last executing test programs: 18m17.253516001s ago: executing program 4 (id=2135): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f983b"], 0xfce) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0xd000, 0x5, 0xb, 0x6, 0x0, [{0xfa, 0x3, 0x1, '\x00', 0x8e}, {0xdb, 0x0, 0x7, '\x00', 0xfd}, {0x5, 0x2, 0x7, '\x00', 0xf}, {0x6, 0xfd, 0x4, '\x00', 0x8}, {0x8, 0x6, 0xfc, '\x00', 0x9}, {0x80, 0xd, 0x77, '\x00', 0xc}, {0x4, 0x6, 0x4, '\x00', 0x1}, {0x7, 0x6e, 0x5, '\x00', 0xf5}, {0x81, 0x5, 0xa, '\x00', 0x7f}, {0xfd, 0x6, 0x3, '\x00', 0x6}, {0x7, 0x6d, 0x5, '\x00', 0x5}, {0x5, 0x6, 0x6, '\x00', 0x5}, {0xde, 0xa, 0x22, '\x00', 0x8d}, {0x6, 0x0, 0x3}, {0x35, 0xfe, 0x8, '\x00', 0x2}, {0x8, 0xf8, 0x5, '\x00', 0xe6}, {0x3, 0x3, 0x7, '\x00', 0xf4}, {0x8, 0x93, 0x1, '\x00', 0x8}, {0x9, 0xe, 0xf9, '\x00', 0x4}, {0x3, 0x1, 0x4, '\x00', 0x2}, {0xfe, 0xfb, 0x2, '\x00', 0x5}, {0x7, 0x6, 0xaa, '\x00', 0x3}, {0x5, 0x6, 0x7, '\x00', 0x4}, {0x7f, 0x0, 0x8, '\x00', 0x6}]}}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) syz_usb_connect(0x0, 0x48, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1f, 0x6f, 0x41, 0x40, 0x499, 0x101c, 0x52c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x74, 0x3, 0x1, 0x2b, 0x62, 0xb5, 0xc, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x43}, {0xd, 0x24, 0xf, 0x1, 0xd3c, 0x3, 0xffff, 0x5}, [@acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 18m14.279670153s ago: executing program 4 (id=2142): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x130, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x100, 0x2, [@TCA_FLOWER_ACT={0xfc, 0x3, [@m_connmark={0xf8, 0x1, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x200, 0x3, 0x0, 0xbc7}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x5, 0x3, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x8, 0x22b, 0x1e203ee1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x2ce55e10, 0x200}, 0x4912}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x35dcae15e713ede6, 0xfffff195, 0x2}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb1, 0xffffff80, 0x1, 0x6, 0x6}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x4, 0x6}, 0x401}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x130}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 18m10.656312268s ago: executing program 4 (id=2153): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011f}, 0x40004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = syz_io_uring_setup(0x417e, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x20001, 0x219}, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private1, 0x8}}, 0x7, 0x1}, &(0x7f0000000000)=0x90) io_uring_enter(r5, 0x567, 0x20, 0x0, 0x0, 0x0) close(r0) 18m6.958097388s ago: executing program 4 (id=2162): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x8000000}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x4, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18m6.184036818s ago: executing program 4 (id=2165): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 18m5.635922802s ago: executing program 4 (id=2167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) lseek(0xffffffffffffffff, 0x3, 0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x3}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) ppoll(&(0x7f00000005c0)=[{r4, 0x2743}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x52, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000100000022cbd70000000000000000000", @ANYRES64=r5, @ANYRES32=r5], 0x20}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) shutdown(r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 18m4.952725295s ago: executing program 32 (id=2167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) lseek(0xffffffffffffffff, 0x3, 0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x3}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) ppoll(&(0x7f00000005c0)=[{r4, 0x2743}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x52, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000100000022cbd70000000000000000000", @ANYRES64=r5, @ANYRES32=r5], 0x20}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) shutdown(r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 12.919660772s ago: executing program 3 (id=5013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000300), 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000005c0)="dbae7395d8c6299a23c2883fb09bda9e8a13625c7b4af50ac905a38813136ce3908576be8a6ab87e01efe417c8edb97085d12d9b272f1065eb75abc6ff882c1e10deedf36f6ca8d2231ae532a72d900a2d4f894aa693bd025cfdfe45074556b20146f14bb31e6d0b8546ddefd40d60ecea7ea73cc08829a31bbb4bf1bebd3918256614536369d4ff038aa4e6541ce8bd9168577445a81c732efb4ecfb620e35add9e319dd1eb2baff8647f7d4ffb9260d9f35e7e2425bc2221977181abb7afe69dcfe7", 0xc3, 0xfffffffffffffff9) add_key$user(&(0x7f0000000400), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f00000010c0)="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", 0x1000, 0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x65c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x62c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "17b31b88cd50d147badf2a1a38c77df97be64641cc7318b2ce8ccdad6a96b06c832c85fddaca6ed96ea16ef202d71b42b21893487cead96a7ed371addafba26ca026c638c16771ecfe003896b993b75dc4111355a036c11ea5ca4b1fab502e611260caea6dd386e39e886b9878b03b39dc015359b12cc7be6f8e"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4b2a}, {0x8, 0x5, 0x2, "aeb25e3e76"}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x490, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x1000002, 0x7, 0xe3f, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xec, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xc1, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811a0c000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb}, 0x94) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0xfdfdffff, 0x12c, @pic={0x3, 0x6, 0x0, 0x5, 0xb, 0xf5, 0xfd, 0x2, 0x5, 0x0, 0x0, 0x5, 0x7, 0x8, 0x98, 0x7}}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f042}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 11.395730665s ago: executing program 3 (id=5018): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, r2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x8) r4 = syz_usb_connect(0x4, 0x24, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="2db6fbf0f1df4d275fada31e8aaf2b800c28ead5b269ec1bb43695e54af18975fc8444f0ac738ccc4f42ee4b13ea8da892918b47a3f985007340cdf742872850593cec2d5efc75fb7e3efd1b3850fb563dc7ae8bf191ff1b174ff51d0fb28d8a76a0ffac6d71fc5aeced0ea2efb94e63afcb9a6b938d6f8e581551f3c16b0b4a6aa8278a421daaee90d41dad68da20c2a1d740a0090f00fc2517d6ec1be8e93b5a12e3a4ff2b005e2496437a2fc9f83cb7dd2c9a66b63b3cf606095a829bc2a0ec2b82f691542d2f96eba87e331b1de8e2db4e186d2b96c385be63c0f9c1fe1f6cef"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x2, 0x12) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x2f, 0x5, 0x7f, 0x1ff, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x80000000, 0x6fa}}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r1, 0x100}, [@IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0xc, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x0, 0x0, 0xe}, {0x0, 0x1e, 0x0, 0x0, 0xf}, {0x0, 0x1e, 0x0, 0x0, 0x81}]}}, @AF_BRIDGE, @AF_BRIDGE, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, 0x9}]}}]}]}, 0x61}}, 0x0) 10.887806091s ago: executing program 5 (id=5022): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffffe6) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2}) io_uring_setup(0x2ad7, &(0x7f0000002300)={0x0, 0xd4a9, 0x4000, 0x1, 0x39f, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, r4, 0xfffffffffffffffe, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r6}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000180)={0xe, @raw_data="818c696481b16841b23c1a9a0ebce3ac69030f0565b364db23bcf7c7d8d113edbbc0ab6190dee70c860fb914c6d208771320d39c2da9765390146b9961969fe1d9c9b0c85c0b26ba3c3d1bac1076c1201551523fb5ab8d8301c487d279dd17d7410fab00df7efb052e09a40cdb609432789b81a14794c71146183501a8d4f7bfdeba8100960386a5d943f8fba7c96cfc952325120fd58f89084e2ed5da560c158da978a3af8e58550a2dd044aae1ba75874e29dddadb8590498159924e0cc6c8c291ca2bf4da14d5"}) read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 10.809437339s ago: executing program 2 (id=5024): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0xa}, &(0x7f0000000000)={0x1f, 0x40000000000, 0xfffffffffffffffe, 0x0, 0x7, 0x40000000, 0x0, 0x5}, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) creat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x142) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x587900) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x4c, 0x2c, 0x5a, 0x10, 0x45e, 0x775, 0x49f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0xc7, 0x0, 0x0, 0xe2, 0xe5, 0xc}}]}}]}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b'], 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000070a010400000000000000000100000709000100"], 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x2, 0x40}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 9.448889959s ago: executing program 2 (id=5028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000300), 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000005c0)="dbae7395d8c6299a23c2883fb09bda9e8a13625c7b4af50ac905a38813136ce3908576be8a6ab87e01efe417c8edb97085d12d9b272f1065eb75abc6ff882c1e10deedf36f6ca8d2231ae532a72d900a2d4f894aa693bd025cfdfe45074556b20146f14bb31e6d0b8546ddefd40d60ecea7ea73cc08829a31bbb4bf1bebd3918256614536369d4ff038aa4e6541ce8bd9168577445a81c732efb4ecfb620e35add9e319dd1eb2baff8647f7d4ffb9260d9f35e7e2425bc2221977181abb7afe69dcfe7", 0xc3, 0xfffffffffffffff9) add_key$user(&(0x7f0000000400), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f00000010c0)="2aeba3188c70b565b8e7ddd0b61616acd8ab81b50c685c2b81ea2d9080cf90dde17fbcbd2b6493e690baab9388bd7323abb5e6322a8919f6f4a5e4866c26686414cf25c2957c48e9d36ce94b2f08f36fe41cfe35ace9fddd36c566ed8b0d41dd74ac05f7229d920d82a838b5d01e12cece21cd169ab8c5252e81f9ac2e0dc2e4a408fbdbbda8341a82eca8195b849118e1e0cc86ac3f61ea3dd00d1a791a7a525abc0e239499bd8b1832e1ce2a655d7f032894d00297f8b8e501a9f7171823771d5e8dfae3b51cea831584d9e217105e1741367f49865b62ac7cf74a5f9ca5390f425d26953fc8766eb7b3fc16a86604be87d345b56d2a05871ddef9a0495ff2fe6c229a2e0037249a88e456c0244bbcc009b93afa51d933352523c87ba687fa1a97084a734931ebdbc2d8351d3fde2ed3ce8d883b2abd35f60cdc4a377b4c74952bcfb0ad0de30fc5324ff26994a66b5640a4a693aa4abf6668a218f44cd17c7f09dc46f432a923dd9525cf582e7bc8382228362d9376baf70b0c46e16bb8db565191d1da766739ba0747234651d04b2455a4d67a47bb9777fd379d24248934a0f4f339693dc4d7a8c83bc5987a095e6922aac894196beb274061f23315db084602b0c0ef1376e5ab546d52c93a3208a9c48b1e041104a53429a941db3e140ea31f868d324bcd4dae5f9a6456e4e28228e34fbe137fbe70b32e3fdca03164b1f57c440c5edbd33f59eb87b2f8a3d404d852880b58bf698e98e03100caee20998c76299c94d7f00ad106114f77740a067769929bab4c3c8f6affe894583fd650af7f863c6ed9f9a40935864a89f0cb3447da1886336fcb87ea7e8873667e18d156f9593017490f02a64338592f0af8a92701bee8af515d2b0d0a26a69fe90c5d48f5e0549ac17a0774a29e9503548e63903d84bb5bf36d5bdf9f8db449afb6e41a49173a53c2318e04604966a518936e509f29a022671afb9c0fb6c6d3da587d0b6e1acd662626ee935ff5321045e3a92a13194b79b539a466a5009c5f8b1ed711a5a049c6382c8692dd4304c56d57f6ee6fa533cd93350b1ebb7a137fd0373d3f3707e357d00bd6a395fc6a42fdb067d98a4c47a35693b84002e29eca1c1af262664d6cc175a9eda31cba1317da4d38dac2f57323f03a9c86c85170eb1cad1948d58f27da74c3ab471dfbfe3dbf4394d882c43caa99de81c2e72e2794e8e3c9a06a7546876a94650fced54898b13bd8da10345481f07c4528ca0bb4ffb7041340304c3132e13c39eee54044e57e18df2bd57d1c7e58f6701450edd61050c9238e60ed32c93f03328d2e91f748f01a0c24bef0aae49e8297f6a6793db3779413772de61ed2cc8af891c2de0ff54ea390a034a54760dce01df9a0a6d79ec8213afbbce5f3c1e1eef3abaec847ed30d7422cb57c1a9082d0a384c97b67294fa2f7eae2a90f70916bded45981138e882ea05fe9009bfcc3bb3317058730801d06f7698a4b3c5b193c3f0dae54abd9fd24c4b7ee84517dc51bde164d5d95522ce9f057615028bef03de8fc212da754ce9ed6fc9893a3a799e477d987fa9b30a17139101c8e23177dd8376c499927ca69ecbc1c2975cd06f1f92c4641cf9f37b84bc74e04acc82c72fb4d4b3919832809be7c7cd3cbf77e6f71a738d67a9983bccec75fb211ebf577fd00a59a9b76c6db8410fea7e721a295c6edb116a2f87561c171067eee08f3f4a128db2f00a948ab20bb153616957030f89803b7687df902abeb8580884008dbe455c09835aa2b2c2cb1777f7840e72e3dce93396212f6a314f18c44efcfddc211d403cd30207fbcbef3971482cc768b8d08ed8a2054ede6053a0f7ab766c123b14f930d37987663c7310a83d6c5f194bea3e40e4ab437f7d4366a57374b8aa94cadbc59512303a922d760fd941dbbf3fc5ba37635ad778b0bde0e047cea73b370870cd6f13d99e1084bc35d633279ab36193a4ee86443e55b4f2269953743afde9d490055e67a84f126894477d0b8660e81169ca9049fd62207510cfba66b421ab8c534d5b758c651a74a24eebc84d4f9bfe7d4c1305eaaa5247a73ed6f8c36fbd6bc865e3aaab0399c813ad270f87039c9f2e7e3ff604dbf61ec61674976ad69e67d44fb4efb11e2d7c0039d0699ff4cf8a5ad6e45faf450bb1265b1427fea61cbfd2531ab0211b039b07defd46d5f59087b7d0ae39814d036207d33559801841ecacb9916a39177a66eb5c11843a241abef39e4d561979ec2edf07698a6e0886952ac5638e40e3a01ebe671c8ce5a4dd07737c17a72a5a00dba090d05af26d2d0b52589c335a62c6bc80e9f79ae2fe6878d9407715ba0d872d50f9abe4bb6ea44c78efac16168aa123da7ba13fd5e8ef5eaa796a71363744888da6c36c0f64f0aa34444fed33ead1f9fe5afa23f50b9f43fbfd00559caff61c3d947063a5d0c660981fb8c994b67c14ef041f460856241188b2695f3f67788a12e03fee2f3be85020b6a0b081ec93b35b758e6b8e854a2bdf8dd7e0acad9418ad2ee927e96fff193412435207e044e62fa8653d746d812e19f1da60cc482b7b79f85e3c80e8735377b26528fb8cfe56c3713a385919987d6324992184f7cfd27f6f6caf327f7014324e310028e49154266305dc7e4af1ba3b4bf4ddbf800c646dbb64f8bdf2f519ea8574037319838213cd584913c2ebf5ad67a77a93be03ce57f75619c607e7995c42d7dd522d1e3f5acd48b53095acf52124332b9369e146a75f345bd490c4a4e3ccb9950363bd5461df7272abd52f381d8f1bc89de1cbb231bcf2356afd8c6cb30fc69e66115c3bf270cc0b1707646b4f2e53e72f59a892ae42784a33f23ac416d72a019e41c01cc18febc65f175d522ac100ae12b251b48305ec428d2a019d692af36455b712465788e73677856e7c5557183dfc5a37fc150691389d21c94983fd9c757466004f18a107e5402d87a1d1a7b869f4e1abb47d4808a51ef7817ccd18045a4fa273d00c4fd8fc93f209dafb26ade0452495b7af3a8af4828afac40d45fc15e8c32b14435af23aee5e8abcea88bef550867b9b554926e85155bf88bf4ec1d0821e14ef1a797b803dd0b6eb37a9a8f1473e5bfd36c447a6cdb73ac7ca94a2741f43889fbdb3ec19f0b1a84810fb73e3ff143f5de5323a64efc8e08180b9b2762b64ae5cac3947e523c37655bd2a25709bed4ebd259e657779cb53dd5afb447a61c07d831e5f724e332340d54d71485038e2da5dc384fbfb2b4fc181a66aae3498e4ac500f8d39d14e2c7e0d9a697080045bd35fdac7fc8d173de5f68c1e10bce4787f16f0244ca99ec133420bed5ccbecfce0233f488f2711387da85872684a5698a4f739fba3872a591350fa9508b107d3bb110ef577c25c931b3dfd3e88b5c09a1ac56014780f5203a914b5d7b6c86e143e950c9197832351a2026f4fb1ba824eed3f0c8f817001f9d312bd487056d851e0945e7718be0fbdf4f92978a9c1d5d89272603ca0b5f1cf617603bf6262041bb7e65b12ac9a1cf5cb82cd950ee6fd7296432b4d7b4e37cbbe9de9283456243f22f64402531ded1b6cc29894f777adba1ca97a7e53961d16b085019e16d7d4430714e252ab56df07d834a1f7165bc3f6373c2d360797d04a87ef10c2234c2664a6ee1d01b294deca99211d6107e6a16097d5d096d313947ba93514eff530069d1b2d59687e80abc9955a1925fefb1dad19a1a31b1eee4e7e8a987969208afcb85d280d164e30b12bf68c7bfe095e782a1a02a9f63bef47bb0f7085056c851ff8962fcc014d15212b5d3d12525d3b2e7e5357360476d7a0ab0373aa27b9a69c3e035a77053490778376902ac1a2bff95c21fcd43763bcb00988e02fd758fef67b9031bceb313330fc836ebc0fd54b252f3ffb315d5d9af897a2a61b7c9a5f7d690dfb9c4235dca3e7546ddcbb08b674492e4d6fcf8290fea3f6946c41864ea5f9a7536db215214d57de8b19a412262b5ce2c4d8de6cac08874fe93015db056ff3442c7e57aae750b0cc0898d3385ea0c4b1532764f6e6584510464b32e1a3d3f01dbd74361e4cdef858f420695a67008420297cdba6b1b3ecaed2db618627ede7fadd36af163a2e000020f3279db97fa9186ca536f78c5d2f3980e5fc8e1dba4b79f4da9683432d2da19b8ea5c250fd8f1f865418badbe6647d592a6f2e3a280e9182afc53b98001e535bf61262004f31254d562a9c5ee98ad471353382aa83b47d20e25bf9c05fcb37762ea88d19991131005624ea9336ea01494672c8335f63c43c8cc8d070fc9aaa11e5cd372cae5aa81a8b1dc237c686fa11b64d01e11854dd8cc4888d824ee39d200d06136c27486c07801e6816e0becde23a7c061641d3433dd7857889a1c40a0d8e4efcd88806367f79e995d2b30f4eb530cd395c9dd3bb05557a72d3f1b517b8eb32aa8f5df099883bd7cc3b639f7d5a8247413eaa17a9127c283285b98c2140d9e1bd4a2e151428134e36e684b5ef10e32663c41e1697257e57cbc656f64046e1fde32f8e42214a8badba17bec662c67b73d5c8ee08ac68eed2a956957bbe867f196a3be741b044adbea37a069aa6dcc5169d5ec8ac693263945b4d8ae017506f4e81fad49db717172e3b417b5f3bcc8b8b2d9d122f310d01934a1bbe842713aba3ade6a1b2bb0a4103a0712bf01e44399f73c35ab1a52f2fbfae39bb4d2724d368fcfb3d3a41b1b428353d9bd7d3ccf7560519e7c77a18f2c141a903742d89e20fc72b4581ce748b25106121446a258a28ae7a319601d2c1afc649ba177d1b604983ada5bc112ac4e80b6187f859740a717150890544074a50f91983421a86fe947d6c9b9cdc71e0e8d43b0cf9755156b4f72d3d7241827fbe35879750ce87e42b851488df79ce8a654e140b774c8b79c391b72f9c0f9580a9fa891017ca833fd5dae65d0e22294485845d43345e89f805414813e21ef6e3b3e8d18a06bba9f462d00d07d1090e695b10b87cb4610d4cfd6c4c465e9291bdaa61687f2cfaba624dec1b1c21a59525cc7f20702bdd5182c9edd5f533455acf7caba09f8f5c04669bafb304800efb49bc1e97c49fbe5c58561380afaa6b340dbdf884f8c34df265847f9e2b28c7d04ded54889304bd740caa33269f19be5b4d6ba61d0bcb565fe2b1454cc4e9a08ce083e79cc0b4293368622aabf27348d5a3526a5a552528668a1ddd9898e51cd415a267e9d851245502f4bacf3feecaa4076962760f17070390538d7f2373e1cb7c1580f896e605ff551d8822e843d4cf490d493fd9132027ce2452ffa7b9143b7d5cd55e288d625cda711484fdf610ae51770b3dd96485387ba55f6f6d380a22351aaa7d877927aed05826fe23aef67766252177bebcfb42fb202cea8e67a92e4f67b2202ed1f3663e4816ca13c89a8477cf1304ac2eb25c7aecf5d517b587e31962f6a23b465c112b03fa685f6db2629fa5099977dbe02daaea50e82e66c1825238ff63e4248fd98d831181bd6c25d9638809130cba285927aa90e4d94a140f6efdecc20d1a1f9fef5684a00e7a08c04c9ecd92d9e7d90c9c656d67e64424fd0de880062228e22fbc8f27c550130e1f95675b6b5df5db0654ca200040fe6355c927ca93ca793c912c3ecdcf152556a36b325f4b0014017648e8bb2deef97ea9a7547ec13832973a993f74dc04fbb05e8c667668a0431460f147ddb011ca78019725b208375eb5dbed72c29cd1aeca89e06aa231ce46010bca656cbfcdad6d80dca4393ceefb4875169ce74c768e0d2", 0x1000, 0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x65c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x62c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "17b31b88cd50d147badf2a1a38c77df97be64641cc7318b2ce8ccdad6a96b06c832c85fddaca6ed96ea16ef202d71b42b21893487cead96a7ed371addafba26ca026c638c16771ecfe003896b993b75dc4111355a036c11ea5ca4b1fab502e611260caea6dd386e39e886b9878b03b39dc015359b12cc7be6f8e"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4b2a}, {0x8, 0x5, 0x2, "aeb25e3e76"}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x490, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x1000002, 0x7, 0xe3f, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xec, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xc1, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811a0c000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb}, 0x94) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0xfdfdffff, 0x12c, @pic={0x3, 0x6, 0x0, 0x5, 0xb, 0xf5, 0xfd, 0x2, 0x5, 0x0, 0x0, 0x5, 0x7, 0x8, 0x98, 0x7}}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f042}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 8.815876466s ago: executing program 1 (id=5029): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="83ac09142a1c1c52b2b0af76ed55ac5f5a90fad7626515bd4e608fe682aa6c3c6b03dd7d4a7708750619a8ceba8cbcbebb40103c1ceb2031286962d6022a014bed4935a15f26ac7997d3e6b4ca25cd7b5ef2c04fc4cd76dc7d2b1fd6f4abb90b75f28fb2d40e28774afbe9f5dae39a0ace393eba6afad44d40f5be631020351f2ab477eb25b0cb0aae514af2bbc01372bea3d886601125107ebf03a2db023b274417c465fe24d6ffad8b1e26e4ac1867964ad7163326d5436ac3b6ca64d2de7f93181fef338ee40b24061b42bb76a06be7a8bc4bfda24a90092061e2b315e9cdba369c", 0xe3}, {&(0x7f0000000140)="6f54805d84693fb0e4bd638a2a2ce091deddd3ae98ca6c1d11638f4ecfdff9a238f09483b5afa1e7", 0x28}, {&(0x7f0000000600)="96e2795b93f237038d024180160b30ebbb46191d04e86ab8072f72a6b3902955684fd667ad36e1a5bca76754bd2f28a346d5c319afdad3bdb4329cb0f1a57e2075310ed7a17e840141790e8577ac298d54a7ce06ad0179709da07b045295dbc545cb9e612d71a7b508edb635233ea95720b6e05aa09cbd8eccc630130503bde098f07519258cbe6fadec7c4774daa03dec9458dbc2fd7cfe9fa9fa6bed3ee1c29cda831bec18e8033da1f89250", 0xad}, {&(0x7f00000006c0)="489107b182189c4c14cc18a7b709a56f93098d01d2b1da9de701c1142618c25b4f69afa426f2e69bcfc89e939494effd89ab7795f70557f5f359c58942e839267f43d94394b736ccbf3640c4618b9e52a8c71d8276a78663c3033550c733ca57ef3d2a158d5538d2f52f331d5266cf13fcc1f4bf7ffd7e971bc5cde61e353869b5824978f3371694c6f16b2f2f19f3a1d3f458cd4dfe058424bb7356f2d5282a2a895c2bf3f43034b0b7676432d706", 0xaf}], 0x4, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x2, 0x44000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @time={0x5}, {0x40, 0xff}, {0x0, 0x9}, @queue={0x5c, {0x8000}}}, {0x0, 0x0, 0x0, 0xfa, @time={0x367f, 0xfffffffd}, {}, {0xc0}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.499647645s