923945c36f4e85bcc6b1f75f44ec866f2cc9da51c31f9db11a82ce00fd4a28ac6c4f90f417214fbaa051"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x443}}, {0xc4, &(0x7f0000000840)=@string={0xc4, 0x3, "ace2ee45b1d78264b73827d433573067a4259b20b7fffc3f69108cb655a6217b1c4ef01bb0c5720a0edd5d58e012f135b5a6b963d9e90a50607bd565f634dd7a7ec37afd3eea88ef42082f18929dc998fae9c0cd4262a8f405a8e1a0213006c4fbfd6cbb2355fd2cc6903e24080e655fd9f5d6ea9eea3914afcadaf33a557ca4f07dc913b8fca3c3e76df941d5da426e78858f59ba66962a49ad9abd11a9e391a4fbbcdf43fa7c18a31ac8a184da12d211aae73051295c07df8b66b86f2d441a0640"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x60, 0xf, 0x1a, {0x1a, 0x32, "92cef37210c2cde824f945d88820878d9b9b4c38d084e2bb"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x40, 0x31, 0x71, "d80c190c05290f23ba5631e58fa6c9f4fdca2a2989c971b4646c8daf1c59b414ffdc539158173f4e9d53e05fb69ce419ab96f27c0b3bf228bddb9158379d886e839cd306386fd4d5ea3e9385a10f0dc84b541d32358939342c3b4bb380032e12a11a1b7a8d6981a470ca91586f869a0615"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}}) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x3, 0x100000) r7 = socket$packet(0x11, 0x3, 0x300) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000c80)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10c, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xe5, 0x5b, "2ea3d1aa0a42dba0b87faa17bc5ded7530f0d8f34b995cfe6639b5f49bf455dd2c85baaec2896d7550e1e12e47de733bf6662e82ab548ea240ebbbece3d477d8ec9fb9fd86cdf66216451447599ec5ea12061a668b18b810f1398c236668b8f83f746d70ef3eea3486789e3cc702092725aa2fef0a362b53db8bb24d28ea388278d0bcbbaeb6eab7722778f28abfbfe4ed9b801935c8093df71e31f85000b25663fef96e3698d5aa944ab8dc3ef821fa80604d8304acea864563a3ad33b1cd038afa1050b5980b802310bc9284ff4bea91ef61e8c6b4ad28853e834ead16dfeda1"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async, rerun: 32) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0x40800, 0x0) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000fc0)={0x1, &(0x7f0000000f80)=[{0xfff7, 0x7, 0x36, 0x8}]}, 0x10) (async) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001000), 0x4c600, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r10, 0x80044dfc, &(0x7f0000001040)) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000001080)={0x1, 0x3, 0x6}) (async, rerun: 32) getsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f00000010c0)=""/74, &(0x7f0000001140)=0x4a) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x90, 0x5, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0xb3, {0x9, 0x21, 0x1, 0x92, 0x1, {0x22, 0x5b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x1, 0x4}}]}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x110, 0xbc, 0x7, 0x5, 0xff, 0xff}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x7, [{0x6c, &(0x7f0000001240)=@string={0x6c, 0x3, "a036991e96e85b9ae457480b6abf301f8909c170b7113bec2e79656b43ac03876de86464b4ec8cb081de5ececf8fa801e99f2bb25ed33b07a7eb022108ee583dca192b0a5f1f53236aa731d60f058e565c65c26824b773bc5521ec7c2f1c0922f4775ba710ad6f4f6dd7"}}, {0x6f, &(0x7f00000012c0)=@string={0x6f, 0x3, "179f05c32d36ea4f348c2042558b9fa8877cfc4d0699e620fa3c11859f2ae5f2f7dd03551f3e25b138c65c9e1a4c3a73090f8c50d61c18fc096c00e1f4bc571bfc496eaf6d21bd1443e5957b3d0ca47a3f4e044c625b2e177e87081eb4a9cd2f8c1ae5e125e128e7c4bb6b716e"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x401}}, {0xa1, &(0x7f00000013c0)=@string={0xa1, 0x3, "1153eeb2f99442d214c02222ec30df6a4bc20f06b20a8a275faea64af5a8fdb4edee66d04e0ca838c273d1721482ea3b08dab3c2f914378496407438a034d1914d7e7ca7088cecda38eaaded003e8c818ba7839b68358e70eefc5c447ccc5b26403f16665ce31d1772be22220326c955cfb3edf2766d1442177e8af9c837dfd9cafb3fd203d1565a62a14a54ada0b2d5a75d0eb93cb7d78b7423baba5de789"}}, {0xfb, &(0x7f0000001480)=@string={0xfb, 0x3, "6356224681bf91e8ee95876bd670b134a55cc1d59f7595570d291ba40b19d71333646b6d41bf204f2c9a69fd590eeba17de0dcc496fc37e75f1b823bc552940a5eac3c39f8f107b0ca15f7e5ba4feb835e4a3288b31fccf56feb27d2dbfae36e031b148d6e5b2c26249267b04f7dc155633e806917baf61c09e1c70678b5fc439ed1440f40666ded331e1f366261018a2e17b7c3f49871e18619a8def1fc3cf1d8cde2c8cae1479bed51c2d5d3e89923480cc60a4a6037f9d9b977152875d7a6270f7e450197ff6b2678d3fc5dd95dad4eb77d016fbbca8de13346525f9124a504b25943bc7de9cda5ccbf4dc22e5ff3bf9082d838c07019e4"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x500a}}]}) (async) syz_clone3(&(0x7f0000002840)={0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)=0x0, {0x3a}, &(0x7f0000001700)=""/237, 0xed, &(0x7f0000001800)=""/4096, &(0x7f0000002800)=[r3, r3, r4], 0x3}, 0x58) ptrace$setregset(0x4205, r11, 0x2, &(0x7f0000002980)={&(0x7f00000028c0)="794a7e903196bc0cd5e9106e29a90f83f8e4513a1930e2f4375f2cd0ff87ff25808d4f4fe97d3f8eb11effeae212778265ff93f702c18321160bc4175872b54fcc185f1a16bb63ab3a1b4387e3b316db732e65067a72bf2f8b652bf1ea197f901141d6e1fdeb2841d329c19a93b78bdfdbca6c822329b824c2d8387b8ab1b236def3a7e1f514242dc1eac3aaabb9f6f03f75412dde0fcc6e4e2c12531dba3b36ef8330b68a02", 0xa6}) (async) getsockname$netlink(r1, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) (async) syz_open_dev$usbfs(&(0x7f0000002a40), 0x6, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000002a80)={0x2, {0x2, 0x2, 0x3, 0x5, 0x81, 0x4}}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000002ac0)) 2.467647049s ago: executing program 3 (id=4132): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x9001}, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x48}}, './file0\x00'}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x10, 0x6a, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x48000}, 0x4044000) 2.347126385s ago: executing program 3 (id=4133): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x10000006, 0x55595659, 0x0, @stepwise={0xfffffffe, 0x3, 0xec, 0x5b3, 0x1000a, 0x9}}) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/45, 0x38}, 0x1000}], 0x1, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x810, 0x3, 0x3d3}, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000000)) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x19) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000280)={0x1}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)='*', 0x1}], 0x1}}], 0x1, 0x240440d0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r5}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r6, 0x8}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x378, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xf}, {0x0, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x348, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x3062, 0x8, 0xb, 0xa, 0xb}}, @TCA_CHOKE_STAB={0x104, 0x2, "47cfca07b9e3f8543fe350a06db0bdcb736f2d81d9fb6ef8e597bccf8f66231f08f6c2d5622ea547ebb7cd4a693226f30f4f495eaab5ff07a89779d4a45f86b7347365fa0151babbe67f4907123af6baabe6e9b62bc05a13ea022ba5513510db867e6d0bc58f63a21acc4e0146c4fc0c7bcfb76b6114ac7168ff438aad4451552283691251922e3c70c2920986a263defd08a66b30988d3743bfa71ad02ff0c019fd5f6871b359373ef7d293193b7a868b572a5202593941a8244b45b9ebb6c18f40f4578fd822d6e7aca129097e7b1cd0d21eb821207e6dfebdbbdd2d2f3d26a57bfc79b47a5360a3a9e74a27c8abdb97edede71855551d242fe8f65e96e9a5"}, @TCA_CHOKE_STAB={0x104, 0x2, "8f303abcc7ca8692195ebb607d4cffaab771ff7510d0c7111f77e0122642d7b7893d36ba68ec4fd0f629e7a167cb70d259471db8cafe3a23b25b16324481b2ab1836e36458bde19f597477f3e4a7e91d6de2afcb86c6228ccea58d016d2ac24f0152da11d8270676917586a81b3f0a128197a00816419cc6ba8e8a4641f47c6069a72092995e5cee61c0280956cc77e430f71514280d32157fc46db5f9ae9a7da7ee46337e1e566755bbb0eca75225e04bf5d15e7eddfc6fe8fa0a270d2f910d4084c27d0e5b91666d875da853cd24e8ad33929e046c8bebc62b3da327cbbca9314944acb51de39e618df86ad42fa9bd0d13e4ef40adf4cf6c66f13b78698421"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x194b}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7fffffff, 0xfffffff8, 0x6, 0x0, 0x1f, 0x7, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "a58bcd3a6c3d584fac37e57ce379e52568a1f0ec0d1e7dd0bc02068f7814f882b854c0092f7f01555b98efcfb11e0467c302f39217811227a44816103385657e53d55ffed11bb7aac77b277ed973d98d1f7dbc48febd33f2ad879ce1839a7d3b9895b27aefbdb68972ee38f60bd8052fcc787a2d4b889eb16cea2fa016fd1119763c3523bd8b690fd779e422d6cc5267bf5d490c4d260bb4986aded06966184450d4ac9bfb4f310bf3950ff5874cc34e194129614f27d3ddf1bb8fb65a91b6b5fc444897cc3b83c9ca87179c3ff9685def0c41d781af6bc68cb5259f47b1adbe97ee4271accf43f4b7f6e3090c35987698e11dd3e741c2a5b7bdc7ca11c5fd70"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x20000000}]}}]}, 0x378}, 0x1, 0x0, 0x0, 0x4082}, 0x2000400c) 2.075556062s ago: executing program 3 (id=4135): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x10}) 1.948540356s ago: executing program 3 (id=4136): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x10, 0x10, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400c}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7ff, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x7ff, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x1, 0x9, [0x5591, 0x101, 0x80, 0x4, 0x480]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x9, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x30, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x3a, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x6, 0x0, 0x4, 0xff, 0x1}, 0xc6, &(0x7f0000000a40)={0x5, 0xf, 0xc6, 0x1, [@generic={0xc1, 0x10, 0xb, "1659f2d858e5dbd3258d1c0b7fd700c27e24cf5543fa29ca0bf3f49ac03b22a4035bd43810be03b503aeebcbd9aa3c1363fa697c23a4d9cb6164fa588b957d9eab0e6d708605baf677d693efdeea0bb8df65da6854887db51c2fd979d23e9311ec0bf09218823cbfa2998af0f492e036e004468e6cd408adafe86e511856a618db67fccea29ba9bc11fdf5361da0843b5f02f9d4c658da47ceef0a0d23bd127e40f1fad6eb03a18e8164bb735056402a32b640b1a356515ad125bee55bac"}]}, 0x6, [{0x63, &(0x7f0000000480)=@string={0x63, 0x3, "f1546a84b7e00c25d4fc31c4d7c83dbb14a998c1daf4492eb8657386a286103015ef46f56f27eecc7a6ca6919446a716056160ad3d88a66c85280ba7f327205008961efee141d951b8e20e50e1028769586f6c5529a848c25fd1c8efb1f2d4f45c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x410}}, {0x15, &(0x7f0000000540)=@string={0x15, 0x3, "7a8381729010d45dd6f69c7e922f30ce0fced0"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2401}}]}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) listns(&(0x7f0000000000)={0x20, 0x0, 0x800000003}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getdents(r6, &(0x7f0000000180), 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x8}, &(0x7f00000000c0)=0x8) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYRES64=r4], 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x66, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x1, 0x80, 0x83, "", [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "9cf7f86c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x8, 0x5, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x9}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x200, 0xf, 0xa, 0x4, 0x40, 0xc}, 0x200, &(0x7f00000007c0)={0x5, 0xf, 0x200, 0x6, [@generic={0x9c, 0x10, 0x4, "8b82216b925e1e10e357a86ef99c16471bd7aa2701dae6dc36e95268f2f3a74a3aba1717248d59ba1be4d0bc49c29094a2de85b667cf21504879de7f62fe799e6ba00029d00d139e483e0b91c77404962e35cf41cbc0561376f5be76b7d4210e117f55af8dd9b2358a37a45fc054b3631255a398a1397c5caf6ce7916da81552942daf3c5b67b68835c71667f19d6e730420c64ac3525a3858"}, @ptm_cap={0x3}, @generic={0x6c, 0x10, 0x3, "9b3ad4d7bb6dd8e312e67e42ad3ae6b6406471fef7cf465faca53b8d07a9844c6dd522d50518ee2e1afb8029e741f003026b795f7fc42e19628ebac073a1a8dfdbc8a941a97557ccb1500cfcf1edae113400c22dedc40995044a2c4c57f7d74a6b742b00fc21b73062"}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x4, 0xf, 0x7, [0x0, 0x30, 0xf, 0x0, 0xff000f]}, @generic={0xcd, 0x10, 0x2, "5bb7127aac5180a3af1c9be18864f296c65f03df0f9ba0a99c76f71711952b1f503d63f05c6113f4a916f4d0815869110c621b6c9d52511011742fe1bc4198a58d4204fa9a119f2f46868e31144438c6fe61d0e966fd870078a7e9af1a50f07a7e16ca01959865d369c4fcbdcbdddea5325362671125b44f8cbfe99815df22120167fbeaa349eff7cff3bbf18740b7eb2912f430b1c9c9ec5f56fde0d611d01a3fd3deafc408d1d987afeda62b313e899cca0aba2aa5ef2cddd0d50964b933f60e1a7b4f9827df3b68e4"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc0c}}]}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={r7, 0x5ce5, 0x2d, "ea039e278bbeee7e2e1e4c9ceb3b61abb41f521b229471595fb5d31a3afc24a30c90dc9e6b66d105d6da299c2e"}, 0x35) r8 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r8, 0x0, 0xfffffcd9) 1.534933409s ago: executing program 4 (id=4137): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x543, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/kexec_crash_size', 0x40901, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 1.388372569s ago: executing program 4 (id=4138): r0 = socket$unix(0x1, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120110039e65c2202505a5a46c180102030109021b00010b0a90080904a50001adeec82909050e0c0002000e08", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB="507ff4414855fa2fc51e00ac471a83eac2bda7effe9a39a9770d4a2c13ffdf0d903acbdc6f0111cb21167e22315c30988b3699ee40a4566083c2f1529f7acaf064d151120229f13ed45a8f1d9cb919f28559dfe3d87bd50c747f628688c923b94d83d650f601687012eac991f8cb71e76242a86973c09537ba596fa15c795bd6af55e991cc9654ab65dffa59a3ff7eacd55cde41ab1235a4a0e2da27e3d1b2bc8f5caf7f7d84043665882b97aae3abff28ba91d78e1afd22920d610916ddd1"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000100)) r3 = fsmount(r1, 0x1, 0xa) fchdir(r3) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000000), 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000680)={0xa3, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000020605000000000000000000070000030c00030068617368800000000900020073797a32000000000500040000000000050005000800000005000100060000000c000780080006"], 0x50}}, 0x0) r5 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffd28, &(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYRES32=r2], 0x0}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket(0x1a, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ftruncate(r0, 0x71) socket$kcm(0x10, 0x2, 0x10) lseek(0xffffffffffffffff, 0x0, 0x1) 1.344653841s ago: executing program 0 (id=4139): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000030000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.3081307s ago: executing program 0 (id=4140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000001803010300ffffc4"], 0xf0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) syz_emit_ethernet(0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000b50000000000119078000000000000000001441c1531ac1e0101000000037f6800000100007640000000000000ffff00000000004e20008190780100000108215ff01c46fde1f90cffb295b95f3b5a216cbddf7fb88e1bb7d6ea80005ee86ff6ad6a1773dbb5518daea29dccd36031b1dca3779ffb0be82f8247d79f401ad639187891746e2695d5b06b0ea4899215de0dc61438998193eec68d119ec919a9afbf0905fb9dfa485ed65cda2f28428fa8c231"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'macvlan0\x00', 0x10}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xa, 0xd}, {0xffff, 0xfff2}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'wg2\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'wg1\x00', 'macvtap0\x00', {0xe3ac034b102198d1}, {}, 0x8, 0x1, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth1_virt_wifi\x00', 0x38, 0x0, 0x1, 0x200, 0xffff7fff, 0x0, {0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x1, 0x2, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x609}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x59}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 1.157982968s ago: executing program 0 (id=4141): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x7, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x61, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x2, 0x200000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0xf, 0xfc}, {0xeeee8000, 0x4000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x54000, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x1, 0x5}, {0xd000, 0xeeef0000, 0x9, 0xfe, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0xf000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x200000, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) 955.783757ms ago: executing program 2 (id=4142): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1281100314857affb5af80152affaca0f1ff11046f01c1c2010203010902190000010cbfb2265a85037a7ff581376d258ce1cc0b4c2a1d7e6bba423ab49849295d1115913ebb95bc09d3681d9d68bed78d0dcec5551c629431f4101b60c0d8b3ae7f5e7e2ba10b896a9797a74f6ca45b618e7a65c632eaec84d1083e116c83a523e724f5a3759854b34abf1e3d0b12a2d7ebde7889a82fac4fc68c410a12ca76b9a06d69e6d0b4d573a5812c725a2819a6941f32ed02bbad8d892cf238a3125d9a25633bfe21da43876601f11513ef6f8b1e3722cdd6d3cc033396f9ae6300000000"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc9, &(0x7f0000000380)=@string={0xc9, 0x3, "624b2b57652d9746421b79227c72a0492b2deba5f08a06ae847f077456ec000bedbfe56c3392efbb7f57aaba73daf27682b45d013831d8a74f10f7cb60bc19377467047dbfad7807ed2ea5482f98497bdd16666965db766b784295273659f1e85709fc092e41ff0307d1b22aa453a37ea2eb44f4c231fbe921f6ebd1c7c40f75c522c2aacc4dfcc51f9d51a47266cdb040511028fac512c76f3faf37791f32931a1feb8e85f1f904bcc9a006e991ea4a3d350cfc65778293481f13aa0c893781fb1303a504d2bb"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc33}}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x0, 0x2, "7c97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x94, 0x0, 0x1}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x800000000, 0x606, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000004000000, 0x8d], 0xeeee8000, 0x2150d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f00000002c0)={0x3, 0x2cd, 0x0, 0x0, 0x2, [0x9, 0x6, 0x1000, 0x3ff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(r1, 0x10, 0x990d, 0xbd6) 535.678283ms ago: executing program 3 (id=4143): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000003c0), 0x61) socket$inet6(0xa, 0x3, 0xff) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x17c) ftruncate(r0, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = socket$rxrpc(0x21, 0x2, 0x2) io_uring_setup(0x1612, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'rose0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000001540)={&(0x7f0000000100)=[{&(0x7f0000001180)}, {&(0x7f0000001280)="2ca9d421ecd639c433d1e3bb8c3fbd563255ce5c1e6cce52ba7983120acf9c3b1767da2c3c736c233c9bbd7ee57772de68c84f44638a372a6d3e5e3ce7cc0bbb49f33a34188085e70d", 