last executing test programs: 58m11.031624452s ago: executing program 3 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000f8ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x19}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000001100010000000000000000000000000ad318070d5a973daef5b5a88964a44855d048ebca98549f3cdca354f7a75511a0a2e713e972b83d9607f6fd4ef7724c28c2c31395322890e209ffb82a123725d543cd4c9b8c7dbd7d5342ca98d7179a215ebc55c8b3b8eebfb8309ae39a1c449e14746baa69766368373e807c00ea5e"], 0x28}}, 0x0) r4 = getegid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000140)=[r4, r5]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) 58m10.487795589s ago: executing program 3 (id=205): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d15", 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="e00fb17acf", 0x5}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 58m9.009390021s ago: executing program 3 (id=210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38ff, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 58m7.674035135s ago: executing program 3 (id=213): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 58m6.459030047s ago: executing program 3 (id=232): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13, @void, @value}, 0x94) unshare(0x64000600) 58m3.983497515s ago: executing program 3 (id=229): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x305, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 58m2.125968476s ago: executing program 32 (id=229): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x305, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.265614872s ago: executing program 0 (id=9120): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4cb, @local, 0x7fffffff, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 8.110508232s ago: executing program 0 (id=9121): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 7.013283794s ago: executing program 5 (id=9123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x1400, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) 6.597265413s ago: executing program 5 (id=9126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYBLOB="598e8389f32246438ece71d797372d21e60e7b108b32b52f54b239bc16eda9df27f599cb226335f56cc7c1d7053e243ea91d1299a79f453a6bce524fe5bec9aadd1fb0adcf5e8fe1d303a504659af27f2e0d8b6623090135a515e4c642e82a73a2862abb1ea8", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=0x0], 0x60) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x0, r3}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r7}) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '^^-#\'!:]]+]:'}, {}, {0x20, '[%[{'}, {0x20, '-!%(*%+&/@}\\{%\x06%}}^'}, {}, {0x20, '#'}]}, 0x127) 6.571494716s ago: executing program 0 (id=9127): socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, &(0x7f0000000380)}, {0x2, 0x200, 0x0, 0x0}], 0x2}) 6.053964932s ago: executing program 2 (id=9132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300b0180300ffffffffffff0802110200"], 0x48}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 5.914518236s ago: executing program 2 (id=9134): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newpolicy={0x144, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@ipv4}]}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000140)={0xccefb9fedd81d790, 0x10, 0x5, {0x5, 0x4ffd271b2776e994, "747f98"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.764802121s ago: executing program 4 (id=9135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x858, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6a}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x25}, @TCA_ROUTE4_POLICE={0x830, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x4, 0xffff, 0x3, 0x3ff, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x5, 0x6d, 0x7, 0x92, 0x9, 0x9, 0xf489, 0x2, 0x9, 0x8, 0x5, 0x1, 0xddbe, 0x8, 0x6, 0x7, 0x2, 0x5, 0x9, 0x2, 0x7, 0x5, 0xf, 0x3, 0xd1e, 0xffff, 0x6, 0x6, 0xfff00000, 0x5, 0x6, 0x8, 0x4, 0x9, 0x7f, 0xce, 0x0, 0xfffffffe, 0x101, 0x9, 0x7, 0x5, 0x3, 0x2, 0x5, 0x0, 0x6, 0x110550f8, 0x4, 0x4, 0xffff1253, 0x80, 0x80, 0x800, 0x5a, 0x10000, 0x200, 0x7, 0x69e, 0x7fffffff, 0x7, 0x9, 0x0, 0x4, 0x2, 0x800, 0x3, 0x0, 0xfff, 0x7, 0x0, 0x5, 0x15c, 0x9, 0x4, 0xffff, 0xe, 0x7, 0x2, 0xbde0, 0x3, 0x400, 0x81, 0xfffffff2, 0x3, 0x60000, 0x764a, 0x1, 0x10001, 0x7, 0xfffffff9, 0x5, 0xff, 0x8, 0xfff, 0x3, 0x60, 0x1000, 0x9, 0x6, 0x1, 0x3, 0xe80, 0x2f17, 0x5, 0x7fffffff, 0x2, 0x37b1c6c1, 0x5ccd, 0xe, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x1, 0xff42, 0xca, 0x2, 0xfffffff2, 0x4, 0x7, 0x200, 0x200, 0xffffffff, 0xf, 0x8, 0x2b1e, 0x10000, 0x6, 0x80, 0x6, 0x0, 0x81, 0x200, 0x8001, 0x200, 0x7, 0x6, 0x2, 0x401, 0xff, 0xffffff5a, 0x80, 0x4, 0x3, 0x448, 0x8, 0x7ff, 0x3, 0x5, 0xfffffc00, 0xe, 0x1000, 0x2, 0x7ff, 0xfffffff7, 0x7fff, 0x3, 0xd7, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x101, 0x36, 0x4, 0x929, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7, 0xb, 0x100, 0x7f, 0x10, 0x6, 0x240, 0x6, 0x5, 0xf, 0x0, 0xffff, 0x0, 0x8, 0x5, 0x4, 0x2, 0x9, 0x3, 0x9d, 0x7, 0x1, 0x1, 0x5, 0x7fff, 0x6, 0x140000, 0x1, 0x5ca, 0xffffffff, 0x5, 0xffff, 0x2, 0x7, 0x10, 0xffffff81, 0x9, 0x5, 0x6, 0x5, 0xffffff01, 0xd, 0x2, 0xfffffffd, 0x1000, 0x2, 0x7, 0x1, 0x5, 0x44c, 0x2ac, 0x24f1, 0x8, 0x0, 0x2, 0x8, 0x8, 0x1, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ff, 0x8, 0x2, 0x6, 0x7fff, 0x5, 0x1000, 0x8d, 0x0, 0x3ad1, 0x80000001, 0xffffffff, 0x401, 0x180, 0x0, 0x8000, 0x4, 0x400, 0x1, 0x5, 0x8, 0x3, 0x9, 0x3, 0x4, 0x2, 0x1ff, 0xff, 0x8, 0x5, 0x9, 0x4, 0x8, 0x3, 0x2b, 0x10001, 0x6, 0x4c, 0x4, 0x5, 0x4, 0xfffffffc, 0x80000000, 0x4, 0x10, 0x3, 0xbc7b, 0x8001, 0x6, 0x1, 0xfffffffa, 0x4, 0x14a, 0x7, 0x5, 0x1, 0x5, 0x9, 0x7, 0x10000, 0x3, 0x7, 0xa0000000, 0x200, 0xf98, 0x2, 0x6, 0x6, 0x682, 0x7, 0x7, 0x6d6, 0xb, 0x0, 0x20000000, 0x4, 0x80, 0x4, 0x2, 0x800, 0x0, 0x9, 0x6, 0x22, 0x8000, 0x40, 0x6, 0x0, 0x3ff, 0x4, 0x10001, 0x0, 0x0, 0x6ed2, 0x8, 0xc, 0x2, 0x800, 0x6, 0x6, 0x99a, 0x17, 0x9, 0xfffffffa, 0x0, 0xc, 0xffffffff, 0x10001, 0x400, 0x3ff, 0x3, 0x1, 0x3, 0xc67, 0x9, 0x0, 0x8, 0x5, 0x4, 0x2, 0x7fffffff, 0x9, 0x1ff, 0x5, 0x3, 0x6, 0x100, 0x80, 0x9, 0x2, 0x4e24, 0xd, 0x7, 0x6, 0x6, 0x8, 0xd337, 0x1000, 0xfff, 0x774, 0x3f5818ba, 0x80000001, 0x9, 0x6, 0x80000001, 0x101, 0x1000, 0x4151, 0xfff, 0xb861, 0x0, 0x9, 0xfffffff8, 0x2, 0x100, 0x6, 0x5, 0x3, 0x3, 0x4, 0x3ba, 0x0, 0x9, 0x0, 0xd, 0x5, 0x5, 0x9, 0x80000001, 0x6, 0x72, 0x3, 0x6b, 0xaa, 0x6a52, 0xd, 0xa, 0x8000, 0x9, 0x3, 0x100, 0x100, 0x10001, 0xff, 0x3, 0x1, 0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x0, 0x5, 0x7, 0xc8d8, 0xe8e0, 0x2, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x401, 0x8, 0x7ff80000, 0xffffff26, 0x4, 0xfffff001, 0x3, 0x0, 0x38a34425, 0xfffffc00, 0x1, 0x9bc6, 0x6, 0xb0, 0x3, 0x1, 0x6, 0xe, 0x6, 0x145e, 0x8000, 0x1, 0x9, 0x3, 0x7, 0x9, 0x5, 0xfffffffe, 0x101, 0x3, 0x8, 0x3, 0x7fffffff, 0x3ff, 0x7, 0x2aa, 0x2, 0x3, 0xd, 0x1ff, 0x0, 0x5, 0x5, 0x4, 0x2a, 0x8dc, 0x0, 0x7, 0x5, 0xffffffff, 0x6dd6, 0x5, 0xfffffff9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 5.687630204s ago: executing program 1 (id=9136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0xda1af7656ecc127f, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x48000) 5.562933266s ago: executing program 1 (id=9137): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 4.749464923s ago: executing program 0 (id=9138): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket(0x2, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0xfff1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @loopback, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0xd, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0x2, 0xea4, 0x9, 0x4, 0x40, 0x4, 0xe, 0x6, 0x4, 0x4, 0xe07, 0xfff, 0x7, 0x5, 0x101, 0x8001, 0xd22e, 0x8000, 0x7ff, 0x8001, 0x5, 0x3, 0x7f, 0x8, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x9, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x89, 0x9db7, 0x0, 0x9994]}}) 3.799675146s ago: executing program 4 (id=9139): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) write$dsp(r0, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f2ebd9a18ba8e7d42d9cc5763783b6d24d5", 0x8e) 3.798656235s ago: executing program 5 (id=9149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.789187143s ago: executing program 2 (id=9140): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 3.722323622s ago: executing program 1 (id=9141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 3.588596327s ago: executing program 2 (id=9142): r0 = socket$inet(0x2, 0x3, 0x33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 3.346930993s ago: executing program 2 (id=9143): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.1070811s ago: executing program 4 (id=9144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0xd, 0x40, 0x0, 0x0, 0x5, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @md5sig={0x13, 0x12, "bb19d9c56a3acf50f29e503c03d6d473"}]}}}}}}, 0x4e) 2.859276356s ago: executing program 4 (id=9145): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc94500008100"/38, 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x1b, r1, 0x1, 0x3}, 0x14) 2.854642791s ago: executing program 5 (id=9146): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0x3}, {0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x303, 0x70bd2a}, 0x14}}, 0x0) 2.609320203s ago: executing program 5 (id=9147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x2, 0x200, 0x9, 0x7, 0x9, 0x10000}) 2.523618434s ago: executing program 4 (id=9148): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000140)={'syz_tun\x00', 0x865}) close_range(r0, 0xffffffffffffffff, 0x0) 2.311804662s ago: executing program 0 (id=9150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x858, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6a}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x25}, @TCA_ROUTE4_POLICE={0x830, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x4, 0xffff, 0x3, 0x3ff, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x5, 0x6d, 0x7, 0x92, 0x9, 0x9, 0xf489, 0x2, 0x9, 0x8, 0x5, 0x1, 0xddbe, 0x8, 0x6, 0x7, 0x2, 0x5, 0x9, 0x2, 0x7, 0x5, 0xf, 0x3, 0xd1e, 0xffff, 0x6, 0x6, 0xfff00000, 0x5, 0x6, 0x8, 0x4, 0x9, 0x7f, 0xce, 0x0, 0xfffffffe, 0x101, 0x9, 0x7, 0x5, 0x3, 0x2, 0x5, 0x0, 0x6, 0x110550f8, 0x4, 0x4, 0xffff1253, 0x80, 0x80, 0x800, 0x5a, 0x10000, 0x200, 0x7, 0x69e, 0x7fffffff, 0x7, 0x9, 0x0, 0x4, 0x2, 0x800, 0x3, 0x0, 0xfff, 0x7, 0x0, 0x5, 0x15c, 0x9, 0x4, 0xffff, 0xe, 0x7, 0x2, 0xbde0, 0x3, 0x400, 0x81, 0xfffffff2, 0x3, 0x60000, 0x764a, 0x1, 0x10001, 0x7, 0xfffffff9, 0x5, 0xff, 0x8, 0xfff, 0x3, 0x60, 0x1000, 0x9, 0x6, 0x1, 0x3, 0xe80, 0x2f17, 0x5, 0x7fffffff, 0x2, 0x37b1c6c1, 0x5ccd, 0xe, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x1, 0xff42, 0xca, 0x2, 0xfffffff2, 0x4, 0x7, 0x200, 0x200, 0xffffffff, 0xf, 0x8, 0x2b1e, 0x10000, 0x6, 0x80, 0x6, 0x0, 0x81, 0x200, 0x8001, 0x200, 0x7, 0x6, 0x2, 0x401, 0xff, 0xffffff5a, 0x80, 0x4, 0x3, 0x448, 0x8, 0x7ff, 0x3, 0x5, 0xfffffc00, 0xe, 0x1000, 0x2, 0x7ff, 0xfffffff7, 0x7fff, 0x3, 0xd7, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x101, 0x36, 0x4, 0x929, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7, 0xb, 0x100, 0x7f, 0x10, 0x6, 0x240, 0x6, 0x5, 0xf, 0x0, 0xffff, 0x0, 0x8, 0x5, 0x4, 0x2, 0x9, 0x3, 0x9d, 0x7, 0x1, 0x1, 0x5, 0x7fff, 0x6, 0x140000, 0x1, 0x5ca, 0xffffffff, 0x5, 0xffff, 0x2, 0x7, 0x10, 0xffffff81, 0x9, 0x5, 0x6, 0x5, 0xffffff01, 0xd, 0x2, 0xfffffffd, 0x1000, 0x2, 0x7, 0x1, 0x5, 0x44c, 0x2ac, 0x24f1, 0x8, 0x0, 0x2, 0x8, 0x8, 0x1, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ff, 0x8, 0x2, 0x6, 0x7fff, 0x5, 0x1000, 0x8d, 0x0, 0x3ad1, 0x80000001, 0xffffffff, 0x401, 0x180, 0x0, 0x8000, 0x4, 0x400, 0x1, 0x5, 0x8, 0x3, 0x9, 0x3, 0x4, 0x2, 0x1ff, 0xff, 0x8, 0x5, 0x9, 0x4, 0x8, 0x3, 0x2b, 0x10001, 0x6, 0x4c, 0x4, 0x5, 0x4, 0xfffffffc, 0x80000000, 0x4, 0x10, 0x3, 0xbc7b, 0x8001, 0x6, 0x1, 0xfffffffa, 0x4, 0x14a, 0x7, 0x5, 0x1, 0x5, 0x9, 0x7, 0x10000, 0x3, 0x7, 0xa0000000, 0x200, 0xf98, 0x2, 0x6, 0x6, 0x682, 0x7, 0x7, 0x6d6, 0xb, 0x0, 0x20000000, 0x4, 0x80, 0x4, 0x2, 0x800, 0x0, 0x9, 0x6, 0x22, 0x8000, 0x40, 0x6, 0x0, 0x3ff, 0x4, 0x10001, 0x0, 0x0, 0x6ed2, 0x8, 0xc, 0x2, 0x800, 0x6, 0x6, 0x99a, 0x17, 0x9, 0xfffffffa, 0x0, 0xc, 0xffffffff, 0x10001, 0x400, 0x3ff, 0x3, 0x1, 0x3, 0xc67, 0x9, 0x0, 0x8, 0x5, 0x4, 0x2, 0x7fffffff, 0x9, 0x1ff, 0x5, 0x3, 0x6, 0x100, 0x80, 0x9, 0x2, 0x4e24, 0xd, 0x7, 0x6, 0x6, 0x8, 0xd337, 0x1000, 0xfff, 0x774, 0x3f5818ba, 0x80000001, 0x9, 0x6, 0x80000001, 0x101, 0x1000, 0x4151, 0xfff, 0xb861, 0x0, 0x9, 0xfffffff8, 0x2, 0x100, 0x6, 0x5, 0x3, 0x3, 0x4, 0x3ba, 0x0, 0x9, 0x0, 0xd, 0x5, 0x5, 0x9, 0x80000001, 0x6, 0x72, 0x3, 0x6b, 0xaa, 0x6a52, 0xd, 0xa, 0x8000, 0x9, 0x3, 0x100, 0x100, 0x10001, 0xff, 0x3, 0x1, 0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x0, 0x5, 0x7, 0xc8d8, 0xe8e0, 0x2, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x401, 0x8, 0x7ff80000, 0xffffff26, 0x4, 0xfffff001, 0x3, 0x0, 0x38a34425, 0xfffffc00, 0x1, 0x9bc6, 0x6, 0xb0, 0x3, 0x1, 0x6, 0xe, 0x6, 0x145e, 0x8000, 0x1, 0x9, 0x3, 0x7, 0x9, 0x5, 0xfffffffe, 0x101, 0x3, 0x8, 0x3, 0x7fffffff, 0x3ff, 0x7, 0x2aa, 0x2, 0x3, 0xd, 0x1ff, 0x0, 0x5, 0x5, 0x4, 0x2a, 0x8dc, 0x0, 0x7, 0x5, 0xffffffff, 0x6dd6, 0x5, 0xfffffff9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 2.150490012s ago: executing program 1 (id=9151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x1bbbae006, 0x14000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close(r1) 2.149390523s ago: executing program 4 (id=9152): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newpolicy={0x144, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@ipv4}]}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000140)={0xccefb9fedd81d790, 0x10, 0x5, {0x5, 0x4ffd271b2776e994, "747f98"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.662598645s ago: executing program 1 (id=9153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x858, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6a}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x25}, @TCA_ROUTE4_POLICE={0x830, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x4, 0xffff, 0x3, 0x3ff, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x5, 0x6d, 0x7, 0x92, 0x9, 0x9, 0xf489, 0x2, 0x9, 0x8, 0x5, 0x1, 0xddbe, 0x8, 0x6, 0x7, 0x2, 0x5, 0x9, 0x2, 0x7, 0x5, 0xf, 0x3, 0xd1e, 0xffff, 0x6, 0x6, 0xfff00000, 0x5, 0x6, 0x8, 0x4, 0x9, 0x7f, 0xce, 0x0, 0xfffffffe, 0x101, 0x9, 0x7, 0x5, 0x3, 0x2, 0x5, 0x0, 0x6, 0x110550f8, 0x4, 0x4, 0xffff1253, 0x80, 0x80, 0x800, 0x5a, 0x10000, 0x200, 0x7, 0x69e, 0x7fffffff, 0x7, 0x9, 0x0, 0x4, 0x2, 0x800, 0x3, 0x0, 0xfff, 0x7, 0x0, 0x5, 0x15c, 0x9, 0x4, 0xffff, 0xe, 0x7, 0x2, 0xbde0, 0x3, 0x400, 0x81, 0xfffffff2, 0x3, 0x60000, 0x764a, 0x1, 0x10001, 0x7, 0xfffffff9, 0x5, 0xff, 0x8, 0xfff, 0x3, 0x60, 0x1000, 0x9, 0x6, 0x1, 0x3, 0xe80, 0x2f17, 0x5, 0x7fffffff, 0x2, 0x37b1c6c1, 0x5ccd, 0xe, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x1, 0xff42, 0xca, 0x2, 0xfffffff2, 0x4, 0x7, 0x200, 0x200, 0xffffffff, 0xf, 0x8, 0x2b1e, 0x10000, 0x6, 0x80, 0x6, 0x0, 0x81, 0x200, 0x8001, 0x200, 0x7, 0x6, 0x2, 0x401, 0xff, 0xffffff5a, 0x80, 0x4, 0x3, 0x448, 0x8, 0x7ff, 0x3, 0x5, 0xfffffc00, 0xe, 0x1000, 0x2, 0x7ff, 0xfffffff7, 0x7fff, 0x3, 0xd7, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x101, 0x36, 0x4, 0x929, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7, 0xb, 0x100, 0x7f, 0x10, 0x6, 0x240, 0x6, 0x5, 0xf, 0x0, 0xffff, 0x0, 0x8, 0x5, 0x4, 0x2, 0x9, 0x3, 0x9d, 0x7, 0x1, 0x1, 0x5, 0x7fff, 0x6, 0x140000, 0x1, 0x5ca, 0xffffffff, 0x5, 0xffff, 0x2, 0x7, 0x10, 0xffffff81, 0x9, 0x5, 0x6, 0x5, 0xffffff01, 0xd, 0x2, 0xfffffffd, 0x1000, 0x2, 0x7, 0x1, 0x5, 0x44c, 0x2ac, 0x24f1, 0x8, 0x0, 0x2, 0x8, 0x8, 0x1, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ff, 0x8, 0x2, 0x6, 0x7fff, 0x5, 0x1000, 0x8d, 0x0, 0x3ad1, 0x80000001, 0xffffffff, 0x401, 0x180, 0x0, 0x8000, 0x4, 0x400, 0x1, 0x5, 0x8, 0x3, 0x9, 0x3, 0x4, 0x2, 0x1ff, 0xff, 0x8, 0x5, 0x9, 0x4, 0x8, 0x3, 0x2b, 0x10001, 0x6, 0x4c, 0x4, 0x5, 0x4, 0xfffffffc, 0x80000000, 0x4, 0x10, 0x3, 0xbc7b, 0x8001, 0x6, 0x1, 0xfffffffa, 0x4, 0x14a, 0x7, 0x5, 0x1, 0x5, 0x9, 0x7, 0x10000, 0x3, 0x7, 0xa0000000, 0x200, 0xf98, 0x2, 0x6, 0x6, 0x682, 0x7, 0x7, 0x6d6, 0xb, 0x0, 0x20000000, 0x4, 0x80, 0x4, 0x2, 0x800, 0x0, 0x9, 0x6, 0x22, 0x8000, 0x40, 0x6, 0x0, 0x3ff, 0x4, 0x10001, 0x0, 0x0, 0x6ed2, 0x8, 0xc, 0x2, 0x800, 0x6, 0x6, 0x99a, 0x17, 0x9, 0xfffffffa, 0x0, 0xc, 0xffffffff, 0x10001, 0x400, 0x3ff, 0x3, 0x1, 0x3, 0xc67, 0x9, 0x0, 0x8, 0x5, 0x4, 0x2, 0x7fffffff, 0x9, 0x1ff, 0x5, 0x3, 0x6, 0x100, 0x80, 0x9, 0x2, 0x4e24, 0xd, 0x7, 0x6, 0x6, 0x8, 0xd337, 0x1000, 0xfff, 0x774, 0x3f5818ba, 0x80000001, 0x9, 0x6, 0x80000001, 0x101, 0x1000, 0x4151, 0xfff, 0xb861, 0x0, 0x9, 0xfffffff8, 0x2, 0x100, 0x6, 0x5, 0x3, 0x3, 0x4, 0x3ba, 0x0, 0x9, 0x0, 0xd, 0x5, 0x5, 0x9, 0x80000001, 0x6, 0x72, 0x3, 0x6b, 0xaa, 0x6a52, 0xd, 0xa, 0x8000, 0x9, 0x3, 0x100, 0x100, 0x10001, 0xff, 0x3, 0x1, 0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x0, 0x5, 0x7, 0xc8d8, 0xe8e0, 0x2, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x401, 0x8, 0x7ff80000, 0xffffff26, 0x4, 0xfffff001, 0x3, 0x0, 0x38a34425, 0xfffffc00, 0x1, 0x9bc6, 0x6, 0xb0, 0x3, 0x1, 0x6, 0xe, 0x6, 0x145e, 0x8000, 0x1, 0x9, 0x3, 0x7, 0x9, 0x5, 0xfffffffe, 0x101, 0x3, 0x8, 0x3, 0x7fffffff, 0x3ff, 0x7, 0x2aa, 0x2, 0x3, 0xd, 0x1ff, 0x0, 0x5, 0x5, 0x4, 0x2a, 0x8dc, 0x0, 0x7, 0x5, 0xffffffff, 0x6dd6, 0x5, 0xfffffff9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 621.225594ms ago: executing program 0 (id=9154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000f9080601020000000000000000020000000900020073797a3100000000050001000700000020000780060004404e21000005000700880000000c00018008000140ffffffff628283af9c44eae5927e729edd4cb35d9ab840bf57820468ec609a422450518e18"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x858, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6a}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x25}, @TCA_ROUTE4_POLICE={0x830, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x4, 0xffff, 0x3, 0x3ff, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x3, 0x7, 0x1, 0x9, 