ago: executing program 1 (id=5030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) io_setup(0x5, &(0x7f0000000100)) fchmod(r2, 0x109) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x10, 0x0, 0x7ffffffc}]}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 8.49896256s ago: executing program 5 (id=5031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2c, 0x5, 0x4) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 8.476529818s ago: executing program 0 (id=5032): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect(r5, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) 8.319996473s ago: executing program 3 (id=5033): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400de4ff000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 8.031766379s ago: executing program 5 (id=5034): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x6a66, 0x33}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x370e52bddda4b237, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)) sendmmsg$inet6(r4, &(0x7f00000021c0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000001980)=[{&(0x7f00000004c0)="1ab8da6de772a824d771ca9935e95a11210bb5c05e5c200a8ad9a35f994c6732e580a717c901b6a33b3d04e173dd05010033dbbeee5a38fe525224f11d00c8e9ff11d8ca92c6e3743fe11e90392e86a88a07ee23c9b2fe7311178a6b52b69ef282dba7486ef63e69afc768bacdd28cf10c019647e77ce519f60f360733e326cf23", 0x81}, {&(0x7f0000000600)="c4c2c9ea32b6072be6e8d5571877f8efdfd0034c6eaacc33d9739128433b0e8d895cdf86241f779477a14e7199906a0d10e16cebfe851f89083f23a5912ce81ccab5ea436cd1ca2d82b9dd75b89ecc33718aae5fda6536ff37229b26c8cc781b8e3a91d1177da16ddfb9791e858dd85c0a2121b024ebfc5de4b44d4b13c6555338d8ee512079a73513a30b5acf231e12b20387e1b8eb21ecbc5fc6651045c0bb586db63510ad25f7d056c54880ee384bf2b55176d873da213e0e9484b27b6c584c704b8fa6aaacccef91687f95c9bd5cf9675f3723b6e77d5dd3d803107edb7195d5819b2f3f051bc2af8f4286fc640e49aaa363eda583a366662d3599af57774ade562aa118dab2290ed06b16613f42807ee7969f8fb2329d401bb3c82b771349d473143f499d214078488e186ed6e877227ae2149f4ad3471bfd34f878567735f2e19a351124996cb0ca59a9ead1391d4ed5085a30a04a8bd830a41ffda9288951cf1431fcd19909935a9cc33881409c7579b8676b8ab7094eeeedfd2a187e6ab205af5defdefdd6ac0647013962e183211c748c9adda8ef981ea5ccc0319044b5174ef8cc5e22bddbe51c70894037fa9d397d949ac64475e442de22759704660a13a8f12f751e0feaf889ec55e8974821d7309a2d800f2b801383386f36a5cea18c36a9ed501c66b8e5f90ec53e3acdb6df0b74d29e9e672ae175c32e142d10ff4edfa1f186f6816b672e69746d45d183dca87dc50af8b2f1f7cf7cef2cd20863f32677bd20eb6024e8a6bbb64e40c54747852cc9b4efd7de6acb6abfb645deb58b29aa7c5917a5d40c0a358ec03df41a0cd7aa6c19587c937fed00231696fbe63808bf625b87336030481b18ed88f88c9e3ebffe2faa0c9bbb9ed8d1c60b9d7bfb9dd8df00015857bf877e6738285fd69e03357c79e73cf9519773e9552d966e65894557c76061cc0ed74498f3a31bf214f2b42ecc95455901ade9e9a4ce718b6f51fa3507a6feee03c86bfad2a12588ba3794ed8d5ad35c360c5041a820703673f7a9426293b336dbe2a75682e8a956824422cad90d7c2c1df53ecf8197a783ecf0b999ca6ef42c736263fb7906e3627626527c12c50516f01aa9d5cdbab51d1283522991fa8a1a718c993a4b2539689b17dd5f3a7ebf3827f8249627e41647e277c431e5779f6620f1c7cecefff0821978ce2d20c07ed309a5b98c060a1b4a45adf0851e42664dfe964f40669615e27cd8987194f8c74e14f974922c365c6ca1dd875c1f6f235529d40cafba3d2d175e0f3d22b3471c568bb7ffd4df6e1b4171d3155a16e5970653fa814523737b6c76bfb9e6a1533991702ed4edc17df5ea0746ee86c7d5289ff5c5e66b2a4144ea44d7bc85ed10f4ecdc00f384793d542b38182772eb6306d9a33745b2232c428daa009187ea512cd1dca7a3d9e7c69ec1a57a1080ec97e861498e7f7f067b34e100808a80dd3f53370b95d8faffe011f60b6756c89a21affd9fdd6f926d15dc8d4eacb0d338bc7a9d9ea9fcd0e01ac7c69f44052e7ba136a43236be63d1f59bf653574a63d04da181dbe31fdbfcdeff3e61ba6a5524a12ce601721a27d2d88ef8f2c372fa7dd0345e1d7b857b126ef90909f495b85df51db0f4cfb0c2d3f17ea4f1cea63c4cf74e8e209493c3f499f2b940088c973a581b2960c146c012d38927191c402eb3927917f4541e98db1e5ab4743622156dd4b469da8c46c176b90a9328c6451e31d470e43dce97ac76c7bd3f881cb6bc874568b4745a682cadd914f22f6d95a059275d577117219be0b99aa716f05759e74c1e3aa92040977c02b9b2b35aa8dc1531f0ea0e3277244e7807a332fbb69127db2d56ff7790aa9c2568cc2d9f54e3226e7ee50aef1f17b3dd4b4f85f8ef1266ebf3568045ff7fb98971490ac10edf3cf7ce539a710540fa787887e60cf114d1c57a14e33fdf98e1df417665b3377d1a29b71d00ab48e7e188f5a07b45ec04f408eba5ebb6b6d1a14cd69520e753d0361c2d44a91866d7a7e939611bb5ff8cb3eb5d6e7fe76262c3e51b0b320f36ac57b82c25ce1a4e4ccb2d1dcfd409a15e711adf77ae4394842ef101d78c0da8b70d3422c9634e1e72f8d326ac70af23648e54299ab84a7d51e9a4de1b4ec53e6904a49cf36b732f479ac81a85c644c8ab86f12eb052f35d440f5c251167d0d6f8ad20dd8f687e0e011471edc1f9a1e070b23ed1e6b0f59da26592634c7aee80a3a21bc80a57f3fb09e8f051a0e5541240472847221d50a24244f66af650177fd96492bdcffd231ee746574a17c41b41fa76245917e119f00cbc2f5a7908718dcf5325fc85a9bc3adf78f3d54cddbc7bd29fc92756fa703eb5fdbe16444d2c1825c06fa5894ee88696ec691276d92616cf716dc1607a677c37cd42e08cb86518d0d9546c39529ec25e41c3237cc69d645a4d849f2e97e841202459260f9247041f2fa578fcf333bfa7f328fa0bcb22c605ac2ae417981311f2647677177a17ec705bdce3492e4c0d72ebdc5e1f23da5d78c220cdfcb5b134411a23f033a106737b3eff092204708b386369109a488ae544cd618ab81baf3f84bb1f0415883ebf114523220fb447a2146922d1eb6831ab07e90acf3c65bf1fa8e2fce3800e7af46c67a480b9393eec82fbdf9e81e7a870672582cd66f03eba9beaff0afd716df8572b670f684a593e3e84c3d28c75bf02b4ab817bfcfc3a67d705e1bf02ec32a09e401daf31461988f192490d9b3c3c3f7e11b3c526cf4e673f205db21c37e70552c73fc15bd180a876b045cac799a979ea95536950793237a43d82398930fd1a7f8405a1a0d9e0d023a91af9a1557f4bf9271a4a63b2a90561f3cabd1bf21ff2fd22da6f8d2fffeab8dc9dd793cd7aa39f5cb94b623191afd05706e8902e5a87b431ee459b1603fdff6f38f2c53c4365e5961d76b76699f5b92a64419da7f041f378ef2aed073a213857e1cb75c5aba34d666fbddb5932998cb8483e20b1a79ab0ac85fe3bb09406b970fc82aac5d7267a5d9655d2ac9683fbde21f00651bea01e88031136e4fe40cf0cd7c0039f51deaa95fd4ebf5de8fba4d0e70f4d7bf562a5d0738bd3eff7434fc75682a457fe72e7c6883fcc81e85bcce8fd3f5eb2bc16a311ce83c34aed35ad966a75773879e27c772057a375c18d64a50abfd3382679cd1091d8130cb412b09713ce1645accfb949ab5b9b101895cde1bf5e47cd6da40c69cca4984b393ff1ca0640964108ee646ae33aeaf5ab37b8fbbc2a90f8e64a7cf4c9f39e01f3eff0937b83af2d93b4d439d11ddd84582422589548850c4162948a0e1a69eb2540e9e1246f0dbf6df5ed1e5c06c300182c86afcff9468cb11bff2a4ab8ec2767a48468166761fb0e205dd07982b3ede4d621dd612f23b03953647a67b9594338cfe665eebc389037026e7f12bb2ce52482fcee11ed48425f6323ceb70c030700fc65c7a2d3787e27fd4cafa0aff0920fa0254babd7901f4c6ada8c4641790b6d6a57ab867e270623243b26de357302048920ada068e6e430d00ee38688a1fcb3001228789734923adb244e8c8ed54d748b18925715bb49e54a10d7f8dda1b5980a2816ef5a9b830cecb5c02ff374e6b379604f7d23787e465bb6a32b3e0b6b9d22e7fec683c33a72d1dfd05d196dd139982d72cd04b4ac481238d9da71f7be547bcd3c51379d04583a89afd472cd13f08734b39f40622cb26a17c78eea36c3ebd108248762c6c0305177b875acea7dd638fb8b51a796bb82c3524b161599b7ebe34559d0266c66161ee982f01e1ff339f1f94aa68c6429d12a7a5daa00c367075ddaddba87b3f4e5acca928c926535a08cb4ad05c2841f18d7a9d2addb608599c81121cd559c6846c7c870e119ee108e6948799c8ccfe5a741ac3f37141a7142d496f76da40838c2db650b3146e689f858d0f938c5122af5e0ac97da5f7ecc90c3536e14fc6db9bbcc119817c55f891064f226564d0d5899b0fd8443f33d621c6010cbc4f45bf160c3d2d6fbceb4cdf802c8f2bd99bbeab340e171a9702622e3e9304041e349617c015be43576810f54225d8d9b98050aa864a455546dbe0653e2513af435816a1b16d5fb0278dfe2faa3ccc54e175bac0bad4540ac13aede6dc7cb760e00d5297056fc2368f399f1db0d3bdba15532adc9aba8f89c5a0a453322d31eb9b34cd21fbf49d7646e01db938d0ca9d700136510e4d6144b78bacdd925f4cb1567bd924076a7235461c9445cbaa67251f105d5bbab412f293b5c26e074ce3736d51c07e815c1bffb64fa3ef43fc3a7e5b6e6679ce6a91d17344de6865d1f72cdb0443928418f4c47cbf18d6db50ffe46a51cb923955958da90d0cdf4681079a47e54307cd5d6dcb9b7f542eb3c0db033abd98bc16fa6595e9dcb68cd0a2a4089f22bf6c5d78e6dff7ebd9aadfb7b8756fc2c2eac8dd853c1d72b1a197c394ce8361c12f75e24d348c854717fb331cf5e6cb4c8c6d1ba013a0de37d05e2a192481152ce7dea7da25a1ae4e7769b3a987ac3ad1d3ba930d6945fb1ee6da9498d123e598be8525a7d6a6a6efacc68d6725e1ce0fe3d3787d7c29b31edac9bb2930b9dc044b6889d4cc135f69105d5b04573ab23405592c2bd38ed18b427a1147698be581cf3a42e324e492f9518dabf75c39afeee3263736bc0becb019bce1d7d2f99abcb14667835b07d6aee723b0b243551d05d11d2133d28a7518b567ed7dd53e20d6280ec063b71c9a15f363ce2ac057464fb7129140ef0d328381681347b553ce39b67277ad89f4427c3c09e0462069b1c20d6716f69cc7e4b4e5e016a9083c3b6e8fbbd26f01920603c7f0ca2909af58eb6c2f4e268c6862a70d2907ef6c4b95d148b99a7b5cfeedadc7fcdd45f2b04fc050e5f5c2613813cc8d1a6db7b7cc424291e978d654d166f0511ca37e426174901f08ca8afea2970c1dc1ea2caa8e087fb1512328950a17d2b90796100ab674accf1fcc94a606f136358d04bbf4548d4939751b52bb1d2dff4c1637db6cbca6c21c79c9ccb8c588f62b7ecf87929106c1dae7b3bd7d9c1995e8fa877f47d43ffbcb0eb7bc4ae6a4a43136706208cf3e410d3b8f5679ef1ecad46fcf029cf59b8c80dc11b3077cdef81d305741882227b4c1133e90f72ea121c77d9291a323ba37f821044910ded2bad21df11d1124ad5456166beb634be0bb8046effb035a07cda7d54150081e9ed55a58f85470eee250b8b98d19b1fbbc815addf41b2a19d451f8431f206539b56a8e6a90e5e5157fbc2dd9ccc5ca4d11ce9c44d2d3278a9f3d0b7f7eb4f3c783189824b161f1b4229405f1560f1773e9af0740eed01375ca84dcdcf136c97341f820e320ba912fd35c8b66f9f236444578aff9269c682f365103dc7284a8b63c14c9e0bf090f52556547422190735fa535cca8d5f5795090eaa543553fd720bae45fa413b83913e87b5444e373dfaa4fb4f19c4ac7acbaf3339a295762e55b7a6134f5a7388e72775ac6d3bf36a79a663085b927b38b28010adb0849ea9cd3eecaeeb945758b3de07b7e5fb46f40f77dc9de82c044623e3a7e61775a3e65e86496236dc4b52934202fdc6849086ca22482492873c8abb72ea9734a0a6c26f48f4de97e15b96ee8439ac46fe0a924b7a5f1646eb0c15f96e77d2334c0698daf01f7aea2eddb1f52f91ee8edde7046f9db4b09525dbb114aaf8ec35427d2677a2af6d80f304b2bb947133e67585e35a72109e50e29237ae0e0343271396b2a4a00d2830da0ee68a", 0x1000}, {&(0x7f0000001600)="a7ca2d7561fa69d216d5f016a73f2746e11cd10430a6bc2f7a6d5807371c0523bd87bfa49ff0373fbf5b41e6eadc0a79b20d9897ac0e0853206483f2c2a043ca8b58c0280034ac6777cc103f5353493d480a0680c309081af4540ca4481f9ebe29eb5c786b679d7b566288d59bb29ab8a261bff45f59bbef04ef4c903907f37a9f0ddd42", 0x84}, {&(0x7f0000000580)="8f5f26051aac4c0a10bfe2b40754baa41c29069fbead36bffbca1eaf19ac81656bb8c0fc8dd29104bbbd8b901880762780f657", 0x33}, {&(0x7f00000016c0)="cfb3d938f2033b56e6a824e8eadf125272090f43a3de69ee5df359401b6ce99f3ab5848506dd9de23fb85c4cc2a5a64f00b3f565d97bd87eb11af7485f40e48faad0e0e0f46f3a84c18ad1755e0c868f7e78d47b92196aee9283ec1d2df50b59", 0x60}, {&(0x7f0000001740)="5b410d4943cb97303e686e8f64df69d2f3d0f357d8be734572cb0553e420a5c1e85131fcdc049807e58a2b06e527b08092b4a24b8cc2814b73685c0664a9a8bd5f62113c7b1665d3a854aba1ad57caf3f47de8cf831aad97bc91e61a142268de06da9eb9985ba9d4b3b16918406d419510163c32fa7e5e82ead2aeed4222f8784cb24d2eadb7", 0x86}, {&(0x7f0000001800)="a43f523fbde46f8069c77d57992f50000f18b06bda49eab603809f905c1410adfb9ee00107b6cb4edcd961c1a048de00343d73545470cf93d42aa88b378185e17ca6285c8ad2ea252cc84ce5d61d4f3ea758932b88adfaf4706cc753dec761e254743a52067c042de78c492aa43b7500521002b6206c06b163978908a2431912f9de09b652beb5c9d96884ecf2381723431a2924d613504779b44ec9e85cc3270502b462e764ccd47e04d59dea2cc9", 0xaf}, {&(0x7f0000001900)="b6ae02ac584bbf2a0445f5949720647e04458bf089d9316642e23746df41015ce3bdb27a877ab42187bfba5a6cf3fd78d1f71f9b1aeb9f714bc8a1aec93937a42bb88338cdeed03e3c67a6e6d54efb1101408b5f418253331037b6d2b754bb488772de7c0e5adde233e4f51486b389e5", 0x70}], 0x8, &(0x7f0000001a00)=ANY=[@ANYBLOB="980000000000000029000000390000003a10010700000000ff020000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000001fc01000000000000000000de0000000000000000000000000000ffffac141436000000000000000000000000000000010000000000000000000000000000ff40e149000000000000000000000000000038000000000000002900000039000000290402080000000000000000000000000000ffffe0000001fe800000000000000000000000000002"], 0xd0}}, {{&(0x7f0000001b00)={0xa, 0x4e20, 0x2f, @loopback, 0x9}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001b40)="29c35133ffe4e0a42368e9925e33c844c043b9889727bba227ef7a003426d727eb64291897c9e2b2c51670d7d6c5124bcbe77ba90d79688448b090c1c327856e586e0bf9453300cc37f9515cf29ce0846c1c9b4e4f60a89454653e8a536903ca81911bcbfee8f1593dab0175abe949bfa3938faf269c8a7b", 0x78}, {&(0x7f0000001bc0)="f6de3cd1718b43ac664d918dd0189aa4f9d6cbe399c5ea30903aa220ffca6912cc45298b926b155e19300a761a7ab3f3900cb8d7b2e2ff758936252f0350cbd37b11438a0607d0529d0efe9b43e629eba0056f19fa6e05241848528b", 0x5c}, {&(0x7f0000001c40)="8074dcc0d22e92d092e38478b1c9589d53b9b7e58fc384d43958bc6980de00dba63f081656fc7085f35b21e1f48e2c325d15f2d8d2c1e8958aa511c745c3f897a33c98db37f52b4d8de42dd29dbbf538f13020a12c898b", 0x57}, {&(0x7f0000001cc0)="bbdae2f4aba420262a947adb24336b679c45918bc763dab497d677cde70cbcd5e2a2f727d13aadb4435669b50270f23938", 0x31}, {&(0x7f0000001d00)="88c41bec8dffc14e8aab9561c1938012bebcaf46009b7323f00ad672e66c7ccb7c67e31aa959c44c25acca6c21a7fd80ce906b9b1872e6cf383735f832e96c5a376e94ca4f7df67962aa52c6bf16dfc5158bb4341c6bf95905150fad4008dc83be995346598d51e5e3e903379323844ecdcbdd4ea6975a657166e51d64946b8a06452f686a5e15ab5ab181", 0x8b}, {&(0x7f0000001dc0)="20b6cfa78612181d14420a5f529b8810140c5f3c2e055b8eb45fd1b6fbc2a664b705ca615d8245374357457182c8207085fe636b6cad4278902e264e31bdb7f6f7fc9b599a67f05051d6195808d62cb85e17738e22649201d837819b7e2f0ceccb6b54b1cd048c644fa1903940bcb9c2461a90bbcc0ce70b9b2af9bbf98961f31e517a03c450126427adb3b3c32d2aa34646282e94850b13e63e0a6bb4e3eb4ef1c57c0d28a6412fc81cba31a5109f2174357a20", 0xb4}, {&(0x7f0000001e80)="f9f652ecd4868558db7ec0bf75f9e8335348770a7e7551aeb0701d711601601d662a9ced95c5364acb83e7831b8f32832bffdc28905051c9", 0x38}, {&(0x7f0000001ec0)="e971c4b4198a31204fa1f720c0859435f318117591f5f181c1b8cab2494ece9a69c23893caefcff74180e988c0b81365d733b73f49e595bb2f23540ac142a89d2eb50262f25e31b15d6a8aca1bab7c3e56e3e0486d15a622ffb931b53668bf509aee12524c8013d5ab52b1c43fad965ff21ace2b7be8fd48bc75f79f10007bf79db1c7c0dc5e2538361bde5183ff863fb134f764e71f01c777879f275c", 0x9d}], 0x8}}, {{&(0x7f0000002000)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000002040)="dab92956c2c07db8fcaf28770688b29749466f28d530b4a1aff9c3df0dbe0182660785db6186e8f5a2d223a0df36e52fc32eda205c02fb90891ba6c307aba3c696004f6635398b47772589f2fd72f9c7a1c32d540ddd260059695885992a092de0cca488e261f3886f542c137f89c82914e3261ef655fec449d50d51", 0x7c}, {&(0x7f00000020c0)="9d3cd2fe2a7911cd9bcb79a5335be72d459075690b03a8fa4cc4a2184287ef5f86368284854c4aa783c100d381f80969561f8ef721012b6f61c21e35fdee3ad554b9f59c212029b92f47cefeb7389e04c8054559fb340cf720b66ba9b9e4fec208fee9ab1ee139dd774e2815a944571d54fb4a6d24d325364216070c3878123766250a810dade6bff2bd70a7f0a4df3df4", 0x91}], 0x2}}], 0x3, 0x0) r7 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = fcntl$getown(r6, 0x9) ptrace(0x4208, r10) syz_io_uring_submit(r8, r9, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0xd4, 0x8}, 'port1\x00', 0x81, 0x60000, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3}) io_uring_enter(r7, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 7.891394519s ago: executing program 3 (id=5035): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0xf44f, 0x0, 0x0, 0x34d}) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x1b, 0x4, 0x71, 0x20, 0x45b, 0x212, 0x1836, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc, 0x80, 0xfa, [{{0x9, 0x4, 0xc4, 0xc8, 0x0, 0x84, 0x40, 0xa0, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 6.592552502s ago: executing program 2 (id=5036): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, 0x0) (async) ioctl$I2C_RDWR(r2, 0x707, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(0x0, 0x8001420, 0x0) (async) mknod(0x0, 0x8001420, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/197, 0xc5}], 0x1, 0x2, 0x4) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/197, 0xc5}], 0x1, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)) (async) io_submit(0x0, 0x1, &(0x7f0000000040)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x100000001, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0xffffffffffffffff, 0x6, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000001300030068617313135972439ee11be35ad5f687683a6e65742c69666163650000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r6, 0x1, 0xe}, 0x8) 6.413005105s ago: executing program 1 (id=5037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 6.269767245s ago: executing program 2 (id=5038): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20044800) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffff6176, 0x80000) read$usbmon(r2, &(0x7f00000024c0)=""/43, 0x2b) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') prctl$PR_SET_FP_MODE(0x2d, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x7, 0x2, {{0x1, 0x0, 0x20000001, 0x96, 0x2}, 0x1, r9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x4000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) r10 = fanotify_init(0x202, 0x1000) fanotify_mark(r10, 0x1, 0x48000013, r4, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) ftruncate(r3, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) 6.254281417s ago: executing program 1 (id=5039): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @local, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, &(0x7f00000000c0)={r1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1}, {&(0x7f00000005c0)="ae78", 0x2}], 0x2) r6 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) utime(0x0, &(0x7f0000000100)={0xff, 0x3}) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getrlimit(0xd, &(0x7f0000000140)) close(r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x9, [0x7, 0x800, 0x4, 0xd8f, 0x5, 0x3, 0xca, 0x5, 0xd99]}, &(0x7f0000000080)=0x16) 6.202398049s ago: executing program 5 (id=5040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)="c2b2c2845878e06770d619d3e9eca0e581d43f7444a57c65dd68a353d6ed418950ce931df506fbc501a2e77fb801ed1410c5dbcbda39aba16fa6079b0edc1a0813efd8aab7db80b981a5a62c232203d9917f728e13cbdc0bae21d8be5c949fb9c1294a947110f6536e0a70eab741daf1ea6dbe8d53d04da5fc73c1faadb4946cfe1bfd35d1084efb2f837823a0ef62475626159337805df4505b272a92879ecc4b05536afd0bd7e4ddce3e5dc65d8e8e4d3b0d08f251614e2e63b3a1", 0xbc}, {&(0x7f0000000640)="84b6992c8c06a69aa3f1bb35f450c791da67ec6906b97ea51bdf54a11b96d6a8ee3883ede75d7bc6494c520c442b650674606426de486e6ba909679b13ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xba}], 0x7, &(0x7f0000000a80)=ANY=[], 0x30}, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x2b, 0xebec93e830fd2194, 0x1}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) 4.70848382s ago: executing program 3 (id=5041): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) 3.828518316s ago: executing program 0 (id=5042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 2.799754673s ago: executing program 2 (id=5043): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000380)="ab1ac9b7291323053c4ad5e7d1cf02e955bf93c00ba39538d801e93c61655c69819cf9d96a1e489343e4f9678afb37ce2b0923230716e92f2e852c2bd12e1d5086f1ed5d0c61b0cb0dfd6f19bdf60cde6ee1bfe0d7d3698f3969151dbe884060f530df68f2f8f24896d929cc51a17823478de400efd6de7327ea5018f0f24d0bb03a5b04922afc227e", 0x89) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgrp(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x1000, 0x3, 0xffffffffffff34df, 0x9, 0x9, 0x1, 0x3}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = landlock_create_ruleset(&(0x7f0000000280)={0x6000, 0x0, 0x1}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x2000}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) 2.759157871s ago: executing program 0 (id=5044): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = io_uring_setup(0x78bc, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x17, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x2}, 0x1) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x12) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010080cf8bed20d90f25004029000000010902120001000000000904000000cafb1a00"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x0, 0xf8, 0x1, 0x0}) 2.664490546s ago: executing program 1 (id=5045): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008a1150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x4, 0x80001088, 0x73}, 0x2c) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 2.32769625s ago: executing program 3 (id=5046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000300), 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000005c0)="dbae7395d8c6299a23c2883fb09bda9e8a13625c7b4af50ac905a38813136ce3908576be8a6ab87e01efe417c8edb97085d12d9b272f1065eb75abc6ff882c1e10deedf36f6ca8d2231ae532a72d900a2d4f894aa693bd025cfdfe45074556b20146f14bb31e6d0b8546ddefd40d60ecea7ea73cc08829a31bbb4bf1bebd3918256614536369d4ff038aa4e6541ce8bd9168577445a81c732efb4ecfb620e35add9e319dd1eb2baff8647f7d4ffb9260d9f35e7e2425bc2221977181abb7afe69dcfe7", 0xc3, 