0x49}, {&(0x7f0000001300)="246fa80faa53ad48a689561ac913bd100869fd5c303eaf2f6219817a2d5aac1ce3f5601c4dbabd0309d32e74f1585f", 0x2f}, {&(0x7f00000013c0)="13efc3e04d9ba42bc87de21a9367451603d39dee5a4c64f6f9a3998dfcb87ec812aa88f9ca6503fd14f37c407d17ceb024e1cfefae9d3cc21b7c", 0x3a}, {&(0x7f0000001400)="d924ec5fc3757b24d27191191026cd77f11aefee7fd8320808885d5231e9b058f5b7e1d604b5bbfc7261610f6834eb5f84f87ead11520d3f9fa86e33da8685a8fc3d629f056e92a9baf24c63f8d677206434291ed64a4566e0e6e22bd46e26849a2ba8d9a7c14293bd7ece", 0x6b}], 0x5, 0x7e21, 0x0, 0x1, 0x2, 0x0, 0x5, 0x80000101}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x24000854) 509.986028ms ago: executing program 0 (id=4144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) (async) sendmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000095c416b7e11f3c945213adcb5a186fec283650b875facd1c938a78236709a0d174c13bbc42189f1c376f7e3c96f6daeb66ab98b500ccb00c991ea9ec1ce9564c50f67401210da8a84e4cbb310ca5751b"], 0x20, 0x24040004}}], 0x2, 0x0) 424.861885ms ago: executing program 0 (id=4145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0xae, "5092be50dfcf2207a63f2aa86e9dbdf78b373943e993d4745728f2255b2d328e6bf8c1c0bb9e36d878bf05170a923f3c3a331ea65c0be9f8fb0265a8dcb6381776ce16e87b5b1f7371b064d7c49c5c724eda426670281af5b12d7598f4d5f0aa812a2f75408e4317b30deb3351a70269907830f32ae25336f29c5765251b56614bb2d81cee84bf6e899b95c32c7973c6736a2bed33022a7eb9bd37222242953d7a1757a12767227264ce47d02f5b"}, &(0x7f0000000580)=0xb6) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @loopback, @loopback}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aaaaaaaa67bb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x884) 88.825273ms ago: executing program 0 (id=4146): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x428101, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept4$unix(r2, 0x0, 0x0, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x80000, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000001900)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000400)="9d5ada5b52070d96bcc2b93e69fa43dd74cfd42630ebb03258d68cb978005afbcb071a1dddddce64f0cdbe00f1634bcedd7ceb3abdc0440a507e6cd750754449a486b3257d3a176ae9d028287b38b90469c4a76fc513c0b78f23dbff9e09b6", 0x5f}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="4a38db1d7b3e4e5b55837288f51e5a84868ee416d588fff5bad11476a2aab0598d09b197e5836f33a9a325d2a866361b60df2a3080899a9b5cb848ec6b70633b72298f974a7417287d50a2b91682aabfb1cd76737781b89ad5627cdce9e10c756e52743322daec30a29a5f9253dc6b5a6bbafbe4b5444b05fc38", 0x7a}, {&(0x7f0000001500)="d382662b413429168a4937500227f69278853f89", 0x14}, {&(0x7f0000001540)="5f73c2ef6abd4442e98379d28d78e094cbcfbfd91ccfba08b310e03f1aabcba0167103e52e895dabe9306f1aaedc08036082f43235874f71cd1943d3e2437df4303568cda8905479e070b4a068560c5f206603d35018fa6ca20e3105484c91cff0870654781ef67203eccc1246b0434205ff13108733c7513da1fbd6e9445d6fcb72f92853322c219d3d7d1d846aab2f47a1b21be1588cfc699dc7ada97daea52c312737b90dbffd8a42", 0xaa}], 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000a4c7518518acfe24b016f720bea22686a60000b948bd24edc7", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYBLOB="10000000000000000100000001000000"], 0x88}}], 0x1, 0x48010) r9 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000200), 0x4) 0s ago: executing program 5 (id=4147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x100, 0x0, 0x0, 0x488, 0x598, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, &(0x7f0000000140), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xff, 0xff000000], 'ip6_vti0\x00', 'xfrm0\x00', {0xff}, {}, 0x34, 0xe, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x80000000, 0x3], 0x5, 0x12, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}, {{@ipv6={@mcast2, @loopback, [0xff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 'dvmrp1\x00', 'ip6_vti0\x00', {}, {}, 0x11, 0x2, 0x4, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x0, 0x1, [0x8000, 0xfff8, 0xe9f, 0x7, 0x7, 0x8, 0x1f, 0x8, 0x2, 0x7, 0x46d, 0x0, 0xb918, 0x3, 0x4, 0x8001], 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@multicast2, 0x27, 0x15, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x37}, [0xff, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xffffffff], 'batadv0\x00', 'pim6reg\x00', {0xff}, {}, 0x6, 0x0, 0x4, 0x4fbb8484a41e2b0c}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x4, 0x1], 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1, @dev={0xfe, 0x80, '\x00', 0x1d}, @loopback, @local, @local, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback], 0x10}}, @common=@hl={{0x28}, {0x1, 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0x43, 0x2f, 0x6}}}, {{@ipv6={@private2, @empty, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0x7fffffff, 0xffffffff], 'batadv0\x00', 'wg2\x00', {0xff}, {}, 0x16, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x10001, @ipv4=@local, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "5ab4"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa234, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r2) recvfrom(r4, 0x0, 0x0, 0x40002062, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002e00)={0x50, 0x0, r6, {0x7, 0x2d, 0x6970, 0x4001000, 0x5, 0x7fff, 0x34e, 0x80, 0x0, 0x0, 0x10, 0x2}}, 0x50) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x40}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x100, 0x0, 0x0, 0x488, 0x598, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, &(0x7f0000000140), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xff, 0xff000000], 'ip6_vti0\x00', 'xfrm0\x00', {0xff}, {}, 0x34, 0xe, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x80000000, 0x3], 0x5, 0x12, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}, {{@ipv6={@mcast2, @loopback, [0xff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 'dvmrp1\x00', 'ip6_vti0\x00', {}, {}, 0x11, 0x2, 0x4, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x0, 0x1, [0x8000, 0xfff8, 0xe9f, 0x7, 0x7, 0x8, 0x1f, 0x8, 0x2, 0x7, 0x46d, 0x0, 0xb918, 0x3, 0x4, 0x8001], 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@multicast2, 0x27, 0x15, 0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x37}, [0xff, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xffffffff], 'batadv0\x00', 'pim6reg\x00', {0xff}, {}, 0x6, 0x0, 0x4, 0x4fbb8484a41e2b0c}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x4, 0x1], 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1, @dev={0xfe, 0x80, '\x00', 0x1d}, @loopback, @local, @local, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback], 0x10}}, @common=@hl={{0x28}, {0x1, 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0x43, 0x2f, 0x6}}}, {{@ipv6={@private2, @empty, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0x7fffffff, 0xffffffff], 'batadv0\x00', 'wg2\x00', {0xff}, {}, 0x16, 0x5, 0x1, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x10001, @ipv4=@local, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "5ab4"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa234, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x4) (async) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) close(r2) (async) recvfrom(r4, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r5, &(0x7f0000002e00)={0x50, 0x0, r6, {0x7, 0x2d, 0x6970, 0x4001000, 0x5, 0x7fff, 0x34e, 0x80, 0x0, 0x0, 0x10, 0x2}}, 0x50) (async) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x40}, 0x8) (async) kernel console output (not intermixed with test programs): 54785][ T5631] nzxt-smart2 0003:1E71:2009.0030: unknown main item tag 0x0 [ 876.163324][ T5631] nzxt-smart2 0003:1E71:2009.0030: unknown main item tag 0x0 [ 876.170913][ T5631] nzxt-smart2 0003:1E71:2009.0030: unknown main item tag 0x0 [ 876.178566][ T5631] nzxt-smart2 0003:1E71:2009.0030: unknown main item tag 0x0 [ 876.186677][ T5631] nzxt-smart2 0003:1E71:2009.0030: unknown main item tag 0x0 [ 876.196539][ T5631] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 876.353510][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.364042][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.373153][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.380176][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.551772][ T42] usb 2-1: USB disconnect, device number 60 [ 876.579501][ T5774] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 876.751267][ T5774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.761807][ T5774] usb 3-1: config 0 has no interfaces? [ 876.767345][ T5774] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 876.776668][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.786854][ T5774] usb 3-1: config 0 descriptor?? [ 876.930211][ T42] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 877.000788][ T5631] usb 3-1: USB disconnect, device number 91 [ 877.089814][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 877.100016][ T42] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 877.109280][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.120714][ T42] usb 2-1: config 0 descriptor?? [ 877.331975][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 877.343645][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 877.354865][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 877.364219][ T42] usb 2-1: media controller created [ 877.379753][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.543392][ T42] az6027: usb out operation failed. (-71) [ 877.558151][ T42] az6027: usb out operation failed. (-71) [ 877.565936][ T42] stb0899_attach: Driver disabled by Kconfig [ 877.572269][ T42] az6027: no front-end attached [ 877.572269][ T42] [ 877.583983][ T42] az6027: usb out operation failed. (-71) [ 877.604723][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 877.619221][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input117 [ 877.635500][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 877.652827][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 877.670193][ T42] usb 2-1: USB disconnect, device number 61 [ 877.780188][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 877.899553][ T5774] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 878.059022][T18392] FAULT_INJECTION: forcing a failure. [ 878.059022][T18392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.082181][T18392] CPU: 0 UID: 0 PID: 18392 Comm: syz.3.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.082217][T18392] Tainted: [L]=SOFTLOCKUP [ 878.082225][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.082237][T18392] Call Trace: [ 878.082246][T18392] [ 878.082257][T18392] dump_stack_lvl+0xe8/0x150 [ 878.082289][T18392] should_fail_ex+0x412/0x560 [ 878.082381][T18392] _copy_to_user+0x31/0xb0 [ 878.082411][T18392] simple_read_from_buffer+0xe1/0x170 [ 878.082443][T18392] proc_fail_nth_read+0x1bb/0x230 [ 878.082475][T18392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.082506][T18392] ? rw_verify_area+0x2a6/0x4d0 [ 878.082535][T18392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.082563][T18392] vfs_read+0x20c/0xa70 [ 878.082608][T18392] ? __pfx_poll_select_finish+0x10/0x10 [ 878.082634][T18392] ? __pfx_vfs_read+0x10/0x10 [ 878.082665][T18392] ? __pfx_set_user_sigmask+0x10/0x10 [ 878.082685][T18392] ? kmem_cache_free+0x182/0x650 [ 878.082713][T18392] ? fd_install+0x94/0x3d0 [ 878.082752][T18392] ksys_read+0x150/0x270 [ 878.082781][T18392] ? __pfx_ksys_read+0x10/0x10 [ 878.082818][T18392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.082841][T18392] do_syscall_64+0x174/0x580 [ 878.082864][T18392] ? trace_irq_disable+0x3b/0x140 [ 878.082894][T18392] ? clear_bhb_loop+0x40/0x90 [ 878.082920][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.082940][T18392] RIP: 0033:0x7f7d3835d68e [ 878.082961][T18392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 878.082976][T18392] RSP: 002b:00007f7d3927ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.083001][T18392] RAX: ffffffffffffffda RBX: 00007f7d392806c0 RCX: 00007f7d3835d68e [ 878.083015][T18392] RDX: 000000000000000f RSI: 00007f7d392800a0 RDI: 0000000000000009 [ 878.083027][T18392] RBP: 00007f7d39280090 R08: 0000000000000000 R09: 0000000000000000 [ 878.083040][T18392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.083040][ T5774] usb 3-1: Using ep0 maxpacket: 32 [ 878.083053][T18392] R13: 00007f7d38616038 R14: 00007f7d38615fa0 R15: 00007f7d3873fa48 [ 878.083084][T18392] [ 878.289279][T18396] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 878.296153][ T5774] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 878.322373][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.339483][ T5774] usb 3-1: config 0 descriptor?? [ 878.554924][ T5774] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 878.869564][ T5719] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 879.019544][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 879.030695][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.044785][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.062211][ T5719] usb 4-1: config 0 has no interfaces? [ 879.071549][ T5719] usb 4-1: New USB device found, idVendor=05ac, idProduct=104c, bcdDevice= 0.40 [ 879.081284][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.089355][ T5719] usb 4-1: Product: syz [ 879.097148][ T5719] usb 4-1: Manufacturer: syz [ 879.119482][ T5719] usb 4-1: SerialNumber: syz [ 879.127585][ T5719] usb 4-1: config 0 descriptor?? [ 879.399542][T16800] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 879.571692][T16800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.591123][T16800] usb 2-1: config 0 has no interfaces? [ 879.599861][T16800] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 879.608872][ T5719] usb 4-1: USB disconnect, device number 3 [ 879.619467][T16800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.642715][T16800] usb 2-1: config 0 descriptor?? [ 879.802340][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3799'. [ 879.863785][ T5719] usb 2-1: USB disconnect, device number 62 [ 880.779860][ T5719] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 880.859549][ T5631] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 880.931613][ T5719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 880.941548][ T5719] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 880.952333][ T5719] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.967550][ T5719] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 880.976708][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 880.984849][ T5719] usb 4-1: Product: syz [ 880.989006][ T5719] usb 4-1: Manufacturer: syz [ 880.993643][ T5719] usb 4-1: SerialNumber: syz [ 881.021338][ T5631] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 881.032007][ T5631] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.042348][ T5631] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 881.055464][ T5631] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 881.064607][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.079953][ T5631] usbtmc 2-1:16.0: bulk endpoints not found [ 881.206789][ T5719] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 882.458738][T18451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.580783][ T5719] usb 4-1: USB disconnect, device number 4 [ 883.611869][ T5719] usblp0: removed [ 883.753444][T16800] usb 2-1: USB disconnect, device number 63 [ 883.800522][T18465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3813'. [ 883.816816][T18465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3813'. [ 883.888532][T18470] warning: `syz.1.3814' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 883.969583][ T5719] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 884.121311][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.131755][ T5719] usb 4-1: config 0 has no interfaces? [ 884.137408][ T5719] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 884.146831][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.162281][ T5719] usb 4-1: config 0 descriptor?? [ 884.386806][T16800] usb 4-1: USB disconnect, device number 5 [ 884.479622][ T5719] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 884.639659][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 884.648097][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.659064][ T5719] usb 2-1: config 0 has no interfaces? [ 884.673924][ T5719] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 884.689123][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.697748][ T5719] usb 2-1: Product: syz [ 884.702069][ T5719] usb 2-1: Manufacturer: syz [ 884.706686][ T5719] usb 2-1: SerialNumber: syz [ 884.713840][ T5719] usb 2-1: config 0 descriptor?? [ 884.925884][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.939882][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.949348][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.961237][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.971001][ T5719] usb 2-1: USB disconnect, device number 64 [ 885.607891][T18488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3818'. [ 885.841978][T18494] netlink: 'syz.1.3819': attribute type 2 has an invalid length. [ 886.159489][ T5631] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 886.323345][ T5631] usb 2-1: config 0 has no interfaces? [ 886.336214][ T5631] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 886.347369][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.356213][ T5631] usb 2-1: Product: syz [ 886.362591][ T5631] usb 2-1: Manufacturer: syz [ 886.367429][ T5631] usb 2-1: SerialNumber: syz [ 886.377732][ T5631] usb 2-1: config 0 descriptor?? [ 886.600954][ T5631] usb 2-1: USB disconnect, device number 65 [ 886.676084][T18508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.689081][T18508] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3825'. [ 886.702243][T18508] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3825'. [ 887.029608][ T5631] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 887.173900][T18514] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 887.179472][ T5631] usb 4-1: Using ep0 maxpacket: 16 [ 887.194654][ T5631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.205922][ T5631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.216111][ T5631] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 887.225376][ T5631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.257326][ T5631] usb 4-1: config 0 descriptor?? [ 887.589506][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 887.674899][ T5631] usbhid 4-1:0.0: can't add hid device: -71 [ 887.685683][ T5631] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 887.697325][ T5631] usb 4-1: USB disconnect, device number 6 [ 887.739587][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 887.747193][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 887.755540][ T9] usb 2-1: config 0 has no interface number 0 [ 887.763887][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 887.773286][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.781665][ T9] usb 2-1: Product: syz [ 887.786003][ T9] usb 2-1: Manufacturer: syz [ 887.790701][ T9] usb 2-1: SerialNumber: syz [ 887.797345][ T9] usb 2-1: config 0 descriptor?? [ 887.808000][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 888.010945][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 888.023459][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 888.303314][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 888.306306][ T5719] usb 2-1: USB disconnect, device number 66 [ 888.333170][ T5719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 888.384223][ T5719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 888.415199][ T5719] quatech2 2-1:0.51: device disconnected [ 888.755123][ T29] audit: type=1326 audit(1781158904.029:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.781397][ T29] audit: type=1326 audit(1781158904.029:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.807230][ T29] audit: type=1326 audit(1781158904.029:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.836724][ T29] audit: type=1326 audit(1781158904.029:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.862880][ T29] audit: type=1326 audit(1781158904.029:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.888748][ T29] audit: type=1326 audit(1781158904.029:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.914240][ T29] audit: type=1326 audit(1781158904.029:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.939879][ T29] audit: type=1326 audit(1781158904.029:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 888.964934][ T29] audit: type=1326 audit(1781158904.029:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 889.030390][ T29] audit: type=1326 audit(1781158904.029:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 889.269816][ T5719] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 889.362497][T18545] netlink: 'syz.3.3838': attribute type 13 has an invalid length. [ 889.389221][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3838'. [ 889.398789][T18545] bridge_slave_0: default FDB implementation only supports local addresses [ 889.439828][ T5719] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 889.471099][ T5719] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 889.492424][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.505191][ T5719] usb 2-1: Product: syz [ 889.513242][ T5719] usb 2-1: Manufacturer: syz [ 889.518175][ T5719] usb 2-1: SerialNumber: syz [ 889.771548][T18563] mmap: syz.0.3842 (18563): VmData 37588992 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 889.808708][ T5719] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input118 [ 889.873445][ T4985] bcm5974 2-1:1.0: could not read from device [ 889.885716][ T5719] usb 2-1: USB disconnect, device number 67 [ 890.003886][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3845'. [ 890.067064][T18567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 890.171788][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.190121][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.219808][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.232143][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.240163][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.251677][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.279494][T18567] netlink: 'syz.4.3845': attribute type 3 has an invalid length. [ 890.307497][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3847'. [ 890.633602][T18589] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 18589 comm: syz.3.3851) [ 890.789496][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 890.950504][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 890.967423][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 890.980694][ T9] usb 2-1: config 0 has no interface number 0 [ 890.999371][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 891.014088][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.023393][ T9] usb 2-1: Product: syz [ 891.042881][ T9] usb 2-1: Manufacturer: syz [ 891.055265][ T9] usb 2-1: SerialNumber: syz [ 891.077011][T18605] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 891.082577][ T9] usb 2-1: config 0 descriptor?? [ 891.109299][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 891.124675][T18605] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 891.144617][T18605] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 891.160629][T18605] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 891.181591][T18605] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 891.324241][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 891.358170][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 891.401423][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 891.401902][ T5719] usb 2-1: USB disconnect, device number 68 [ 891.502037][ T5719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 891.548905][ T5719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 891.596923][ T5719] quatech2 2-1:0.51: device disconnected [ 892.030642][T18619] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 892.048351][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 892.158108][T18625] validate_nla: 47 callbacks suppressed [ 892.158175][T18625] netlink: 'syz.3.3864': attribute type 21 has an invalid length. [ 892.174304][T18625] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3864'. [ 892.184792][T18625] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3864'. [ 892.194832][T18625] netlink: 'syz.3.3864': attribute type 21 has an invalid length. [ 892.202848][T18625] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3864'. [ 892.212465][T18625] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3864'. [ 892.363685][T18630] xt_nfacct: accounting object `syz1' does not exist [ 892.520127][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.832751][T18640] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 892.840806][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 892.854769][T18640] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 892.863151][T18640] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 892.873700][T18640] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 892.882448][T18640] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 893.013228][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 893.031169][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.048388][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 893.057759][ T9] usb 4-1: config 1 has no interface number 1 [ 893.064444][T16334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.078848][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 893.094788][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 893.111706][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.121189][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.129204][ T9] usb 4-1: Product: syz [ 893.133552][ T9] usb 4-1: Manufacturer: syz [ 893.138183][ T9] usb 4-1: SerialNumber: syz [ 893.299574][ T5719] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 893.348790][T18638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.357952][T18638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.451212][ T5719] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 893.476275][ T5719] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 893.487939][ T5719] usb 2-1: can't read configurations, error -61 [ 893.501730][ T5631] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.629561][ T5719] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 893.781882][ T5719] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 893.792293][ T5719] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 893.806998][ T5719] usb 2-1: can't read configurations, error -61 [ 893.814685][ T5719] usb usb2-port1: attempt power cycle [ 894.131135][T16334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.143794][T16334] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.159623][ T5719] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 894.181446][ T5719] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 894.195029][ T5719] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 894.208220][ T5719] usb 2-1: can't read configurations, error -61 [ 894.349702][ T5719] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 894.370886][ T5719] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 894.380723][ T5719] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 894.388552][ T5719] usb 2-1: can't read configurations, error -61 [ 894.395701][ T5719] usb usb2-port1: unable to enumerate USB device [ 894.760603][T18657] netlink: 'syz.0.3873': attribute type 4 has an invalid length. [ 894.769836][T18657] netlink: 'syz.0.3873': attribute type 4 has an invalid length. [ 894.779717][ T5719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 895.657128][ T9] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 895.675993][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 895.744375][T18664] netlink: 'syz.3.3875': attribute type 21 has an invalid length. [ 895.773255][T18664] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3875'. [ 895.795539][T18664] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3875'. [ 895.810074][ T9] usb 4-1: USB disconnect, device number 7 [ 895.825291][T18665] netlink: 'syz.3.3875': attribute type 21 has an invalid length. [ 895.837048][T18665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3875'. [ 895.853036][T18665] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3875'. [ 896.236256][T18673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.283511][T18673] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3877'. [ 896.415048][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 896.415071][ T29] audit: type=1326 audit(1781158911.689:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.485126][ T29] audit: type=1326 audit(1781158911.699:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.519548][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 896.538980][ T29] audit: type=1326 audit(1781158911.699:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.598127][T18683] create_pit_timer: 11 callbacks suppressed [ 896.598149][T18683] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 896.622612][ T29] audit: type=1326 audit(1781158911.699:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.689491][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 896.697639][ T29] audit: type=1326 audit(1781158911.699:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.697703][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 896.742654][ T29] audit: type=1326 audit(1781158911.739:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.743758][ T9] usb 4-1: config 0 has no interface number 0 [ 896.768357][ T29] audit: type=1326 audit(1781158911.739:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.768412][ T29] audit: type=1326 audit(1781158911.739:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.768476][ T29] audit: type=1326 audit(1781158911.739:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.768520][ T29] audit: type=1326 audit(1781158911.739:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.2.3880" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 896.829525][ T5719] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 896.932291][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 896.943976][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.952115][ T9] usb 4-1: Product: syz [ 896.956405][ T9] usb 4-1: Manufacturer: syz [ 896.962221][ T9] usb 4-1: SerialNumber: syz [ 896.979053][ T9] usb 4-1: config 0 descriptor?? [ 896.994516][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 897.096929][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.107618][ T5719] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 897.122989][T18692] netlink: 'syz.2.3882': attribute type 1 has an invalid length. [ 897.129666][ T5719] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 897.173704][ T5719] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 897.183149][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.193914][ T5719] usb 2-1: Product: syz [ 897.203504][ T5719] usb 2-1: Manufacturer: syz [ 897.215771][ T5719] usb 2-1: SerialNumber: syz [ 897.245356][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 897.307771][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 897.423156][T16656] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 897.447037][ T5719] usb 2-1: unit 4 not found! [ 897.462177][ T5719] usb 2-1: 6:0: failed to get current value for ch 0 (-71) [ 897.567710][ T5719] usb 2-1: USB disconnect, device number 73 [ 897.638367][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 897.647671][ T9] usb 4-1: USB disconnect, device number 8 [ 897.795464][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 897.852878][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 897.884507][ T9] quatech2 4-1:0.51: device disconnected [ 898.044387][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.052263][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.127618][T18710] netlink: 'syz.1.3888': attribute type 21 has an invalid length. [ 898.135843][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 898.145740][T18710] __nla_validate_parse: 1 callbacks suppressed [ 898.145769][T18710] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3888'. [ 898.194583][T18711] netlink: 'syz.1.3888': attribute type 21 has an invalid length. [ 898.205105][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.217329][T18711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3888'. [ 898.236237][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.361708][T18710] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3888'. [ 898.371652][T18711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3888'. [ 898.382177][T16334] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.391658][T16334] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.416294][T16334] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.428967][T16334] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.437293][T18717] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3890'. [ 898.489841][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 898.582700][T18721] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 898.600119][T18721] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 898.609205][T18721] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 898.623910][T18721] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 898.632228][T18721] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 898.640690][T18721] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 898.649238][T18721] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 898.657981][T18721] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 898.674045][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 898.683538][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.691695][ T9] usb 4-1: Product: syz [ 898.695997][ T9] usb 4-1: Manufacturer: syz [ 898.700692][ T9] usb 4-1: SerialNumber: syz [ 898.708675][ T9] usb 4-1: config 0 descriptor?? [ 898.860005][ T5683] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 899.022303][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.032908][ T5683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.043258][ T5683] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 899.052613][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 899.060797][ T5683] usb 2-1: SerialNumber: syz [ 899.277012][ T5683] usb 2-1: 0:2 : does not exist [ 899.323758][ T5683] usb 2-1: USB disconnect, device number 74 [ 899.330098][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 899.340946][ T9] usb 4-1: Please update to version 0.2 or newer [ 899.358268][T17596] udevd[17596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.539314][ T9] usb 4-1: Firmware: build [ 899.892371][T18737] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3897'. [ 899.915210][T18737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3897'. [ 900.312614][ T9] usb 4-1: USB disconnect, device number 9 [ 901.099356][T18755] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3901'. [ 901.183330][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3903'. [ 901.235126][ T5683] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 901.282668][T18762] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 901.399813][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 901.409355][ T5683] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 901.437581][ T5683] usb 2-1: config 0 has no interface number 0 [ 901.457821][ T5683] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 901.475569][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.503549][ T5683] usb 2-1: Product: syz [ 901.524833][ T5683] usb 2-1: Manufacturer: syz [ 901.541271][ T5683] usb 2-1: SerialNumber: syz [ 901.568267][ T5683] usb 2-1: config 0 descriptor?? [ 901.575763][T18766] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.583216][T18766] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.585841][ T5683] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 901.812256][ T5683] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 901.861267][ T5683] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 902.267115][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.351158][T18766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.017994][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 