0x0, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x5, 0x6d, 0x7, 0x92, 0x9, 0x9, 0xf489, 0x2, 0x9, 0x8, 0x5, 0x1, 0xddbe, 0x8, 0x6, 0x7, 0x2, 0x5, 0x9, 0x2, 0x7, 0x5, 0xf, 0x3, 0xd1e, 0xffff, 0x6, 0x6, 0xfff00000, 0x5, 0x6, 0x8, 0x4, 0x9, 0x7f, 0xce, 0x0, 0xfffffffe, 0x101, 0x9, 0x7, 0x5, 0x3, 0x2, 0x5, 0x0, 0x6, 0x110550f8, 0x4, 0x4, 0xffff1253, 0x80, 0x80, 0x800, 0x5a, 0x10000, 0x200, 0x7, 0x69e, 0x7fffffff, 0x7, 0x9, 0x0, 0x4, 0x2, 0x800, 0x3, 0x0, 0xfff, 0x7, 0x0, 0x5, 0x15c, 0x9, 0x4, 0xffff, 0xe, 0x7, 0x2, 0xbde0, 0x3, 0x400, 0x81, 0xfffffff2, 0x3, 0x60000, 0x764a, 0x1, 0x10001, 0x7, 0xfffffff9, 0x5, 0xff, 0x8, 0xfff, 0x3, 0x60, 0x1000, 0x9, 0x6, 0x1, 0x3, 0xe80, 0x2f17, 0x5, 0x7fffffff, 0x2, 0x37b1c6c1, 0x5ccd, 0xe, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x1, 0xff42, 0xca, 0x2, 0xfffffff2, 0x4, 0x7, 0x200, 0x200, 0xffffffff, 0xf, 0x8, 0x2b1e, 0x10000, 0x6, 0x80, 0x6, 0x0, 0x81, 0x200, 0x8001, 0x200, 0x7, 0x6, 0x2, 0x401, 0xff, 0xffffff5a, 0x80, 0x4, 0x3, 0x448, 0x8, 0x7ff, 0x3, 0x5, 0xfffffc00, 0xe, 0x1000, 0x2, 0x7ff, 0xfffffff7, 0x7fff, 0x3, 0xd7, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x101, 0x36, 0x4, 0x929, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7, 0xb, 0x100, 0x7f, 0x10, 0x6, 0x240, 0x6, 0x5, 0xf, 0x0, 0xffff, 0x0, 0x8, 0x5, 0x4, 0x2, 0x9, 0x3, 0x9d, 0x7, 0x1, 0x1, 0x5, 0x7fff, 0x6, 0x140000, 0x1, 0x5ca, 0xffffffff, 0x5, 0xffff, 0x2, 0x7, 0x10, 0xffffff81, 0x9, 0x5, 0x6, 0x5, 0xffffff01, 0xd, 0x2, 0xfffffffd, 0x1000, 0x2, 0x7, 0x1, 0x5, 0x44c, 0x2ac, 0x24f1, 0x8, 0x0, 0x2, 0x8, 0x8, 0x1, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7ff, 0x8, 0x2, 0x6, 0x7fff, 0x5, 0x1000, 0x8d, 0x0, 0x3ad1, 0x80000001, 0xffffffff, 0x401, 0x180, 0x0, 0x8000, 0x4, 0x400, 0x1, 0x5, 0x8, 0x3, 0x9, 0x3, 0x4, 0x2, 0x1ff, 0xff, 0x8, 0x5, 0x9, 0x4, 0x8, 0x3, 0x2b, 0x10001, 0x6, 0x4c, 0x4, 0x5, 0x4, 0xfffffffc, 0x80000000, 0x4, 0x10, 0x3, 0xbc7b, 0x8001, 0x6, 0x1, 0xfffffffa, 0x4, 0x14a, 0x7, 0x5, 0x1, 0x5, 0x9, 0x7, 0x10000, 0x3, 0x7, 0xa0000000, 0x200, 0xf98, 0x2, 0x6, 0x6, 0x682, 0x7, 0x7, 0x6d6, 0xb, 0x0, 0x20000000, 0x4, 0x80, 0x4, 0x2, 0x800, 0x0, 0x9, 0x6, 0x22, 0x8000, 0x40, 0x6, 0x0, 0x3ff, 0x4, 0x10001, 0x0, 0x0, 0x6ed2, 0x8, 0xc, 0x2, 0x800, 0x6, 0x6, 0x99a, 0x17, 0x9, 0xfffffffa, 0x0, 0xc, 0xffffffff, 0x10001, 0x400, 0x3ff, 0x3, 0x1, 0x3, 0xc67, 0x9, 0x0, 0x8, 0x5, 0x4, 0x2, 0x7fffffff, 0x9, 0x1ff, 0x5, 0x3, 0x6, 0x100, 0x80, 0x9, 0x2, 0x4e24, 0xd, 0x7, 0x6, 0x6, 0x8, 0xd337, 0x1000, 0xfff, 0x774, 0x3f5818ba, 0x80000001, 0x9, 0x6, 0x80000001, 0x101, 0x1000, 0x4151, 0xfff, 0xb861, 0x0, 0x9, 0xfffffff8, 0x2, 0x100, 0x6, 0x5, 0x3, 0x3, 0x4, 0x3ba, 0x0, 0x9, 0x0, 0xd, 0x5, 0x5, 0x9, 0x80000001, 0x6, 0x72, 0x3, 0x6b, 0xaa, 0x6a52, 0xd, 0xa, 0x8000, 0x9, 0x3, 0x100, 0x100, 0x10001, 0xff, 0x3, 0x1, 0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x0, 0x5, 0x7, 0xc8d8, 0xe8e0, 0x2, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x401, 0x8, 0x7ff80000, 0xffffff26, 0x4, 0xfffff001, 0x3, 0x0, 0x38a34425, 0xfffffc00, 0x1, 0x9bc6, 0x6, 0xb0, 0x3, 0x1, 0x6, 0xe, 0x6, 0x145e, 0x8000, 0x1, 0x9, 0x3, 0x7, 0x9, 0x5, 0xfffffffe, 0x101, 0x3, 0x8, 0x3, 0x7fffffff, 0x3ff, 0x7, 0x2aa, 0x2, 0x3, 0xd, 0x1ff, 0x0, 0x5, 0x5, 0x4, 0x2a, 0x8dc, 0x0, 0x7, 0x5, 0xffffffff, 0x6dd6, 0x5, 0xfffffff9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 545.683215ms ago: executing program 2 (id=9155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 293.103506ms ago: executing program 5 (id=9156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r8]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r8]) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x47, 0x2482) r10 = openat$autofs(0xffffff9c, 0x0, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$EVIOCGPROP(r9, 0x40044582, &(0x7f0000000140)=""/36) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f00000000c0)={'pimreg0\x00', {0x2, 0x4e24, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 0s ago: executing program 1 (id=9157): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): ] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3509.963569][ T4441] microsoft 0003:045E:07DA.0073: no inputs found [ 3509.985817][ T4441] microsoft 0003:045E:07DA.0073: could not initialize ff, continuing anyway [ 3510.041228][ T4441] usb 1-1: USB disconnect, device number 106 [ 3510.694617][ T4441] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3510.886207][ T4441] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 3510.984020][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3510.996817][ T4441] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 3511.029072][ T4441] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 3511.070401][ T4441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3511.320669][ T4441] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 3511.558248][ T4441] gspca_sn9c2028: read1 error -32 [ 3511.570544][ T4441] gspca_sn9c2028: read1 error -32 [ 3511.831776][ T3722] usb 2-1: USB disconnect, device number 36 [ 3512.023894][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3512.260494][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.267450][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.751314][ T5887] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3512.773044][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8440'. [ 3512.935781][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 3512.955417][T10422] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8442'. [ 3512.983062][ T5887] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3513.001071][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3513.042214][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3513.054033][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3513.073446][ T5887] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3513.132009][ T5887] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3513.160993][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3513.444517][ T5887] usb 3-1: GET_CAPABILITIES returned 0 [ 3513.477645][ T5887] usbtmc 3-1:16.0: can't read capabilities [ 3513.656773][ T3722] usb 3-1: USB disconnect, device number 60 [ 3514.103884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3514.159264][T10441] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 3514.179059][T10441] Cannot create hsr debugfs directory [ 3514.234834][T10441] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 3514.446679][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8450'. [ 3514.804682][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8449'. [ 3515.134020][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3515.494938][T10460] macsec0: left promiscuous mode [ 3515.500069][T10460] macsec0: left allmulticast mode [ 3516.143693][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8455'. [ 3516.173939][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3517.214192][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3517.516342][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8458'. [ 3518.263895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3518.765086][T10496] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 3519.153868][ T9629] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 3519.294029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3519.545395][ T9629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3519.555395][ T9629] usb 1-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.00 [ 3519.573694][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3519.594801][ T9629] usb 1-1: config 0 descriptor?? [ 3520.333928][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3520.599253][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8468'. [ 3520.693477][ T9629] hid-generic 0003:18D1:5044.0074: unbalanced collection at end of report description [ 3520.734602][ T9629] hid-generic 0003:18D1:5044.0074: probe with driver hid-generic failed with error -22 [ 3521.054629][ T9629] usb 1-1: USB disconnect, device number 107 [ 3521.291957][T10526] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8470'. [ 3521.374208][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3521.433186][T10529] vlan2: entered allmulticast mode [ 3521.458567][T10529] bridge_slave_1: entered allmulticast mode [ 3521.840352][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8474'. [ 3522.414243][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3523.454241][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3524.057928][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.108768][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.130938][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.144747][ T4441] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 3524.163352][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.180398][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.204645][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.223256][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8487'. [ 3524.367001][ T4441] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 3524.384516][ T4441] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3524.419588][ T4441] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 3524.449613][ T4441] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 3524.493925][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3524.514481][ T4441] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3524.554451][ T4441] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3524.600789][ T4441] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3524.634673][ T4441] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3524.669888][ T4441] usb 6-1: Product: syz [ 3524.685037][ T4441] usb 6-1: Manufacturer: syz [ 3524.689708][ T4441] usb 6-1: SerialNumber: syz [ 3524.741356][ T4441] usb 6-1: config 0 descriptor?? [ 3524.750926][T10575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3524.782655][ T4441] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3524.827177][ T4441] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3525.373569][ T4441] usb 6-1: USB disconnect, device number 14 [ 3525.382701][ T4441] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 3525.534684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3525.652922][T10609] __nla_validate_parse: 8 callbacks suppressed [ 3525.652944][T10609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8500'. [ 3526.334660][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 3526.334676][ T30] audit: type=1326 audit(1745668955.884:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3526.448662][ T30] audit: type=1326 audit(1745668955.884:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3526.454691][T10634] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8509' sets config #0 [ 3526.573872][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3526.716632][ T30] audit: type=1326 audit(1745668955.944:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3526.766246][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8510'. [ 3526.773486][ T30] audit: type=1326 audit(1745668955.944:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3526.904668][T10638] netlink: 'syz.0.8510': attribute type 9 has an invalid length. [ 3526.978521][ T30] audit: type=1326 audit(1745668955.954:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.032305][ T30] audit: type=1326 audit(1745668955.954:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.136050][ T30] audit: type=1326 audit(1745668955.954:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.198507][ T30] audit: type=1326 audit(1745668955.954:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.274567][ T30] audit: type=1326 audit(1745668955.954:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.323953][ T30] audit: type=1326 audit(1745668955.994:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 3527.366353][ T4441] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 3527.532282][ T4441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3527.554313][ T4441] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3527.579291][ T4441] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3527.595222][ T4441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3527.614110][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3527.633435][ T4441] usb 1-1: SerialNumber: syz [ 3527.917963][ T4441] usb 1-1: 0:2 : does not exist [ 3528.070758][ T4441] usb 1-1: USB disconnect, device number 108 [ 3528.663867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3528.789490][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8517'. [ 3529.704028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3530.109714][T10682] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3530.528616][ T5887] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 3530.609386][ T4441] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 3530.743943][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3530.751838][ T5887] usb 1-1: device descriptor read/64, error -71 [ 3530.831293][ T4441] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3530.845611][ T4441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3530.859122][ T4441] usb 3-1: config 0 descriptor?? [ 3530.994595][ T5887] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 3531.134594][ T5887] usb 1-1: device descriptor read/64, error -71 [ 3531.247597][ T5887] usb usb1-port1: attempt power cycle [ 3531.269622][T10696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3531.276952][T10696] IPv6: NLM_F_CREATE should be set when creating new route [ 3531.284309][T10696] IPv6: NLM_F_CREATE should be set when creating new route [ 3531.428323][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8529'. [ 3531.595371][ T5887] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 3531.625633][ T5887] usb 1-1: device descriptor read/8, error -71 [ 3531.774118][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3531.866851][ T5887] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 3531.894628][ T978] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3531.903467][ T5887] usb 1-1: device descriptor read/8, error -71 [ 3531.941264][ T4441] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 3531.966734][ T4441] usb 3-1: USB disconnect, device number 61 [ 3532.014600][ T5887] usb usb1-port1: unable to enumerate USB device [ 3532.055989][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3532.073511][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3532.096350][ T978] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3532.108175][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3532.123555][ T978] usb 2-1: SerialNumber: syz [ 3532.346000][ T978] usb 2-1: 0:2 : does not exist [ 3532.411576][ T978] usb 2-1: USB disconnect, device number 37 [ 3532.813904][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3533.374459][T10727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3533.423000][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8537'. [ 3533.854474][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3534.893890][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3535.493394][T10760] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3535.934084][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3536.493177][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8553'. [ 3536.618322][T10771] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3536.627388][T10771] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3536.636569][T10771] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3536.645436][T10771] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3536.690130][T10771] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3536.699723][T10771] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3536.709802][T10771] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3536.718979][T10771] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3536.973869][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3537.342258][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8554'. [ 3538.014071][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3538.649419][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8561'. [ 3538.973319][T10800] macvlan6: entered promiscuous mode [ 3539.014965][T10800] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 3539.063996][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3539.888413][ T9629] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 3540.104095][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3540.144592][ T9629] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 3540.152726][ T9629] usb 2-1: config 0 has no interface number 0 [ 3540.161751][ T9629] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3540.173099][ T9629] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3540.243864][ T9629] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3540.313830][ T9629] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3540.343681][ T9629] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3540.394833][ T9629] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3540.430211][ T9629] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3540.511191][ T9629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3540.560398][ T9629] usb 2-1: config 0 descriptor?? [ 3540.597086][T10815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3540.617412][T10815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3540.647884][ T9629] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3540.794541][ T978] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 3540.849872][ T3722] usb 2-1: USB disconnect, device number 38 [ 3540.858384][ T3722] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 3540.945763][ T978] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 3540.954910][ T978] usb 1-1: config 179 has no interface number 0 [ 3540.974677][ T978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 3540.990489][ T978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3541.001232][ T978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 3541.013250][ T978] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 3541.030041][ T978] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3541.038622][ T9629] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3541.044527][ T978] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3541.063515][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3541.103088][T10827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3541.133873][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3541.159507][ T978] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3541.197968][ T978] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 3541.214100][ T9629] usb 6-1: device descriptor read/64, error -71 [ 3541.329144][ T978] usb 1-1: USB disconnect, device number 113 [ 3541.484041][ T9629] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3541.646432][ T9629] usb 6-1: device descriptor read/64, error -71 [ 3541.744415][ T4441] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3541.786824][ T9629] usb usb6-port1: attempt power cycle [ 3541.896319][ T4441] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3541.915604][ T4441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3541.928333][ T4441] usb 2-1: config 0 descriptor?? [ 3541.944739][ T4441] cp210x 2-1:0.0: cp210x converter detected [ 3542.155664][ T9629] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3542.173986][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3542.219079][ T9629] usb 6-1: device descriptor read/8, error -71 [ 3542.317605][T10845] bond0: Device is already in use. [ 3542.355329][ T4441] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 3542.484703][ T9629] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3542.517976][ T9629] usb 6-1: device descriptor read/8, error -71 [ 3542.589926][ T4441] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3542.789527][ T3722] usb 2-1: USB disconnect, device number 39 [ 3542.802335][ T9629] usb usb6-port1: unable to enumerate USB device [ 3542.817199][ T3722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3542.948982][ T3722] cp210x 2-1:0.0: device disconnected [ 3543.223874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3544.254095][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3545.303922][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3545.604312][ T978] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3545.814747][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 3545.823899][ T978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3545.835789][ T978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3545.850302][ T978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3545.858736][ T978] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 3545.870009][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3545.898137][ T978] usb 6-1: config 0 descriptor?? [ 3546.331530][ T978] hid (null): report_id 11059 is invalid [ 3546.334102][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3546.338423][ T978] hid (null): unknown global tag 0xfa [ 3546.362420][ T978] cougar 0003:060B:500A.0075: usage count exceeds max: fixing up report descriptor [ 3546.390168][ T978] cougar 0003:060B:500A.0075: unexpected long global item [ 3546.411356][ T978] cougar 0003:060B:500A.0075: parse failed [ 3546.424035][ T978] cougar 0003:060B:500A.0075: probe with driver cougar failed with error -22 [ 3546.488998][ T3722] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3546.580421][ T978] usb 6-1: USB disconnect, device number 19 [ 3546.642117][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8595'. [ 3546.722942][ T3722] usb 1-1: Using ep0 maxpacket: 32 [ 3546.739926][ T3722] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 3546.767519][ T3722] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3546.780033][ T3722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3547.085038][T10908] syzkaller1: entered promiscuous mode [ 3547.100821][T10908] syzkaller1: entered allmulticast mode [ 3547.124473][ T3722] usb 1-1: config 1 has no interface number 0 [ 3547.130639][ T3722] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3547.309354][ T3722] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3547.374157][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3547.381680][ T3722] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3547.390905][ T3722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3547.438104][ T3722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 3547.642121][ T3722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 3548.414111][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3548.594247][ T3722] usb 1-1: USB disconnect, device number 114 [ 3548.628264][ T3722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 3548.813530][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3548.813544][ T30] audit: type=1326 audit(1745668978.364:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.4.8600" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 3549.104617][ T30] audit: type=1326 audit(1745668978.654:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.129613][ T30] audit: type=1326 audit(1745668978.654:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.234722][ T30] audit: type=1326 audit(1745668978.654:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.306838][ T30] audit: type=1326 audit(1745668978.654:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.334525][ T978] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3549.453883][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3549.490565][ T30] audit: type=1326 audit(1745668978.654:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.582975][ T978] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 3549.601133][ T978] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3549.623426][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3549.639700][ T30] audit: type=1326 audit(1745668978.654:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.686338][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3549.712531][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3549.728724][ T30] audit: type=1326 audit(1745668978.764:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.760919][ T978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3549.804435][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3549.812779][ T30] audit: type=1326 audit(1745668978.834:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3549.886720][ T978] usb 3-1: config 0 descriptor?? [ 3549.901432][T10930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3549.976809][ T30] audit: type=1326 audit(1745668978.894:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.2.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3550.366510][ T978] plantronics 0003:047F:FFFF.0076: item fetching failed at offset 14/15 [ 3550.395115][ T978] plantronics 0003:047F:FFFF.0076: parse failed [ 3550.424363][ T978] plantronics 0003:047F:FFFF.0076: probe with driver plantronics failed with error -22 [ 3550.494012][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3550.588538][ T9629] usb 3-1: USB disconnect, device number 62 [ 3550.724344][ T3722] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 3550.886514][ T3722] usb 1-1: Using ep0 maxpacket: 8 [ 3550.897272][ T3722] usb 1-1: config 0 has no interfaces? [ 3550.911633][ T3722] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 3550.922137][ T3722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3550.936250][ T3722] usb 1-1: Product: syz [ 3550.940631][ T3722] usb 1-1: Manufacturer: syz [ 3550.947949][ T3722] usb 1-1: SerialNumber: syz [ 3550.957741][ T3722] usb 1-1: config 0 descriptor?? [ 3551.063915][ T9629] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3551.183621][ T3722] usb 1-1: USB disconnect, device number 115 [ 3551.217265][ T9629] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 3551.226442][ T9629] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3551.367528][ T9629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3551.382819][ T9629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3551.399609][ T9629] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3551.413482][ T9629] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3551.461913][ T9629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3551.480985][ T9629] usb 2-1: config 0 descriptor?? [ 3551.491194][T10950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3551.533925][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3551.970347][ T9629] plantronics 0003:047F:FFFF.0077: item fetching failed at offset 14/15 [ 3551.984802][ T9629] plantronics 0003:047F:FFFF.0077: parse failed [ 3552.005736][ T9629] plantronics 0003:047F:FFFF.0077: probe with driver plantronics failed with error -22 [ 3552.371490][ T9629] usb 2-1: USB disconnect, device number 40 [ 3552.384722][ T978] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3552.394368][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8615'. [ 3552.574010][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3552.747231][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 3552.757959][ T978] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3552.766974][ T978] usb 6-1: config 0 has no interface number 0 [ 3552.773326][ T978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3552.794461][ T978] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3552.867998][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3552.932612][ T978] usb 6-1: config 0 descriptor?? [ 3553.065317][ T978] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3553.328989][T10982] vcan0: tx address claim with different name [ 3553.613865][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3554.197241][ T978] usb 6-1: USB disconnect, device number 20 [ 3554.554352][ T9629] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3554.584154][ T3722] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3554.604393][ T4441] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3554.654057][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3554.706953][ T9629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3554.744407][ T9629] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x45, changing to 0x5 [ 3554.759424][ T3722] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 3554.765339][ T4441] usb 3-1: Using ep0 maxpacket: 16 [ 3554.767998][ T3722] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3554.777853][ T4441] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 3554.785821][ T9629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 3554.806527][ T3722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3554.819130][ T9629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 50512, setting to 1024 [ 3554.823438][ T4441] usb 3-1: config 0 has no interface number 0 [ 3554.852289][ T3722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3554.872940][ T3722] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3554.891422][ T9629] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3554.901205][ T9629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3554.913290][ T3722] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3554.930194][ T9629] usb 1-1: Product: syz [ 3554.933634][ T4441] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 3554.935369][ T9629] usb 1-1: Manufacturer: syz [ 3554.949482][ T3722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3554.960979][ T3722] usb 2-1: config 0 descriptor?? [ 3554.978193][ T9629] usb 1-1: SerialNumber: syz [ 3554.984445][ T4441] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 3554.998361][T10997] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3555.025658][ T4441] usb 3-1: config 0 interface 41 has no altsetting 0 [ 3555.044856][ T4441] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 3555.055701][ T4441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3555.068142][ T4441] usb 3-1: Product: syz [ 3555.072371][ T4441] usb 3-1: Manufacturer: syz [ 3555.078299][ T4441] usb 3-1: SerialNumber: syz [ 3555.089058][ T4441] usb 3-1: config 0 descriptor?? [ 3555.096063][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.103550][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.322178][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.333113][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.437660][ T3722] plantronics 0003:047F:FFFF.0078: item fetching failed at offset 14/15 [ 3555.463328][ T3722] plantronics 0003:047F:FFFF.0078: parse failed [ 3555.471259][ T3722] plantronics 0003:047F:FFFF.0078: probe with driver plantronics failed with error -22 [ 3555.642720][ T5887] usb 2-1: USB disconnect, device number 41 [ 3555.693894][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3555.748002][ T4441] Error reading MAC address [ 3555.755115][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.770270][T11002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3555.987685][ T4441] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 3556.007257][ T4441] usb 3-1: USB disconnect, device number 63 [ 3556.017477][ T9629] cdc_ncm 1-1:1.0: bind() failure [ 3556.051376][ T9629] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 3556.088536][ T9629] usb 1-1: USB disconnect, device number 116 [ 3556.734020][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3557.773888][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3558.804795][ T4441] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3558.813985][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3558.903902][ T3722] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3558.966454][ T4441] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 3558.987865][ T4441] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3559.024587][ T4441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3559.044640][ T4441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3559.066308][ T3722] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3559.070896][ T4441] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3559.102327][ T4441] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3559.104770][ T3722] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3559.117900][ T4441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3559.143273][ T3722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3559.160855][ T4441] usb 1-1: config 0 descriptor?? [ 3559.171535][T11054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3559.182052][ T3722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3559.209545][ T3722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3559.236843][ T3722] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3559.358774][ T3722] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3559.381476][ T3722] usb 2-1: Product: syz [ 3559.391712][ T3722] usb 2-1: Manufacturer: syz [ 3559.412045][ T3722] cdc_wdm 2-1:1.0: skipping garbage [ 3559.419471][ T3722] cdc_wdm 2-1:1.0: skipping garbage [ 3559.448715][ T3722] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3559.464974][ T3722] cdc_wdm 2-1:1.0: Unknown control protocol [ 3559.564633][ T978] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3559.605891][ T4441] plantronics 0003:047F:FFFF.0079: item fetching failed at offset 14/15 [ 3559.641135][ T4441] plantronics 0003:047F:FFFF.0079: parse failed [ 3559.649921][ T5887] usb 2-1: USB disconnect, device number 42 [ 3559.661070][ T4441] plantronics 0003:047F:FFFF.0079: probe with driver plantronics failed with error -22 [ 3559.739302][ T978] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 3559.748245][ T978] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3559.829448][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3559.853278][ T3722] usb 1-1: USB disconnect, device number 117 [ 3559.859529][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3559.862005][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3559.909107][ T978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3559.966190][ T978] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3559.983150][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3560.069699][ T978] usb 6-1: config 0 descriptor?? [ 3560.084948][T11075] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3560.500838][ T978] plantronics 0003:047F:FFFF.007A: item fetching failed at offset 14/15 [ 3560.535434][ T978] plantronics 0003:047F:FFFF.007A: parse failed [ 3560.546423][ T978] plantronics 0003:047F:FFFF.007A: probe with driver plantronics failed with error -22 [ 3560.727814][ T4441] usb 6-1: USB disconnect, device number 21 [ 3560.744489][ T978] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3560.872164][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8659'. [ 3560.894162][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3560.992412][ T5887] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3561.024440][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 3561.031174][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3561.045054][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3561.064807][ T978] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3561.085033][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3561.106613][ T978] usb 2-1: config 0 descriptor?? [ 3561.164462][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 3561.172000][ T5887] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 3561.181844][ T5887] usb 3-1: config 0 has no interface number 0 [ 3561.198224][ T5887] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 3561.208618][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3561.217994][ T5887] usb 3-1: Product: syz [ 3561.222868][ T5887] usb 3-1: Manufacturer: syz [ 3561.228344][ T5887] usb 3-1: SerialNumber: syz [ 3561.250615][ T5887] usb 3-1: config 0 descriptor?? [ 3561.478997][ T3722] usb 3-1: USB disconnect, device number 64 [ 3561.543016][ T978] savu 0003:1E7D:2D5A.007B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 3561.786982][ T5887] usb 2-1: USB disconnect, device number 43 [ 3561.933926][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3562.983941][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3563.534597][ T978] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3563.705820][ T978] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 3563.714773][ T978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3563.755741][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3563.786522][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3563.803999][ T3722] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3563.824460][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3563.882843][ T978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3563.944584][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3563.960575][ T978] usb 1-1: config 0 descriptor?? [ 3563.975282][T11129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3564.009589][ T3722] usb 3-1: Using ep0 maxpacket: 8 [ 3564.014921][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3564.033188][ T3722] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 3564.074010][ T3722] usb 3-1: config 0 has no interface number 0 [ 3564.081511][ T3722] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3564.103598][ T3722] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3564.115149][ T3722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3564.139834][ T3722] usb 3-1: config 0 descriptor?? [ 3564.156369][ T3722] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3564.398046][ T978] plantronics 0003:047F:FFFF.007C: item fetching failed at offset 14/15 [ 3564.411975][ T978] plantronics 0003:047F:FFFF.007C: parse failed [ 3564.420082][ T3722] usb 3-1: USB disconnect, device number 65 [ 3564.423400][ T978] plantronics 0003:047F:FFFF.007C: probe with driver plantronics failed with error -22 [ 3564.496510][ T5887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3564.516761][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8676'. [ 3564.622810][ T978] usb 1-1: USB disconnect, device number 118 [ 3565.054029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3565.228764][ T5887] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 3565.284398][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3565.297223][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3565.333392][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3565.374923][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3565.395371][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3565.434599][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3565.472212][ T5887] usb 6-1: config 0 descriptor?? [ 3565.524798][T11140] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3565.557358][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8677'. [ 3566.093890][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3566.278908][ T5887] plantronics 0003:047F:FFFF.007D: item fetching failed at offset 14/15 [ 3566.292674][ T5887] plantronics 0003:047F:FFFF.007D: parse failed [ 3566.300100][ T5887] plantronics 0003:047F:FFFF.007D: probe with driver plantronics failed with error -22 [ 3566.491655][ T3722] usb 6-1: USB disconnect, device number 22 [ 3567.134100][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3568.173918][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3568.344155][ T3722] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3568.514139][ T3722] usb 6-1: Using ep0 maxpacket: 16 [ 3568.527090][ T3722] usb 6-1: config 0 has no interfaces? [ 3568.532914][ T3722] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3568.548712][ T3722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3568.677596][ T3722] usb 6-1: config 0 descriptor?? [ 3568.925718][ T5887] usb 6-1: USB disconnect, device number 23 [ 3569.214224][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3569.623267][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8693'. [ 3569.649864][ T5887] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3569.896699][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 3569.928314][ T5887] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3569.953080][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3569.999341][ T5887] usb 1-1: config 0 descriptor?? [ 3570.166106][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8697'. [ 3570.264143][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3570.449673][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3570.742768][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3570.778252][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3570.872363][ T5887] usb 1-1: media controller created [ 3570.967205][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3571.024053][ T3722] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3571.082547][ T5887] az6027: usb out operation failed. (-71) [ 3571.097546][ T5887] az6027: usb out operation failed. (-71) [ 3571.123072][ T5887] stb0899_attach: Driver disabled by Kconfig [ 3571.138183][ T5887] az6027: no front-end attached [ 3571.138183][ T5887] [ 3571.158888][ T5887] az6027: usb out operation failed. (-71) [ 3571.174381][ T3722] usb 2-1: Using ep0 maxpacket: 16 [ 3571.177559][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3571.181800][ T3722] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3571.209393][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input109 [ 3571.221019][ T3722] usb 2-1: config 0 has no interface number 0 [ 3571.221068][ T3722] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3571.221096][ T3722] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3571.221137][ T3722] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3571.221161][ T3722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3571.226895][ T3722] usb 2-1: config 0 descriptor?? [ 3571.294064][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3571.381177][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 3571.401934][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3571.556107][ T5887] usb 1-1: USB disconnect, device number 119 [ 3571.762620][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3572.166989][ T3722] uclogic 0003:28BD:0071.007E: pen parameters not found [ 3572.191920][ T3722] uclogic 0003:28BD:0071.007E: interface is invalid, ignoring [ 3572.334782][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3572.369083][T19755] usb 2-1: USB disconnect, device number 44 [ 3573.107257][T11257] netlink: 'syz.1.8707': attribute type 5 has an invalid length. [ 3573.132179][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8707'. [ 3573.374103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3573.709916][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.716558][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.934231][T19755] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3573.986068][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8710'. [ 3574.270262][T19755] usb 1-1: Using ep0 maxpacket: 32 [ 3574.278589][T19755] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3574.290962][T19755] usb 1-1: config 0 has no interface number 0 [ 3574.299993][T19755] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3574.423875][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3574.427865][T19755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3574.469690][T19755] usb 1-1: Product: syz [ 3574.481439][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8712'. [ 3574.870618][T19755] usb 1-1: Manufacturer: syz [ 3574.880778][T19755] usb 1-1: SerialNumber: syz [ 3575.045213][T19755] usb 1-1: config 0 descriptor?? [ 3575.071189][T19755] smsc95xx v2.0.0 [ 3575.454075][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3576.046167][ T5887] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3576.110340][T19755] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 3576.129904][T19755] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 3576.150608][T19755] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3576.162845][T19755] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3576.177183][T19755] usb 1-1: USB disconnect, device number 120 [ 3576.225608][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3576.266377][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3576.317119][ T5887] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 3576.339301][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3576.376321][ T5887] usb 3-1: config 0 descriptor?? [ 3576.493897][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3576.829470][ T5887] playstation 0003:054C:0DF2.007F: unknown main item tag 0x0 [ 3576.840773][ T5887] playstation 0003:054C:0DF2.007F: unknown main item tag 0x0 [ 3576.856361][ T5887] playstation 0003:054C:0DF2.007F: unknown main item tag 0x0 [ 3576.877804][ T5887] playstation 0003:054C:0DF2.007F: unknown main item tag 0x0 [ 3576.899124][ T5887] playstation 0003:054C:0DF2.007F: unknown main item tag 0x0 [ 3577.001471][ T5887] playstation 0003:054C:0DF2.007F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 3577.095177][ T5887] playstation 0003:054C:0DF2.007F: Invalid reportID received, expected 9 got 0 [ 3577.106637][ T5887] playstation 0003:054C:0DF2.007F: Failed to retrieve DualSense pairing info: -22 [ 3577.144387][ T5887] playstation 0003:054C:0DF2.007F: Failed to get MAC address from DualSense [ 3577.155767][ T5887] playstation 0003:054C:0DF2.007F: Failed to create dualsense. [ 3577.179613][ T5887] playstation 0003:054C:0DF2.007F: probe with driver playstation failed with error -22 [ 3577.346536][ T5887] usb 3-1: USB disconnect, device number 66 [ 3577.534100][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3577.698209][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8724'. [ 3578.583888][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3579.613994][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3579.764814][ T5887] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3579.790693][T11356] netlink: 'syz.0.8738': attribute type 5 has an invalid length. [ 3579.799237][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8738'. [ 3579.926267][ T5887] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3579.954661][ T5887] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3580.002076][T11361] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 3580.032666][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3580.069499][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3580.168337][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3580.217723][ T5887] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3580.228161][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3580.237994][ T5887] usb 6-1: Product: syz [ 3580.242585][ T5887] usb 6-1: Manufacturer: syz [ 3580.259760][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 3580.269118][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 3580.280238][ T5887] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3580.289487][ T5887] cdc_wdm 6-1:1.0: Unknown control protocol [ 3580.654187][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3580.830949][ C1] wdm_int_callback: 10 callbacks suppressed [ 3580.830974][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3580.831674][ T5887] usb 6-1: USB disconnect, device number 24 [ 3580.836923][ C1] wdm_int_callback: 10 callbacks suppressed [ 3580.836941][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3580.836959][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3581.689728][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8750'. [ 3581.704002][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3582.743869][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3583.145281][T11417] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3583.404396][ T5887] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3583.590712][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 3583.610574][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3583.624658][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3583.747581][ T5887] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3583.757474][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3583.770159][ T5887] usb 3-1: Product: syz [ 3583.783946][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3583.788305][ T5887] usb 3-1: Manufacturer: syz [ 3583.796621][ T5887] usb 3-1: SerialNumber: syz [ 3583.933185][ T5887] usb 3-1: config 0 descriptor?? [ 3584.186340][ T5887] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 3584.246147][ T5887] usb 3-1: USB disconnect, device number 67 [ 3584.813906][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3585.074456][ T3722] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 3585.101176][ T3722] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3585.272409][T11456] netlink: 'syz.5.8774': attribute type 1 has an invalid length. [ 3585.663975][ T3722] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3585.826116][ T3722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3585.842297][ T3722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3585.857019][ T3722] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3585.870462][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3585.908339][ T3722] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3585.922356][ T3722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3585.938089][ T3722] usb 6-1: config 0 descriptor?? [ 3585.963032][T11469] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3586.625687][ T3722] plantronics 0003:047F:FFFF.0081: No inputs registered, leaving [ 3586.894173][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3586.939527][ T3722] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3586.982701][ T3722] usb 6-1: USB disconnect, device number 25 [ 3587.715580][T11491] syzkaller1: entered promiscuous mode [ 3587.724306][T11491] syzkaller1: entered allmulticast mode [ 3587.944075][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3588.924588][T11512] lo: entered promiscuous mode [ 3588.935543][T11512] lo: entered allmulticast mode [ 3588.960388][T11511] lo: left allmulticast mode [ 3588.974579][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3589.020134][T11511] lo: left promiscuous mode [ 3589.283860][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8793'. [ 3590.013962][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3590.120337][ T5887] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3590.305187][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 3590.327155][ T5887] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 3590.350376][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3590.411261][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 3590.464403][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3590.554257][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3590.589574][ T5887] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 3590.617737][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3590.687159][ T5887] usb 1-1: Product: syz [ 3590.697362][ T5887] usb 1-1: Manufacturer: syz [ 3590.714437][ T5887] usb 1-1: SerialNumber: syz [ 3590.755142][ T5887] usb 1-1: config 0 descriptor?? [ 3590.777940][ T5887] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 3591.054012][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3591.640763][ T5887] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input110 [ 3591.916934][ T5887] usb 1-1: USB disconnect, device number 121 [ 3592.094164][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3592.478620][T11562] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8808'. [ 3592.663809][ T3722] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3592.874472][ T5887] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3592.932659][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8809'. [ 3593.133947][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3593.134970][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 3593.157216][ T3722] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3593.159625][ T5887] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 3593.174735][ T3722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3593.240184][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3593.250576][ T5887] usb 2-1: Product: syz [ 3593.255721][ T5887] usb 2-1: Manufacturer: syz [ 3593.261895][ T5887] usb 2-1: SerialNumber: syz [ 3593.272723][ T5887] usb 2-1: config 0 descriptor?? [ 3593.279288][ T3722] usb 6-1: config 0 descriptor?? [ 3593.625307][ T5887] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3593.640104][ T5887] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 3593.687038][ T5887] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3593.711154][ T5887] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 3593.749408][ T5887] usb 2-1: USB disconnect, device number 45 [ 3593.875333][ T3722] [drm:udl_init] *ERROR* Selecting channel failed [ 3593.942267][ T3722] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 3593.988934][ T3722] [drm] Initialized udl on minor 2 [ 3594.009916][ T3722] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3594.082830][ T3722] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 3594.130392][ T3722] usb 6-1: USB disconnect, device number 26 [ 3594.139259][ T47] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 3594.174115][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3594.194671][ T47] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 3594.224479][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.268179][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.317901][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.336740][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.356885][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.378061][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.397850][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.418616][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.435695][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.454706][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.473661][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3594.483848][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8815'. [ 