0xfffffffffffffff9) add_key$user(&(0x7f0000000400), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f00000010c0)="2aeba3188c70b565b8e7ddd0b61616acd8ab81b50c685c2b81ea2d9080cf90dde17fbcbd2b6493e690baab9388bd7323abb5e6322a8919f6f4a5e4866c26686414cf25c2957c48e9d36ce94b2f08f36fe41cfe35ace9fddd36c566ed8b0d41dd74ac05f7229d920d82a838b5d01e12cece21cd169ab8c5252e81f9ac2e0dc2e4a408fbdbbda8341a82eca8195b849118e1e0cc86ac3f61ea3dd00d1a791a7a525abc0e239499bd8b1832e1ce2a655d7f032894d00297f8b8e501a9f7171823771d5e8dfae3b51cea831584d9e217105e1741367f49865b62ac7cf74a5f9ca5390f425d26953fc8766eb7b3fc16a86604be87d345b56d2a05871ddef9a0495ff2fe6c229a2e0037249a88e456c0244bbcc009b93afa51d933352523c87ba687fa1a97084a734931ebdbc2d8351d3fde2ed3ce8d883b2abd35f60cdc4a377b4c74952bcfb0ad0de30fc5324ff26994a66b5640a4a693aa4abf6668a218f44cd17c7f09dc46f432a923dd9525cf582e7bc8382228362d9376baf70b0c46e16bb8db565191d1da766739ba0747234651d04b2455a4d67a47bb9777fd379d24248934a0f4f339693dc4d7a8c83bc5987a095e6922aac894196beb274061f23315db084602b0c0ef1376e5ab546d52c93a3208a9c48b1e041104a53429a941db3e140ea31f868d324bcd4dae5f9a6456e4e28228e34fbe137fbe70b32e3fdca03164b1f57c440c5edbd33f59eb87b2f8a3d404d852880b58bf698e98e03100caee20998c76299c94d7f00ad106114f77740a067769929bab4c3c8f6affe894583fd650af7f863c6ed9f9a40935864a89f0cb3447da1886336fcb87ea7e8873667e18d156f9593017490f02a64338592f0af8a92701bee8af515d2b0d0a26a69fe90c5d48f5e0549ac17a0774a29e9503548e63903d84bb5bf36d5bdf9f8db449afb6e41a49173a53c2318e04604966a518936e509f29a022671afb9c0fb6c6d3da587d0b6e1acd662626ee935ff5321045e3a92a13194b79b539a466a5009c5f8b1ed711a5a049c6382c8692dd4304c56d57f6ee6fa533cd93350b1ebb7a137fd0373d3f3707e357d00bd6a395fc6a42fdb067d98a4c47a35693b84002e29eca1c1af262664d6cc175a9eda31cba1317da4d38dac2f57323f03a9c86c85170eb1cad1948d58f27da74c3ab471dfbfe3dbf4394d882c43caa99de81c2e72e2794e8e3c9a06a7546876a94650fced54898b13bd8da10345481f07c4528ca0bb4ffb7041340304c3132e13c39eee54044e57e18df2bd57d1c7e58f6701450edd61050c9238e60ed32c93f03328d2e91f748f01a0c24bef0aae49e8297f6a6793db3779413772de61ed2cc8af891c2de0ff54ea390a034a54760dce01df9a0a6d79ec8213afbbce5f3c1e1eef3abaec847ed30d7422cb57c1a9082d0a384c97b67294fa2f7eae2a90f70916bded45981138e882ea05fe9009bfcc3bb3317058730801d06f7698a4b3c5b193c3f0dae54abd9fd24c4b7ee84517dc51bde164d5d95522ce9f057615028bef03de8fc212da754ce9ed6fc9893a3a799e477d987fa9b30a17139101c8e23177dd8376c499927ca69ecbc1c2975cd06f1f92c4641cf9f37b84bc74e04acc82c72fb4d4b3919832809be7c7cd3cbf77e6f71a738d67a9983bccec75fb211ebf577fd00a59a9b76c6db8410fea7e721a295c6edb116a2f87561c171067eee08f3f4a128db2f00a948ab20bb153616957030f89803b7687df902abeb8580884008dbe455c09835aa2b2c2cb1777f7840e72e3dce93396212f6a314f18c44efcfddc211d403cd30207fbcbef3971482cc768b8d08ed8a2054ede6053a0f7ab766c123b14f930d37987663c7310a83d6c5f194bea3e40e4ab437f7d4366a57374b8aa94cadbc59512303a922d760fd941dbbf3fc5ba37635ad778b0bde0e047cea73b370870cd6f13d99e1084bc35d633279ab36193a4ee86443e55b4f2269953743afde9d490055e67a84f126894477d0b8660e81169ca9049fd62207510cfba66b421ab8c534d5b758c651a74a24eebc84d4f9bfe7d4c1305eaaa5247a73ed6f8c36fbd6bc865e3aaab0399c813ad270f87039c9f2e7e3ff604dbf61ec61674976ad69e67d44fb4efb11e2d7c0039d0699ff4cf8a5ad6e45faf450bb1265b1427fea61cbfd2531ab0211b039b07defd46d5f59087b7d0ae39814d036207d33559801841ecacb9916a39177a66eb5c11843a241abef39e4d561979ec2edf07698a6e0886952ac5638e40e3a01ebe671c8ce5a4dd07737c17a72a5a00dba090d05af26d2d0b52589c335a62c6bc80e9f79ae2fe6878d9407715ba0d872d50f9abe4bb6ea44c78efac16168aa123da7ba13fd5e8ef5eaa796a71363744888da6c36c0f64f0aa34444fed33ead1f9fe5afa23f50b9f43fbfd00559caff61c3d947063a5d0c660981fb8c994b67c14ef041f460856241188b2695f3f67788a12e03fee2f3be85020b6a0b081ec93b35b758e6b8e854a2bdf8dd7e0acad9418ad2ee927e96fff193412435207e044e62fa8653d746d812e19f1da60cc482b7b79f85e3c80e8735377b26528fb8cfe56c3713a385919987d6324992184f7cfd27f6f6caf327f7014324e310028e49154266305dc7e4af1ba3b4bf4ddbf800c646dbb64f8bdf2f519ea8574037319838213cd584913c2ebf5ad67a77a93be03ce57f75619c607e7995c42d7dd522d1e3f5acd48b53095acf52124332b9369e146a75f345bd490c4a4e3ccb9950363bd5461df7272abd52f381d8f1bc89de1cbb231bcf2356afd8c6cb30fc69e66115c3bf270cc0b1707646b4f2e53e72f59a892ae42784a33f23ac416d72a019e41c01cc18febc65f175d522ac100ae12b251b48305ec428d2a019d692af36455b712465788e73677856e7c5557183dfc5a37fc150691389d21c94983fd9c757466004f18a107e5402d87a1d1a7b869f4e1abb47d4808a51ef7817ccd18045a4fa273d00c4fd8fc93f209dafb26ade0452495b7af3a8af4828afac40d45fc15e8c32b14435af23aee5e8abcea88bef550867b9b554926e85155bf88bf4ec1d0821e14ef1a797b803dd0b6eb37a9a8f1473e5bfd36c447a6cdb73ac7ca94a2741f43889fbdb3ec19f0b1a84810fb73e3ff143f5de5323a64efc8e08180b9b2762b64ae5cac3947e523c37655bd2a25709bed4ebd259e657779cb53dd5afb447a61c07d831e5f724e332340d54d71485038e2da5dc384fbfb2b4fc181a66aae3498e4ac500f8d39d14e2c7e0d9a697080045bd35fdac7fc8d173de5f68c1e10bce4787f16f0244ca99ec133420bed5ccbecfce0233f488f2711387da85872684a5698a4f739fba3872a591350fa9508b107d3bb110ef577c25c931b3dfd3e88b5c09a1ac56014780f5203a914b5d7b6c86e143e950c9197832351a2026f4fb1ba824eed3f0c8f817001f9d312bd487056d851e0945e7718be0fbdf4f92978a9c1d5d89272603ca0b5f1cf617603bf6262041bb7e65b12ac9a1cf5cb82cd950ee6fd7296432b4d7b4e37cbbe9de9283456243f22f64402531ded1b6cc29894f777adba1ca97a7e53961d16b085019e16d7d4430714e252ab56df07d834a1f7165bc3f6373c2d360797d04a87ef10c2234c2664a6ee1d01b294deca99211d6107e6a16097d5d096d313947ba93514eff530069d1b2d59687e80abc9955a1925fefb1dad19a1a31b1eee4e7e8a987969208afcb85d280d164e30b12bf68c7bfe095e782a1a02a9f63bef47bb0f7085056c851ff8962fcc014d15212b5d3d12525d3b2e7e5357360476d7a0ab0373aa27b9a69c3e035a77053490778376902ac1a2bff95c21fcd43763bcb00988e02fd758fef67b9031bceb313330fc836ebc0fd54b252f3ffb315d5d9af897a2a61b7c9a5f7d690dfb9c4235dca3e7546ddcbb08b674492e4d6fcf8290fea3f6946c41864ea5f9a7536db215214d57de8b19a412262b5ce2c4d8de6cac08874fe93015db056ff3442c7e57aae750b0cc0898d3385ea0c4b1532764f6e6584510464b32e1a3d3f01dbd74361e4cdef858f420695a67008420297cdba6b1b3ecaed2db618627ede7fadd36af163a2e000020f3279db97fa9186ca536f78c5d2f3980e5fc8e1dba4b79f4da9683432d2da19b8ea5c250fd8f1f865418badbe6647d592a6f2e3a280e9182afc53b98001e535bf61262004f31254d562a9c5ee98ad471353382aa83b47d20e25bf9c05fcb37762ea88d19991131005624ea9336ea01494672c8335f63c43c8cc8d070fc9aaa11e5cd372cae5aa81a8b1dc237c686fa11b64d01e11854dd8cc4888d824ee39d200d06136c27486c07801e6816e0becde23a7c061641d3433dd7857889a1c40a0d8e4efcd88806367f79e995d2b30f4eb530cd395c9dd3bb05557a72d3f1b517b8eb32aa8f5df099883bd7cc3b639f7d5a8247413eaa17a9127c283285b98c2140d9e1bd4a2e151428134e36e684b5ef10e32663c41e1697257e57cbc656f64046e1fde32f8e42214a8badba17bec662c67b73d5c8ee08ac68eed2a956957bbe867f196a3be741b044adbea37a069aa6dcc5169d5ec8ac693263945b4d8ae017506f4e81fad49db717172e3b417b5f3bcc8b8b2d9d122f310d01934a1bbe842713aba3ade6a1b2bb0a4103a0712bf01e44399f73c35ab1a52f2fbfae39bb4d2724d368fcfb3d3a41b1b428353d9bd7d3ccf7560519e7c77a18f2c141a903742d89e20fc72b4581ce748b25106121446a258a28ae7a319601d2c1afc649ba177d1b604983ada5bc112ac4e80b6187f859740a717150890544074a50f91983421a86fe947d6c9b9cdc71e0e8d43b0cf9755156b4f72d3d7241827fbe35879750ce87e42b851488df79ce8a654e140b774c8b79c391b72f9c0f9580a9fa891017ca833fd5dae65d0e22294485845d43345e89f805414813e21ef6e3b3e8d18a06bba9f462d00d07d1090e695b10b87cb4610d4cfd6c4c465e9291bdaa61687f2cfaba624dec1b1c21a59525cc7f20702bdd5182c9edd5f533455acf7caba09f8f5c04669bafb304800efb49bc1e97c49fbe5c58561380afaa6b340dbdf884f8c34df265847f9e2b28c7d04ded54889304bd740caa33269f19be5b4d6ba61d0bcb565fe2b1454cc4e9a08ce083e79cc0b4293368622aabf27348d5a3526a5a552528668a1ddd9898e51cd415a267e9d851245502f4bacf3feecaa4076962760f17070390538d7f2373e1cb7c1580f896e605ff551d8822e843d4cf490d493fd9132027ce2452ffa7b9143b7d5cd55e288d625cda711484fdf610ae51770b3dd96485387ba55f6f6d380a22351aaa7d877927aed05826fe23aef67766252177bebcfb42fb202cea8e67a92e4f67b2202ed1f3663e4816ca13c89a8477cf1304ac2eb25c7aecf5d517b587e31962f6a23b465c112b03fa685f6db2629fa5099977dbe02daaea50e82e66c1825238ff63e4248fd98d831181bd6c25d9638809130cba285927aa90e4d94a140f6efdecc20d1a1f9fef5684a00e7a08c04c9ecd92d9e7d90c9c656d67e64424fd0de880062228e22fbc8f27c550130e1f95675b6b5df5db0654ca200040fe6355c927ca93ca793c912c3ecdcf152556a36b325f4b0014017648e8bb2deef97ea9a7547ec13832973a993f74dc04fbb05e8c667668a0431460f147ddb011ca78019725b208375eb5dbed72c29cd1aeca89e06aa231ce46010bca656cbfcdad6d80dca4393ceefb4875169ce74c768e0d2", 0x1000, 0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x65c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x62c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "17b31b88cd50d147badf2a1a38c77df97be64641cc7318b2ce8ccdad6a96b06c832c85fddaca6ed96ea16ef202d71b42b21893487cead96a7ed371addafba26ca026c638c16771ecfe003896b993b75dc4111355a036c11ea5ca4b1fab502e611260caea6dd386e39e886b9878b03b39dc015359b12cc7be6f8e"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4b2a}, {0x8, 0x5, 0x2, "aeb25e3e76"}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x490, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x1000002, 0x7, 0xe3f, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xec, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xc1, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811a0c000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb}, 0x94) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0xfdfdffff, 0x12c, @pic={0x3, 0x6, 0x0, 0x5, 0xb, 0xf5, 0xfd, 0x2, 0x5, 0x0, 0x0, 0x5, 0x7, 0x8, 0x98, 0x7}}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f042}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 2.186988826s ago: executing program 1 (id=5047): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = memfd_secret(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000140)={{&(0x7f000063c000/0x1000)=nil, 0x1000}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ethernet={0x306}, 0x80, 0x0}}, {{&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x80, 0x0}}, {{&(0x7f0000002d00)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000002dc0)}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xbfb7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x90}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fsopen(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r1, 0x51a9497) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1.55206755s ago: executing program 5 (id=5048): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001140)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') open_by_handle_at(r4, &(0x7f0000000180)=@fuse={0xc, 0x81, {0x7, 0x39c, 0x80000000}}, 0x10001) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000e780)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x85}}], 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r5, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 803.973292ms ago: executing program 0 (id=5049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 679.831995ms ago: executing program 0 (id=5050): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 229.559262ms ago: executing program 0 (id=5051): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8002, 0x10, 0x0, 0xb, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x78, 0xfffc, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001600)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x1}, 0x6e, &(0x7f0000000d40), 0x0, &(0x7f0000000e00)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000ec0)="8d55e40f69ad89825f4d151eb8f50cbc2c29095b60ebfbdfb244916362acdc9ff87cd8d2414667b5bea6cda7e6c9925937b738b416f66ea6fa22d387e398cfa699d68c118e8623d008fadbd7fc3c14fa7dea2d005736632ebefdf2fa7393040ebc0862d2fead63a6677ae88ddc79a57db07c738647f6b59e56b27f17c26f90b51f0a838db29bede545d6fec54bffb2", 0x8f}, {&(0x7f0000000f80)="a84a5b695c56de6d9204af3d42c34ce9ce7331e8da9ab4371292f25172f71ac7ebbe7f27101cdad70b0eeff32d474dea6bf20a63d5aa0c0b61d05d645f53fdb730745ec38a621185d2ee24cb0d91eb22f5e0e4ce8df5c38aa423bb784a1acfa8f7efe4479f2a4f5daca8300d6392e502496f0f0ddb4a07868281cb814f52cd6128e06dc588b6807f2eb108ffe59d2e2b46a7c69360520eecd2d336", 0x9b}, {&(0x7f0000001040)="9d9d7d78f74f6bcc766e58cf09b719a8", 0x10}, {&(0x7f0000001080)="29ec2dd6fc6449681b307a660f009064a5b06b5b496f15da15b59cf5d13f3d65c99fe293ff68790e6dfb90125eaf725c00391c89516ec56f5a0179a82d7fa3de76badfc94672a517427c2ac8ab3cd3227098e765815afe4f74f86195f153c3048b9cdd8e6d735e1e22cbc34a195e2a9c2745", 0x72}, {&(0x7f0000001100)="9eb2663e66bd2511e4d6102b1c485f142fcff76b7bd3024585f5fa1a94f251036d5ed46837e36ddfb708cf9db0fd005fe2e48872fc9e5a6c9999573cff32bb42d9d3191bab204724854b7e4d4c", 0x4d}, {&(0x7f0000001180)="4f32ce594db6466a867fcfe808f9f2853c33cd5348af0d73f3d1f371b530782585fb93977f900707001059609ede3b59ccce3fc7fd5cf4d592d0b775a2d5c51d5510cf73a0a7379897602fcc1f82f403648bd8308ac509f364e5a0cd533aedbb978533930ac25922fb4898c6b59bc14643fadd701ad8300bda88", 0x7a}, {&(0x7f0000001200)="a0d247f73c6c552493d3e0e5b757f56d2885c468462cfadb4cd06181c9e4b0f7bbb76e7c36d64cb10c5c12dc80c35cc2ff0b4c6b655992b6d0d20621c0fc9ad5a82d20c7873f43", 0x47}, {&(0x7f0000001280)="d68d585d5821d1e6b5c7aee7b9db0c89224f0882acb582d797d96b242067e9ec307a60522b070d54dfcd74e837af3f62a755680d8825dacd707aec", 0x3b}], 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="1c800000000600000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ee8749530b3d3089000000000100000001000000", @ANYRES32, @ANYRES16=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2], 0x58, 0x40800}}, {{&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001440)="15edcf3215cd13e70de8cda858003cedb26d49b64f0c750d3d3c75db57e043224325e90ed0615d75415bd1f2e66f941b53042783564b8be9a6de9b504149633e55fe74c679d35523c92e81797dc135b75efa9ce636e141bd60", 0x59}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32], 0x40, 0x40881}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0x313f, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, r8}) sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r11 = openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x149981, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r11, 0xc0046d00, &(0x7f0000001500)) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000007c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x8, 0x4, 0x5], 0x80a0000, 0x200306}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r13, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="d7000000200000007911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r13, 0xc2604110, &(0x7f0000000380)={0x7, [[0x3, 0x7, 0xbef7, 0x10000, 0xffffffff, 0x9, 0xfffffffd, 0x7], [0xa8, 0x17, 0x8, 0x6, 0x10000, 0x6, 0xa, 0x9], [0x8, 0xdd7, 0x10, 0xb, 0x6, 0x54, 0x7f7, 0x1ff]], '\x00', [{0x4f71, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xc38, 0x200, 0x0, 0x1, 0x1, 0x1}, {0x60, 0x2003, 0x1}, {0xc34c, 0x8}, {0x4aa, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x8, 0xfffffffd, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xe, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x100, 0xc2, 0x1, 0x1, 0x1, 0x1}, {0x4bc, 0x400, 0x1, 0x1}, {0x2, 0x80000000, 0x1, 0x0, 0x1}, {0x8c8d, 0x10, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x4}) 0s ago: executing program 2 (id=5052): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500000000ffff80"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): ing_register+0x925/0x11b0 [ 1789.206102][T23577] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1789.206119][T23577] ? ksys_write+0x22a/0x250 [ 1789.206137][T23577] ? __pfx_ksys_write+0x10/0x10 [ 1789.206156][T23577] ? do_syscall_64+0xbe/0x3b0 [ 1789.206175][T23577] do_syscall_64+0xfa/0x3b0 [ 1789.206190][T23577] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.206205][T23577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.206218][T23577] ? clear_bhb_loop+0x60/0xb0 [ 1789.206232][T23577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.206244][T23577] RIP: 0033:0x7fc92418ebe9 [ 1789.206256][T23577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1789.206267][T23577] RSP: 002b:00007fc924f39038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1789.206282][T23577] RAX: ffffffffffffffda RBX: 00007fc9243b6090 RCX: 00007fc92418ebe9 [ 1789.206291][T23577] RDX: 00002000000006c0 RSI: 0000000000000018 RDI: 0000000000000003 [ 1789.206299][T23577] RBP: 00007fc924f39090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.206307][T23577] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1789.206314][T23577] R13: 00007fc9243b6128 R14: 00007fc9243b6090 R15: 00007fc9244dfa28 [ 1789.206333][T23577] [ 1789.454327][ C0] vkms_vblank_simulate: vblank timer overrun [ 1789.536607][T23582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1789.545689][T23582] openvswitch: netlink: Flow key attr not present in new flow. [ 1789.650806][ T5874] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1789.816662][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 1789.822931][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1789.867507][ T5952] usb 1-1: USB disconnect, device number 6 [ 1789.910318][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1789.925670][ T5874] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1790.026829][ T5874] usb 6-1: config 179 has no interface number 0 [ 1790.040343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1790.127774][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1790.164370][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1790.204389][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1790.248668][ T5874] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1790.397513][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1790.420462][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1790.870666][ T5874] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1790.891620][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.070557][T22959] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1791.080287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1791.504688][T23580] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1791.606655][T22959] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.636416][T22959] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1791.732250][T22959] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1791.773883][T22959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.800782][ T5874] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input136 [ 1791.941459][ T9406] usb 6-1: USB disconnect, device number 19 [ 1791.947526][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1791.947565][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1791.967490][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.967568][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.120264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1792.165834][T22959] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1792.347026][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1792.347048][ T30] audit: type=1326 audit(1754893249.859:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1792.393325][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.434482][T22959] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1792.464037][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.474877][ T30] audit: type=1326 audit(1754893249.859:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1792.540534][T23594] delete_channel: no stack [ 1792.556657][T23587] netlink: 'syz.0.4649': attribute type 17 has an invalid length. [ 1792.588308][T23587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1792.613305][ T30] audit: type=1326 audit(1754893249.859:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1792.638721][T22959] usb 3-1: USB disconnect, device number 114 [ 1792.737482][ T30] audit: type=1326 audit(1754893249.859:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1792.860478][T23600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1792.903785][ T30] audit: type=1326 audit(1754893249.859:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.001002][ T983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1793.017446][ T983] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1793.042083][ T983] usb 2-1: can't read configurations, error -71 [ 1793.084106][ T30] audit: type=1326 audit(1754893249.859:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.160279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1793.200581][ T30] audit: type=1326 audit(1754893249.859:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.286661][ T30] audit: type=1326 audit(1754893249.859:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.312002][ T30] audit: type=1326 audit(1754893249.859:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.335680][ T30] audit: type=1326 audit(1754893249.859:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23588 comm="syz.2.