903.043455][ T42] usb 2-1: USB disconnect, device number 75 [ 903.123119][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 903.159500][ T9704] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.190013][T16334] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.211992][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 903.241051][T16334] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.274998][T16334] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.300466][ T42] quatech2 2-1:0.51: device disconnected [ 903.620602][T18767] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 903.853370][T18767] usb 4-1: not running at top speed; connect to a high speed hub [ 903.868242][T18767] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 903.899606][T18767] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.928383][T18767] usb 4-1: config 1 interface 0 has no altsetting 0 [ 903.948856][T18767] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 903.966831][T18767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.982500][T18767] usb 4-1: Product: 줰鋎숥ሗ좀暿ì¬å­‡æˆ–à¶ï»–㩕⛓꩓帋Wë„⭹蛃똲斉é²ê¬†ä—’à¦æ¸½éŽ°è¡ªï±›ï­˜ãºŸâ¡·â¹©îˆ‘턕⸦濶髰ጻǥï†äº’鳞ឥ⹡臦ӣì¢ïƒ®è¨¿Ð½ç·®ì弽悞뛇홶厲拯쨵ä¯ë¸„ì°æŸ„è³è°ç‘ë™®ì¾è•ˆï­¨ì±³ã¼ˆî€«ï½™ä´¶ã™’㙉䞦åŸâ½¡ïŒ—懌鄔ꥱ潹ëžá«ï³¬á‚’샃缿ê˜å¦ï›†ã•€á¢—挿믲踓䛾ç‚ᾼⴼ햞ꓨ挫䛄ç䊡㙆⹊ [ 904.024644][ T994] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 904.039753][T18767] usb 4-1: Manufacturer: П [ 904.054693][T18794] netlink: 'syz.0.3911': attribute type 21 has an invalid length. [ 904.062905][T18767] usb 4-1: SerialNumber: á±é¦”韇੘➱ｨ濠⎯唼歖ꩭ䒻藗츒ⅹ᜼ꑞ [ 904.078967][T18794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3911'. [ 904.090631][T18794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3911'. [ 904.093145][T18783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 904.111374][T18783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 904.126078][T18794] netlink: 'syz.0.3911': attribute type 21 has an invalid length. [ 904.142679][T18794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3911'. [ 904.159574][T18794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3911'. [ 904.189505][ T994] usb 2-1: Invalid ep0 maxpacket: 32 [ 904.319514][ T994] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 904.499501][ T994] usb 2-1: Invalid ep0 maxpacket: 32 [ 904.507428][ T994] usb usb2-port1: attempt power cycle [ 904.548840][T18783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.568882][T18783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.619025][T18767] usb 4-1: USB disconnect, device number 10 [ 904.741940][T16656] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 904.750832][T16656] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 904.758769][T18802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 904.849894][ T994] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 904.881053][ T994] usb 2-1: Invalid ep0 maxpacket: 32 [ 905.021870][ T994] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 905.060294][ T994] usb 2-1: Invalid ep0 maxpacket: 32 [ 905.070190][ T994] usb usb2-port1: unable to enumerate USB device [ 905.173198][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 905.173219][ T29] audit: type=1326 audit(1781158920.449:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.240726][ T29] audit: type=1326 audit(1781158920.449:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.267757][ T29] audit: type=1326 audit(1781158920.449:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.317598][ T29] audit: type=1326 audit(1781158920.449:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.362015][ T29] audit: type=1326 audit(1781158920.449:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.387900][T18816] create_pit_timer: 14 callbacks suppressed [ 905.387918][T18816] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 905.406180][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 905.429502][ T29] audit: type=1326 audit(1781158920.449:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.459453][ T29] audit: type=1326 audit(1781158920.449:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.487427][ T29] audit: type=1326 audit(1781158920.449:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.513024][ T29] audit: type=1326 audit(1781158920.449:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.548495][ T29] audit: type=1326 audit(1781158920.449:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 905.776219][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 905.786906][T18827] openvswitch: netlink: Invalid VLAN frame [ 905.889678][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 906.029518][ T807] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 906.181323][ T807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 906.191429][ T807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 906.203373][ T807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 906.216146][ T807] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 906.226056][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.234179][ T807] usb 4-1: Product: syz [ 906.238525][ T807] usb 4-1: Manufacturer: syz [ 906.243395][ T807] usb 4-1: SerialNumber: syz [ 906.250688][ T807] usb 4-1: config 0 descriptor?? [ 906.256492][T18827] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 906.264056][T18827] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 906.272679][ T807] usb 4-1: ucan: probing device on interface #0 [ 906.473003][ T807] usb 4-1: ucan: could not read protocol version, ret=-32 [ 906.480597][ T807] usb 4-1: ucan: probe failed; try to update the device firmware [ 906.488750][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3922'. [ 906.502742][ T807] usb 4-1: USB disconnect, device number 11 [ 906.653470][T18829] netlink: 'syz.4.3923': attribute type 1 has an invalid length. [ 906.680923][T18829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 906.698725][T18829] bond3: (slave veth0_to_bond): making interface the new active one [ 906.708166][T18829] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 906.723652][T18829] bond3: entered promiscuous mode [ 906.728721][T18829] veth0_to_bond: entered promiscuous mode [ 906.745469][T18829] bond3: entered allmulticast mode [ 906.760851][T18829] veth0_to_bond: entered allmulticast mode [ 907.188178][T18853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 907.301536][T18856] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 907.332872][T18856] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 907.341702][T18856] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 907.350541][T18856] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 907.358767][T18856] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 907.367029][T18856] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 907.409520][ T807] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 907.584474][ T807] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 907.598696][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.610984][ T807] usb 4-1: config 0 descriptor?? [ 907.618435][ T807] cp210x 4-1:0.0: cp210x converter detected [ 908.065343][ T807] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 908.095524][ T807] usb 4-1: cp210x converter now attached to ttyUSB0 [ 908.281258][ T807] usb 4-1: USB disconnect, device number 12 [ 908.324678][T18871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.337639][ T807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 908.359328][T18872] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3934'. [ 908.436089][ T807] cp210x 4-1:0.0: device disconnected [ 908.571916][T18874] syzkaller0: entered promiscuous mode [ 908.578426][T18874] syzkaller0: entered allmulticast mode [ 908.675252][ T42] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 908.686817][ T42] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 908.699165][ T42] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 908.770985][T18883] fido_id[18883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 908.866582][T18878] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 908.893674][T18878] batman_adv: batadv0: Adding interface: gretap1 [ 908.904759][T18878] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.931517][T18878] batman_adv: batadv0: Interface activated: gretap1 [ 909.136900][T18895] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 909.144949][ T807] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 909.165046][T18895] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 909.175555][T18895] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 909.309548][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 909.322997][ T807] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 909.369205][ T807] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 909.378922][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.392775][ T807] usb 4-1: Product: syz [ 909.397551][ T807] usb 4-1: Manufacturer: syz [ 909.405198][ T807] usb 4-1: SerialNumber: syz [ 909.552429][T16367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.564885][T16367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.638754][ T807] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 909.727046][T16367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.744298][T16367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.800303][ T807] usb 4-1: USB disconnect, device number 13 [ 909.971349][T16367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.984610][T16367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.067395][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.073268][T16367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.085120][T16367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.099956][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.115164][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.123325][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.140328][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.522663][T16367] bridge_slave_1: left allmulticast mode [ 910.528946][T16367] bridge_slave_1: left promiscuous mode [ 910.535909][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.546789][T16367] bridge_slave_0: left allmulticast mode [ 910.554657][T16367] bridge_slave_0: left promiscuous mode [ 910.560791][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.569597][ T807] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 910.729542][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 910.743784][ T807] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 910.752632][ T807] usb 4-1: config 0 has no interface number 0 [ 910.774687][ T807] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 910.790417][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.809272][ T807] usb 4-1: Product: syz [ 910.819194][ T807] usb 4-1: Manufacturer: syz [ 910.829630][ T807] usb 4-1: SerialNumber: syz [ 910.866707][ T807] usb 4-1: config 0 descriptor?? [ 910.886672][ T807] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 911.030730][T16367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.045290][T16367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.058078][T16367] bond0 (unregistering): Released all slaves [ 911.078368][T16367] bond1 (unregistering): Released all slaves [ 911.105028][ T807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 911.145853][ T807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 911.506775][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 911.515336][T18904] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.523469][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 911.530167][T18904] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.532246][ T5719] usb 4-1: USB disconnect, device number 14 [ 911.538141][T18904] bridge_slave_0: entered allmulticast mode [ 911.565574][ T5719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 911.567181][T18904] bridge_slave_0: entered promiscuous mode [ 911.608576][T18904] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.627646][T18904] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.638183][T18904] bridge_slave_1: entered allmulticast mode [ 911.646952][ T5719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 911.648002][T18904] bridge_slave_1: entered promiscuous mode [ 911.663999][ T5719] quatech2 4-1:0.51: device disconnected [ 911.734674][T16367] hsr_slave_0: left promiscuous mode [ 911.745140][T16367] hsr_slave_1: left promiscuous mode [ 911.754270][T16367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.769659][T16367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.782651][T16367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.793286][T16367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.894262][T16367] veth1_macvtap: left promiscuous mode [ 911.914598][T16367] veth0_macvtap: left promiscuous mode [ 911.930313][T16367] veth1_vlan: left promiscuous mode [ 911.944387][T16367] veth0_vlan: left promiscuous mode [ 912.209553][ T5637] Bluetooth: hci0: command tx timeout [ 912.402452][T16367] team0 (unregistering): Port device team_slave_1 removed [ 912.446577][T16367] team0 (unregistering): Port device team_slave_0 removed [ 912.561467][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 912.561487][ T29] audit: type=1326 audit(1781158927.839:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.607337][ T29] audit: type=1326 audit(1781158927.869:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.638380][ T29] audit: type=1326 audit(1781158927.869:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.665826][T18965] create_pit_timer: 13 callbacks suppressed [ 912.665840][T18965] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 912.695912][ T29] audit: type=1326 audit(1781158927.869:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.724817][T18965] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 912.733691][T18965] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 912.741729][ T29] audit: type=1326 audit(1781158927.869:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.766886][T18965] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 912.779754][ T29] audit: type=1326 audit(1781158927.869:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.818011][ T29] audit: type=1326 audit(1781158927.869:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.864857][ T29] audit: type=1326 audit(1781158927.869:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.909659][ T29] audit: type=1326 audit(1781158927.879:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 912.941552][ T29] audit: type=1326 audit(1781158927.879:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.2.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f809179ce59 code=0x7ffc0000 [ 913.059721][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 913.081668][T18904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.097276][T18904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.211614][T18904] team0: Port device team_slave_0 added [ 913.240537][T18904] team0: Port device team_slave_1 added [ 913.356684][T18904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.390614][T18904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.418754][T18904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.497077][T18904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.522823][T18904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.565810][T18904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.778265][T18904] hsr_slave_0: entered promiscuous mode [ 913.797614][T18904] hsr_slave_1: entered promiscuous mode [ 914.290368][ T5637] Bluetooth: hci0: command tx timeout [ 914.532539][T18904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 914.555010][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.576028][T18904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 914.607945][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.635589][T18904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 914.668747][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.688970][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 914.697704][T18904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 914.714689][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.875521][T18904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.943120][T18904] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.984021][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.991322][T16367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.015179][T16351] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.022375][T16351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.102169][T19020] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 915.152442][T19020] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 915.192010][T19026] FAULT_INJECTION: forcing a failure. [ 915.192010][T19026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.240993][T19026] CPU: 1 UID: 0 PID: 19026 Comm: syz.0.3965 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.241028][T19026] Tainted: [L]=SOFTLOCKUP [ 915.241036][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.241047][T19026] Call Trace: [ 915.241056][T19026] [ 915.241066][T19026] dump_stack_lvl+0xe8/0x150 [ 915.241102][T19026] should_fail_ex+0x412/0x560 [ 915.241135][T19026] _copy_to_user+0x31/0xb0 [ 915.241165][T19026] simple_read_from_buffer+0xe1/0x170 [ 915.241199][T19026] proc_fail_nth_read+0x1bb/0x230 [ 915.241230][T19026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.241261][T19026] ? rw_verify_area+0x2a6/0x4d0 [ 915.241290][T19026] ? __lock_acquire+0x6b5/0x2cf0 [ 915.241315][T19026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.241345][T19026] vfs_read+0x20c/0xa70 [ 915.241381][T19026] ? __pfx___mutex_lock+0x10/0x10 [ 915.241409][T19026] ? __pfx_vfs_read+0x10/0x10 [ 915.241440][T19026] ? __fget_files+0x2a/0x420 [ 915.241471][T19026] ? __fget_files+0x3a0/0x420 [ 915.241495][T19026] ? __fget_files+0x2a/0x420 [ 915.241538][T19026] ksys_read+0x150/0x270 [ 915.241571][T19026] ? __pfx_ksys_read+0x10/0x10 [ 915.241608][T19026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.241632][T19026] do_syscall_64+0x174/0x580 [ 