3595.223877][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3596.254165][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3596.879785][T11629] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 3596.914752][ T5887] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3597.184640][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 3597.276821][ T5887] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3597.294040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3597.294768][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3597.410368][ T5887] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3597.421037][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3597.431546][ T5887] usb 2-1: Product: syz [ 3597.478865][ T5887] usb 2-1: Manufacturer: syz [ 3597.491771][ T5887] usb 2-1: SerialNumber: syz [ 3597.510943][ T5887] usb 2-1: config 0 descriptor?? [ 3597.529512][ T5887] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 3597.772614][ T5887] usb 2-1: USB disconnect, device number 46 [ 3598.334036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3598.551901][T11663] netlink: 'syz.2.8838': attribute type 5 has an invalid length. [ 3599.373860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3599.644473][ T5887] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3599.793896][ T47] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3599.906722][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3599.923470][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3599.964198][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 3599.969938][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3599.990047][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3599.998526][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3600.008747][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3600.009748][ T47] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3600.040057][ T5887] usb 6-1: config 0 descriptor?? [ 3600.096067][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3600.128220][ T47] usb 3-1: Product: syz [ 3600.132539][ T47] usb 3-1: Manufacturer: syz [ 3600.163099][ T47] usb 3-1: SerialNumber: syz [ 3600.210375][ T47] usb 3-1: config 0 descriptor?? [ 3600.413997][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3600.477066][ T5887] plantronics 0003:047F:FFFF.0082: No inputs registered, leaving [ 3600.687439][ T47] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 3600.882138][ T5887] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3600.951241][ T5887] usb 6-1: USB disconnect, device number 27 [ 3601.379347][ T47] usb 3-1: USB disconnect, device number 68 [ 3601.453875][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3602.095005][T11705] __nla_validate_parse: 22 callbacks suppressed [ 3602.095025][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8853'. [ 3602.133909][ T47] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3602.284123][T11706] lo: entered promiscuous mode [ 3602.298776][T11710] lo: entered allmulticast mode [ 3602.374164][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 3602.382703][T11704] lo: left allmulticast mode [ 3602.390378][ T47] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3602.404732][T11704] lo: left promiscuous mode [ 3602.409382][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3602.494139][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3602.534952][ T47] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3602.544245][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3602.555378][ T47] usb 6-1: Product: syz [ 3602.563470][ T47] usb 6-1: Manufacturer: syz [ 3602.568507][ T47] usb 6-1: SerialNumber: syz [ 3602.805944][ T47] usb 6-1: config 0 descriptor?? [ 3602.818275][ T47] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 3603.034250][ T47] usb 6-1: USB disconnect, device number 28 [ 3603.543850][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3604.574022][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3604.872143][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8864'. [ 3605.244504][ T47] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3605.515243][ T47] usb 6-1: config 0 has no interfaces? [ 3605.520952][ T47] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3605.597204][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3605.613909][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3605.655277][ T47] usb 6-1: config 0 descriptor?? [ 3605.877157][T19755] usb 6-1: USB disconnect, device number 29 [ 3606.105772][T11760] tipc: Enabling of bearer rejected, already enabled [ 3606.574257][ T47] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3606.582758][T19755] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3606.654030][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3606.767743][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 3606.794981][T19755] usb 6-1: Using ep0 maxpacket: 16 [ 3606.822892][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3606.832781][T19755] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3606.834728][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 3606.861250][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3606.868844][T19755] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3606.897460][ T47] usb 1-1: config 0 descriptor?? [ 3606.920377][T19755] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3606.952376][T19755] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3607.041626][T19755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3607.241906][T19755] usb 6-1: config 0 descriptor?? [ 3607.397084][ T47] logitech 0003:046D:CA03.0083: unknown main item tag 0x0 [ 3607.426215][ T47] logitech 0003:046D:CA03.0083: unknown main item tag 0x0 [ 3607.433434][ T47] logitech 0003:046D:CA03.0083: unknown main item tag 0x0 [ 3607.481823][ T47] logitech 0003:046D:CA03.0083: unknown main item tag 0x0 [ 3607.514067][ T47] logitech 0003:046D:CA03.0083: unknown main item tag 0x0 [ 3607.596300][ T47] logitech 0003:046D:CA03.0083: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0 [ 3607.654029][ T47] logitech 0003:046D:CA03.0083: no inputs found [ 3607.693877][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3607.718094][ T47] usb 1-1: USB disconnect, device number 122 [ 3607.859119][T19755] logitech-djreceiver 0003:046D:C71F.0084: hidraw0: USB HID v4.13 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 3608.062018][ T47] usb 6-1: USB disconnect, device number 30 [ 3608.287964][T11781] syzkaller1: entered promiscuous mode [ 3608.305273][T11781] syzkaller1: entered allmulticast mode [ 3608.409753][T11785] syzkaller1: entered promiscuous mode [ 3608.438922][T11785] syzkaller1: entered allmulticast mode [ 3608.734038][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3609.413141][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8880'. [ 3609.624483][ T47] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 3609.773930][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3610.064788][ T47] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 3610.073321][ T47] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3610.094144][ T47] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 3610.143758][ T47] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 3610.213947][ T47] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3610.265869][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3610.319081][ T47] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3610.354543][ T47] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3610.393637][ T47] usb 1-1: Product: syz [ 3610.398364][ T47] usb 1-1: Manufacturer: syz [ 3610.423387][ T47] usb 1-1: SerialNumber: syz [ 3610.444921][ T47] usb 1-1: config 0 descriptor?? [ 3610.471158][T11803] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3610.495915][ T47] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3610.554573][ T47] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3610.814114][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3611.064589][T19755] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3611.238132][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3611.253172][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3611.269122][T19755] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3611.280741][T19755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3611.355291][T19755] usb 2-1: config 0 descriptor?? [ 3611.801027][T19755] cp2112 0003:10C4:EA90.0085: unknown main item tag 0x0 [ 3611.834592][T19755] cp2112 0003:10C4:EA90.0085: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 3611.854206][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3611.999869][T19755] cp2112 0003:10C4:EA90.0085: error requesting version [ 3612.027601][T19755] cp2112 0003:10C4:EA90.0085: probe with driver cp2112 failed with error -71 [ 3612.060381][ T5887] usb 1-1: USB disconnect, device number 123 [ 3612.073452][ T5887] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 3612.128927][T19755] usb 2-1: USB disconnect, device number 47 [ 3612.169287][T11823] netlink: 'syz.5.8886': attribute type 32 has an invalid length. [ 3612.186407][T11823] netlink: 'syz.5.8886': attribute type 32 has an invalid length. [ 3612.894021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3613.037507][T11841] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3613.344042][ T47] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3613.413492][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8893'. [ 3613.563980][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 3613.735533][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3613.774310][ T47] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3613.787833][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3613.796450][ T47] usb 3-1: Product: syz [ 3613.800713][ T47] usb 3-1: Manufacturer: syz [ 3613.870306][ T47] usb 3-1: SerialNumber: syz [ 3613.890898][ T47] usb 3-1: config 0 descriptor?? [ 3613.909013][ T47] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 3613.943862][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3614.135396][ T47] usb 3-1: USB disconnect, device number 69 [ 3614.925623][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8896'. [ 3614.983979][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3615.027104][T11860] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 3615.033726][T11860] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3615.044003][T11860] vhci_hcd vhci_hcd.0: Device attached [ 3615.073413][T11861] vhci_hcd: connection closed [ 3615.076564][ T1087] vhci_hcd: stop threads [ 3615.102556][ T1087] vhci_hcd: release socket [ 3615.114806][ T1087] vhci_hcd: disconnect device [ 3615.510415][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 3615.510434][ T30] audit: type=1326 audit(1745669045.064:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3615.610017][ T30] audit: type=1326 audit(1745669045.064:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3615.742422][ T30] audit: type=1326 audit(1745669045.064:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3615.864357][T19755] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3615.888070][ T30] audit: type=1326 audit(1745669045.064:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3615.940579][ T30] audit: type=1326 audit(1745669045.064:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3616.013841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3616.064876][ T30] audit: type=1326 audit(1745669045.064:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3616.094979][T19755] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 3616.104908][T19755] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3616.198561][T19755] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3616.426518][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8905'. [ 3616.460779][ T30] audit: type=1326 audit(1745669045.064:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3616.505807][T19755] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3616.591335][T19755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3616.604033][ T30] audit: type=1326 audit(1745669045.274:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3616.688508][T19755] usb 3-1: config 0 descriptor?? [ 3616.699318][T19755] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3616.747948][ T30] audit: type=1326 audit(1745669045.364:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3616.813389][ T30] audit: type=1326 audit(1745669045.474:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.2.8902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 3617.054114][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3617.793805][ T47] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3617.964264][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 3617.972669][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 3617.984706][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3618.007881][ T47] usb 2-1: config 0 descriptor?? [ 3618.032868][ T47] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 3618.103848][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3618.584726][ T9629] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3618.623831][ T978] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3618.641926][ T3722] usb 3-1: USB disconnect, device number 70 [ 3618.753954][ T9629] usb 6-1: Using ep0 maxpacket: 32 [ 3618.768707][ T9629] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 3618.779706][ T9629] usb 6-1: config 0 has no interface number 0 [ 3618.790113][ T978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3618.795120][ T9629] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3618.801179][ T978] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3618.816170][ T9629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3618.820012][ T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3618.836261][ T9629] usb 6-1: Product: syz [ 3618.837646][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3618.841019][ T9629] usb 6-1: Manufacturer: syz [ 3618.862419][ T9629] usb 6-1: SerialNumber: syz [ 3618.872826][ T9629] usb 6-1: config 0 descriptor?? [ 3618.887558][ T9629] smsc95xx v2.0.0 [ 3618.914312][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3618.927659][ T978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3618.937955][ T978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3618.951919][ T978] usb 1-1: Product: syz [ 3618.957112][ T978] usb 1-1: Manufacturer: syz [ 3619.011547][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 3619.017723][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 3619.027672][ T978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3619.038022][ T978] cdc_wdm 1-1:1.0: Unknown control protocol [ 3619.046599][ T47] gspca_sonixj: reg_w1 err -71 [ 3619.074358][ T47] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 3619.101359][ T47] usb 2-1: USB disconnect, device number 48 [ 3619.134080][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3619.313566][ T9629] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3619.325307][ T9629] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3619.763290][ T9629] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 3619.822852][ T9629] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 3619.828959][ T978] usb 1-1: USB disconnect, device number 124 [ 3619.888421][ T9629] usb 6-1: USB disconnect, device number 31 [ 3620.031242][T11923] netlink: 'syz.1.8918': attribute type 5 has an invalid length. [ 3620.040610][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8918'. [ 3620.173899][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3621.161335][T11939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3621.223966][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3622.253884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3622.568268][ T978] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3622.704555][T19755] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3622.726404][ T978] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3622.737353][ T978] usb 1-1: config 0 has no interface number 0 [ 3622.751778][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3622.767623][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3622.883535][ T978] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 3622.894970][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3622.908423][ T978] usb 1-1: config 0 descriptor?? [ 3622.917894][T19755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3622.929939][T19755] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3622.982411][T19755] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3623.087347][T19755] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3623.097235][T19755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3623.105771][T19755] usb 6-1: Product: syz [ 3623.110010][T19755] usb 6-1: Manufacturer: syz [ 3623.241263][T19755] usb 6-1: SerialNumber: syz [ 3623.294002][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3623.474740][ T978] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0086/input/input112 [ 3623.523857][ T9629] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3623.636179][ T978] holtek_kbd 0003:04D9:A055.0086: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 3623.669185][ T978] usb 1-1: USB disconnect, device number 125 [ 3623.674053][ T9629] usb 2-1: Using ep0 maxpacket: 16 [ 3623.683380][ T9629] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3623.694976][ T9629] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3623.701733][ T9629] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 3623.711620][ T9629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3623.739140][ T9629] usb 2-1: config 0 descriptor?? [ 3624.171707][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3624.182759][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3624.227167][ T9629] hid (null): global environment stack underflow [ 3624.244710][ T9629] hid (null): global environment stack underflow [ 3624.251930][ T9629] hid (null): unknown global tag 0xd [ 