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1793.374138][T23600] tipc: Enabling of bearer rejected, failed to enable media [ 1793.855097][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1793.864552][T14506] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1794.033249][T14506] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1794.043397][T14506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.115719][T14506] usb 1-1: config 0 descriptor?? [ 1794.149521][T14506] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1794.200254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1794.550443][T14506] gp8psk: usb in 128 operation failed. [ 1794.590566][T14506] gp8psk: usb in 137 operation failed. [ 1794.604663][T14506] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1794.633355][T14506] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1794.646072][T14506] usb 1-1: media controller created [ 1794.688336][T14506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1794.831473][T14506] gp8psk_fe: Frontend attached [ 1794.884125][T14506] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1795.023485][T14506] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1795.060319][T22959] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1795.240263][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1795.270304][T22959] usb 3-1: Using ep0 maxpacket: 16 [ 1795.405749][T14506] gp8psk: usb in 138 operation failed. [ 1795.423258][T14506] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1795.435155][T14506] gp8psk: found Genpix USB device pID = 203 (hex) [ 1795.493454][T14506] usb 1-1: USB disconnect, device number 7 [ 1795.936937][T14506] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1796.280238][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1796.686046][T23639] FAULT_INJECTION: forcing a failure. [ 1796.686046][T23639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1796.870669][T23639] CPU: 1 UID: 0 PID: 23639 Comm: syz.5.4661 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1796.870692][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1796.870700][T23639] Call Trace: [ 1796.870714][T23639] [ 1796.870719][T23639] dump_stack_lvl+0x189/0x250 [ 1796.870740][T23639] ? __pfx____ratelimit+0x10/0x10 [ 1796.870761][T23639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1796.870776][T23639] ? __pfx__printk+0x10/0x10 [ 1796.870803][T23639] should_fail_ex+0x414/0x560 [ 1796.870824][T23639] _copy_to_user+0x31/0xb0 [ 1796.870840][T23639] simple_read_from_buffer+0xe1/0x170 [ 1796.870861][T23639] proc_fail_nth_read+0x1b3/0x220 [ 1796.870877][T23639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1796.870893][T23639] ? rw_verify_area+0x2a6/0x4d0 [ 1796.870908][T23639] ? __lock_acquire+0xab9/0xd20 [ 1796.870925][T23639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1796.870939][T23639] vfs_read+0x200/0xa30 [ 1796.870954][T23639] ? fdget_pos+0x247/0x320 [ 1796.870967][T23639] ? __pfx___mutex_lock+0x10/0x10 [ 1796.870985][T23639] ? __pfx_vfs_read+0x10/0x10 [ 1796.871001][T23639] ? __fget_files+0x2a/0x420 [ 1796.871015][T23639] ? __fget_files+0x3a0/0x420 [ 1796.871024][T23639] ? __fget_files+0x2a/0x420 [ 1796.871041][T23639] ksys_read+0x145/0x250 [ 1796.871058][T23639] ? __pfx_ksys_read+0x10/0x10 [ 1796.871077][T23639] ? do_syscall_64+0xbe/0x3b0 [ 1796.871096][T23639] do_syscall_64+0xfa/0x3b0 [ 1796.871112][T23639] ? lockdep_hardirqs_on+0x9c/0x150 [ 1796.871128][T23639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.871140][T23639] ? clear_bhb_loop+0x60/0xb0 [ 1796.871155][T23639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.871166][T23639] RIP: 0033:0x7fef83d8d5fc [ 1796.871178][T23639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1796.871189][T23639] RSP: 002b:00007fef84c8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1796.871204][T23639] RAX: ffffffffffffffda RBX: 00007fef83fb5fa0 RCX: 00007fef83d8d5fc [ 1796.871213][T23639] RDX: 000000000000000f RSI: 00007fef84c8b0a0 RDI: 0000000000000006 [ 1796.871221][T23639] RBP: 00007fef84c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.871228][T23639] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1796.871236][T23639] R13: 00007fef83fb6038 R14: 00007fef83fb5fa0 R15: 00007fef840dfa28 [ 1796.871255][T23639] [ 1797.320248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1797.490523][T14506] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1797.640698][T14506] usb 4-1: Using ep0 maxpacket: 16 [ 1797.650073][T14506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1797.698502][T14506] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1797.746214][T14506] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1797.789359][T14506] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1797.828471][T14506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.859019][T14506] usb 4-1: Product: syz [ 1797.877656][T14506] usb 4-1: Manufacturer: syz [ 1797.898609][T14506] usb 4-1: SerialNumber: syz [ 1797.928685][T14506] usb 4-1: config 0 descriptor?? [ 1797.945587][T23635] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1798.028974][T14506] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1798.056569][T14506] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1798.092510][T14506] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1798.117917][T14506] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1798.154466][T14506] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 1798.260684][T23654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1798.348918][T23654] tipc: Enabling of bearer rejected, failed to enable media [ 1798.360305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1798.600853][ T9406] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1798.726325][T22959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1798.760356][T22959] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1798.773263][ T9406] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1798.778376][T22959] usb 3-1: can't read configurations, error -71 [ 1798.827661][ T9406] usb 1-1: config 0 has no interface number 0 [ 1798.835912][ T983] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1798.880827][ T9406] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1798.903824][ T9406] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1798.932205][ T9406] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1798.988813][ T9406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.015836][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1799.085025][ T9406] usb 1-1: Product: syz [ 1799.097803][ T983] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.118744][ T9406] usb 1-1: Manufacturer: syz [ 1799.130302][ T983] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1799.152967][ T9406] usb 1-1: SerialNumber: syz [ 1799.160839][ T983] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1799.171403][ T9406] usb 1-1: config 0 descriptor?? [ 1799.179034][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.227882][ T9406] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1799.255461][ T983] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1799.298600][ T9406] vmk80xx 1-1:0.255: probe with driver vmk80xx failed with error -22 [ 1799.361129][ T5874] usb 4-1: USB disconnect, device number 11 [ 1799.369172][ T5874] mcba_usb 4-1:0.0 can0: device disconnected [ 1799.400247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1799.505150][T23663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.528608][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1799.528627][ T30] audit: type=1326 audit(1754893257.029:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1799.528635][ T9406] usb 1-1: USB disconnect, device number 8 [ 1799.586451][T23663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.791204][ T30] audit: type=1326 audit(1754893257.029:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1799.817078][ T30] audit: type=1326 audit(1754893257.029:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1799.839879][ T30] audit: type=1326 audit(1754893257.029:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1799.873416][ T30] audit: type=1326 audit(1754893257.029:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1799.933637][T23663] delete_channel: no stack [ 1799.950515][ T983] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1799.969252][ T983] usb 6-1: USB disconnect, device number 20 [ 1800.072409][ T30] audit: type=1326 audit(1754893257.029:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1800.192814][ T30] audit: type=1326 audit(1754893257.029:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1800.215743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.262683][T23685] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1800.437371][ T30] audit: type=1326 audit(1754893257.029:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1800.440269][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1800.556260][ T30] audit: type=1326 audit(1754893257.029:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1800.580693][ T30] audit: type=1326 audit(1754893257.029:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23659 comm="syz.5.4668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef83d8ebe9 code=0x7ffc0000 [ 1800.603219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1801.424011][T23710] syzkaller0: entered promiscuous mode [ 1801.438492][T23710] syzkaller0: entered allmulticast mode [ 1801.480465][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1801.512998][ T5874] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1801.822023][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.839443][ T5874] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1801.859839][ T5874] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1801.912217][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.953236][ T5874] usb 6-1: config 0 descriptor?? [ 1801.958765][T23719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1801.982161][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1802.011078][T23722] tipc: Enabling of bearer rejected, failed to enable media [ 1802.029037][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 1802.048787][ T5874] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1802.058328][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1802.067930][ T5874] usb 6-1: media controller created [ 1802.076113][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1802.121231][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 1802.140593][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1802.234293][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input137 [ 1802.260640][ T9406] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1802.320092][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 1802.327254][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1802.430345][ T9406] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.441552][ T9406] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1802.470227][ T9406] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1802.480373][ T983] dvb-usb: bulk message failed: -22 (1/0) [ 1802.486187][ T983] dvb-usb: error while querying for an remote control event. [ 1802.515056][ T9406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.520537][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1802.640230][ T5874] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1802.700629][ T9406] dvb-usb: bulk message failed: -22 (1/0) [ 1802.709080][ T9406] dvb-usb: error while querying for an remote control event. [ 1802.787141][T23721] kAFS: unable to lookup cell '.,' [ 1802.812480][T14484] usb 3-1: USB disconnect, device number 117 [ 1802.820380][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 1802.828249][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1802.848998][ T5874] usb 2-1: config 2 has an invalid interface number: 22 but max is 0 [ 1802.896391][ T5874] usb 2-1: config 2 has no interface number 0 [ 1802.903996][ T9406] dvb-usb: bulk message failed: -22 (1/0) [ 1802.909981][ T9406] dvb-usb: error while querying for an remote control event. [ 1802.925701][ T5874] usb 2-1: config 2 interface 22 has no altsetting 0 [ 1802.939851][ T5874] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1802.951815][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.965290][ T5874] usb 2-1: Product: syz [ 1802.969561][ T5874] usb 2-1: Manufacturer: syz [ 1802.975854][ T5874] usb 2-1: SerialNumber: syz [ 1803.090344][ T9406] dvb-usb: bulk message failed: -22 (1/0) [ 1803.096444][ T9406] dvb-usb: error while querying for an remote control event. [ 1803.208792][T23727] netlink: 'syz.1.4680': attribute type 1 has an invalid length. [ 1803.262900][ T9406] dvb-usb: bulk message failed: -22 (1/0) [ 1803.278628][ T9406] dvb-usb: error while querying for an remote control event. [ 1803.322050][ T5874] usb-storage 2-1:2.22: USB Mass Storage device detected [ 1803.361351][ T5874] usb-storage 2-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 1803.473671][ T5874] usb 2-1: USB disconnect, device number 102 [ 1803.508921][ T9406] dvb-usb: bulk message failed: -22 (1/0) [ 1803.554398][ T9406] dvb-usb: error while querying for an remote control event. [ 1803.560405][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1803.657853][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1803.667157][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1803.752000][ T983] dvb-usb: bulk message failed: -22 (1/0) [ 1803.762747][ T983] dvb-usb: error while querying for an remote control event. [ 1803.930345][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1803.936372][ T5874] dvb-usb: error while querying for an remote control event. [ 1804.012382][T23748] input: syz0 as /devices/virtual/input/input138 [ 1804.034295][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 1804.121105][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 1804.153032][ T5874] dvb-usb: error while querying for an remote control event. [ 1804.398736][T22959] usb 6-1: USB disconnect, device number 21 [ 1804.464658][T22959] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1804.600543][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1804.962698][T23755] netlink: 'syz.5.4686': attribute type 1 has an invalid length. [ 1805.212098][T23755] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1805.430399][T14506] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1805.640527][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1805.778570][T14506] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.000086][T14506] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1806.075442][T14506] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1806.148473][T14506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.230038][T14506] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1806.303534][T23764] tipc: Enabled bearer , priority 0 [ 1806.311744][T23764] syzkaller0: entered promiscuous mode [ 1806.318002][T23764] syzkaller0: entered allmulticast mode [ 1806.335593][T23764] tipc: Resetting bearer [ 1806.431992][T14506] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1806.443584][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1806.443604][ T30] audit: type=1326 audit(1754893263.979:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.445827][T21600] udevd[21600]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1806.536565][T23758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.552621][T23758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.583627][T23758] delete_channel: no stack [ 1806.621387][ T5874] usb 3-1: USB disconnect, device number 118 [ 1806.627491][ T30] audit: type=1326 audit(1754893263.979:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.667754][ T30] audit: type=1326 audit(1754893263.979:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.680247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1806.803716][ T30] audit: type=1326 audit(1754893263.979:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.860695][ T30] audit: type=1326 audit(1754893263.979:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.896636][ T30] audit: type=1326 audit(1754893264.029:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1806.955876][T23762] tipc: Resetting bearer [ 1806.990487][ T30] audit: type=1326 audit(1754893264.029:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1807.004882][T23762] tipc: Disabling bearer [ 1807.013384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.023082][ T30] audit: type=1326 audit(1754893264.029:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1807.065252][ T30] audit: type=1326 audit(1754893264.059:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1807.100682][ T30] audit: type=1326 audit(1754893264.059:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.2.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9bb8ebe9 code=0x7ffc0000 [ 1807.720252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1807.959577][ T983] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1808.357352][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 1808.760235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1808.980243][ T983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.000392][ T983] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1809.009613][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.011924][T23793] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1809.073529][ T983] usb 4-1: config 0 descriptor?? [ 1809.366566][T23798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4696'. [ 1809.494786][T23798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1809.507973][T23803] macvlan4: entered promiscuous mode [ 1809.528438][T23803] macvlan4: entered allmulticast mode [ 1809.553893][T23803] bond2: entered promiscuous mode [ 1809.587220][T23803] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1809.800365][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1809.830714][T23803] bond2: left promiscuous mode [ 1809.901101][T23778] could not allocate digest TFM handle poly1305-simd [ 1810.129656][T23806] syzkaller0: entered promiscuous mode [ 1810.180569][T23806] syzkaller0: entered allmulticast mode [ 1810.247406][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1810.257068][T23806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1810.269601][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1810.285018][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1810.350719][T23806] syzkaller0: mtu less than device minimum [ 1810.740530][T14484] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1810.850362][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1810.915170][T14484] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1810.932998][T14484] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1810.979580][T14484] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1811.165644][T14484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.304609][T23810] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1811.341927][T14484] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1811.488732][ T5874] usb 4-1: USB disconnect, device number 12 [ 1811.554794][T23810] fuse: Unknown parameter 'rootmod' [ 1811.728343][T23828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1811.741946][T23827] Scaler: ================= START STATUS ================= [ 1811.771988][ T5874] usb 1-1: USB disconnect, device number 9 [ 1811.779385][T23827] Scaler: ================== END STATUS ================== [ 1811.880357][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1812.406974][T23827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1812.416165][T14484] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1812.580412][T14484] usb 3-1: Using ep0 maxpacket: 16 [ 1812.589011][T14484] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 1812.598049][T14484] usb 3-1: config 0 has no interface number 0 [ 1812.620913][T14484] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1812.653536][T14484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.673369][T14484] usb 3-1: Product: syz [ 1812.677766][T14484] usb 3-1: Manufacturer: syz [ 1812.690275][ T5874] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1812.690348][T14484] usb 3-1: SerialNumber: syz [ 1812.707070][T14484] usb 3-1: config 0 descriptor?? [ 1812.717070][T14484] hub 3-1:0.145: bad descriptor, ignoring hub [ 1812.740367][T14484] hub 3-1:0.145: probe with driver hub failed with error -5 [ 1812.755208][T14484] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input139 [ 1812.865211][ T5874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1812.896651][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.930249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1812.937474][ T5874] usb 2-1: Product: syz [ 1812.968069][ T5874] usb 2-1: Manufacturer: syz [ 1812.992399][ T5874] usb 2-1: SerialNumber: syz [ 1813.030071][ T5874] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1813.048823][ T983] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1813.604701][ T5874] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1813.743210][T23849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.762323][T23849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.784852][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.852068][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1813.865559][ T5874] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1813.875004][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.958287][ T5874] usb 6-1: config 0 descriptor?? [ 1813.960288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1814.029220][ T5874] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1814.615091][ T983] usb 2-1: Service connection timeout for: 257 [ 1814.636646][ T983] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1814.645840][T22959] usb 6-1: USB disconnect, device number 22 [ 1814.682056][ T983] ath9k_htc: Failed to initialize the device [ 1814.756569][ T983] usb 2-1: ath9k_htc: USB layer deinitialized [ 1814.856672][T14484] usb 2-1: USB disconnect, device number 103 [ 1814.869432][T23877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1814.979154][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1815.000671][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1815.040794][T23880] netlink: 'syz.3.4719': attribute type 21 has an invalid length. [ 1815.260708][ T983] usb 3-1: USB disconnect, device number 119 [ 1815.287089][T23893] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1815.360609][T14484] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1815.531838][T14484] usb 6-1: Using ep0 maxpacket: 32 [ 1815.551192][T23900] hsr0: entered promiscuous mode [ 1815.551598][T14484] usb 6-1: config 2 has an invalid interface number: 15 but max is 0 [ 1815.566957][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1815.582656][T23900] hsr_slave_0: left promiscuous mode [ 1815.598787][T14484] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1815.609019][T23900] hsr_slave_1: left promiscuous mode [ 1815.620227][T14484] usb 6-1: config 2 has no interface number 1 [ 1815.626380][T14484] usb 6-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1815.651030][T14484] usb 6-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1815.665857][T23900] hsr0 (unregistering): left promiscuous mode [ 1815.672352][T14484] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1815.686356][T14484] usb 6-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1815.723677][T14484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.752025][T14484] usb 6-1: Product: syz [ 1815.763811][T14484] usb 6-1: Manufacturer: syz [ 1815.775319][T14484] usb 6-1: SerialNumber: syz [ 1815.819646][T14484] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 1816.005139][T14484] pwc: Failed to set LED on/off time (-71) [ 1816.015270][T14484] pwc: send_video_command error -71 [ 1816.029793][T14484] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1816.040230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1816.055932][T14484] Philips webcam 6-1:2.0: probe with driver Philips webcam failed with error -71 [ 1816.105857][T14484] usb 6-1: USB disconnect, device number 23 [ 1816.510819][T23929] AppArmor: change_hat: Invalid input '0' [ 1816.750254][ T983] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1816.940228][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 1816.972615][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.017434][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.036383][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1817.061649][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.080258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1817.089155][ T983] usb 3-1: config 0 descriptor?? [ 1817.102745][ T983] hub 3-1:0.0: USB hub found [ 1817.309396][ T983] hub 3-1:0.0: 1 port detected [ 1817.353461][T23939] syzkaller0: entered promiscuous mode [ 1817.364963][T23939] syzkaller0: entered allmulticast mode [ 1817.667543][T23945] binder: 23942:23945 ioctl c0306201 200000000c00 returned -14 [ 1817.921850][ T983] hub 3-1:0.0: activate --> -90 [ 1818.120245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1818.697808][T23968] [U]  [ 1818.760406][ T5952] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1818.957826][ T5952] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1818.993861][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.027236][ T5952] usb 4-1: Product: syz [ 1819.049740][ T5952] usb 4-1: Manufacturer: syz [ 1819.076814][ T5952] usb 4-1: SerialNumber: syz [ 1819.134290][ T5952] usb 4-1: config 0 descriptor?? [ 1819.160228][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1819.383748][ T5952] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1819.433040][T23980] fuse: Unknown parameter 'root' [ 1819.627721][ T5952] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1819.640040][ T983] usb 3-1.1: new high-speed USB device number 121 using dummy_hcd [ 1819.673084][ T983] usb 3-1-port1: cannot reset (err = -32) [ 1819.689373][ T5952] usb 4-1: USB disconnect, device number 13 [ 1819.700808][ T983] usb 3-1-port1: cannot reset (err = -32) [ 1819.716933][ T983] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 1819.751559][ T983] usb 3-1-port1: cannot disable (err = -32) [ 1819.783665][ T983] usb 3-1-port1: cannot reset (err = -32) [ 1819.793341][ T5874] usb 3-1: USB disconnect, device number 120 [ 1819.814782][ T983] usb 3-1-port1: attempt power cycle [ 1819.825084][T23988] af_packet: tpacket_rcv: packet too big, clamped from 206 to 4294967272. macoff=96 [ 1820.200278][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1820.255909][T24002] [U]  [ 1820.512268][T24013] binder: 24011:24013 unknown command 0 [ 1820.517892][T24013] binder: 24011:24013 ioctl c0306201 200000000080 returned -22 [ 1820.698876][T24018] netlink: 'syz.5.4761': attribute type 13 has an invalid length. [ 1820.711554][T24019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.726951][T24019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.240247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1821.520283][ T5952] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1821.700514][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 1821.707797][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1821.737910][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1822.077099][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1822.124610][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.154698][T24039] : entered promiscuous mode [ 1822.165599][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'. [ 1822.175500][T24039] netlink: ct family unspecified [ 1822.185999][T24039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1822.212039][ T5952] usb 1-1: Product: syz [ 1822.231130][ T5952] usb 1-1: Manufacturer: syz [ 1822.235784][ T5952] usb 1-1: SerialNumber: syz [ 1822.280249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1822.346474][ T5952] usb 1-1: config 0 descriptor?? [ 1822.377737][ T5952] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1822.405355][ T5952] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1822.456908][T24049] syzkaller0: entered promiscuous mode [ 1822.464732][T24049] syzkaller0: entered allmulticast mode [ 1822.497596][T24048] [U]  [ 1822.615563][T24055] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1822.788870][T24028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.815872][T24028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.031498][ T5952] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1823.038318][ T5952] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1823.140574][ T983] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1823.314860][ T983] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1823.320249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1823.342679][T24077] bridge1: entered promiscuous mode [ 1823.384696][ T983] usb 6-1: config 0 has no interface number 0 [ 1823.433281][ T983] usb 6-1: too many endpoints for config 0 interface 1 altsetting 26: 73, using maximum allowed: 30 [ 1823.470392][ T983] usb 6-1: config 0 interface 1 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 1823.496802][ T983] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1823.553963][ T983] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1823.626457][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.677770][ T983] usb 6-1: config 0 descriptor?? [ 1823.699582][ T5952] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1823.711079][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1823.895369][ T983] usb 6-1: string descriptor 0 read error: -71 [ 1823.930815][ T983] usb 6-1: selecting invalid altsetting 1 [ 1824.149785][ T983] dvb_ttusb_budget: ttusb_init_controller: error [ 1824.157040][ T983] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1824.354497][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1824.360247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1824.366043][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1824.396933][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1824.453064][ T5952] usb 1-1: USB disconnect, device number 10 [ 1824.488201][ T983] DVB: Unable to find symbol ves1820_attach() [ 1824.495911][T24087] [U]  [ 1824.620379][ T983] DVB: Unable to find symbol stv0297_attach() [ 1824.628910][ T983] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1824.650039][ T983] usb 6-1: USB disconnect, device number 25 [ 1824.717387][T24092] fuse: Bad value for 'fd' [ 1825.250338][ T983] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1825.370235][ T5952] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1825.370350][T14506] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1825.400235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1825.469205][ T983] usb 6-1: Using ep0 maxpacket: 8 [ 1825.514676][ T983] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1825.543921][T14506] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1825.568149][T14506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.589181][T14506] usb 4-1: Product: syz [ 1825.604779][ T983] usb 6-1: config 0 has no interface number 1 [ 1825.607225][T14506] usb 4-1: Manufacturer: syz [ 1825.618500][T14506] usb 4-1: SerialNumber: syz [ 1825.623305][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 1825.643594][T14506] usb 4-1: config 0 descriptor?? [ 1825.661202][ T983] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1825.774076][ T983] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1825.787353][ T983] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1825.803793][ T983] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1825.827020][ T983] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1825.898789][ T983] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1825.933513][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1825.955084][ T983] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1825.971780][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.980003][ T983] usb 6-1: Product: syz [ 1825.994358][ T983] usb 6-1: Manufacturer: syz [ 1825.999438][ T983] usb 6-1: SerialNumber: syz [ 1826.029255][ T983] usb 6-1: config 0 descriptor?? [ 1826.037959][T24095] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1826.063503][ T983] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1826.086244][ T983] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1826.440443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1826.746221][T14506] usb 4-1: Firmware version (0.0) predates our first public release. [ 1826.757376][T14506] usb 4-1: Please update to version 0.2 or newer [ 1826.958578][T14506] usb 4-1: USB disconnect, device number 14 [ 1827.480218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1827.961425][T14489] usb 6-1: USB disconnect, device number 26 [ 1828.053840][T24125] [U]  [ 1828.520242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1828.730257][T14506] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1828.836494][ T5952] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1828.898307][ T5952] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1829.031378][T14506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1829.054742][T14506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1829.097232][T14506] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1829.154716][T14506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1829.189474][ T5952] usb 1-1: can't read configurations, error -71 [ 1829.231167][T14506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1829.265653][T14506] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1829.278772][T14506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.309544][T14506] usb 4-1: config 0 descriptor?? [ 1829.326112][T24132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1829.367948][T14506] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1829.390601][T14506] usb 4-1: MIDIStreaming interface descriptor not found [ 1829.560435][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1830.077527][T14506] usb 4-1: USB disconnect, device number 15 [ 1830.090405][ T5952] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 1830.134586][T24153] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4802'. [ 1830.240406][ T5952] usb 1-1: device descriptor read/64, error -71 [ 1830.351361][ T5952] usb usb1-port1: attempt power cycle [ 1830.600232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1830.720369][ T5952] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1830.754021][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1831.030541][ T5952] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 1831.054197][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1831.210653][ T5952] usb usb1-port1: unable to enumerate USB device [ 1831.641291][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1831.685697][T24169] [U]  [ 1831.982025][T24177] tipc: Enabling of bearer rejected, failed to enable media [ 1832.125277][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1832.499769][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1832.509381][T14484] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1832.690225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1832.700001][T14484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1832.712075][T14484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1832.725810][T14484] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1832.768058][T14484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1832.889626][T14484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1833.679851][T14484] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1833.706439][T14484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.720361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1833.759516][T14484] usb 2-1: config 0 descriptor?? [ 1833.769710][T24186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1833.784183][T14484] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1833.829257][T24202] [U]  [ 1833.840021][T14484] usb 2-1: MIDIStreaming interface descriptor not found [ 1834.408722][T24223] tipc: Enabling of bearer rejected, failed to enable media [ 1834.492109][T14506] usb 2-1: USB disconnect, device number 104 [ 1834.760218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1834.800291][ T5952] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1834.964516][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 1834.970230][T22959] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1834.977907][T14489] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1835.012810][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.026120][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.047516][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1835.080188][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.105182][ T5952] usb 1-1: config 0 descriptor?? [ 1835.132891][ T5952] hub 1-1:0.0: USB hub found [ 1835.145432][T22959] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 1835.164012][T22959] usb 6-1: config 0 has no interface number 0 [ 1835.167188][T24246] [U]  [ 1835.219630][T14489] usb 4-1: Using ep0 maxpacket: 16 [ 1835.267851][T22959] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1835.275906][T24251] sctp: [Deprecated]: syz.1.4832 (pid 24251) Use of int in maxseg socket option. [ 1835.275906][T24251] Use struct sctp_assoc_value instead [ 1835.480829][T23480] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1835.493657][T22959] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1835.516181][T22959] usb 6-1: config 0 interface 230 has no altsetting 0 [ 1835.535204][T22959] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1835.545619][T22959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.554436][T22959] usb 6-1: Product: syz [ 1835.558889][T22959] usb 6-1: Manufacturer: syz [ 1835.564472][T22959] usb 6-1: SerialNumber: syz [ 1835.586179][T22959] usb 6-1: config 0 descriptor?? [ 1835.599537][T24232] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1835.608240][T24232] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1835.630733][T22959] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 1835.669552][T22959] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1835.800505][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1835.800589][T24261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4834'. [ 1835.818130][T23480] usb 3-1: Using ep0 maxpacket: 16 [ 1835.851203][T23480] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.870252][T23480] usb 3-1: config 0 has no interfaces? [ 1835.893416][T23480] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1835.903564][T23480] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1835.919823][T23480] usb 3-1: Product: syz [ 1835.939585][T24262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4834'. [ 1835.968740][T23480] usb 3-1: Manufacturer: syz [ 1835.998143][T23480] usb 3-1: SerialNumber: syz [ 1836.029643][T23480] usb 3-1: config 0 descriptor?? [ 1836.291726][T14506] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1836.482024][T14506] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1836.506577][T14506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.558494][T14506] usb 2-1: config 0 descriptor?? [ 1836.628575][T14506] cp210x 2-1:0.0: cp210x converter detected [ 1836.814501][T24264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.840375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1836.865008][T24264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.100675][T14506] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1837.109005][T14506] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1837.113917][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1837.113935][ T30] audit: type=1326 audit(1754893294.619:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.117026][T14506] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1837.146281][ T30] audit: type=1326 audit(1754893294.629:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.183293][ T30] audit: type=1326 audit(1754893294.629:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.212888][ T30] audit: type=1326 audit(1754893294.629:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.235584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1837.267842][ T30] audit: type=1326 audit(1754893294.629:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.376805][ T30] audit: type=1326 audit(1754893294.629:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.399546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1837.455993][ T30] audit: type=1326 audit(1754893294.629:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.511073][T14506] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1837.714364][ T5952] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1837.805156][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 1837.817533][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1837.821460][T14506] usb 2-1: USB disconnect, device number 105 [ 1837.835320][ T30] audit: type=1326 audit(1754893294.629:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24260 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1837.880359][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1837.911356][ T5952] usb 1-1: USB disconnect, device number 15 [ 1837.912992][T14506] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1837.954266][T14489] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1838.002643][T14506] cp210x 2-1:0.0: device disconnected [ 1838.011077][T14489] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1838.035818][T22959] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 1838.049588][T14489] usb 4-1: can't read configurations, error -71 [ 1838.223764][T23480] usb 6-1: USB disconnect, device number 27 [ 1838.360698][T14506] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1838.432112][T23480] usb 