915.241654][T19026] ? trace_irq_disable+0x3b/0x140 [ 915.241686][T19026] ? clear_bhb_loop+0x40/0x90 [ 915.241713][T19026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.241735][T19026] RIP: 0033:0x7fd1ce75d68e [ 915.241756][T19026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.241774][T19026] RSP: 002b:00007fd1cf57bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.241797][T19026] RAX: ffffffffffffffda RBX: 00007fd1cf57c6c0 RCX: 00007fd1ce75d68e [ 915.241812][T19026] RDX: 000000000000000f RSI: 00007fd1cf57c0a0 RDI: 0000000000000004 [ 915.241826][T19026] RBP: 00007fd1cf57c090 R08: 0000000000000000 R09: 0000000000000000 [ 915.241839][T19026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.241852][T19026] R13: 00007fd1cea16038 R14: 00007fd1cea15fa0 R15: 00007fd1ceb3fa48 [ 915.241887][T19026] [ 915.490550][T18904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.538326][T18904] veth0_vlan: entered promiscuous mode [ 915.552491][T18904] veth1_vlan: entered promiscuous mode [ 915.639318][T18904] veth0_macvtap: entered promiscuous mode [ 915.661139][T18904] veth1_macvtap: entered promiscuous mode [ 915.744022][T18904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.788390][T18904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.834325][T16329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.855394][T16329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.874837][T16329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.899294][T16329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.209090][T16343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.231740][T16343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.338106][T16329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.363252][T16329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.370911][ T5637] Bluetooth: hci0: command tx timeout [ 916.439003][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 916.607153][T19055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.646501][T19055] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3946'. [ 917.346335][T19067] input: syz1 as /devices/virtual/input/input119 [ 917.988088][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 918.009250][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3978'. [ 918.026810][T19079] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 918.076246][T19079] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 918.098389][T19079] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 918.162738][T16343] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.204619][T16343] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.236075][T16343] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.254934][T16343] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.449500][ T5637] Bluetooth: hci0: command tx timeout [ 918.798271][T19102] libceph: resolve '96.' (ret=-3): failed [ 919.249569][ T807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 919.412237][ T807] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 919.420867][T19121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.440303][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.469517][ T807] usb 6-1: config 0 has no interfaces? [ 919.484510][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.505895][ T807] usb 6-1: config 0 has no interfaces? [ 919.534226][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.545088][ T807] usb 6-1: config 0 has no interfaces? [ 919.552325][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.563038][ T807] usb 6-1: config 0 has no interfaces? [ 919.577168][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.591183][ T807] usb 6-1: config 0 has no interfaces? [ 919.597878][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.609160][ T807] usb 6-1: config 0 has no interfaces? [ 919.617286][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.628190][ T807] usb 6-1: config 0 has no interfaces? [ 919.638029][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.655266][ T807] usb 6-1: config 0 has no interfaces? [ 919.660972][ T807] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 919.670359][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.684901][ T807] usb 6-1: config 0 descriptor?? [ 919.711355][T19130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.719489][T19130] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.732915][T19130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.793076][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 919.793095][ T29] audit: type=1804 audit(1781158935.069:6322): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3991" name="bus" dev="ramfs" ino=91988 res=1 errno=0 [ 919.820188][T19130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.830997][ T29] audit: type=1804 audit(1781158935.069:6323): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3991" name="bus" dev="ramfs" ino=91988 res=1 errno=0 [ 919.852803][T19130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.869517][ T5631] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 919.883763][T19130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.916821][T19130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.960152][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.977765][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.991903][ T42] usb 6-1: USB disconnect, device number 2 [ 920.021146][T19130] veth1_vlan: left promiscuous mode [ 920.031362][ T5631] usb 4-1: not running at top speed; connect to a high speed hub [ 920.051088][ T5631] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 920.063899][T19130] veth0_vlan: left promiscuous mode [ 920.071067][T19130] veth0_vlan: entered promiscuous mode [ 920.071815][ T5631] usb 4-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 920.081332][T19130] veth1_vlan: entered promiscuous mode [ 920.092383][ T5631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.109529][ T5631] usb 4-1: Product: syz [ 920.113960][ T5631] usb 4-1: Manufacturer: syz [ 920.117980][T19130] veth1_macvtap: left promiscuous mode [ 920.118658][ T5631] usb 4-1: SerialNumber: syz [ 920.136948][T19130] veth0_macvtap: left promiscuous mode [ 920.155468][T19130] veth0_macvtap: entered promiscuous mode [ 920.165164][T19130] veth1_macvtap: entered promiscuous mode [ 920.186058][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 920.196341][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.207989][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.227666][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.332767][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.340049][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.363571][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.370878][ T9704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.433655][T19136] netlink: 'syz.3.3990': attribute type 16 has an invalid length. [ 920.482865][T19136] netlink: 'syz.3.3990': attribute type 17 has an invalid length. [ 920.518406][T19136] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3990'. [ 920.573784][T16334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.586425][T16334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.602026][T16334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.613684][T16334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.634224][T16329] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 920.644925][T16329] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 920.660269][ T994] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 920.936583][ T994] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 920.978864][ T5631] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 920.988473][ T5631] usb 4-1: unit 94 not found! [ 921.100759][ T5631] usb 4-1: USB disconnect, device number 15 [ 921.123964][ T994] usb 6-1: config 1 interface 0 has no altsetting 0 [ 921.162812][ T994] usb 6-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 921.187618][T17566] udevd[17566]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.208045][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.230273][ T994] usb 6-1: Product: syz [ 921.243688][ T994] usb 6-1: Manufacturer: Ч [ 921.259142][ T994] usb 6-1: SerialNumber: syz [ 921.520210][ T994] usbhid 6-1:1.0: can't add hid device: -71 [ 921.538112][ T994] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 921.557683][ T994] usb 6-1: USB disconnect, device number 3 [ 921.580247][ T5631] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 921.606200][ T5631] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 922.187050][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3996'. [ 922.459640][ T807] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 922.529713][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 922.643426][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 922.668769][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.691807][ T807] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 922.714698][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.741701][ T807] usb 4-1: Product: syz [ 922.751970][ T807] usb 4-1: Manufacturer: syz [ 922.766485][ T807] usb 4-1: SerialNumber: syz [ 922.787888][ T807] usb 4-1: config 0 descriptor?? [ 922.810659][ T807] cdc_ether 4-1:0.0: missing cdc header descriptor [ 922.818354][ T807] usb 4-1: unsupported MDLM descriptors [ 923.009991][ T5631] usb 4-1: USB disconnect, device number 16 [ 923.553268][T19180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4005'. [ 923.563315][T19180] macvlan1: entered promiscuous mode [ 923.659831][ T5719] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 923.810724][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 923.818220][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 923.827453][ T5719] usb 6-1: config 11 has an invalid interface number: 165 but max is 0 [ 923.835873][ T5719] usb 6-1: config 11 has no interface number 0 [ 923.843143][ T5719] usb 6-1: config 11 interface 165 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 923.856217][ T5719] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice=18.6c [ 923.865497][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.873648][ T5719] usb 6-1: Product: à ¾ [ 923.877934][ T5719] usb 6-1: Manufacturer: ï“¿ [ 923.882660][ T5719] usb 6-1: SerialNumber: syz [ 924.095462][T19177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.104518][T19177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.158091][ T5719] usb-storage 6-1:11.165: USB Mass Storage device detected [ 924.174062][ T5719] usb-storage 6-1:11.165: Quirks match for vid 0525 pid a4a5: 10000 [ 924.244682][ T5719] usb 6-1: USB disconnect, device number 4 [ 924.289637][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 924.625669][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'. [ 924.753328][T19193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 925.351474][ T5719] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 925.511707][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 925.520590][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.531224][ T5719] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.542544][ T5719] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.552456][ T5719] usb 4-1: config 1 interface 0 has no altsetting 0 [ 925.562024][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 925.568404][ T5719] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 925.578657][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.772332][T19206] binder: 19204:19206 ioctl 400c620e 200000000180 returned -22 [ 925.781498][T19206] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4014'. [ 925.792419][T19206] binder: 19204:19206 ioctl 4c07 0 returned -22 [ 926.028500][ T5719] kone 0003:1E7D:2CED.0032: invalid report_size 27407 [ 926.035543][ T5719] kone 0003:1E7D:2CED.0032: item 0 2 1 7 parsing failed [ 926.043332][ T5719] kone 0003:1E7D:2CED.0032: parse failed [ 926.049209][ T5719] kone 0003:1E7D:2CED.0032: probe with driver kone failed with error -22 [ 926.282286][ T5631] usb 4-1: USB disconnect, device number 17 [ 926.675640][T19208] kvm: kvm [19207]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 926.813817][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4016'. [ 926.827491][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4016'. [ 926.939669][ T5719] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 927.099621][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 927.108002][ T5719] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.119252][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.130920][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 927.140749][ T5719] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 927.150570][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.165538][ T5719] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.175719][ T5719] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.183989][ T5719] usb 6-1: Manufacturer: syz [ 927.195682][ T5719] usb 6-1: config 0 descriptor?? [ 927.299530][ T807] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 927.459579][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 927.470771][ T807] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 927.499206][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.541695][ T807] usb 4-1: Product: syz [ 927.551652][ T807] usb 4-1: Manufacturer: syz [ 927.564127][ T807] usb 4-1: SerialNumber: syz [ 927.579835][ T807] usb 4-1: config 0 descriptor?? [ 927.589503][ T5719] rc_core: IR keymap rc-hauppauge not found [ 927.596977][ T5719] Registered IR keymap rc-empty [ 927.606018][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.629898][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.652556][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 927.682544][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input120 [ 927.700082][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.720550][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.739558][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.758437][T19230] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4021'. [ 927.759723][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.789725][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.810748][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.831526][ T807] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 927.849586][ T807] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 927.859349][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.882238][ T807] usb 4-1: USB disconnect, device number 18 [ 927.899541][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.929717][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 927.974181][ T5719] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 928.003742][ T5719] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 928.028108][ T5719] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 928.056771][ T5719] usb 6-1: USB disconnect, device number 5 [ 928.168002][T19245] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 928.245361][T19246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 928.282288][T19245] bond5: entered promiscuous mode [ 928.292193][T19245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 928.337516][T19246] macvtap1: entered allmulticast mode [ 928.378316][T19249] macvtap2: entered allmulticast mode [ 928.391282][ T807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 928.457916][T19256] bond1: option fail_over_mac: invalid value (102) [ 928.472266][T19256] bond1 (unregistering): Released all slaves [ 928.539533][ T807] usb 4-1: device descriptor read/64, error -71 [ 928.646243][T19256] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 928.799720][ T807] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 928.939470][ T807] usb 4-1: device descriptor read/64, error -71 [ 929.060978][ T807] usb usb4-port1: attempt power cycle [ 929.230000][T19285] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 929.266025][T19285] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 929.290586][T19285] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 929.313589][T19285] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 929.332167][T19285] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 929.419511][ T807] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 929.471322][ T807] usb 4-1: device descriptor read/8, error -71 [ 929.734495][ T807] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 929.772038][ T807] usb 4-1: device descriptor read/8, error -71 [ 929.838162][T19303] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 929.872896][T19303] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 929.882798][T19303] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 929.895133][ T807] usb usb4-port1: unable to enumerate USB device [ 929.902474][T19303] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 929.912838][T19303] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 930.067834][ T29] audit: type=1326 audit(1781158945.339:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.5.4035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f371e59ce59 code=0x0 [ 930.660168][T19341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4038'. [ 931.000018][T19354] netlink: 'syz.5.4043': attribute type 13 has an invalid length. [ 931.419534][ T807] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 931.493027][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.499825][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.500374][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 931.532254][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 931.549522][ T5705] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 931.549577][ T5774] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 931.592010][ T10] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 931.601409][ T5705] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 931.613870][ T807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.624134][ T10] usb 1-1: USB disconnect, device number 75 [ 931.629591][ T5774] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 931.639731][ T807] usb 4-1: not running at top