3624.279036][T19755] cdc_ncm 6-1:1.0: bind() failure [ 3624.308202][ T9629] cougar 0003:060B:500A.0087: unexpected long global item [ 3624.308260][T19755] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 3624.332189][T19755] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3624.334054][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3624.344745][T19755] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 3624.348126][ T9629] cougar 0003:060B:500A.0087: parse failed [ 3624.364394][ T9629] cougar 0003:060B:500A.0087: probe with driver cougar failed with error -22 [ 3624.370705][T19755] usb 6-1: USB disconnect, device number 32 [ 3624.477567][ T9629] usb 2-1: USB disconnect, device number 49 [ 3624.582190][T11974] netlink: 'syz.0.8934': attribute type 5 has an invalid length. [ 3624.590727][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8934'. [ 3625.374132][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3625.705501][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 3625.705515][ T30] audit: type=1326 audit(1745669055.254:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3625.916011][ T30] audit: type=1326 audit(1745669055.254:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3626.041892][ T30] audit: type=1326 audit(1745669055.254:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3626.211204][ T30] audit: type=1326 audit(1745669055.264:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3626.413845][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3626.474747][ T30] audit: type=1326 audit(1745669055.264:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3626.497092][ T30] audit: type=1326 audit(1745669055.264:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.4.8943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 3626.584316][T12015] netlink: 'syz.0.8946': attribute type 5 has an invalid length. [ 3626.592109][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8946'. [ 3627.454141][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3627.804385][T12034] netlink: 'syz.1.8952': attribute type 5 has an invalid length. [ 3627.813448][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8952'. [ 3627.913944][T19755] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3628.074459][T19755] usb 6-1: Using ep0 maxpacket: 16 [ 3628.082426][T19755] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3628.124374][T19755] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3628.154826][T19755] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3628.180858][T19755] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3628.462278][T19755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3628.478088][T19755] usb 6-1: Product: syz [ 3628.504244][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3628.514530][T19755] usb 6-1: Manufacturer: syz [ 3628.526139][T19755] usb 6-1: SerialNumber: syz [ 3628.980223][T19755] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 3629.104189][ T9629] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 3629.278320][ T9629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3629.297539][ T9629] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3629.317406][ T9629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3629.334097][ T47] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 3629.360188][ T9629] usb 3-1: config 0 descriptor?? [ 3629.374678][T12054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3629.528698][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 3629.534367][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3629.556774][ T47] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 3629.565708][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3629.577073][ T47] usb 2-1: config 0 has no interface number 0 [ 3629.582544][T19755] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 3629.583230][ T47] usb 2-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3629.658374][T12076] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3629.689260][ T47] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 3629.705592][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3629.721778][ T47] usb 2-1: Product: syz [ 3629.727297][ T47] usb 2-1: Manufacturer: syz [ 3629.732134][ T47] usb 2-1: SerialNumber: syz [ 3629.829008][T19755] usb 6-1: USB disconnect, device number 33 [ 3629.860927][ T9629] elan 0003:04F3:0755.0088: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 3629.907269][ T4446] udevd[4446]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3629.932970][ T47] usb 2-1: config 0 descriptor?? [ 3629.964593][ T3722] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3630.085071][ T9629] usb 3-1: USB disconnect, device number 71 [ 3630.145148][ T3722] usb 1-1: Using ep0 maxpacket: 8 [ 3630.166455][ T3722] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3630.187395][ T3722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3630.257594][ T47] qmi_wwan 2-1:0.49: probe with driver qmi_wwan failed with error -22 [ 3630.267710][ T3722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3630.302454][ T47] usb 2-1: USB disconnect, device number 50 [ 3630.321452][ T3722] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3630.337686][ T3722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3630.358641][ T3722] usb 1-1: Product: syz [ 3630.421238][ T3722] usb 1-1: Manufacturer: syz [ 3630.441960][ T3722] usb 1-1: SerialNumber: syz [ 3630.478376][T12082] netlink: 'syz.5.8974': attribute type 5 has an invalid length. [ 3630.486776][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8974'. [ 3630.554591][ T3722] usb 1-1: config 0 descriptor?? [ 3630.566658][ T3722] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 3630.575228][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3630.781857][ T3722] usb 1-1: USB disconnect, device number 126 [ 3631.264271][T19755] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 3631.464392][T19755] usb 2-1: Using ep0 maxpacket: 16 [ 3631.476630][T19755] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 3631.499107][T19755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3631.523497][T19755] usb 2-1: Product: syz [ 3631.530889][T19755] usb 2-1: Manufacturer: syz [ 3631.552548][T19755] usb 2-1: SerialNumber: syz [ 3631.574810][T19755] usb 2-1: config 0 descriptor?? [ 3631.591953][T19755] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 3631.611220][T19755] usb 2-1: Detected FT-X [ 3631.624013][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3631.759870][ T3722] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3631.815527][T19755] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3631.934162][ T3722] usb 6-1: Using ep0 maxpacket: 32 [ 3631.941772][ T3722] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 3631.950130][ T3722] usb 6-1: config 0 has no interface number 0 [ 3631.963869][ T3722] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3632.117590][ T3722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3632.143778][ T3722] usb 6-1: Product: syz [ 3632.153894][ T3722] usb 6-1: Manufacturer: syz [ 3632.162193][ T3722] usb 6-1: SerialNumber: syz [ 3632.191337][ T3722] usb 6-1: config 0 descriptor?? [ 3632.214507][ T3722] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3632.278466][T19755] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3632.460036][ T3722] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3632.531755][T19755] usb 2-1: USB disconnect, device number 51 [ 3632.562227][ T3722] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 3632.589412][T19755] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3632.636753][T19755] ftdi_sio 2-1:0.0: device disconnected [ 3632.653887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3632.878551][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3632.886824][ T3722] usb 6-1: USB disconnect, device number 34 [ 3632.905593][ T3722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3632.927638][ T3722] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 3632.951505][ T3722] quatech2 6-1:0.51: device disconnected [ 3633.179193][T12110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8984'. [ 3633.694172][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3634.733920][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3635.137358][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3635.144303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3635.774094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3636.813845][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3637.863963][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3638.893831][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3639.933967][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3640.973908][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3641.064672][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9008'. [ 3641.161417][T12210] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3641.170733][T12210] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3641.180049][T12210] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3641.189423][T12210] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3641.381227][T12210] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3641.390619][T12210] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3641.400221][T12210] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3641.409613][T12210] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3641.704326][T19755] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3641.858933][T19755] usb 2-1: Using ep0 maxpacket: 8 [ 3641.872608][T19755] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3641.927900][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3641.946287][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3641.966082][T19755] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3641.999305][T19755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3642.015389][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3642.021069][ T978] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 3642.050287][T19755] usb 2-1: Product: syz [ 3642.060295][ T978] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3642.071047][T19755] usb 2-1: Manufacturer: syz [ 3642.080093][T19755] usb 2-1: SerialNumber: syz [ 3642.117628][T19755] usb 2-1: config 0 descriptor?? [ 3642.139281][T19755] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 3642.341990][ T3722] usb 2-1: USB disconnect, device number 52 [ 3642.845967][ T30] audit: type=1326 audit(1745669072.394:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3642.876897][ T30] audit: type=1326 audit(1745669072.394:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3642.908478][ T30] audit: type=1326 audit(1745669072.394:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3642.936605][ T30] audit: type=1326 audit(1745669072.394:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.012810][ T30] audit: type=1326 audit(1745669072.394:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.053936][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3643.076302][ T30] audit: type=1326 audit(1745669072.404:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.103923][ T3722] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3643.123824][ T30] audit: type=1326 audit(1745669072.404:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.146650][ T30] audit: type=1326 audit(1745669072.524:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.169128][ T30] audit: type=1326 audit(1745669072.594:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.192572][ T30] audit: type=1326 audit(1745669072.664:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.9015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 3643.246102][ T3722] usb 6-1: device descriptor read/64, error -71 [ 3643.623786][ T3722] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 3643.793940][ T3722] usb 6-1: device descriptor read/64, error -71 [ 3643.972070][ T3722] usb usb6-port1: attempt power cycle [ 3644.094050][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3644.446853][ T3722] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 3644.488218][ T3722] usb 6-1: device descriptor read/8, error -71 [ 3644.774001][ T3722] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 3644.808414][ T3722] usb 6-1: device descriptor read/8, error -71 [ 3644.924597][ T3722] usb usb6-port1: unable to enumerate USB device [ 3645.143946][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3645.360456][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9024'. [ 3645.874434][ T3722] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3645.893383][T12276] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3646.163942][ T47] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3646.173989][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3646.264277][ T3722] usb 1-1: Using ep0 maxpacket: 8 [ 3646.281824][ T3722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3646.296490][ T3722] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3646.306040][ T3722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3646.324736][ T3722] usb 1-1: config 0 descriptor?? [ 3646.354324][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 3646.365912][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3646.382009][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3646.401579][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3646.429961][ T47] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3646.644696][ T9629] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3646.712684][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3646.732486][ T47] usb 3-1: Product: syz [ 3646.737492][ T47] usb 3-1: Manufacturer: syz [ 3646.742561][ T47] usb 3-1: SerialNumber: syz [ 3646.784374][ T47] usb 3-1: config 0 descriptor?? [ 3646.805962][ T47] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 3646.822056][ T3722] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3646.844460][ T9629] usb 6-1: Using ep0 maxpacket: 8 [ 3646.855473][ T9629] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3646.908716][ T9629] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3646.936095][ T9629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 3646.948929][ T9629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3646.964269][ T9629] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3646.985654][ T9629] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3646.995026][ T9629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3647.012483][T19755] usb 3-1: USB disconnect, device number 72 [ 3647.024041][ T9629] usb 6-1: Product: syz [ 3647.048895][ T9629] usb 6-1: Manufacturer: syz [ 3647.071787][ T978] usb 1-1: USB disconnect, device number 127 [ 3647.075522][ T9629] usb 6-1: SerialNumber: syz [ 3647.202250][ T9629] usb 6-1: config 0 descriptor?? [ 3647.223868][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3647.429720][ T9629] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 3647.439989][ T9629] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 3647.585482][T12290] netlink: 'syz.4.9033': attribute type 5 has an invalid length. [ 3647.601730][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9033'. [ 3647.631350][ T9629] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 3647.640995][ T9629] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 3647.656245][ T9629] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 3647.832520][ T9629] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 3647.855377][ T978] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3648.021259][ T978] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 3648.069932][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.132521][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.156727][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.190356][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.200260][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.235414][ T9629] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 3648.246024][ T9629] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 3648.255187][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3648.293549][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.309597][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.319865][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.332417][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.354749][ T9629] usb 6-1: USB disconnect, device number 39 [ 3648.407445][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.427888][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.481497][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.637266][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.663641][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.693477][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.723875][T19755] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 3648.740949][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.757596][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.769589][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.784870][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.815259][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.845310][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.865792][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3648.884561][ T978] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3648.911704][T19755] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3648.927912][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3648.935259][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3648.946962][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3648.957675][T19755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3648.978801][ T978] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3648.989100][ T978] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3649.002509][T19755] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3649.014490][ T978] usb 3-1: Product: syz [ 3649.019408][ T978] usb 