3-1: USB disconnect, device number 125 [ 1838.450533][ T5952] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1838.520519][T14506] usb 2-1: Using ep0 maxpacket: 16 [ 1838.527424][T14506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.538698][T14506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.548968][T14506] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1838.558381][T14506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.575650][T14506] usb 2-1: config 0 descriptor?? [ 1838.625712][ T5952] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1838.643297][T24280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1838.657838][ T5952] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1838.673997][ T5952] usb 1-1: config 0 has no interface number 0 [ 1838.683909][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1838.698278][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.707599][ T5952] usb 1-1: Product: syz [ 1838.710480][T14489] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1838.724583][ T5952] usb 1-1: Manufacturer: syz [ 1838.729472][ T5952] usb 1-1: SerialNumber: syz [ 1838.739142][ T5952] usb 1-1: config 0 descriptor?? [ 1838.877906][T14489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1838.894214][T14489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1838.904681][T14489] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1838.920663][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1838.937367][T14489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1838.979395][T24282] netlink: 'syz.5.4841': attribute type 1 has an invalid length. [ 1838.992538][T14489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1839.026770][T14489] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1839.052510][T14506] asus 0003:0B05:17E0.004A: unknown main item tag 0x0 [ 1839.063925][T14506] asus 0003:0B05:17E0.004A: unknown main item tag 0x0 [ 1839.084024][T14489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.094141][T14506] asus 0003:0B05:17E0.004A: unknown main item tag 0x0 [ 1839.130062][T14506] asus 0003:0B05:17E0.004A: unknown main item tag 0x0 [ 1839.149432][T14489] usb 4-1: config 0 descriptor?? [ 1839.158003][T14506] asus 0003:0B05:17E0.004A: unknown main item tag 0x0 [ 1839.171584][T24276] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1839.188529][T14489] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1839.202392][T14506] asus 0003:0B05:17E0.004A: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 1839.228320][T14489] usb 4-1: MIDIStreaming interface descriptor not found [ 1839.247445][T14506] asus 0003:0B05:17E0.004A: Asus input not registered [ 1839.273655][ T5952] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1839.475266][ T5952] usb 1-1: No valid video chain found. [ 1839.477342][T14506] asus 0003:0B05:17E0.004A: probe with driver asus failed with error -12 [ 1839.515047][ T5952] usb 1-1: USB disconnect, device number 16 [ 1839.959870][ T5952] usb 2-1: USB disconnect, device number 106 [ 1839.960822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1840.153816][T14506] usb 4-1: USB disconnect, device number 17 [ 1840.493782][T24304] input: syz1 as /devices/virtual/input/input140 [ 1840.740690][ T983] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1840.790272][T14506] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1840.901286][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 1841.000236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1841.107933][T14506] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.119049][T14506] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1841.146071][T14506] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1841.174824][T14506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.278524][T14506] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1841.421897][T14506] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1841.482794][T24302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.493718][ T30] audit: type=1326 audit(1754893299.009:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92418ebe9 code=0x7ffc0000 [ 1841.516215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1841.522886][T24302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.566402][T24302] delete_channel: no stack [ 1841.571805][T21600] udevd[21600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.621184][T14506] usb 4-1: USB disconnect, device number 18 [ 1841.667520][ T30] audit: type=1326 audit(1754893299.009:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92418ebe9 code=0x7ffc0000 [ 1842.040226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1842.230440][T23480] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1842.270445][ T5952] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1842.382706][T23480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 1842.394793][T23480] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1842.432805][ T5952] usb 2-1: config 68 has an invalid interface number: 220 but max is 0 [ 1842.445403][ T5952] usb 2-1: config 68 has no interface number 0 [ 1842.479411][T23480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.493952][ T5952] usb 2-1: config 68 interface 220 has no altsetting 0 [ 1842.566920][T23480] usb 1-1: config 0 descriptor?? [ 1842.587477][ T5952] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 1842.612839][T24324] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1842.637890][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.647374][T23480] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 1842.713584][T23480] usb 1-1: No valid video chain found. [ 1842.720543][ T5952] usb 2-1: Product: syz [ 1842.736594][ T5952] usb 2-1: Manufacturer: syz [ 1842.800996][ T5952] usb 2-1: SerialNumber: syz [ 1842.843076][T24321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.852446][T24321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.949995][T22959] usb 1-1: USB disconnect, device number 17 [ 1843.080279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1843.231949][T24326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.255953][T24326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.406097][ T5952] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1843.445814][ T5952] gspca_spca501: reg write: error -71 [ 1843.502144][ T5952] spca501 2-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 1843.542583][ T5952] spca501 2-1:68.220: probe with driver spca501 failed with error -22 [ 1843.583581][ T5952] usb 2-1: USB disconnect, device number 107 [ 1844.120269][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1844.140781][T24344] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 1844.217728][T24344] netlink: 'syz.0.4856': attribute type 2 has an invalid length. [ 1844.742635][ T983] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1845.157437][ T983] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1845.160233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1845.173400][ T983] usb 3-1: can't read configurations, error -71 [ 1846.200237][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1846.346271][T23480] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1846.633234][T23480] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1846.681251][T23480] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1846.786303][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1846.786327][ T30] audit: type=1326 audit(1754893304.279:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1846.815146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1846.845910][T17387] cgroup: fork rejected by pids controller in /syz2 [ 1846.902923][T23480] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1846.995777][T23480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.040515][T23480] usb 6-1: Product: syz [ 1847.044748][T23480] usb 6-1: Manufacturer: 륮潮躌㒰ꆄ웗ꤴ̑欧᫁͂懞ᵜ욒䓢ﭟ쯌좸㒡쩿孬㥋╍薌眼௝ኣ퐎瑱ᙱ自鍇ﮣゟ䚟䍘鹠꾞욼婽群䖫奕ガ瘉ꆼ냈ﻼꔣ捓ﴌ헪嚱ి瑒ﵢ霸亍쒼ࢬݠ䋵≬榛㚥ቩ絒섕Ṕ秠秿뵨鿏뻼ጵ딾졆䇯鯑쓛쏐໖僄㦶ⶥ㡠ꢯ칇ꕸ겊霠싻홽誡 [ 1847.076939][ T30] audit: type=1326 audit(1754893304.279:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.100384][ T30] audit: type=1326 audit(1754893304.279:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.127859][T23480] usb 6-1: SerialNumber: syz [ 1847.142567][ T30] audit: type=1326 audit(1754893304.279:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.198292][T24395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1847.240227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1847.321852][ T30] audit: type=1326 audit(1754893304.279:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.385720][ T30] audit: type=1326 audit(1754893304.279:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.416927][T24394] netlink: 'syz.1.4869': attribute type 1 has an invalid length. [ 1847.432037][ T30] audit: type=1326 audit(1754893304.279:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.458708][ T30] audit: type=1326 audit(1754893304.279:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.492367][ T30] audit: type=1326 audit(1754893304.279:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.526001][ T30] audit: type=1326 audit(1754893304.279:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1847.588778][T24394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1847.615361][T23480] cdc_ncm 6-1:1.0: bind() failure [ 1847.636680][T23480] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1847.656913][T23480] cdc_ncm 6-1:1.1: bind() failure [ 1847.806489][T23480] usb 6-1: USB disconnect, device number 28 [ 1847.908221][ T9486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.065851][ T9486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.163121][ T9486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.280493][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1848.394306][ T9486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.970511][T22959] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1849.010079][T24408] fuse: Unknown parameter 'group' [ 1849.320348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1849.415581][T22959] usb 2-1: Using ep0 maxpacket: 16 [ 1850.360375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1850.756875][T17931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1850.810521][T17931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1850.824354][T17931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1850.848112][T17931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1850.856685][T17931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1851.400320][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1852.406524][ T9486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1852.419051][ T9486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.420920][T14489] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1852.440345][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1852.449811][ T9486] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1852.478241][ T9486] bond0 (unregistering): Released all slaves [ 1852.621904][T14489] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1852.631552][T14489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.639860][T14489] usb 6-1: Product: syz [ 1852.652377][T14489] usb 6-1: Manufacturer: syz [ 1852.657095][T14489] usb 6-1: SerialNumber: syz [ 1852.679380][T14489] usb 6-1: config 0 descriptor?? [ 1852.787832][ T9486] bond1 (unregistering): Released all slaves [ 1853.034112][T18891] Bluetooth: hci2: command tx timeout [ 1853.406859][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.416133][T14489] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 1853.425364][T14489] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 1853.433538][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.444257][T14489] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 1853.480400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1854.128929][T14491] usb 6-1: USB disconnect, device number 29 [ 1854.327682][ T9486] bond2 (unregistering): Released all slaves [ 1854.437811][T24424] bridge2: entered promiscuous mode [ 1854.520334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1854.528004][T22959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1854.539055][T22959] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 1854.561803][T22959] usb 2-1: chopping to 0 config(s) [ 1854.568821][T22959] usb 2-1: can't read configurations, error -32 [ 1854.611444][T14491] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1854.706216][ T9486] tipc: Disabling bearer [ 1854.728478][ T9486] tipc: Disabling bearer [ 1854.745852][ T9486] tipc: Left network mode [ 1854.772484][T14491] usb 6-1: Using ep0 maxpacket: 16 [ 1854.821328][T14491] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1854.856064][T14491] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 1854.888212][T14491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.916036][T14491] usb 6-1: Product: ᐇ [ 1854.929776][T14491] usb 6-1: Manufacturer: 倊 [ 1854.946838][T14491] usb 6-1: SerialNumber: 펲蘋쇧⌶迧攸譾苻ⴸਰ夒髹尯悞䗏왃扜ᷩ뒢ᕆ휅䣽〬笭䥾ཧ噼 [ 1855.080574][T18891] Bluetooth: hci2: command tx timeout [ 1855.127271][T24457] netlink: 'syz.3.4884': attribute type 1 has an invalid length. [ 1855.254405][T14491] usbhid 6-1:1.0: can't add hid device: -71 [ 1855.267673][T14491] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1855.295102][T14491] usb 6-1: USB disconnect, device number 30 [ 1855.482783][T24457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1855.532199][T24460] bond3: (slave gretap2): making interface the new active one [ 1855.603485][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1855.615350][T24460] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1856.026883][ T9486] hsr_slave_0: left promiscuous mode [ 1856.040048][ T9486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1856.080351][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1856.159930][ T9486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1856.304513][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1856.367863][ T9486] veth1_macvtap: left promiscuous mode [ 1856.376971][ T9486] veth0_macvtap: left promiscuous mode [ 1856.387858][T24481] netlink: 'syz.3.4888': attribute type 1 has an invalid length. [ 1856.406723][ T9486] veth1_vlan: left promiscuous mode [ 1856.426201][ T9486] veth0_vlan: left promiscuous mode [ 1856.472675][T14491] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1856.630304][T14491] usb 1-1: Using ep0 maxpacket: 32 [ 1856.638604][T14491] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1856.664665][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1856.673556][T14491] usb 1-1: config 0 has no interface number 0 [ 1856.744086][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.771689][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1856.797840][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1856.806562][T24484] fuse: Bad value for 'fd' [ 1856.807494][T24485] fuse: Bad value for 'fd' [ 1856.827289][T14491] usb 1-1: config 0 has no interface number 0 [ 1856.834919][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.845680][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1856.858340][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1856.867565][T14491] usb 1-1: config 0 has no interface number 0 [ 1856.874487][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.884935][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1856.897250][ T9486] team0 (unregistering): Port device batadv1 removed [ 1856.915010][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1856.941145][T24484] delete_channel: no stack [ 1856.966848][T14491] usb 1-1: config 0 has no interface number 0 [ 1856.977144][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.997756][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1857.009523][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1857.022832][T14491] usb 1-1: config 0 has no interface number 0 [ 1857.029176][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1857.045713][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1857.057513][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1857.071270][T14491] usb 1-1: config 0 has no interface number 0 [ 1857.077541][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1857.092806][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1857.105638][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1857.114107][T14491] usb 1-1: config 0 has no interface number 0 [ 1857.120559][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1857.130763][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1857.142149][T14491] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1857.150852][T14491] usb 1-1: config 0 has no interface number 0 [ 1857.157190][T14491] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1857.167272][T14491] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1857.171815][T18891] Bluetooth: hci2: command tx timeout [ 1857.180353][T14491] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1857.192142][T14491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.200709][T14491] usb 1-1: Product: syz [ 1857.205119][T14491] usb 1-1: Manufacturer: syz [ 1857.209758][T14491] usb 1-1: SerialNumber: syz [ 1857.221883][T14491] usb 1-1: config 0 descriptor?? [ 1857.235177][T14491] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 1857.283179][T23480] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1857.444760][T23480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.455580][T23480] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.480598][T23480] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.490900][T23480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1857.497679][T23480] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1857.524695][T23480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.548891][T23480] usb 6-1: config 0 descriptor?? [ 1857.619420][T14491] etas_es58x 1-1:0.2: could not retrieve the product info string [ 1857.707408][ T9486] team0 (unregistering): Port device team_slave_1 removed [ 1857.774944][T24491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.777849][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.785629][T24491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.796548][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.814230][ T9486] team0 (unregistering): Port device team_slave_0 removed [ 1857.833896][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.846297][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.856624][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.904227][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.923621][T23480] nti 0003:0757:0A00.004B: unknown main item tag 0x0 [ 1857.939043][T23480] nti 0003:0757:0A00.004B: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.5-1/input0 [ 1857.957016][T23480] usb 6-1: USB disconnect, device number 31 [ 1858.058172][T24495] fido_id[24495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1858.325753][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1858.397231][T24500] netlink: 9804 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1859.183302][ T5952] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1859.240817][T18891] Bluetooth: hci2: command tx timeout [ 1859.255394][T24481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1859.362292][ T5952] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1859.390760][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.407990][ T5952] usb 6-1: config 0 descriptor?? [ 1859.459529][T14491] usb 1-1: USB disconnect, device number 18 [ 1859.461845][ T5952] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1859.518501][T14491] etas_es58x 1-1:0.2: Disconnecting syz syz [ 1859.677881][T24421] chnl_net:caif_netlink_parms(): no params data found [ 1859.898728][T24505] hub 9-0:1.0: USB hub found [ 1859.945640][T24505] hub 9-0:1.0: 1 port detected [ 1860.772136][ T5952] gspca_cpia1: usb_control_msg 03, error -110 [ 1861.418817][ T5952] gspca_cpia1: usb_control_msg 01, error -32 [ 1861.782826][ T5952] gspca_cpia1: usb_control_msg 01, error -71 [ 1861.822333][ T5952] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1861.851221][ T5952] usb 6-1: USB disconnect, device number 32 [ 1862.234083][T24544] tipc: Enabled bearer , priority 0 [ 1862.244442][ T9486] IPVS: stop unused estimator thread 0... [ 1862.288883][T24421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.299448][T24421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.328655][T24421] bridge_slave_0: entered allmulticast mode [ 1862.354763][T24421] bridge_slave_0: entered promiscuous mode [ 1862.402928][T24537] syzkaller0: entered promiscuous mode [ 1862.408729][T24537] syzkaller0: entered allmulticast mode [ 1862.442786][T24537] tipc: Resetting bearer [ 1862.459692][T24421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.475551][T24421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.499229][T24421] bridge_slave_1: entered allmulticast mode [ 1862.539283][T24421] bridge_slave_1: entered promiscuous mode [ 1862.561843][T24536] tipc: Resetting bearer [ 1862.604877][T24536] tipc: Disabling bearer [ 1862.996154][T24421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.171501][T24421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.409058][T24561] pim6reg: entered allmulticast mode [ 1863.447820][T24421] team0: Port device team_slave_0 added [ 1863.457887][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1863.960890][T24421] team0: Port device team_slave_1 added [ 1864.184389][T24561] pim6reg: left allmulticast mode [ 1864.347955][T24565] pim6reg: entered allmulticast mode [ 1864.357042][T24571] binder: BINDER_SET_CONTEXT_MGR already set [ 1864.365357][T24571] binder: 24568:24571 ioctl 4018620d 2000000000c0 returned -16 [ 1864.375565][T24570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4902'. [ 1864.409988][T24571] binder: BINDER_SET_CONTEXT_MGR already set [ 1864.420897][T24571] binder: 24568:24571 ioctl 4018620d 200000000040 returned -16 [ 1864.431787][T24421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.438766][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.478665][T24421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.506020][T24421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.514420][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.559423][T24421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.880270][T14491] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1864.902930][T24421] hsr_slave_0: entered promiscuous mode [ 1865.242739][T14491] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1865.256231][T14491] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1865.272416][T24421] hsr_slave_1: entered promiscuous mode [ 1865.309701][T24421] debugfs: 'hsr0' already exists in 'hsr' [ 1865.504518][T14491] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1865.515567][T24421] Cannot create hsr debugfs directory [ 1865.530260][T14491] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1865.586059][T14491] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1865.732713][T14491] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1865.754463][T14491] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1865.797241][T14491] usb 6-1: Product: syz [ 1865.815342][T14491] usb 6-1: Manufacturer: syz [ 1865.884711][T14491] cdc_wdm 6-1:1.0: skipping garbage [ 1865.889979][T14491] cdc_wdm 6-1:1.0: skipping garbage [ 1865.949536][T14491] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1865.980522][T14491] cdc_wdm 6-1:1.0: Unknown control protocol [ 1866.050243][ T5952] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1866.132353][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.209613][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.838686][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1866.845366][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1866.852122][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1866.858763][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1866.865030][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1866.871644][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1866.878072][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1866.882860][T23480] usb 6-1: USB disconnect, device number 33 [ 1866.884671][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1866.896830][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1866.905900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.851949][T23480] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1868.082017][T24638] netlink: 'syz.5.4917': attribute type 5 has an invalid length. [ 1868.091746][T24638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1868.145776][T23480] usb 4-1: not running at top speed; connect to a high speed hub [ 1868.169665][T23480] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1868.209675][T23480] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1868.244159][T24421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1868.252020][T23480] usb 4-1: config 1 has no interface number 1 [ 1868.258189][T23480] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1868.286265][T23480] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1868.294951][T24642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1868.305595][T23480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.317237][T24421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1868.317877][T23480] usb 4-1: Product: syz [ 1868.329464][T23480] usb 4-1: Manufacturer: syz [ 1868.340200][T23480] usb 4-1: SerialNumber: syz [ 1868.343686][T24642] bond0: entered promiscuous mode [ 1868.362417][T24642] bond0: left promiscuous mode [ 1868.390725][T24421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1868.409989][T24421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1868.607436][T23480] usb 4-1: 2:1 : sample bitwidth 10 in over sample bytes 1 [ 1868.641015][T23480] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1868.654917][T23480] usb 4-1: selecting invalid altsetting 0 [ 1868.703543][T23480] usb 4-1: USB disconnect, device number 20 [ 1868.748312][T24421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.755269][ T5952] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1869.196285][T24421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.205985][T21600] udevd[21600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1869.233258][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 1869.246859][ T5952] usb 1-1: config 9 has an invalid interface number: 98 but max is 0 [ 1869.279881][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.287138][ T9486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.296177][T14491] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1869.319161][ T5952] usb 1-1: config 9 has no interface number 0 [ 1869.344032][ T5952] usb 1-1: config 9 interface 98 altsetting 0 endpoint 0x3 has invalid maxpacket 53212, setting to 64 [ 1869.453887][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.461189][ T7521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.463731][T14491] usb 6-1: Using ep0 maxpacket: 8 [ 1869.474622][ T5952] usb 1-1: config 9 interface 98 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1869.504128][T14491] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1869.515978][ T5952] usb 1-1: config 9 interface 98 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1869.526761][T14491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.548325][T14491] usb 6-1: Product: syz [ 1869.564321][T14491] usb 6-1: Manufacturer: syz [ 1869.584524][T14491] usb 6-1: SerialNumber: syz [ 1869.589453][ T5952] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=f3.41 [ 1869.630188][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.649177][T14491] usb 6-1: config 0 descriptor?? [ 1869.685924][T14491] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1869.690340][ T5952] usb 1-1: Product: syz [ 1869.714020][ T5952] usb 1-1: Manufacturer: syz [ 1869.758590][ T5952] usb 1-1: SerialNumber: syz [ 1870.024107][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1870.062533][ T5952] s2255 1-1:9.98: Could not find bulk-in endpoint [ 1870.167497][ T5952] Sensoray 2255 driver load failed: 0xfffffff4 [ 1870.270260][ T5952] s2255 1-1:9.98: probe with driver s2255 failed with error -12 [ 1870.625019][ T5952] usb 1-1: USB disconnect, device number 19 [ 1870.818926][T24657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.834862][T24421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1870.974247][T24657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.318885][T24683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1871.372889][T24421] veth0_vlan: entered promiscuous mode [ 1871.429737][T24421] veth1_vlan: entered promiscuous mode [ 1871.576209][T24421] veth0_macvtap: entered promiscuous mode [ 1871.616756][T24421] veth1_macvtap: entered promiscuous mode [ 1871.699940][T24421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.742430][T24421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.812103][ T3499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.864664][ T3499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.917531][ T3499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.936884][ T3499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.070635][T14491] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1872.097202][T24699] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1872.119724][T22938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.146318][T22938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.194753][T24700] input: syz1 as /devices/virtual/input/input141 [ 1872.235303][T14491] usb 1-1: config 0 has an invalid interface number: 234 but max is 0 [ 1872.268189][T14491] usb 1-1: config 0 has no interface number 0 [ 1872.283761][T14491] usb 1-1: config 0 interface 234 has no altsetting 0 [ 1872.292004][ T7521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.359701][T23480] usb 6-1: USB disconnect, device number 34 [ 1872.369461][T14491] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 1872.402998][ T7521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.427998][T14491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.464892][T14491] usb 1-1: Product: syz [ 1872.486215][T14491] usb 1-1: Manufacturer: syz [ 1872.513710][T14491] usb 1-1: SerialNumber: syz [ 1872.566695][T14491] usb 1-1: config 0 descriptor?? [ 1872.794863][T24690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.818294][T24690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.842657][T14491] pegasus 1-1:0.234: probe with driver pegasus failed with error -71 [ 1872.890022][T14491] usb 1-1: USB disconnect, device number 20 [ 1873.110465][T23480] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1873.260356][T24721] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4932'. [ 1873.296640][T23480] usb 3-1: Invalid ep0 maxpacket: 64 [ 1873.442493][T23480] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1873.610651][T23480] usb 3-1: Invalid ep0 maxpacket: 64 [ 1873.622117][T23480] usb usb3-port1: attempt power cycle [ 1873.720824][ T5874] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1874.104674][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.283573][T23480] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 1874.587386][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1874.615182][ T5874] usb 6-1: config 1 has no interface number 0 [ 1875.147823][T23480] usb 3-1: Invalid ep0 maxpacket: 64 [ 1875.177775][ T5874] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.189089][ T5874] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1875.193071][T24745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1875.261825][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1875.294788][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.310243][T23480] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1875.330209][ T5874] usb 6-1: Product: syz [ 1875.351886][ T5874] usb 6-1: Manufacturer: syz [ 1875.364530][ T5874] usb 6-1: SerialNumber: syz [ 1875.372980][T23480] usb 3-1: Invalid ep0 maxpacket: 64 [ 1875.398338][T23480] usb usb3-port1: unable to enumerate USB device [ 1875.477976][T24757] tipc: Enabling of bearer rejected, failed to enable media [ 1875.810410][T14489] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1875.940390][T14489] usb 2-1: device descriptor read/64, error -71 [ 1876.180384][T14489] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1876.231052][T14484] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1876.264720][ T5874] cdc_ncm 6-1:1.1: bind() failure [ 1876.327724][T14489] usb 2-1: device descriptor read/64, error -71 [ 1876.440654][T14489] usb usb2-port1: attempt power cycle [ 1876.494017][T14484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.507627][T14484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.517923][T14484] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1876.532000][T14484] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1876.541397][T14484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.618251][T14484] usb 4-1: config 0 descriptor?? [ 1876.880356][T14489] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1876.921265][T14489] usb 2-1: device descriptor read/8, error -71 [ 1877.120861][ T5952] usb 6-1: USB disconnect, device number 35 [ 1877.159990][T14484] plantronics 0003:047F:FFFF.004C: reserved main item tag 0xd [ 1877.168076][T14489] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1877.245842][T14489] usb 2-1: device descriptor read/8, error -71 [ 1877.295448][T14484] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1877.360685][T24766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.369769][T14489] usb usb2-port1: unable to enumerate USB device [ 1877.427130][T24766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.562651][T14484] usb 4-1: USB disconnect, device number 21 [ 1877.980241][T22959] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1878.043324][T24785] fido_id[24785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1878.164429][T22959] usb 1-1: Using ep0 maxpacket: 32 [ 1878.186352][T22959] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1878.209406][T22959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.259546][T22959] usb 1-1: config 0 descriptor?? [ 1878.366368][T22959] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 1879.183013][T24832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1879.235222][T24832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1879.242658][T24832] IPv6: NLM_F_CREATE should be set when creating new route [ 1879.380301][T14484] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1879.603017][T14484] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1879.616524][T14484] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1879.635885][T14484] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1879.656125][T14484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.681743][T24829] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1879.690428][ T5874] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1879.694094][T14484] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1879.850719][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1879.861342][T24840] team_slave_0: entered allmulticast mode [ 1879.895524][T14484] usb 3-1: USB disconnect, device number 6 [ 1880.008130][T24843] libceph: resolve '4..' (ret=-3): failed [ 1880.854817][ T5874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1880.867849][T23480] usb 1-1: USB disconnect, device number 21 [ 1881.011181][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1881.140658][ T983] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1881.180574][ T5874] usb usb4-port1: attempt power cycle [ 1881.326688][ T983] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1881.346613][ T983] usb 3-1: config 0 has no interface number 0 [ 1881.365876][T23480] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1881.401643][ T983] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1881.430772][ T983] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1881.469651][ T983] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1881.539476][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 1881.548938][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 1881.590399][ T5874] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1881.779260][T23480] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1881.955771][T23480] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1881.996200][T23480] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1882.063921][ T983] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1882.085256][T23480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1882.133407][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.162420][T23480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1882.180826][ T983] usb 3-1: Product: syz [ 1882.185499][ T983] usb 3-1: Manufacturer: syz [ 1882.352741][ T983] usb 3-1: SerialNumber: syz [ 1882.368922][T23480] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1882.464614][ T983] usb 3-1: config 0 descriptor?? [ 1882.499405][ T5874] usb 4-1: device descriptor read/8, error -71 [ 1882.508362][T23480] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1882.525174][ C0] usb 3-1: NFC: Urb failure (status -71) [ 1882.543499][T23480] usb 2-1: Product: syz [ 1882.550543][ T983] usb 3-1: NFC: Unable to get FW version [ 1882.561393][T23480] usb 2-1: Manufacturer: syz [ 1882.569544][ T983] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 1882.627710][T23480] cdc_wdm 2-1:1.0: skipping garbage [ 1882.668630][T23480] cdc_wdm 2-1:1.0: skipping garbage [ 1882.692167][T23480] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1882.724444][T23480] cdc_wdm 2-1:1.0: Unknown control protocol [ 1882.754993][ T983] usb 3-1: USB disconnect, device number 7 [ 1883.027726][T24874] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4968'. [ 1883.374470][ T983] usb 2-1: USB disconnect, device number 114 [ 1883.396218][T24883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1883.408390][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1883.536925][T24885] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1883.553100][T24885] syz_tun: entered promiscuous mode [ 1884.900441][T22959] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1885.112464][T22959] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.140062][T22959] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1885.179557][T22959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1885.210810][T22959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.220373][T14484] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1885.265321][T22959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1885.378031][T14484] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1885.412932][T14484] usb 1-1: config 0 has no interface number 0 [ 1885.445520][T21600] udevd[21600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1885.463376][T22959] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1885.501461][T14484] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1885.517473][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1885.517492][ T30] audit: type=1326 audit(1754893343.049:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1885.527144][T14484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.578839][T24904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.635259][T24904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.700443][ T983] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1885.708417][T14484] usb 1-1: Product: syz [ 1885.751932][T14484] usb 1-1: Manufacturer: syz [ 1885.775512][T14491] usb 2-1: USB disconnect, device number 115 [ 1885.782759][T24904] delete_channel: no stack [ 1885.803878][ T30] audit: type=1326 audit(1754893343.099:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1885.833434][T14484] usb 1-1: SerialNumber: syz [ 1885.992280][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.023116][ T30] audit: type=1326 audit(1754893343.099:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1886.026530][ T983] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1886.057722][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.068976][ T983] usb 6-1: config 0 descriptor?? [ 1886.084041][T14484] usb 1-1: config 0 descriptor?? [ 1886.243664][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1886.253444][T24927] bridge_slave_1: left allmulticast mode [ 1886.259200][T24927] bridge_slave_1: left promiscuous mode [ 1886.266624][ T30] audit: type=1326 audit(1754893343.099:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1886.289297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1886.294534][T24927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.308140][ T30] audit: type=1326 audit(1754893343.099:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1886.654043][T24921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.708404][T24921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.750652][T24930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4983'. [ 1886.766480][T24921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.020765][T24921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.029749][ T30] audit: type=1326 audit(1754893343.099:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1887.156902][T24927] bridge_slave_0: left allmulticast mode [ 1887.163244][T24927] bridge_slave_0: left promiscuous mode [ 1887.179391][ T30] audit: type=1326 audit(1754893343.099:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1887.180455][T24927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.265134][ T30] audit: type=1326 audit(1754893343.099:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1887.343717][T14484] usb 1-1: Firmware version (0.0) predates our first public release. [ 1887.373106][T14484] usb 1-1: Please update to version 0.2 or newer [ 1887.393142][ T30] audit: type=1326 audit(1754893343.099:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1887.599314][ T30] audit: type=1326 audit(1754893343.109:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24901 comm="syz.1.