speed; connect to a high speed hub [ 931.654955][ T807] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 931.669846][ T5774] usb 3-1: USB disconnect, device number 92 [ 931.677180][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.695852][ T5705] usb 5-1: USB disconnect, device number 58 [ 931.700778][ T807] usb 4-1: Product: syz [ 931.706658][ T807] usb 4-1: Manufacturer: syz [ 931.732397][ T807] usb 4-1: SerialNumber: syz [ 931.948829][T19369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.962668][ T807] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 931.971024][ T807] usb 4-1: unit 3 not found! [ 931.978957][ T807] usb 4-1: unit 13 not found! [ 931.999539][ T5774] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 932.022090][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 932.168927][ T807] usb 4-1: USB disconnect, device number 23 [ 932.192154][ T5774] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid wMaxPacketSize 0 [ 932.211480][ T5774] usb 3-1: config 0 interface 0 has no altsetting 0 [ 932.227912][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 932.247361][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.253578][ T5774] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 932.280052][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 932.288529][ T10] usb 1-1: config 0 descriptor?? [ 932.304454][ T5774] usb 3-1: Product: syz [ 932.309518][ T5774] usb 3-1: Manufacturer: syz [ 932.315468][ T5774] usb 3-1: SerialNumber: syz [ 932.338022][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 932.338127][T17596] udevd[17596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.382086][ T5774] usb 3-1: config 0 descriptor?? [ 932.417846][ T5774] usb 3-1: selecting invalid altsetting 0 [ 932.559873][ T5705] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 932.682598][ T5631] usb 3-1: USB disconnect, device number 93 [ 932.741461][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 932.767069][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 932.801609][ T5705] usb 5-1: config 2 has an invalid interface number: 197 but max is 0 [ 932.814440][ T29] audit: type=1326 audit(1781158948.089:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 932.849723][ T5705] usb 5-1: config 2 has no interface number 0 [ 932.860224][ T5705] usb 5-1: config 2 interface 197 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 932.876066][ T5705] usb 5-1: config 2 interface 197 altsetting 3 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 932.906150][ T29] audit: type=1326 audit(1781158948.149:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 932.909456][ T5705] usb 5-1: config 2 interface 197 altsetting 3 endpoint 0x8C has an invalid bInterval 22, changing to 8 [ 932.968769][ T29] audit: type=1326 audit(1781158948.149:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 932.993469][ T5705] usb 5-1: config 2 interface 197 altsetting 3 endpoint 0x3 has invalid maxpacket 528, setting to 64 [ 933.015492][ T5705] usb 5-1: config 2 interface 197 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 933.034161][ T29] audit: type=1326 audit(1781158948.149:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.034159][ T5705] usb 5-1: config 2 interface 197 altsetting 3 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 933.096003][ T5705] usb 5-1: config 2 interface 197 altsetting 3 endpoint 0x88 has an invalid bInterval 63, changing to 9 [ 933.108916][ T5705] usb 5-1: config 2 interface 197 altsetting 3 endpoint 0x88 has invalid maxpacket 9001, setting to 1024 [ 933.128089][ T5705] usb 5-1: config 2 interface 197 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 933.145508][ T5705] usb 5-1: config 2 interface 197 has no altsetting 0 [ 933.145520][ T29] audit: type=1326 audit(1781158948.219:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.145570][ T29] audit: type=1326 audit(1781158948.219:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.224699][ T10] usb 1-1: USB disconnect, device number 76 [ 933.237413][ T5705] usb 5-1: New USB device found, idVendor=1011, idProduct=3198, bcdDevice=da.d9 [ 933.248592][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.259082][ T5705] usb 5-1: Product: syz [ 933.267658][ T5705] usb 5-1: Manufacturer: syz [ 933.272584][ T5631] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 933.290504][ T29] audit: type=1326 audit(1781158948.219:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.326304][ T5705] usb 5-1: SerialNumber: syz [ 933.349191][ T29] audit: type=1326 audit(1781158948.219:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.401573][ T29] audit: type=1326 audit(1781158948.219:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.3.4050" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3839ce59 code=0x7ffc0000 [ 933.434833][ T5631] usb 3-1: Using ep0 maxpacket: 32 [ 933.448418][ T5631] usb 3-1: config 1 has an invalid interface number: 20 but max is 0 [ 933.460424][ T5631] usb 3-1: config 1 has no interface number 0 [ 933.471068][ T5631] usb 3-1: too many endpoints for config 1 interface 20 altsetting 20: 170, using maximum allowed: 30 [ 933.499435][ T5631] usb 3-1: config 1 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 933.529977][ T5631] usb 3-1: config 1 interface 20 has no altsetting 0 [ 933.551402][ T5631] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 933.562250][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.579172][ T5631] usb 3-1: Product: syz [ 933.600433][ T5705] option 5-1:2.197: GSM modem (1-port) converter detected [ 933.610206][ T5631] usb 3-1: Manufacturer: syz [ 933.621590][ T5631] usb 3-1: SerialNumber: syz [ 933.655714][ T5705] usb 5-1: USB disconnect, device number 59 [ 933.708920][ T5705] option 5-1:2.197: device disconnected [ 933.796583][ T5631] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 933.829856][ T5631] visor 3-1:1.20: Handspring Visor / Palm OS converter detected [ 933.874430][ T5631] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 933.887189][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 933.913053][ T5631] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 933.960441][ T5631] usb 3-1: USB disconnect, device number 94 [ 934.056724][ T5631] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 934.097047][ T5631] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 934.141040][ T5631] visor 3-1:1.20: device disconnected [ 934.161246][T19388] vivid-004: disconnect [ 934.255687][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.296950][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.471331][ T5705] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 934.651143][ T5705] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 934.674984][ T5705] usb 1-1: config 0 has no interface number 0 [ 934.698540][ T5705] usb 1-1: config 0 interface 41 has no altsetting 0 [ 934.723187][ T5705] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 934.741795][T19387] vivid-004: reconnect [ 934.747293][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.768979][ T5705] usb 1-1: Product: syz [ 934.782695][ T5705] usb 1-1: Manufacturer: syz [ 934.799923][ T5705] usb 1-1: SerialNumber: syz [ 934.819661][ T5705] usb 1-1: config 0 descriptor?? [ 934.824739][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 934.971294][ T5631] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 935.005994][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 935.015799][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.024184][ T10] usb 5-1: Product: syz [ 935.028747][ T10] usb 5-1: Manufacturer: syz [ 935.033596][ T10] usb 5-1: SerialNumber: syz [ 935.137981][ T5631] usb 6-1: unable to get BOS descriptor or descriptor too short [ 935.157866][ T5631] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.178581][ T5631] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 935.199601][ T5631] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 935.212293][ T5631] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 935.227199][ T5631] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 935.238568][T18767] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 935.246725][ T5631] usb 6-1: config 1 interface 1 has no altsetting 0 [ 935.263501][ T5631] usb 6-1: string descriptor 0 read error: -22 [ 935.270331][ T5631] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 935.279712][ T5631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.406298][T18767] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 935.419637][T18767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.439785][T18767] usb 4-1: config 0 descriptor?? [ 935.479660][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 935.498979][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 935.514657][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 935.527464][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 935.540835][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 935.565850][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 935.574723][ T5631] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 935.593557][ T5631] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 935.612941][ T5631] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 935.623812][ T10] usb 5-1: USB disconnect, device number 60 [ 935.678678][T18767] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 935.706916][T18767] [drm:udl_init] *ERROR* Selecting channel failed [ 935.739732][ T5631] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 935.796872][T18767] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 935.825217][T18767] [drm] Initialized udl on minor 2 [ 935.834051][ T5631] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 935.854444][T18767] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 935.877330][T18767] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 935.913499][ T5631] usb 6-1: USB disconnect, device number 6 [ 935.927114][T18767] usb 4-1: USB disconnect, device number 24 [ 935.967214][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 936.176385][T19420] tipc: Started in network mode [ 936.186909][T19420] tipc: Node identity eacbebd466bf, cluster identity 4711 [ 936.217280][T19420] tipc: Enabled bearer , priority 0 [ 936.240573][T19422] syzkaller0: entered promiscuous mode [ 936.266181][T19422] syzkaller0: entered allmulticast mode [ 936.309281][T19420] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 936.384643][T19420] tipc: Resetting bearer [ 936.417147][T19419] tipc: Resetting bearer [ 936.442528][T19428] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 936.473604][T19419] tipc: Disabling bearer [ 936.580072][ T5719] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 936.733376][T19436] fuse: Bad value for 'group_id' [ 936.749764][T19436] fuse: Bad value for 'group_id' [ 936.772618][ T5719] usb 3-1: config 2 has an invalid interface number: 97 but max is 0 [ 936.789702][ T5719] usb 3-1: config 2 has no interface number 0 [ 936.795893][ T5719] usb 3-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 936.819670][ T5719] usb 3-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 936.837431][T19438] fuse: Unknown parameter 'use‰ Ör_id' [ 936.839480][ T5719] usb 3-1: config 2 interface 97 has no altsetting 0 [ 936.863834][ T5719] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 936.889541][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.899843][ T5719] usb 3-1: Product: syz [ 936.912472][ T5719] usb 3-1: Manufacturer: syz [ 936.919611][T18767] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 936.939539][ T5719] usb 3-1: SerialNumber: syz [ 936.949169][T19418] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 936.972458][T19418] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 937.079788][T18767] usb 5-1: Using ep0 maxpacket: 32 [ 937.088086][T18767] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 937.101542][T18767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.119103][T18767] usb 5-1: config 0 descriptor?? [ 937.268160][T19448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.302654][ T5719] usb-storage 3-1:2.97: USB Mass Storage device detected [ 937.310434][T19448] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4074'. [ 937.336551][ T5719] usb-storage 3-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 937.358633][ T5719] scsi host1: usb-storage 3-1:2.97 [ 937.379861][ T5705] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 937.384022][ T5719] usb 3-1: USB disconnect, device number 95 [ 937.398724][T18767] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 937.444371][ T5705] usb 1-1: USB disconnect, device number 77 [ 937.453015][T18767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.496481][T18767] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 937.526995][T18767] usb 5-1: media controller created [ 937.581387][T18767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.663432][T19459] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4077'. [ 937.672581][T18767] az6027: usb out operation failed. (-71) [ 937.690662][T18767] az6027: usb out operation failed. (-71) [ 937.745173][T18767] stb0899_attach: Driver disabled by Kconfig [ 937.767645][T18767] az6027: no front-end attached [ 937.767645][T18767] [ 937.792337][T18767] az6027: usb out operation failed. (-71) [ 937.820893][T18767] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 937.847962][T18767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input121 [ 937.901054][T18767] dvb-usb: schedule remote query interval to 400 msecs. [ 937.917742][T18767] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 937.958564][T18767] usb 5-1: USB disconnect, device number 61 [ 938.000259][ T5705] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 938.014467][T19458] netlink: 'syz.0.4076': attribute type 13 has an invalid length. [ 938.144899][T18767] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 938.174759][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.225123][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.235530][ T5705] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 938.245512][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.470806][ T5705] usb 6-1: config 0 descriptor?? [ 938.569980][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4080'. [ 938.596883][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4080'. [ 938.616776][T19472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4080'. [ 938.679540][T18767] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 938.738414][ T5705] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 938.754397][ T5705] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 938.767885][ T5705] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 938.817357][ T5705] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 938.835514][ T5705] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 938.884028][T18767] usb 5-1: Using ep0 maxpacket: 32 [ 938.897920][ T5705] playstation 0003:054C:0DF2.0033: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 938.912221][T18767] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 938.920810][T18767] usb 5-1: config 0 has no interface number 0 [ 938.927041][T18767] usb 5-1: config 0 interface 184 has no altsetting 0 [ 938.955742][T18767] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 938.971934][ T5705] playstation 0003:054C:0DF2.0033: Invalid byte count transferred, expected 20 got 0 [ 938.983084][T18767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.005268][ T5705] playstation 0003:054C:0DF2.0033: Failed to retrieve DualSense pairing info: -22 [ 939.016419][T18767] usb 5-1: Product: syz [ 939.025479][T18767] usb 5-1: Manufacturer: syz [ 939.035101][ T5705] playstation 0003:054C:0DF2.0033: Failed to get MAC address from DualSense [ 939.047211][T18767] usb 5-1: SerialNumber: syz [ 939.056270][T18767] usb 5-1: config 0 descriptor?? [ 939.061642][ T5705] playstation 0003:054C:0DF2.0033: Failed to create dualsense. [ 939.070496][ T5719] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 939.077370][ T5705] playstation 0003:054C:0DF2.0033: probe with driver playstation failed with error -22 [ 939.175494][ T5705] usb 6-1: USB disconnect, device number 7 [ 939.282113][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 939.297162][ T5719] usb 3-1: not running at top speed; connect to a high speed hub [ 939.321706][ T5719] usb 3-1: config 13 has an invalid interface number: 102 but max is 0 [ 939.335638][ T5719] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 939.357475][ T5719] usb 3-1: config 13 has no interface number 0 [ 939.375592][ T5719] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.c6 [ 939.392446][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.409465][ T5719] usb 3-1: Product: syz [ 939.422556][ T5719] usb 3-1: Manufacturer: syz [ 939.435027][ T5719] usb 3-1: SerialNumber: syz [ 939.650373][ T5719] cdc_phonet 3-1:13.102: probe with driver cdc_phonet failed with error -22 [ 939.679059][ T5719] usb 3-1: USB disconnect, device number 96 [ 940.130924][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 940.142267][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 940.150015][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 940.164259][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 940.185797][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 940.201172][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 940.218259][T18767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 940.228965][ T5705] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 940.237792][T18767] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 940.313192][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 940.322198][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 940.333821][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 940.343126][ T10] usb 6-1: can't read configurations, error -61 [ 940.389504][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 940.403677][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 940.413698][ T5705] usb 1-1: config 11 has an invalid interface number: 165 but max is 0 [ 940.426172][ T5705] usb 1-1: config 11 has no interface number 0 [ 940.432762][ T5705] usb 1-1: config 11 interface 