3-1: Manufacturer: syz [ 3649.024683][T19755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3649.034024][ T978] usb 3-1: SerialNumber: syz [ 3649.042477][T19755] usb 2-1: config 0 descriptor?? [ 3649.055499][ T978] usb 3-1: config 0 descriptor?? [ 3649.089795][ T978] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 3649.207377][T12307] netlink: 'syz.5.9040': attribute type 29 has an invalid length. [ 3649.293999][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3649.423920][T12314] syzkaller1: entered promiscuous mode [ 3649.436260][T12314] syzkaller1: entered allmulticast mode [ 3649.509970][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 3649.510476][ T3722] usb 3-1: USB disconnect, device number 73 [ 3649.526124][T19755] plantronics 0003:047F:FFFF.008A: No inputs registered, leaving [ 3649.535153][T12316] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 3649.559735][ T3722] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 3649.582480][T19755] plantronics 0003:047F:FFFF.008A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3649.783715][ T9629] usb 2-1: USB disconnect, device number 53 [ 3650.016631][T12324] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:2 [ 3650.343975][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3650.398494][T12330] fuse: Bad value for 'fd' [ 3650.562796][T12336] syzkaller1: entered promiscuous mode [ 3650.582437][T12336] syzkaller1: entered allmulticast mode [ 3650.757435][T12339] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 3651.373961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3652.414113][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3653.453899][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3653.998981][ T3722] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3654.184214][ T3722] usb 3-1: Using ep0 maxpacket: 32 [ 3654.192469][ T3722] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3654.202045][ T3722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3654.250203][ T3722] usb 3-1: config 0 descriptor?? [ 3654.473010][ T3722] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3654.494076][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3654.527951][ T3722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3654.556817][ T3722] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3654.578229][ T3722] usb 3-1: media controller created [ 3654.617919][ T3722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3654.681953][ T3722] az6027: usb out operation failed. (-71) [ 3654.697648][ T3722] az6027: usb out operation failed. (-71) [ 3654.731408][ T3722] stb0899_attach: Driver disabled by Kconfig [ 3654.742426][ T3722] az6027: no front-end attached [ 3654.742426][ T3722] [ 3654.771426][ T3722] az6027: usb out operation failed. (-71) [ 3654.779886][ T3722] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3654.909004][ T3722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input114 [ 3654.979679][ T3722] dvb-usb: schedule remote query interval to 400 msecs. [ 3655.001875][ T3722] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3655.052581][ T3722] usb 3-1: USB disconnect, device number 74 [ 3655.169051][ T3722] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3655.533895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3656.254565][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9081'. [ 3656.574212][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3656.796445][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9082'. [ 3657.613895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3658.653943][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3659.693908][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3660.254811][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9101'. [ 3660.634785][ T978] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3660.712810][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9103'. [ 3660.734557][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3660.796097][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 3660.817981][ T978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3660.835076][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3660.850803][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3660.877921][ T978] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3660.889646][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3660.964482][ T978] usb 2-1: Product: syz [ 3660.969428][ T978] usb 2-1: Manufacturer: syz [ 3660.979424][ T978] usb 2-1: SerialNumber: syz [ 3661.001420][ T978] usb 2-1: config 0 descriptor?? [ 3661.029934][ T978] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 3661.234595][ T978] usb 2-1: USB disconnect, device number 54 [ 3661.773813][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3661.916147][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9116'. [ 3661.964331][ T3722] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 3662.022510][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 3662.022530][ T30] audit: type=1326 audit(1745669091.574:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.071128][ T30] audit: type=1326 audit(1745669091.574:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.103610][ T30] audit: type=1326 audit(1745669091.574:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.131083][ T30] audit: type=1326 audit(1745669091.584:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.158309][ T3722] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 3662.166887][ T3722] usb 1-1: config 0 has no interface number 0 [ 3662.173068][ T3722] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 3662.188777][ T30] audit: type=1326 audit(1745669091.584:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.215543][ T3722] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 3662.228571][ T3722] usb 1-1: config 0 interface 113 has no altsetting 0 [ 3662.237951][ T30] audit: type=1326 audit(1745669091.584:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.261548][ T30] audit: type=1326 audit(1745669091.694:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.263174][ T3722] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 3662.264368][ T978] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3662.285872][ T30] audit: type=1326 audit(1745669091.764:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.285941][ T3722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3662.285965][ T3722] usb 1-1: Product: syz [ 3662.285981][ T3722] usb 1-1: Manufacturer: syz [ 3662.285996][ T3722] usb 1-1: SerialNumber: syz [ 3662.295404][ T3722] usb 1-1: config 0 descriptor?? [ 3662.296631][T12518] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3662.304633][T19755] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3662.378533][ C1] usb 1-1: NFC: Urb failure (status -71) [ 3662.385820][ C1] usb 1-1: NFC: Urb failure (status -71) [ 3662.396895][ T3722] usb 1-1: NFC: Unable to get FW version [ 3662.403204][ T3722] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 3662.412317][ T30] audit: type=1326 audit(1745669091.954:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.435092][ T30] audit: type=1326 audit(1745669091.954:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.1.9115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 3662.575201][T19755] usb 3-1: Using ep0 maxpacket: 32 [ 3662.583513][ T978] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 3662.593422][T19755] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3662.615494][ T978] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3662.634826][ T3722] usb 1-1: USB disconnect, device number 2 [ 3662.647898][ T978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3662.661850][T19755] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3662.688449][ T978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3662.699955][T19755] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3662.712599][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3662.724323][T19755] usb 3-1: Product: syz [ 3662.729034][T19755] usb 3-1: Manufacturer: syz [ 3662.739568][T19755] usb 3-1: SerialNumber: syz [ 3662.746562][ T978] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 3662.770889][T19755] usb 3-1: config 0 descriptor?? [ 3662.780075][ T978] usb 2-1: no configuration chosen from 1 choice [ 3662.790806][T12532] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3662.813970][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3663.273337][T19755] usb 3-1: USB disconnect, device number 75 [ 3663.853884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3664.605063][T12549] syzkaller1: entered promiscuous mode [ 3664.618796][T12549] syzkaller1: entered allmulticast mode [ 3664.894083][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3664.952930][T19755] usb 2-1: USB disconnect, device number 55 [ 3665.304519][ T3722] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3665.374788][ T9629] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 3665.463847][ T3722] usb 6-1: Using ep0 maxpacket: 8 [ 3665.487540][ T3722] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3665.489191][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9132'. [ 3665.505143][ T3722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3665.545760][ T3722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3665.561194][ T9629] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3665.582403][ T9629] usb 1-1: config 0 has no interface number 0 [ 3665.590671][ T9629] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3665.605945][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3665.615416][ T3722] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3665.636246][ T3722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3665.652565][ T9629] usb 1-1: config 0 descriptor?? [ 3665.671982][ T3722] usb 6-1: Product: syz [ 3665.677133][ T3722] usb 6-1: Manufacturer: syz [ 3665.681818][ T3722] usb 6-1: SerialNumber: syz [ 3665.694966][ T9629] usb 1-1: selecting invalid altsetting 1 [ 3665.701292][ T9629] dvb_ttusb_budget: ttusb_init_controller: error [ 3665.726724][ T3722] usb 6-1: config 0 descriptor?? [ 3665.733532][ T9629] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3665.756049][ T3722] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 3665.887691][T19755] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3665.933865][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3665.983828][ T9629] DVB: Unable to find symbol cx22700_attach() [ 3665.997610][ T3722] usb 6-1: USB disconnect, device number 40 [ 3666.115308][T19755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3666.127197][T19755] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3666.153603][T19755] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 3666.171171][T19755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3666.177520][ T9629] DVB: Unable to find symbol tda10046_attach() [ 3666.190305][ T9629] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3666.196197][T19755] usb 3-1: config 0 descriptor?? [ 3666.206937][ T9629] usb 1-1: USB disconnect, device number 3 [ 3666.892706][T19755] hid-led 0003:1294:1320.008B: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 3666.942085][T19755] hid-led 0003:1294:1320.008B: Riso Kagaku Webmail Notifier initialized [ 3666.974018][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3667.098569][T19755] usb 3-1: USB disconnect, device number 76 [ 3667.233346][ T1739] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 3667.291678][T17540] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 3667.354030][T17540] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 3668.013843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3668.584208][T19755] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3668.776902][T19755] usb 3-1: Using ep0 maxpacket: 8 [ 3668.790294][T19755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3668.822599][T19755] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3668.852859][T19755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 3668.874718][T19755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3668.895845][T19755] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3668.978444][T19755] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3668.988449][T19755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3669.041545][T19755] usb 3-1: Product: syz [ 3669.046555][T19755] usb 3-1: Manufacturer: syz [ 3669.051158][T19755] usb 3-1: SerialNumber: syz [ 3669.064234][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3669.111068][T19755] usb 3-1: config 0 descriptor?? [ 3669.184479][ T978] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3669.355109][T19755] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 3669.361930][T19755] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 3669.384755][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3669.401839][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3669.413374][ T978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3669.428691][ T978] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3669.588511][T19755] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 3669.597254][T19755] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 3669.611038][T19755] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 3669.664518][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3669.724433][ T978] usb 6-1: config 0 descriptor?? [ 3669.789227][T19755] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 3670.094041][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3670.287818][T19755] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 3670.307160][ T978] plantronics 0003:047F:FFFF.008C: reserved main item tag 0xd [ 3670.315524][T19755] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 3670.357321][ T978] plantronics 0003:047F:FFFF.008C: No inputs registered, leaving [ 3670.377379][T19755] usb 3-1: USB disconnect, device number 77 [ 3670.419562][ T978] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3670.644574][ T978] usb 6-1: USB disconnect, device number 41 [ 3671.134198][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3671.404428][ T9629] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3671.552087][T12653] [ 3671.554498][T12653] ===================================================== [ 3671.561440][T12653] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3671.568921][T12653] 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 Not tainted [ 3671.576027][T12653] ----------------------------------------------------- [ 3671.582959][T12653] syz.1.9157/12653 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3671.590681][T12653] ffff8880338e38a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3671.599466][T12653] [ 3671.599466][T12653] and this task is already holding: [ 3671.606835][T12653] ffff88804e2f6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3671.616697][T12653] which would create a new lock dependency: [ 3671.622587][T12653] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 3671.630724][T12653] [ 3671.630724][T12653] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3671.640181][T12653] (&client->buffer_lock){..-.}-{3:3} [ 3671.640207][T12653] [ 3671.640207][T12653] ... which became SOFTIRQ-irq-safe at: [ 3671.653270][T12653] lock_acquire+0x120/0x360 [ 3671.657887][T12653] _raw_spin_lock+0x2e/0x40 [ 3671.662515][T12653] evdev_pass_values+0xb9/0xbd0 [ 3671.667490][T12653] evdev_events+0x1e6/0x340 [ 3671.672202][T12653] input_pass_values+0x285/0x890 [ 3671.677268][T12653] input_event_dispose+0x3e5/0x6b0 [ 3671.682496][T12653] input_event+0x8c/0xc0 [ 3671.686856][T12653] hidinput_hid_event+0x132c/0x1c90 [ 3671.692174][T12653] hid_process_event+0x4be/0x620 [ 3671.697227][T12653] hid_report_raw_event+0xe91/0x16d0 [ 3671.702626][T12653] hid_input_report+0x43e/0x520 [ 3671.707593][T12653] hid_irq_in+0x47e/0x6d0 [ 3671.712041][T12653] __usb_hcd_giveback_urb+0x417/0x690 [ 3671.717541][T12653] dummy_timer+0x862/0x4550 [ 3671.722168][T12653] __hrtimer_run_queues+0x529/0xc60 [ 3671.727491][T12653] hrtimer_run_softirq+0x187/0x2b0 [ 3671.732728][T12653] handle_softirqs+0x283/0x870 [ 3671.737620][T12653] __irq_exit_rcu+0xca/0x1f0 [ 3671.742319][T12653] irq_exit_rcu+0x9/0x30 [ 3671.746671][T12653] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3671.752431][T12653] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3671.758538][T12653] queue_work_on+0x1f7/0x270 [ 3671.763245][T12653] driver_bound+0x203/0x2c0 [ 3671.767928][T12653] really_probe+0x718/0x9a0 [ 3671.772592][T12653] __driver_probe_device+0x18c/0x2f0 [ 3671.778004][T12653] driver_probe_device+0x4f/0x430 [ 3671.783149][T12653] __device_attach_driver+0x2ce/0x530 [ 3671.788642][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3671.793671][T12653] __device_attach+0x2b8/0x400 [ 3671.798557][T12653] bus_probe_device+0x185/0x260 [ 3671.803532][T12653] device_add+0x7b6/0xb50 [ 3671.807986][T12653] hid_add_device+0x398/0x540 [ 3671.812783][T12653] usbhid_probe+0xe13/0x12a0 [ 3671.817492][T12653] usb_probe_interface+0x641/0xbc0 [ 3671.822736][T12653] really_probe+0x26a/0x9a0 [ 3671.827357][T12653] __driver_probe_device+0x18c/0x2f0 [ 3671.832761][T12653] driver_probe_device+0x4f/0x430 [ 3671.837938][T12653] __device_attach_driver+0x2ce/0x530 [ 3671.843434][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3671.848441][T12653] __device_attach+0x2b8/0x400 [ 3671.853407][T12653] bus_probe_device+0x185/0x260 [ 3671.858480][T12653] device_add+0x7b6/0xb50 [ 3671.862923][T12653] usb_set_configuration+0x1a87/0x20e0 [ 3671.868591][T12653] usb_generic_driver_probe+0x8d/0x150 [ 3671.874260][T12653] usb_probe_device+0x1c1/0x390 [ 3671.879243][T12653] really_probe+0x26a/0x9a0 [ 3671.883864][T12653] __driver_probe_device+0x18c/0x2f0 [ 3671.889266][T12653] driver_probe_device+0x4f/0x430 [ 3671.894409][T12653] __device_attach_driver+0x2ce/0x530 [ 3671.899902][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3671.904880][T12653] __device_attach+0x2b8/0x400 [ 3671.909764][T12653] bus_probe_device+0x185/0x260 [ 3671.914740][T12653] device_add+0x7b6/0xb50 [ 3671.919189][T12653] usb_new_device+0xa39/0x16c0 [ 3671.924068][T12653] hub_event+0x2941/0x4a00 [ 3671.928610][T12653] process_scheduled_works+0xadb/0x17a0 [ 3671.934277][T12653] worker_thread+0x8a0/0xda0 [ 3671.939862][T12653] kthread+0x70e/0x8a0 [ 3671.944058][T12653] ret_from_fork+0x4b/0x80 [ 3671.948600][T12653] ret_from_fork_asm+0x1a/0x30 [ 3671.953484][T12653] [ 3671.953484][T12653] to a SOFTIRQ-irq-unsafe lock: [ 3671.960524][T12653] (tasklist_lock){.