165 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 940.456759][T19509] geneve2: entered promiscuous mode [ 940.460522][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice=18.6c [ 940.472486][T19509] geneve2: entered allmulticast mode [ 940.472710][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.486108][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 940.495931][ T5705] usb 1-1: Product: à ¾ [ 940.500648][ T5705] usb 1-1: Manufacturer: ï“¿ [ 940.507374][ T5705] usb 1-1: SerialNumber: syz [ 940.520189][ T5719] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 940.541464][ T5774] usb 5-1: USB disconnect, device number 62 [ 940.654471][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 940.663269][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 940.673792][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 940.681788][ T10] usb 6-1: can't read configurations, error -61 [ 940.688793][ T10] usb usb6-port1: attempt power cycle [ 940.700365][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 940.707615][ T5719] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 940.722679][ T5719] usb 3-1: config 0 has no interface number 0 [ 940.725758][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.738084][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.748215][ T5719] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 940.761693][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.774572][ T5705] usb-storage 1-1:11.165: USB Mass Storage device detected [ 940.782731][ T5719] usb 3-1: Product: syz [ 940.792887][ T5719] usb 3-1: Manufacturer: syz [ 940.799945][ T5705] usb-storage 1-1:11.165: Quirks match for vid 0525 pid a4a5: 10000 [ 940.805325][ T5719] usb 3-1: SerialNumber: syz [ 940.825061][ T5719] usb 3-1: config 0 descriptor?? [ 940.837012][ T5719] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 940.853784][ T5705] usb 1-1: USB disconnect, device number 78 [ 941.029587][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 941.046510][ T5719] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 941.065369][ T5719] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 941.082658][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.103562][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 941.128726][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 941.145167][ T10] usb 6-1: can't read configurations, error -61 [ 941.289650][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 941.333476][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.351415][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 941.367789][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 941.373246][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 941.375948][ T5774] usb 3-1: USB disconnect, device number 97 [ 941.402343][ T10] usb 6-1: can't read configurations, error -61 [ 941.424485][ T5774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 941.441440][ T10] usb usb6-port1: unable to enumerate USB device [ 941.449023][ T5774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 941.484930][ T5774] quatech2 3-1:0.51: device disconnected [ 941.691698][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4100'. [ 941.767330][ T5705] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 941.922548][ T5705] usb 1-1: device descriptor read/64, error -71 [ 941.989593][ T807] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 942.141783][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 942.150089][ T807] usb 5-1: not running at top speed; connect to a high speed hub [ 942.158939][ T807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.169238][ T807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.179595][ T5705] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 942.189203][ T807] usb 5-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40 [ 942.198823][ T807] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 942.206981][ T807] usb 5-1: Product: syz [ 942.212449][ T807] usb 5-1: Manufacturer: syz [ 942.217152][ T807] usb 5-1: SerialNumber: syz [ 942.219676][ T5631] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 942.309628][ T5705] usb 1-1: device descriptor read/64, error -71 [ 942.381268][ T5631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.391986][ T5631] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 942.402976][ T5631] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 942.412491][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.421257][ T5705] usb usb1-port1: attempt power cycle [ 942.429887][ T5631] usb 3-1: config 0 descriptor?? [ 942.653705][ T5631] Bluetooth: Can't get state to change to load ram patch err [ 942.665367][ T5631] Bluetooth: Loading patch file failed [ 942.671154][ T5631] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 942.685186][ T5631] usb 3-1: USB disconnect, device number 98 [ 942.789564][ T5705] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 942.810262][ T5705] usb 1-1: device descriptor read/8, error -71 [ 943.049843][ T5705] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 943.070284][ T5705] usb 1-1: device descriptor read/8, error -71 [ 943.179930][ T5705] usb usb1-port1: unable to enumerate USB device [ 944.227202][T19564] netlink: 'syz.3.4108': attribute type 10 has an invalid length. [ 944.242775][T19564] geneve1: entered promiscuous mode [ 944.270509][T19564] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 944.307224][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 944.307246][ T29] audit: type=1400 audit(1781158959.579:6361): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=19563 comm="syz.3.4108" [ 944.348430][ T5637] Bluetooth: hci5: unexpected event for opcode 0x2023 [ 944.739474][ T5631] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 944.916166][ T5631] usb 4-1: Using ep0 maxpacket: 32 [ 944.938085][ T5631] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 944.956491][ T5631] usb 4-1: config 0 has no interface number 0 [ 944.972972][ T5631] usb 4-1: config 0 interface 184 has no altsetting 0 [ 945.018478][ T5631] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 945.053602][ T5631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.073160][ T5631] usb 4-1: Product: syz [ 945.077485][ T5631] usb 4-1: Manufacturer: syz [ 945.082834][ T5631] usb 4-1: SerialNumber: syz [ 945.109073][ T807] usb 5-1: USB disconnect, device number 63 [ 945.122968][ T5631] usb 4-1: config 0 descriptor?? [ 945.242098][T17566] udevd[17566]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.312572][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4111'. [ 945.403496][ T29] audit: type=1326 audit(1781158960.679:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.4.4111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f449559ce59 code=0x0 [ 945.521867][T19573] bond4 (unregistering): Released all slaves [ 945.534174][T19584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.569657][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 945.799497][ T807] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 945.824697][T19587] create_pit_timer: 1 callbacks suppressed [ 945.824748][T19587] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 945.873111][T19587] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 945.878797][T19590] netlink: 'syz.4.4115': attribute type 6 has an invalid length. [ 945.893393][T19590] netlink: 'syz.4.4115': attribute type 7 has an invalid length. [ 945.894038][T19587] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 945.901737][T19590] netlink: 'syz.4.4115': attribute type 8 has an invalid length. [ 945.917164][T19587] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 945.925188][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'. [ 945.925217][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'. [ 945.925268][T19590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4115'. [ 945.944919][T19587] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 945.985007][ T807] usb 3-1: config 2 has an invalid interface number: 193 but max is 0 [ 945.994323][ T807] usb 3-1: config 2 has no interface number 0 [ 946.002876][ T807] usb 3-1: config 2 interface 193 has no altsetting 0 [ 946.015642][ T807] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=e5.52 [ 946.025117][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.039495][ T807] usb 3-1: Product: syz [ 946.049660][ T807] usb 3-1: Manufacturer: syz [ 946.054961][ T807] usb 3-1: SerialNumber: syz [ 946.110964][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 946.125621][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 946.244728][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 946.261514][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 946.272258][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 946.282859][ T5631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 946.286486][ T807] qmi_wwan 3-1:2.193: probe with driver qmi_wwan failed with error -22 [ 946.293893][ T5631] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 946.323385][ T5631] usb 4-1: USB disconnect, device number 25 [ 946.345245][ T807] usb 3-1: USB disconnect, device number 99 [ 946.389462][T18767] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 946.588935][T18767] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 946.616692][T18767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 946.627779][T18767] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 946.641150][T18767] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 946.650309][T18767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.665470][T18767] usb 5-1: config 0 descriptor?? [ 946.679650][T19594] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 946.914282][T19598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 947.110275][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 947.423080][ T5719] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 947.447084][T19615] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4124'. [ 947.478505][T19615] 0·: renamed from hsr0 (while UP) [ 947.508788][T19615] 0·: entered allmulticast mode [ 947.532636][T19615] hsr_slave_0: entered allmulticast mode [ 947.558800][T19615] hsr_slave_1: entered allmulticast mode [ 947.569724][T19615] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 947.611542][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.632046][ T5719] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 947.656638][ T5719] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 947.689090][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.719575][ T5719] usb 4-1: config 0 descriptor?? [ 947.770216][T18767] usbhid 5-1:0.0: can't add hid device: -71 [ 947.787739][T18767] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 947.838508][T18767] usb 5-1: USB disconnect, device number 64 [ 947.965845][ T5719] Bluetooth: Can't get state to change to load ram patch err [ 947.981232][ T5719] Bluetooth: Loading patch file failed [ 947.987822][ T5719] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 948.016581][ T5719] usb 4-1: USB disconnect, device number 26 [ 948.219568][ T5774] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 948.371642][ T5774] usb 6-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config [ 948.385074][ T807] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 948.401066][ T5774] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 948.421120][ T5774] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 948.439505][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.463747][ T5774] usb 6-1: config 0 descriptor?? [ 948.564742][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.578607][ T807] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.594054][ T807] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.625037][ T807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 948.638478][ T807] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 948.649325][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.662294][ T807] usb 3-1: config 0 descriptor?? [ 948.869561][ T42] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 948.946286][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'. [ 948.968991][T19649] ip6tnl3: entered allmulticast mode [ 949.052125][ T42] usb 5-1: not running at top speed; connect to a high speed hub [ 949.064642][ T42] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 949.075939][ T42] usb 5-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 949.090510][ T42] usb 5-1: config 1 interface 0 has no altsetting 0 [ 949.098568][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 949.110289][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.120131][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.128226][ T42] usb 5-1: Product:   [ 949.133485][ T42] usb 5-1: Manufacturer: ☴뙶ïºè¸‘ꖃდ犈଒닸ѥ℘êŒãœ°ç˜Ší·í–Šîžä¬¯ä’»æŽ¸Â’ᫎꆕࢗპ놟எ蹣⥭ [ 949.146444][ T42] usb 5-1: SerialNumber: 鶕æŒÒ†ê§®ë–ºâµ§é¼£êŠæµžæ‡äŒ¶ï±§è¦Žä¤ªè‡’ä˜Ø„悺혼㼙誳㡢㦑⊥䉔熾乢籑⭻ë®ä¤£ë­´í‡·äšƒà©†æŠžîˆŒå–šç´Ÿê´¡ä¹éµ²ì£‹æ„±ïž’ [ 949.185081][T19642] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 949.309585][T18767] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 949.415890][ T807] usbhid 3-1:0.0: can't add hid device: -71 [ 949.429649][ T807] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 949.443184][ T42] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 949.466701][ T807] usb 3-1: USB disconnect, device number 100 [ 949.469852][T18767] usb 4-1: Using ep0 maxpacket: 32 [ 949.491546][ T42] usb 5-1: USB disconnect, device number 65 [ 949.493467][T18767] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 949.516818][T18767] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 949.540082][T18767] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.557750][T18767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.567724][T18767] usb 4-1: Product: èºçŠá‚å·”ï›–çºœâ¾’ì¸°ì¸ [ 949.576694][T18767] usb 4-1: Manufacturer: Ð [ 949.581739][T18767] usb 4-1: SerialNumber: 〉 [ 949.741222][T19666] wg2: entered promiscuous mode [ 949.746140][T19666] wg2: entered allmulticast mode [ 949.806238][T19653] sctp: [Deprecated]: syz.3.4136 (pid 19653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 949.806238][T19653] Use struct sctp_sack_info instead [ 949.842251][T19654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.852171][T19653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.853206][T19654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.876603][T19653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.902342][T18767] cdc_ncm 4-1:1.0: bind() failure [ 949.908485][T19669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4141'. [ 949.914898][T18767] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 949.927043][T18767] cdc_ncm 4-1:1.1: bind() failure [ 949.942067][T18767] usb 4-1: USB disconnect, device number 27 [ 949.969819][ T42] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 950.098929][T19669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 950.150788][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 950.157816][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 950.169939][ T42] usb 5-1: config 11 has an invalid interface number: 165 but max is 0 [ 950.181812][ T42] usb 5-1: config 11 has no interface number 0 [ 950.188588][ T42] usb 5-1: config 11 interface 165 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 950.202580][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice=18.6c [ 950.213060][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.221463][ T42] usb 5-1: Product: à ¾ [ 950.225757][ T42] usb 5-1: Manufacturer: ï“¿ [ 950.230860][ T42] usb 5-1: SerialNumber: syz [ 950.309568][ T5631] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 950.439582][ T5631] usb 3-1: device descriptor read/64, error -71 [ 950.461310][T19663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.473179][T19663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.503732][ T42] usb-storage 5-1:11.165: USB Mass Storage device detected [ 950.528426][ T42] usb-storage 5-1:11.165: Quirks match for vid 0525 pid a4a5: 10000 [ 950.613992][ T42] usb 5-1: USB disconnect, device number 66 [ 950.665679][T19686] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 950.680608][ T5631] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 950.737537][T19686] 8021q: adding VLAN 0 to HW filter on device bond6 [ 950.775808][T19686] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 950.797865][T19686] bond6: entered promiscuous mode [ 950.807841][T19686] bond6: entered allmulticast mode [ 950.822507][ T5631] usb 3-1: device descriptor read/64, error -71 [ 950.939850][ T5631] usb usb3-port1: attempt power cycle [ 950.984789][ T42] usb 6-1: USB disconnect, device number 12 [ 951.055744][T19693] [ 951.058098][T19693] ===================================================== [ 951.065059][T19693] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 951.072646][T19693] syzkaller #0 Tainted: G L [ 951.078647][T19693] ----------------------------------------------------- [ 951.085633][T19693] syz.5.4147/19693 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 951.093425][T19693] ffff888050e354b0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 951.102240][T19693] [ 951.102240][T19693] and this task is already holding: [ 951.109614][T19693] ffff888021ec7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 951.119451][T19693] which would create a new lock dependency: [ 951.125357][T19693] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 951.133532][T19693] [ 951.133532][T19693] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 951.142987][T19693] (&client->buffer_lock){..-.