+.+}-{3:3} [ 3671.960562][T12653] [ 3671.960562][T12653] ... which became SOFTIRQ-irq-unsafe at: [ 3671.973226][T12653] ... [ 3671.973240][T12653] lock_acquire+0x120/0x360 [ 3671.980467][T12653] _raw_read_lock+0x36/0x50 [ 3671.985101][T12653] __do_wait+0xde/0x740 [ 3671.989377][T12653] do_wait+0x1f8/0x520 [ 3671.993563][T12653] kernel_wait+0xab/0x170 [ 3671.998009][T12653] call_usermodehelper_exec_work+0xbe/0x230 [ 3672.004036][T12653] process_scheduled_works+0xadb/0x17a0 [ 3672.009723][T12653] worker_thread+0x8a0/0xda0 [ 3672.014432][T12653] kthread+0x70e/0x8a0 [ 3672.018619][T12653] ret_from_fork+0x4b/0x80 [ 3672.023149][T12653] ret_from_fork_asm+0x1a/0x30 [ 3672.028022][T12653] [ 3672.028022][T12653] other info that might help us debug this: [ 3672.028022][T12653] [ 3672.038271][T12653] Chain exists of: [ 3672.038271][T12653] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 3672.038271][T12653] [ 3672.051453][T12653] Possible interrupt unsafe locking scenario: [ 3672.051453][T12653] [ 3672.059799][T12653] CPU0 CPU1 [ 3672.065185][T12653] ---- ---- [ 3672.070542][T12653] lock(tasklist_lock); [ 3672.074788][T12653] local_irq_disable(); [ 3672.081534][T12653] lock(&client->buffer_lock); [ 3672.088994][T12653] lock(&new->fa_lock); [ 3672.095756][T12653] [ 3672.099207][T12653] lock(&client->buffer_lock); [ 3672.104233][T12653] [ 3672.104233][T12653] *** DEADLOCK *** [ 3672.104233][T12653] [ 3672.112375][T12653] 7 locks held by syz.1.9157/12653: [ 3672.117569][T12653] #0: ffff888147b3c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 3672.126726][T12653] #1: ffff8881442d1230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 3672.136864][T12653] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 3672.146616][T12653] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 3672.156194][T12653] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 3672.165340][T12653] #5: ffff88804e2f6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3672.175527][T12653] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 3672.184593][T12653] [ 3672.184593][T12653] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3672.195124][T12653] -> (&client->buffer_lock){..-.}-{3:3} { [ 3672.200891][T12653] IN-SOFTIRQ-W at: [ 3672.203858][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3672.204863][T12653] lock_acquire+0x120/0x360 [ 3672.217955][T12653] _raw_spin_lock+0x2e/0x40 [ 3672.224117][T12653] evdev_pass_values+0xb9/0xbd0 [ 3672.230623][T12653] evdev_events+0x1e6/0x340 [ 3672.236776][T12653] input_pass_values+0x285/0x890 [ 3672.243367][T12653] input_event_dispose+0x3e5/0x6b0 [ 3672.250144][T12653] input_event+0x8c/0xc0 [ 3672.256040][T12653] hidinput_hid_event+0x132c/0x1c90 [ 3672.262995][T12653] hid_process_event+0x4be/0x620 [ 3672.269599][T12653] hid_report_raw_event+0xe91/0x16d0 [ 3672.276573][T12653] hid_input_report+0x43e/0x520 [ 3672.283071][T12653] hid_irq_in+0x47e/0x6d0 [ 3672.289052][T12653] __usb_hcd_giveback_urb+0x417/0x690 [ 3672.296088][T12653] dummy_timer+0x862/0x4550 [ 3672.302243][T12653] __hrtimer_run_queues+0x529/0xc60 [ 3672.309101][T12653] hrtimer_run_softirq+0x187/0x2b0 [ 3672.315889][T12653] handle_softirqs+0x283/0x870 [ 3672.322310][T12653] __irq_exit_rcu+0xca/0x1f0 [ 3672.328543][T12653] irq_exit_rcu+0x9/0x30 [ 3672.334433][T12653] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3672.341720][T12653] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3672.349349][T12653] queue_work_on+0x1f7/0x270 [ 3672.355587][T12653] driver_bound+0x203/0x2c0 [ 3672.361827][T12653] really_probe+0x718/0x9a0 [ 3672.367985][T12653] __driver_probe_device+0x18c/0x2f0 [ 3672.374918][T12653] driver_probe_device+0x4f/0x430 [ 3672.381592][T12653] __device_attach_driver+0x2ce/0x530 [ 3672.388634][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3672.395167][T12653] __device_attach+0x2b8/0x400 [ 3672.401581][T12653] bus_probe_device+0x185/0x260 [ 3672.408089][T12653] device_add+0x7b6/0xb50 [ 3672.414079][T12653] hid_add_device+0x398/0x540 [ 3672.420403][T12653] usbhid_probe+0xe13/0x12a0 [ 3672.426661][T12653] usb_probe_interface+0x641/0xbc0 [ 3672.433436][T12653] really_probe+0x26a/0x9a0 [ 3672.439589][T12653] __driver_probe_device+0x18c/0x2f0 [ 3672.446524][T12653] driver_probe_device+0x4f/0x430 [ 3672.453312][T12653] __device_attach_driver+0x2ce/0x530 [ 3672.460337][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3672.466847][T12653] __device_attach+0x2b8/0x400 [ 3672.473279][T12653] bus_probe_device+0x185/0x260 [ 3672.479808][T12653] device_add+0x7b6/0xb50 [ 3672.485783][T12653] usb_set_configuration+0x1a87/0x20e0 [ 3672.492891][T12653] usb_generic_driver_probe+0x8d/0x150 [ 3672.500002][T12653] usb_probe_device+0x1c1/0x390 [ 3672.506542][T12653] really_probe+0x26a/0x9a0 [ 3672.512695][T12653] __driver_probe_device+0x18c/0x2f0 [ 3672.519628][T12653] driver_probe_device+0x4f/0x430 [ 3672.526303][T12653] __device_attach_driver+0x2ce/0x530 [ 3672.533327][T12653] bus_for_each_drv+0x24e/0x2e0 [ 3672.539836][T12653] __device_attach+0x2b8/0x400 [ 3672.546252][T12653] bus_probe_device+0x185/0x260 [ 3672.552755][T12653] device_add+0x7b6/0xb50 [ 3672.558731][T12653] usb_new_device+0xa39/0x16c0 [ 3672.565143][T12653] hub_event+0x2941/0x4a00 [ 3672.571215][T12653] process_scheduled_works+0xadb/0x17a0 [ 3672.578418][T12653] worker_thread+0x8a0/0xda0 [ 3672.584656][T12653] kthread+0x70e/0x8a0 [ 3672.590463][T12653] ret_from_fork+0x4b/0x80 [ 3672.596531][T12653] ret_from_fork_asm+0x1a/0x30 [ 3672.602976][T12653] INITIAL USE at: [ 3672.606885][T12653] lock_acquire+0x120/0x360 [ 3672.612953][T12653] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3672.619721][T12653] evdev_ioctl_handler+0x1969/0x1f10 [ 3672.626581][T12653] __ia32_compat_sys_ioctl+0x551/0x840 [ 3672.633694][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3672.640371][T12653] do_fast_syscall_32+0x34/0x80 [ 3672.646788][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3672.654727][T12653] } [ 3672.657232][T12653] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 3672.665412][T12653] [ 3672.665412][T12653] the dependencies between the lock to be acquired [ 3672.665421][T12653] and SOFTIRQ-irq-unsafe lock: [ 3672.679279][T12653] -> (tasklist_lock){.+.+}-{3:3} { [ 3672.684587][T12653] HARDIRQ-ON-R at: [ 3672.688849][T12653] lock_acquire+0x120/0x360 [ 3672.695353][T12653] _raw_read_lock+0x36/0x50 [ 3672.701884][T12653] __do_wait+0xde/0x740 [ 3672.708041][T12653] do_wait+0x1f8/0x520 [ 3672.714110][T12653] kernel_wait+0xab/0x170 [ 3672.720437][T12653] call_usermodehelper_exec_work+0xbe/0x230 [ 3672.728330][T12653] process_scheduled_works+0xadb/0x17a0 [ 3672.735898][T12653] worker_thread+0x8a0/0xda0 [ 3672.742482][T12653] kthread+0x70e/0x8a0 [ 3672.748546][T12653] ret_from_fork+0x4b/0x80 [ 3672.754960][T12653] ret_from_fork_asm+0x1a/0x30 [ 3672.761733][T12653] SOFTIRQ-ON-R at: [ 3672.765890][T12653] lock_acquire+0x120/0x360 [ 3672.772392][T12653] _raw_read_lock+0x36/0x50 [ 3672.778908][T12653] __do_wait+0xde/0x740 [ 3672.785086][T12653] do_wait+0x1f8/0x520 [ 3672.791160][T12653] kernel_wait+0xab/0x170 [ 3672.797501][T12653] call_usermodehelper_exec_work+0xbe/0x230 [ 3672.805439][T12653] process_scheduled_works+0xadb/0x17a0 [ 3672.812990][T12653] worker_thread+0x8a0/0xda0 [ 3672.819581][T12653] kthread+0x70e/0x8a0 [ 3672.825645][T12653] ret_from_fork+0x4b/0x80 [ 3672.832161][T12653] ret_from_fork_asm+0x1a/0x30 [ 3672.838937][T12653] INITIAL USE at: [ 3672.843004][T12653] lock_acquire+0x120/0x360 [ 3672.849419][T12653] _raw_write_lock_irq+0xa2/0xf0 [ 3672.856271][T12653] copy_process+0x21d5/0x3b80 [ 3672.862963][T12653] kernel_clone+0x21e/0x870 [ 3672.869371][T12653] user_mode_thread+0xdd/0x140 [ 3672.876042][T12653] rest_init+0x23/0x300 [ 3672.882110][T12653] start_kernel+0x470/0x4f0 [ 3672.888530][T12653] x86_64_start_reservations+0x2a/0x30 [ 3672.895896][T12653] x86_64_start_kernel+0x66/0x70 [ 3672.902751][T12653] common_startup_64+0x13e/0x147 [ 3672.909609][T12653] INITIAL READ USE at: [ 3672.914109][T12653] lock_acquire+0x120/0x360 [ 3672.920982][T12653] _raw_read_lock+0x36/0x50 [ 3672.927835][T12653] __do_wait+0xde/0x740 [ 3672.934332][T12653] do_wait+0x1f8/0x520 [ 3672.940763][T12653] kernel_wait+0xab/0x170 [ 3672.947441][T12653] call_usermodehelper_exec_work+0xbe/0x230 [ 3672.955682][T12653] process_scheduled_works+0xadb/0x17a0 [ 3672.963577][T12653] worker_thread+0x8a0/0xda0 [ 3672.970597][T12653] kthread+0x70e/0x8a0 [ 3672.977006][T12653] ret_from_fork+0x4b/0x80 [ 3672.983770][T12653] ret_from_fork_asm+0x1a/0x30 [ 3672.990962][T12653] } [ 3672.993802][T12653] ... key at: [] tasklist_lock+0x18/0x40 [ 3673.001766][T12653] ... acquired at: [ 3673.005735][T12653] lock_acquire+0x120/0x360 [ 3673.010417][T12653] _raw_read_lock+0x36/0x50 [ 3673.015095][T12653] send_sigio+0x101/0x370 [ 3673.019597][T12653] kill_fasync+0x24d/0x4d0 [ 3673.024193][T12653] lease_break_callback+0x26/0x30 [ 3673.029443][T12653] __break_lease+0x6a2/0x1620 [ 3673.034320][T12653] vfs_truncate+0x428/0x520 [ 3673.039057][T12653] do_sys_truncate+0xdb/0x190 [ 3673.043913][T12653] __ia32_compat_sys_truncate+0x5b/0x70 [ 3673.049643][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.054936][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.059966][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.066466][T12653] [ 3673.068785][T12653] -> (&f_owner->lock){....}-{3:3} { [ 3673.074085][T12653] INITIAL USE at: [ 3673.078062][T12653] lock_acquire+0x120/0x360 [ 3673.084305][T12653] _raw_write_lock_irq+0xa2/0xf0 [ 3673.090973][T12653] __f_setown+0x67/0x370 [ 3673.096954][T12653] f_setown+0x23a/0x300 [ 3673.102848][T12653] do_fcntl+0x11d/0x1910 [ 3673.108826][T12653] do_compat_fcntl64+0x484/0x720 [ 3673.115495][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.122337][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.128919][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.136982][T12653] INITIAL READ USE at: [ 3673.141391][T12653] lock_acquire+0x120/0x360 [ 3673.148078][T12653] _raw_read_lock_irq+0xaa/0xf0 [ 3673.155108][T12653] do_fcntl+0x809/0x1910 [ 3673.161527][T12653] do_compat_fcntl64+0x484/0x720 [ 3673.168640][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.175928][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.182956][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.191456][T12653] } [ 3673.194036][T12653] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3673.202970][T12653] ... acquired at: [ 3673.206853][T12653] lock_acquire+0x120/0x360 [ 3673.211529][T12653] _raw_read_lock_irqsave+0xaf/0x100 [ 3673.216990][T12653] send_sigio+0x38/0x370 [ 3673.221410][T12653] kill_fasync+0x24d/0x4d0 [ 3673.225999][T12653] sock_wake_async+0x137/0x160 [ 3673.230938][T12653] sk_wake_async+0x184/0x280 [ 3673.235705][T12653] unix_release_sock+0x6d4/0xc60 [ 3673.240818][T12653] unix_release+0x92/0xd0 [ 3673.245320][T12653] sock_close+0xc0/0x240 [ 3673.249738][T12653] __fput+0x449/0xa70 [ 3673.253966][T12653] task_work_run+0x1d1/0x260 [ 3673.254037][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3673.258757][T12653] get_signal+0x11c5/0x1310 [ 3673.258793][T12653] arch_do_signal_or_restart+0x95/0x780 [ 3673.276198][T12653] syscall_exit_to_user_mode+0x8b/0x120 [ 3673.281918][T12653] __do_fast_syscall_32+0xc1/0x110 [ 3673.287205][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.292235][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.298734][T12653] [ 3673.301047][T12653] -> (&new->fa_lock){....}-{3:3} { [ 3673.306173][T12653] INITIAL USE at: [ 3673.310062][T12653] lock_acquire+0x120/0x360 [ 3673.316145][T12653] _raw_write_lock_irq+0xa2/0xf0 [ 3673.322654][T12653] fasync_remove_entry+0xf1/0x1c0 [ 3673.329250][T12653] sock_fasync+0x85/0xf0 [ 3673.335059][T12653] __fput+0x89f/0xa70 [ 3673.340695][T12653] task_work_run+0x1d1/0x260 [ 3673.346868][T12653] get_signal+0x11c5/0x1310 [ 3673.352933][T12653] arch_do_signal_or_restart+0x95/0x780 [ 3673.360036][T12653] syscall_exit_to_user_mode+0x8b/0x120 [ 3673.367139][T12653] do_int80_emulation+0x12c/0x200 [ 3673.373744][T12653] asm_int80_emulation+0x1a/0x20 [ 3673.380268][T12653] INITIAL READ USE at: [ 3673.384589][T12653] lock_acquire+0x120/0x360 [ 3673.391088][T12653] _raw_read_lock_irqsave+0xaf/0x100 [ 3673.398369][T12653] kill_fasync+0x199/0x4d0 [ 3673.404805][T12653] sock_wake_async+0x137/0x160 [ 3673.411588][T12653] af_alg_wmem_wakeup+0x3c0/0x440 [ 3673.418673][T12653] aead_recvmsg+0x158a/0x1620 [ 3673.425376][T12653] sock_recvmsg+0x229/0x270 [ 3673.431878][T12653] sock_read_iter+0x231/0x2f0 [ 3673.438550][T12653] vfs_read+0x4cd/0x980 [ 3673.444699][T12653] ksys_read+0x145/0x250 [ 3673.450937][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.458042][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.464888][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.473213][T12653] } [ 3673.475703][T12653] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3673.484463][T12653] ... acquired at: [ 3673.488258][T12653] lock_acquire+0x120/0x360 [ 3673.492944][T12653] _raw_read_lock_irqsave+0xaf/0x100 [ 3673.498403][T12653] kill_fasync+0x199/0x4d0 [ 3673.502995][T12653] evdev_pass_values+0x627/0xbd0 [ 3673.508106][T12653] evdev_events+0x1e6/0x340 [ 3673.512786][T12653] input_pass_values+0x285/0x890 [ 3673.517895][T12653] input_event_dispose+0x330/0x6b0 [ 3673.523176][T12653] input_inject_event+0x1fe/0x320 [ 3673.528455][T12653] evdev_write+0x2fc/0x480 [ 3673.533044][T12653] vfs_write+0x27b/0xa90 [ 3673.537455][T12653] ksys_write+0x145/0x250 [ 3673.541955][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.547236][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.552258][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.558761][T12653] [ 3673.561077][T12653] [ 3673.561077][T12653] stack backtrace: [ 3673.566974][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.1.9157 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 3673.566994][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3673.567009][T12653] Call Trace: [ 3673.567019][T12653] [ 3673.567027][T12653] dump_stack_lvl+0x189/0x250 [ 3673.567052][T12653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3673.567072][T12653] ? __pfx__printk+0x10/0x10 [ 3673.567090][T12653] validate_chain+0x1f05/0x2140 [ 3673.567112][T12653] __lock_acquire+0xaac/0xd20 [ 3673.567134][T12653] ? kill_fasync+0x199/0x4d0 [ 3673.567156][T12653] lock_acquire+0x120/0x360 [ 3673.567175][T12653] ? kill_fasync+0x199/0x4d0 [ 3673.567197][T12653] ? __lock_acquire+0xaac/0xd20 [ 3673.567219][T12653] _raw_read_lock_irqsave+0xaf/0x100 [ 3673.567243][T12653] ? kill_fasync+0x199/0x4d0 [ 3673.567264][T12653] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 3673.567286][T12653] ? do_raw_spin_lock+0x121/0x290 [ 3673.567305][T12653] kill_fasync+0x199/0x4d0 [ 3673.567326][T12653] ? kill_fasync+0x53/0x4d0 [ 3673.567349][T12653] evdev_pass_values+0x627/0xbd0 [ 3673.567372][T12653] ? evdev_pass_values+0x681/0xbd0 [ 3673.567394][T12653] evdev_events+0x1e6/0x340 [ 3673.567413][T12653] ? evdev_events+0x79/0x340 [ 3673.567432][T12653] ? input_pass_values+0x8d/0x890 [ 3673.567451][T12653] input_pass_values+0x285/0x890 [ 3673.567473][T12653] ? input_handle_event+0x70c/0xf30 [ 3673.567489][T12653] input_event_dispose+0x330/0x6b0 [ 3673.567507][T12653] input_inject_event+0x1fe/0x320 [ 3673.567522][T12653] ? input_inject_event+0xbc/0x320 [ 3673.567539][T12653] evdev_write+0x2fc/0x480 [ 3673.567561][T12653] ? __pfx_evdev_write+0x10/0x10 [ 3673.567582][T12653] ? bpf_lsm_file_permission+0x9/0x20 [ 3673.567600][T12653] ? security_file_permission+0x75/0x290 [ 3673.567679][T12653] ? rw_verify_area+0x258/0x650 [ 3673.567694][T12653] ? __pfx_evdev_write+0x10/0x10 [ 3673.567714][T12653] vfs_write+0x27b/0xa90 [ 3673.567737][T12653] ? __pfx_vfs_write+0x10/0x10 [ 3673.567752][T12653] ? __fget_files+0x2a/0x420 [ 3673.567789][T12653] ? __fget_files+0x2a/0x420 [ 3673.567806][T12653] ? __fget_files+0x3a0/0x420 [ 3673.567824][T12653] ? __fget_files+0x2a/0x420 [ 3673.567845][T12653] ksys_write+0x145/0x250 [ 3673.567861][T12653] ? __pfx_ksys_write+0x10/0x10 [ 3673.567877][T12653] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3673.567893][T12653] ? lockdep_hardirqs_on+0x9c/0x150 [ 3673.567908][T12653] __do_fast_syscall_32+0xb4/0x110 [ 3673.567926][T12653] do_fast_syscall_32+0x34/0x80 [ 3673.567942][T12653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3673.567960][T12653] RIP: 0023:0xf7f38539 [ 3673.567977][T12653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3673.567991][T12653] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3673.568006][T12653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 3673.568017][T12653] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 3673.568026][T12653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3673.568035][T12653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3673.568044][T12653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3673.568059][T12653] [ 3673.903778][ T9629] usb 3-1: Using ep0 maxpacket: 32 [ 3673.915119][ T9629] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 3673.965018][ T9629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3674.005771][ T9629] usb 3-1: config 0 descriptor?? [ 3674.043335][ T9629] gspca_main: sq930x-2.14.0 probing 041e:403c [ 3674.267055][ T9629] gspca_sq930x: reg_r 001f failed -71 [ 3674.276175][ T9629] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 3674.307746][ T9629] usb 3-1: USB disconnect, device number 78 [ 3674.333815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3675.373931][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3676.413800][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available