}-{3:3} [ 951.143012][T19693] [ 951.143012][T19693] ... which became SOFTIRQ-irq-safe at: [ 951.156079][T19693] lock_acquire+0x106/0x350 [ 951.160677][T19693] _raw_spin_lock+0x2e/0x40 [ 951.165275][T19693] evdev_pass_values+0xb9/0xbd0 [ 951.170214][T19693] evdev_events+0x1e6/0x340 [ 951.174804][T19693] input_pass_values+0x288/0x890 [ 951.179882][T19693] input_event_dispose+0x3e5/0x6b0 [ 951.185094][T19693] input_event+0x84/0xc0 [ 951.189427][T19693] hidinput_hid_event+0x143a/0x1ec0 [ 951.195390][T19693] hid_process_event+0x4be/0x620 [ 951.200432][T19693] hid_report_raw_event+0xed6/0x1850 [ 951.205833][T19693] __hid_input_report+0x45c/0x590 [ 951.210949][T19693] hid_irq_in+0x495/0x710 [ 951.215447][T19693] __usb_hcd_giveback_urb+0x376/0x540 [ 951.221012][T19693] dummy_timer+0xbc0/0x4650 [ 951.225678][T19693] __hrtimer_run_queues+0x3c0/0xa20 [ 951.230976][T19693] hrtimer_run_softirq+0x17a/0x240 [ 951.236187][T19693] handle_softirqs+0x22a/0x840 [ 951.241041][T19693] __irq_exit_rcu+0xca/0x220 [ 951.245717][T19693] irq_exit_rcu+0x9/0x30 [ 951.250044][T19693] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 951.255787][T19693] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.261855][T19693] tomoyo_check_acl+0xc4/0x400 [ 951.266708][T19693] tomoyo_path_permission+0x1b4/0x380 [ 951.272167][T19693] tomoyo_path_perm+0x3f3/0x560 [ 951.277107][T19693] security_inode_getattr+0x12b/0x310 [ 951.282570][T19693] vfs_getattr+0x23/0x70 [ 951.286905][T19693] vfs_statx_path+0x2b/0x230 [ 951.291588][T19693] vfs_statx+0x12e/0x200 [ 951.295916][T19693] vfs_fstatat+0x11b/0x170 [ 951.300418][T19693] __x64_sys_newfstatat+0x151/0x200 [ 951.305701][T19693] do_syscall_64+0x174/0x580 [ 951.310389][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.316367][T19693] [ 951.316367][T19693] to a SOFTIRQ-irq-unsafe lock: [ 951.323419][T19693] (tasklist_lock){.+.+}-{3:3} [ 951.323445][T19693] [ 951.323445][T19693] ... which became SOFTIRQ-irq-unsafe at: [ 951.336109][T19693] ... [ 951.336116][T19693] lock_acquire+0x106/0x350 [ 951.343372][T19693] _raw_read_lock+0x36/0x50 [ 951.347965][T19693] __do_wait+0xde/0x740 [ 951.352212][T19693] do_wait+0x1e7/0x510 [ 951.356371][T19693] kernel_wait+0xd6/0x1c0 [ 951.360792][T19693] call_usermodehelper_exec_work+0xbe/0x230 [ 951.366775][T19693] process_scheduled_works+0xb5d/0x1860 [ 951.372404][T19693] worker_thread+0xa53/0xfc0 [ 951.377080][T19693] kthread+0x389/0x470 [ 951.381234][T19693] ret_from_fork+0x514/0xb70 [ 951.386344][T19693] ret_from_fork_asm+0x1a/0x30 [ 951.391192][T19693] [ 951.391192][T19693] other info that might help us debug this: [ 951.391192][T19693] [ 951.401413][T19693] Chain exists of: [ 951.401413][T19693] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 951.401413][T19693] [ 951.414561][T19693] Possible interrupt unsafe locking scenario: [ 951.414561][T19693] [ 951.422926][T19693] CPU0 CPU1 [ 951.428285][T19693] ---- ---- [ 951.433655][T19693] lock(tasklist_lock); [ 951.437897][T19693] local_irq_disable(); [ 951.444645][T19693] lock(&client->buffer_lock); [ 951.452227][T19693] lock(&new->fa_lock); [ 951.458986][T19693] [ 951.462467][T19693] lock(&client->buffer_lock); [ 951.467507][T19693] [ 951.467507][T19693] *** DEADLOCK *** [ 951.467507][T19693] [ 951.475643][T19693] 7 locks held by syz.5.4147/19693: [ 951.480835][T19693] #0: ffff88802c74e110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 951.489993][T19693] #1: ffff88801fb8c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 951.500099][T19693] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 951.509759][T19693] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 951.519327][T19693] #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 951.528469][T19693] #5: ffff888021ec7028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 951.538668][T19693] #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 951.547720][T19693] [ 951.547720][T19693] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 951.558124][T19693] -> (&client->buffer_lock){..-.}-{3:3} { [ 951.563860][T19693] IN-SOFTIRQ-W at: [ 951.567904][T19693] lock_acquire+0x106/0x350 [ 951.574061][T19693] _raw_spin_lock+0x2e/0x40 [ 951.580233][T19693] evdev_pass_values+0xb9/0xbd0 [ 951.586734][T19693] evdev_events+0x1e6/0x340 [ 951.592881][T19693] input_pass_values+0x288/0x890 [ 951.599470][T19693] input_event_dispose+0x3e5/0x6b0 [ 951.606253][T19693] input_event+0x84/0xc0 [ 951.612151][T19693] hidinput_hid_event+0x143a/0x1ec0 [ 951.619000][T19693] hid_process_event+0x4be/0x620 [ 951.625587][T19693] hid_report_raw_event+0xed6/0x1850 [ 951.632529][T19693] __hid_input_report+0x45c/0x590 [ 951.639205][T19693] hid_irq_in+0x495/0x710 [ 951.645187][T19693] __usb_hcd_giveback_urb+0x376/0x540 [ 951.652210][T19693] dummy_timer+0xbc0/0x4650 [ 951.658368][T19693] __hrtimer_run_queues+0x3c0/0xa20 [ 951.665217][T19693] hrtimer_run_softirq+0x17a/0x240 [ 951.671980][T19693] handle_softirqs+0x22a/0x840 [ 951.678506][T19693] __irq_exit_rcu+0xca/0x220 [ 951.684742][T19693] irq_exit_rcu+0x9/0x30 [ 951.690633][T19693] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 951.697999][T19693] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.705678][T19693] tomoyo_check_acl+0xc4/0x400 [ 951.712098][T19693] tomoyo_path_permission+0x1b4/0x380 [ 951.719138][T19693] tomoyo_path_perm+0x3f3/0x560 [ 951.725640][T19693] security_inode_getattr+0x12b/0x310 [ 951.732662][T19693] vfs_getattr+0x23/0x70 [ 951.738571][T19693] vfs_statx_path+0x2b/0x230 [ 951.744811][T19693] vfs_statx+0x12e/0x200 [ 951.750874][T19693] vfs_fstatat+0x11b/0x170 [ 951.756939][T19693] __x64_sys_newfstatat+0x151/0x200 [ 951.763786][T19693] do_syscall_64+0x174/0x580 [ 951.770022][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.777564][T19693] INITIAL USE at: [ 951.781453][T19693] lock_acquire+0x106/0x350 [ 951.787521][T19693] _raw_spin_lock+0x2e/0x40 [ 951.793588][T19693] evdev_pass_values+0xb9/0xbd0 [ 951.799998][T19693] evdev_events+0x1e6/0x340 [ 951.806062][T19693] input_pass_values+0x288/0x890 [ 951.812562][T19693] input_event_dispose+0x330/0x6b0 [ 951.819416][T19693] input_inject_event+0x1dc/0x330 [ 951.826008][T19693] evdev_write+0x325/0x4c0 [ 951.831982][T19693] vfs_write+0x29a/0xb90 [ 951.837794][T19693] ksys_write+0x150/0x270 [ 951.843784][T19693] do_syscall_64+0x174/0x580 [ 951.849959][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.857422][T19693] } [ 951.859923][T19693] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 951.868211][T19693] [ 951.868211][T19693] the dependencies between the lock to be acquired [ 951.868221][T19693] and SOFTIRQ-irq-unsafe lock: [ 951.881749][T19693] -> (tasklist_lock){.+.+}-{3:3} { [ 951.887057][T19693] HARDIRQ-ON-R at: [ 951.891211][T19693] lock_acquire+0x106/0x350 [ 951.897711][T19693] _raw_read_lock+0x36/0x50 [ 951.904225][T19693] __do_wait+0xde/0x740 [ 951.910402][T19693] do_wait+0x1e7/0x510 [ 951.916482][T19693] kernel_wait+0xd6/0x1c0 [ 951.922841][T19693] call_usermodehelper_exec_work+0xbe/0x230 [ 951.930826][T19693] process_scheduled_works+0xb5d/0x1860 [ 951.938455][T19693] worker_thread+0xa53/0xfc0 [ 951.945036][T19693] kthread+0x389/0x470 [ 951.951109][T19693] ret_from_fork+0x514/0xb70 [ 951.957697][T19693] ret_from_fork_asm+0x1a/0x30 [ 951.964458][T19693] SOFTIRQ-ON-R at: [ 951.968613][T19693] lock_acquire+0x106/0x350 [ 951.975110][T19693] _raw_read_lock+0x36/0x50 [ 951.981612][T19693] __do_wait+0xde/0x740 [ 951.987770][T19693] do_wait+0x1e7/0x510 [ 951.993839][T19693] kernel_wait+0xd6/0x1c0 [ 952.000179][T19693] call_usermodehelper_exec_work+0xbe/0x230 [ 952.008092][T19693] process_scheduled_works+0xb5d/0x1860 [ 952.015634][T19693] worker_thread+0xa53/0xfc0 [ 952.022221][T19693] kthread+0x389/0x470 [ 952.028289][T19693] ret_from_fork+0x514/0xb70 [ 952.034963][T19693] ret_from_fork_asm+0x1a/0x30 [ 952.041726][T19693] INITIAL USE at: [ 952.045796][T19693] lock_acquire+0x106/0x350 [ 952.052213][T19693] _raw_write_lock_irq+0x3d/0x50 [ 952.059062][T19693] copy_process+0x2b4c/0x4440 [ 952.065648][T19693] kernel_clone+0x2d7/0x940 [ 952.072063][T19693] user_mode_thread+0x110/0x180 [ 952.078825][T19693] rest_init+0x23/0x300 [ 952.084897][T19693] start_kernel+0x38a/0x3e0 [ 952.091417][T19693] x86_64_start_reservations+0x24/0x30 [ 952.098811][T19693] x86_64_start_kernel+0x143/0x1c0 [ 952.105859][T19693] common_startup_64+0x13e/0x147 [ 952.112730][T19693] INITIAL READ USE at: [ 952.117269][T19693] lock_acquire+0x106/0x350 [ 952.124125][T19693] _raw_read_lock+0x36/0x50 [ 952.130993][T19693] __do_wait+0xde/0x740 [ 952.137501][T19693] do_wait+0x1e7/0x510 [ 952.143917][T19693] kernel_wait+0xd6/0x1c0 [ 952.150595][T19693] call_usermodehelper_exec_work+0xbe/0x230 [ 952.158841][T19693] process_scheduled_works+0xb5d/0x1860 [ 952.166730][T19693] worker_thread+0xa53/0xfc0 [ 952.173665][T19693] kthread+0x389/0x470 [ 952.180081][T19693] ret_from_fork+0x514/0xb70 [ 952.187014][T19693] ret_from_fork_asm+0x1a/0x30 [ 952.194124][T19693] } [ 952.196796][T19693] ... key at: [] tasklist_lock+0x18/0x40 [ 952.204785][T19693] ... acquired at: [ 952.208758][T19693] _raw_read_lock+0x36/0x50 [ 952.213436][T19693] send_sigurg+0x12b/0x420 [ 952.218025][T19693] sk_send_sigurg+0x6c/0x2e0 [ 952.222789][T19693] queue_oob+0x42c/0x4f0 [ 952.227264][T19693] unix_stream_sendmsg+0xcb1/0xe80 [ 952.232636][T19693] ____sys_sendmsg+0x972/0x9f0 [ 952.237568][T19693] ___sys_sendmsg+0x2a5/0x360 [ 952.242416][T19693] __x64_sys_sendmsg+0x1bd/0x2a0 [ 952.247521][T19693] do_syscall_64+0x174/0x580 [ 952.252283][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.258350][T19693] [ 952.260670][T19693] -> (&f_owner->lock){....}-{3:3} { [ 952.265974][T19693] INITIAL USE at: [ 952.269948][T19693] lock_acquire+0x106/0x350 [ 952.276191][T19693] _raw_write_lock_irq+0x3d/0x50 [ 952.282865][T19693] __f_setown+0x67/0x370 [ 952.288843][T19693] generic_setlease+0xacf/0xfd0 [ 952.295450][T19693] do_fcntl_add_lease+0x35e/0x470 [ 952.302211][T19693] fcntl_setdeleg+0x14c/0x1e0 [ 952.308625][T19693] do_fcntl+0xe6d/0x1a20 [ 952.314606][T19693] __se_sys_fcntl+0xc8/0x150 [ 952.320939][T19693] do_syscall_64+0x174/0x580 [ 952.327263][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.334889][T19693] INITIAL READ USE at: [ 952.339300][T19693] lock_acquire+0x106/0x350 [ 952.345969][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 952.353341][T19693] send_sigio+0x38/0x370 [ 952.359756][T19693] kill_fasync+0x24d/0x4d0 [ 952.366354][T19693] lease_break_callback+0x26/0x30 [ 952.373550][T19693] __break_lease+0x81f/0x1ea0 [ 952.380398][T19693] vfs_set_acl+0x4d9/0xc00 [ 952.387010][T19693] file_setxattr+0x233/0x2b0 [ 952.393768][T19693] path_setxattrat+0x3b0/0x440 [ 952.400720][T19693] __x64_sys_fsetxattr+0xbc/0xe0 [ 952.407829][T19693] do_syscall_64+0x174/0x580 [ 952.414589][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.422739][T19693] } [ 952.425326][T19693] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 952.434343][T19693] ... acquired at: [ 952.438232][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 952.443609][T19693] send_sigio+0x38/0x370 [ 952.448027][T19693] kill_fasync+0x24d/0x4d0 [ 952.452624][T19693] lease_break_callback+0x26/0x30 [ 952.457826][T19693] __break_lease+0x81f/0x1ea0 [ 952.462677][T19693] vfs_set_acl+0x4d9/0xc00 [ 952.467273][T19693] file_setxattr+0x233/0x2b0 [ 952.472036][T19693] path_setxattrat+0x3b0/0x440 [ 952.476982][T19693] __x64_sys_fsetxattr+0xbc/0xe0 [ 952.482096][T19693] do_syscall_64+0x174/0x580 [ 952.486858][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.492920][T19693] [ 952.495243][T19693] -> (&new->fa_lock){...-}-{3:3} { [ 952.500371][T19693] IN-SOFTIRQ-R at: [ 952.504355][T19693] lock_acquire+0x106/0x350 [ 952.510506][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 952.517363][T19693] kill_fasync+0x199/0x4d0 [ 952.523449][T19693] sock_wake_async+0x137/0x160 [ 952.529867][T19693] sock_def_readable+0x3c1/0x550 [ 952.536456][T19693] packet_rcv+0x11e4/0x1730 [ 952.542699][T19693] dev_queue_xmit_nit+0x5d5/0xad0 [ 952.549411][T19693] dev_hard_start_xmit+0x1c1/0x830 [ 952.556170][T19693] __dev_queue_xmit+0x14d9/0x3950 [ 952.562850][T19693] hsr_forward_skb+0x167e/0x2ab0 [ 952.569500][T19693] send_hsr_supervision_frame+0x731/0xcb0 [ 952.576870][T19693] hsr_announce+0x1db/0x370 [ 952.583025][T19693] call_timer_fn+0x192/0x5e0 [ 952.589265][T19693] __run_timer_base+0x652/0x8b0 [ 952.595761][T19693] run_timer_softirq+0xb7/0x170 [ 952.602277][T19693] handle_softirqs+0x22a/0x840 [ 952.608691][T19693] __irq_exit_rcu+0xca/0x220 [ 952.614928][T19693] irq_exit_rcu+0x9/0x30 [ 952.620820][T19693] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 952.628099][T19693] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 952.635814][T19693] __slab_free+0xb3/0x2c0 [ 952.641799][T19693] qlist_free_all+0x99/0x100 [ 952.648043][T19693] kasan_quarantine_reduce+0x148/0x160 [ 952.655156][T19693] __kasan_slab_alloc+0x22/0x80 [ 952.661670][T19693] __kvmalloc_node_noprof+0x4d7/0x8a0 [ 952.668718][T19693] __nf_hook_entries_try_shrink+0x328/0x700 [ 952.676294][T19693] __nf_unregister_net_hook+0x4cc/0x6f0 [ 952.683504][T19693] nf_unregister_net_hooks+0xcb/0x140 [ 952.690525][T19693] nf_ct_netns_put+0x36d/0x520 [ 952.697003][T19693] cleanup_entry+0x298/0x360 [ 952.703294][T19693] translate_table+0x1ecd/0x20b0 [ 952.709887][T19693] do_ip6t_set_ctl+0x9fe/0xe10 [ 952.716302][T19693] nf_setsockopt+0x26f/0x290 [ 952.722544][T19693] rawv6_setsockopt+0x276/0x5f0 [ 952.729083][T19693] do_sock_setsockopt+0x17c/0x1b0 [ 952.735766][T19693] __x64_sys_setsockopt+0x13d/0x1b0 [ 952.742622][T19693] do_syscall_64+0x174/0x580 [ 952.748860][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.756405][T19693] INITIAL USE at: [ 952.760307][T19693] lock_acquire+0x106/0x350 [ 952.766374][T19693] _raw_write_lock_irq+0x3d/0x50 [ 952.772874][T19693] fasync_remove_entry+0xf1/0x1c0 [ 952.779466][T19693] lease_modify+0x4f7/0x6c0 [ 952.785533][T19693] locks_remove_file+0x5f0/0xf70 [ 952.792057][T19693] __fput+0x3ae/0xa60 [ 952.797605][T19693] task_work_run+0x1d9/0x270 [ 952.803760][T19693] do_exit+0x70f/0x22c0 [ 952.809483][T19693] do_group_exit+0x21b/0x2d0 [ 952.815656][T19693] get_signal+0x1284/0x1330 [ 952.821744][T19693] arch_do_signal_or_restart+0xbc/0x840 [ 952.828876][T19693] exit_to_user_mode_loop+0xa9/0x680 [ 952.835724][T19693] do_syscall_64+0x353/0x580 [ 952.841875][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.849331][T19693] INITIAL READ USE at: [ 952.853668][T19693] lock_acquire+0x106/0x350 [ 952.860174][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 952.867388][T19693] kill_fasync+0x199/0x4d0 [ 952.873808][T19693] lease_break_callback+0x26/0x30 [ 952.880852][T19693] __break_lease+0x81f/0x1ea0 [ 952.887528][T19693] vfs_set_acl+0x4d9/0xc00 [ 952.893942][T19693] file_setxattr+0x233/0x2b0 [ 952.900532][T19693] path_setxattrat+0x3b0/0x440 [ 952.907323][T19693] __x64_sys_fsetxattr+0xbc/0xe0 [ 952.914259][T19693] do_syscall_64+0x174/0x580 [ 952.920843][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.928730][T19693] } [ 952.931225][T19693] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 952.939911][T19693] ... acquired at: [ 952.943713][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 952.949086][T19693] kill_fasync+0x199/0x4d0 [ 952.953680][T19693] evdev_pass_values+0x627/0xbd0 [ 952.958799][T19693] evdev_events+0x1e6/0x340 [ 952.963473][T19693] input_pass_values+0x288/0x890 [ 952.968580][T19693] input_event_dispose+0x330/0x6b0 [ 952.973869][T19693] input_inject_event+0x1dc/0x330 [ 952.979067][T19693] evdev_write+0x325/0x4c0 [ 952.983652][T19693] vfs_write+0x29a/0xb90 [ 952.988081][T19693] ksys_write+0x150/0x270 [ 952.992584][T19693] do_syscall_64+0x174/0x580 [ 952.997359][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.003422][T19693] [ 953.005777][T19693] [ 953.005777][T19693] stack backtrace: [ 953.011666][T19693] CPU: 0 UID: 0 PID: 19693 Comm: syz.5.4147 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.011693][T19693] Tainted: [L]=SOFTLOCKUP [ 953.011699][T19693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.011709][T19693] Call Trace: [ 953.011719][T19693] [ 953.011726][T19693] dump_stack_lvl+0xe8/0x150 [ 953.011744][T19693] __lock_acquire+0x2a94/0x2cf0 [ 953.011766][T19693] ? kill_fasync+0x199/0x4d0 [ 953.011784][T19693] lock_acquire+0x106/0x350 [ 953.011798][T19693] ? kill_fasync+0x199/0x4d0 [ 953.011818][T19693] ? do_raw_spin_lock+0x12b/0x2f0 [ 953.011839][T19693] _raw_read_lock_irqsave+0x48/0x60 [ 953.011859][T19693] ? kill_fasync+0x199/0x4d0 [ 953.011878][T19693] kill_fasync+0x199/0x4d0 [ 953.011896][T19693] ? kill_fasync+0x53/0x4d0 [ 953.011916][T19693] evdev_pass_values+0x627/0xbd0 [ 953.011932][T19693] ? evdev_pass_values+0x671/0xbd0 [ 953.011949][T19693] evdev_events+0x1e6/0x340 [ 953.011962][T19693] ? evdev_events+0x79/0x340 [ 953.011976][T19693] ? input_pass_values+0x8d/0x890 [ 953.011989][T19693] input_pass_values+0x288/0x890 [ 953.012005][T19693] ? input_handle_event+0x70c/0xf30 [ 953.012023][T19693] input_event_dispose+0x330/0x6b0 [ 953.012043][T19693] input_inject_event+0x1dc/0x330 [ 953.012061][T19693] ? input_inject_event+0xb5/0x330 [ 953.012079][T19693] evdev_write+0x325/0x4c0 [ 953.012094][T19693] ? __lock_acquire+0x6b5/0x2cf0 [ 953.012109][T19693] ? __pfx_evdev_write+0x10/0x10 [ 953.012123][T19693] ? bpf_lsm_file_permission+0x9/0x20 [ 953.012145][T19693] ? security_file_permission+0x75/0x260 [ 953.012164][T19693] ? rw_verify_area+0x255/0x4d0 [ 953.012183][T19693] ? __pfx_evdev_write+0x10/0x10 [ 953.012200][T19693] vfs_write+0x29a/0xb90 [ 953.012222][T19693] ? __pfx_vfs_write+0x10/0x10 [ 953.012242][T19693] ? __fget_files+0x2a/0x420 [ 953.012260][T19693] ? __fget_files+0x2a/0x420 [ 953.012277][T19693] ? __fget_files+0x3a0/0x420 [ 953.012294][T19693] ? __fget_files+0x2a/0x420 [ 953.012313][T19693] ksys_write+0x150/0x270 [ 953.012333][T19693] ? __pfx_ksys_write+0x10/0x10 [ 953.012355][T19693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.012370][T19693] do_syscall_64+0x174/0x580 [ 953.012385][T19693] ? trace_irq_disable+0x3b/0x140 [ 953.012406][T19693] ? clear_bhb_loop+0x40/0x90 [ 953.012422][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.012438][T19693] RIP: 0033:0x7f371e59ce59 [ 953.012454][T19693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.012467][T19693] RSP: 002b:00007f371f398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.012485][T19693] RAX: ffffffffffffffda RBX: 00007f371e815fa0 RCX: 00007f371e59ce59 [ 953.012496][T19693] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000005 [ 953.012507][T19693] RBP: 00007f371e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 953.012517][T19693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.012526][T19693] R13: 00007f371e816038 R14: 00007f371e815fa0 R15: 00007f371e93fa48 [ 953.012542][T19693] [ 955.809734][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!