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7498ebe9 code=0x7ffc0000 [ 1887.902816][T24930] bond0: entered promiscuous mode [ 1887.922825][T24930] bond0: left promiscuous mode [ 1888.056603][ T983] usbhid 6-1:0.0: can't add hid device: -71 [ 1888.062971][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1888.109864][ T983] usb 6-1: USB disconnect, device number 36 [ 1888.530290][ T983] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1888.598028][T14484] usb 1-1: USB disconnect, device number 22 [ 1888.743163][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 1888.843001][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.967147][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.036302][ T983] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1889.069415][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.121516][ T983] usb 6-1: config 0 descriptor?? [ 1889.429869][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4990'. [ 1890.166617][T24972] tipc: Failed to remove unknown binding: 66,1,1/0:1776355802/1776355804 [ 1890.204128][T24972] tipc: Failed to remove unknown binding: 66,1,1/0:1776355802/1776355804 [ 1890.274099][T24972] input: syz0 as /devices/virtual/input/input144 [ 1890.890389][T14491] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1891.050994][T14491] usb 1-1: Using ep0 maxpacket: 16 [ 1891.084372][T14491] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1891.115352][T14491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.156084][T14491] usb 1-1: config 0 has no interface number 0 [ 1891.192078][T14491] usb 1-1: New USB device found, idVendor=0bbd, idProduct=0555, bcdDevice= 0.5b [ 1891.229467][T14491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.277494][T14491] usb 1-1: config 0 descriptor?? [ 1891.296043][T14491] usb 1-1: Found UVC 0.00 device (0bbd:0555) [ 1891.372075][ T983] usbhid 6-1:0.0: can't add hid device: -71 [ 1891.373005][T14491] usb 1-1: No valid video chain found. [ 1891.398488][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1891.494674][T14491] usb 1-1: USB disconnect, device number 23 [ 1891.534190][ T983] usb 6-1: USB disconnect, device number 37 [ 1892.676614][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 1892.689450][ T9406] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1892.733348][T25006] input: syz1 as /devices/virtual/input/input145 [ 1892.920689][ T9406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.939720][T25009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5007'. [ 1892.954208][ T9406] usb 4-1: config 0 has no interfaces? [ 1893.026650][ T9406] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1893.038925][ T9406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.078813][ T9406] usb 4-1: Product: syz [ 1893.093743][ T9406] usb 4-1: Manufacturer: syz [ 1893.125379][ T9406] usb 4-1: SerialNumber: syz [ 1893.136115][ T9406] usb 4-1: config 0 descriptor?? [ 1893.302175][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5008'. [ 1893.570446][T22959] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1893.700369][T22959] usb 6-1: device descriptor read/64, error -71 [ 1893.745654][T25021] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1893.940590][T22959] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1894.040320][T14491] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1894.090400][T22959] usb 6-1: device descriptor read/64, error -71 [ 1894.196885][T14491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1894.215050][T22959] usb usb6-port1: attempt power cycle [ 1894.271148][T14491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1894.286261][T14491] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1894.299792][T14491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1894.312471][T14491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1894.330471][T14491] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1894.339854][T14491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.367288][T14491] usb 1-1: config 0 descriptor?? [ 1894.394271][T25021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1894.411734][T14491] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1894.425012][T14491] usb 1-1: MIDIStreaming interface descriptor not found [ 1894.611002][T22959] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1894.752764][T23480] usb 4-1: USB disconnect, device number 26 [ 1894.793706][T22959] usb 6-1: device descriptor read/8, error -71 [ 1896.160428][T22959] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1896.188656][T22959] usb 6-1: device descriptor read/8, error -71 [ 1896.214418][T14491] usb 1-1: USB disconnect, device number 24 [ 1896.300807][T22959] usb usb6-port1: unable to enumerate USB device [ 1896.750252][T14491] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1896.910567][T14491] usb 1-1: Using ep0 maxpacket: 8 [ 1896.939263][T14491] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.954805][T14491] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1896.968549][T14491] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 1896.978263][T14491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.986796][T14491] usb 1-1: Product: ᐄ [ 1896.991643][T14491] usb 1-1: Manufacturer: ﮃ᩸誩讣䭮첄䔈騱뭢꺁㻈䈎討쎵엻琥튏䊐䁾醫∆秡矹 [ 1897.004726][T14491] usb 1-1: SerialNumber: Љ [ 1897.339418][T14491] usbhid 1-1:1.0: can't add hid device: -71 [ 1897.358248][T14491] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1897.388253][T14491] usb 1-1: USB disconnect, device number 25 [ 1897.971525][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1897.996618][T25056] bond0: entered promiscuous mode [ 1898.029025][T25056] bond0: left promiscuous mode [ 1898.039057][T25058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5020'. [ 1898.681997][T22959] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1898.944253][T22959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.955335][T22959] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1899.178972][T22959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.197525][T22959] usb 3-1: config 0 descriptor?? [ 1899.245541][T22959] pwc: Askey VC010 type 2 USB webcam detected. [ 1899.325353][T25077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1899.440286][T22959] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1899.576751][T22959] pwc: recv_control_msg error -71 req 02 val 2700 [ 1899.638344][T22959] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1899.908053][T22959] pwc: recv_control_msg error -71 req 04 val 1000 [ 1899.999274][T22959] pwc: recv_control_msg error -71 req 04 val 1300 [ 1900.010497][T22959] pwc: recv_control_msg error -71 req 04 val 1400 [ 1900.018377][T22959] pwc: recv_control_msg error -71 req 02 val 2000 [ 1900.026088][T22959] pwc: recv_control_msg error -71 req 02 val 2100 [ 1900.034100][T22959] pwc: recv_control_msg error -71 req 04 val 1500 [ 1900.045849][T22959] pwc: recv_control_msg error -71 req 02 val 2500 [ 1900.058306][T22959] pwc: recv_control_msg error -71 req 02 val 2400 [ 1900.065448][T22959] pwc: recv_control_msg error -71 req 02 val 2600 [ 1900.072795][T22959] pwc: recv_control_msg error -71 req 02 val 2900 [ 1900.080457][T22959] pwc: recv_control_msg error -71 req 02 val 2800 [ 1900.088621][T22959] pwc: recv_control_msg error -71 req 04 val 1100 [ 1900.099528][T22959] pwc: recv_control_msg error -71 req 04 val 1200 [ 1900.138435][T22959] pwc: Registered as video103. [ 1900.178145][T22959] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input146 [ 1900.281217][T22959] usb 3-1: USB disconnect, device number 8 [ 1900.848871][T25108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5033'. [ 1900.872345][T25108] bond0: entered promiscuous mode [ 1900.992919][T25108] bond0: left promiscuous mode [ 1901.286508][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1901.481640][T14491] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1901.879431][T14491] usb 4-1: device descriptor read/64, error -71 [ 1902.140706][T14491] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1902.300683][T14491] usb 4-1: device descriptor read/64, error -71 [ 1902.430831][T14491] usb usb4-port1: attempt power cycle [ 1902.572240][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.641139][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.771630][T14491] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1902.873974][T14491] usb 4-1: device descriptor read/8, error -71 [ 1903.140382][T14491] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1903.185349][T14491] usb 4-1: device descriptor read/8, error -71 [ 1903.813476][T14491] usb usb4-port1: unable to enumerate USB device [ 1904.135456][T14489] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1904.300540][T14489] usb 2-1: Using ep0 maxpacket: 32 [ 1904.309697][T14489] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.321461][ T9406] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1904.325724][T14489] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.473069][T14489] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.525570][T14489] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1904.567997][ T9406] usb 6-1: Using ep0 maxpacket: 8 [ 1904.578840][T14489] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1904.633113][T14489] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1904.653222][T22959] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1904.674804][T14489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.778040][T14489] usb 2-1: config 0 descriptor?? [ 1904.814244][T22959] usb 4-1: Using ep0 maxpacket: 32 [ 1904.836630][T22959] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1904.857409][T22959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.882723][T22959] usb 4-1: config 0 descriptor?? [ 1904.897685][ T9406] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1904.948365][T22959] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1905.083539][ T9406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.104140][ T9406] usb 6-1: config 0 has no interface number 0 [ 1905.110675][ T9406] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1905.120500][ T9406] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1905.146757][ T9406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.163056][ T9406] usb 6-1: config 0 descriptor?? [ 1905.229985][T14489] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 1905.268407][T14489] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 1905.287224][T14489] hid-thrustmaster 0003:044F:B65D.004D: item fetching failed at offset 2/5 [ 1905.308474][T14489] hid-thrustmaster 0003:044F:B65D.004D: parse failed with error -22 [ 1905.329310][T14489] hid-thrustmaster 0003:044F:B65D.004D: probe with driver hid-thrustmaster failed with error -22 [ 1905.567369][T25143] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1905.576666][T25143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1905.681618][T14489] usb 2-1: USB disconnect, device number 116 [ 1906.363641][T25148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.396270][T25148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.575190][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5045'. [ 1906.648760][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5045'. [ 1906.678916][T22959] gspca_vc032x: reg_r err -71 [ 1906.709245][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.749313][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.779161][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.800286][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.805734][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.839416][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.846614][T14491] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1906.878057][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.900515][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.905858][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1906.958150][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.036330][T14491] usb 1-1: Using ep0 maxpacket: 32 [ 1907.063660][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.089068][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.115591][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.218394][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.356237][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.361221][ T9406] usb 6-1: Can not set alternate setting to 1, error: -71 [ 1907.384207][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.409819][ T9406] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1907.411741][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.457247][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1907.478990][T14491] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1907.527525][T14491] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1907.541027][T22959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1907.590979][ T9406] usb 6-1: USB disconnect, device number 42 [ 1907.632043][T14491] usb 1-1: can't read configurations, error -71 [ 1907.642217][T22959] gspca_vc032x: Unknown sensor... [ 1907.709721][T22959] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1907.779275][T22959] usb 4-1: USB disconnect, device number 31 [ 1909.089528][T25185] [ 1909.091902][T25185] ===================================================== [ 1909.098850][T25185] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1909.106329][T25185] 6.17.0-rc1-syzkaller #0 Not tainted [ 1909.111731][T25185] ----------------------------------------------------- [ 1909.118790][T25185] syz.0.5051/25185 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1909.126628][T25185] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1909.135392][T25185] [ 1909.135392][T25185] and this task is already holding: [ 1909.142776][T25185] ffff88805a36b320 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1909.151523][T25185] which would create a new lock dependency: [ 1909.157442][T25185] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1909.165067][T25185] [ 1909.165067][T25185] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1909.174518][T25185] (&dev->event_lock#2){..-.}-{3:3} [ 1909.174556][T25185] [ 1909.174556][T25185] ... which became SOFTIRQ-irq-safe at: [ 1909.187534][T25185] lock_acquire+0x120/0x360 [ 1909.192172][T25185] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1909.197467][T25185] input_event+0x76/0xe0 [ 1909.201803][T25185] xpad360_process_packet+0xda/0xdd0 [ 1909.207201][T25185] xpad_irq_in+0x14e/0x2590 [ 1909.211827][T25185] __usb_hcd_giveback_urb+0x41a/0x690 [ 1909.217403][T25185] dummy_timer+0x862/0x4550 [ 1909.222112][T25185] __hrtimer_run_queues+0x52c/0xc60 [ 1909.227410][T25185] hrtimer_run_softirq+0x187/0x2b0 [ 1909.232626][T25185] handle_softirqs+0x283/0x870 [ 1909.237495][T25185] __irq_exit_rcu+0xca/0x1f0 [ 1909.242181][T25185] irq_exit_rcu+0x9/0x30 [ 1909.246537][T25185] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1909.252270][T25185] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1909.258348][T25185] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1909.264186][T25185] dummy_queue+0x573/0x8e0 [ 1909.268694][T25185] usb_ep_queue+0xed/0x390 [ 1909.273287][T25185] raw_process_ep_io+0x599/0xbc0 [ 1909.278329][T25185] raw_ioctl+0x23d1/0x3c90 [ 1909.282834][T25185] __se_sys_ioctl+0xfc/0x170 [ 1909.287517][T25185] do_syscall_64+0xfa/0x3b0 [ 1909.292114][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.298093][T25185] [ 1909.298093][T25185] to a SOFTIRQ-irq-unsafe lock: [ 1909.305213][T25185] (tasklist_lock){.+.+}-{3:3} [ 1909.305249][T25185] [ 1909.305249][T25185] ... which became SOFTIRQ-irq-unsafe at: [ 1909.317916][T25185] ... [ 1909.317929][T25185] lock_acquire+0x120/0x360 [ 1909.325297][T25185] _raw_read_lock+0x36/0x50 [ 1909.329983][T25185] __do_wait+0xde/0x740 [ 1909.334232][T25185] do_wait+0x1f8/0x520 [ 1909.338392][T25185] kernel_wait+0xab/0x170 [ 1909.342812][T25185] call_usermodehelper_exec_work+0xbe/0x230 [ 1909.348799][T25185] process_scheduled_works+0xade/0x17b0 [ 1909.354608][T25185] worker_thread+0x8a0/0xda0 [ 1909.359281][T25185] kthread+0x70e/0x8a0 [ 1909.363442][T25185] ret_from_fork+0x3f9/0x770 [ 1909.368119][T25185] ret_from_fork_asm+0x1a/0x30 [ 1909.373093][T25185] [ 1909.373093][T25185] other info that might help us debug this: [ 1909.373093][T25185] [ 1909.383403][T25185] Chain exists of: [ 1909.383403][T25185] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1909.383403][T25185] [ 1909.396459][T25185] Possible interrupt unsafe locking scenario: [ 1909.396459][T25185] [ 1909.404802][T25185] CPU0 CPU1 [ 1909.410174][T25185] ---- ---- [ 1909.415539][T25185] lock(tasklist_lock); [ 1909.419796][T25185] local_irq_disable(); [ 1909.426547][T25185] lock(&dev->event_lock#2); [ 1909.433853][T25185] lock(&f_owner->lock); [ 1909.440715][T25185] [ 1909.444167][T25185] lock(&dev->event_lock#2); [ 1909.449027][T25185] [ 1909.449027][T25185] *** DEADLOCK *** [ 1909.449027][T25185] [ 1909.457165][T25185] 2 locks held by syz.0.5051/25185: [ 1909.462449][T25185] #0: ffff8880310906c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 1909.470992][T25185] #1: ffff88805a36b320 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1909.480142][T25185] [ 1909.480142][T25185] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1909.490567][T25185] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1909.496424][T25185] IN-SOFTIRQ-W at: [ 1909.500679][T25185] lock_acquire+0x120/0x360 [ 1909.507371][T25185] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1909.514749][T25185] input_event+0x76/0xe0 [ 1909.521259][T25185] xpad360_process_packet+0xda/0xdd0 [ 1909.528720][T25185] xpad_irq_in+0x14e/0x2590 [ 1909.535487][T25185] __usb_hcd_giveback_urb+0x41a/0x690 [ 1909.543037][T25185] dummy_timer+0x862/0x4550 [ 1909.549802][T25185] __hrtimer_run_queues+0x52c/0xc60 [ 1909.557178][T25185] hrtimer_run_softirq+0x187/0x2b0 [ 1909.564637][T25185] handle_softirqs+0x283/0x870 [ 1909.571571][T25185] __irq_exit_rcu+0xca/0x1f0 [ 1909.578423][T25185] irq_exit_rcu+0x9/0x30 [ 1909.584923][T25185] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1909.592821][T25185] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1909.601005][T25185] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1909.608897][T25185] dummy_queue+0x573/0x8e0 [ 1909.615490][T25185] usb_ep_queue+0xed/0x390 [ 1909.622079][T25185] raw_process_ep_io+0x599/0xbc0 [ 1909.629194][T25185] raw_ioctl+0x23d1/0x3c90 [ 1909.635901][T25185] __se_sys_ioctl+0xfc/0x170 [ 1909.642673][T25185] do_syscall_64+0xfa/0x3b0 [ 1909.649358][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.657421][T25185] INITIAL USE at: [ 1909.661579][T25185] lock_acquire+0x120/0x360 [ 1909.668180][T25185] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1909.675550][T25185] input_inject_event+0xa5/0x340 [ 1909.682580][T25185] kbd_led_trigger_activate+0xbc/0x100 [ 1909.690228][T25185] led_trigger_set+0x52a/0x950 [ 1909.697085][T25185] led_trigger_set_default+0x260/0x2a0 [ 1909.704635][T25185] led_classdev_register_ext+0x73d/0x930 [ 1909.712397][T25185] input_leds_connect+0x517/0x790 [ 1909.719508][T25185] input_register_device+0xd00/0x1140 [ 1909.726966][T25185] atkbd_connect+0x72e/0xa00 [ 1909.733655][T25185] serio_driver_probe+0x7f/0xd0 [ 1909.740807][T25185] really_probe+0x26d/0x9e0 [ 1909.747395][T25185] __driver_probe_device+0x18c/0x2f0 [ 1909.754786][T25185] driver_probe_device+0x4f/0x430 [ 1909.761899][T25185] __driver_attach+0x452/0x700 [ 1909.768852][T25185] bus_for_each_dev+0x233/0x2b0 [ 1909.775792][T25185] serio_handle_event+0x1f9/0x8d0 [ 1909.782907][T25185] process_scheduled_works+0xade/0x17b0 [ 1909.790721][T25185] worker_thread+0x8a0/0xda0 [ 1909.797567][T25185] kthread+0x70e/0x8a0 [ 1909.803819][T25185] ret_from_fork+0x3f9/0x770 [ 1909.810497][T25185] ret_from_fork_asm+0x1a/0x30 [ 1909.817382][T25185] } [ 1909.820234][T25185] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1909.829517][T25185] -> (&client->buffer_lock){....}-{3:3} { [ 1909.835449][T25185] INITIAL USE at: [ 1909.839517][T25185] lock_acquire+0x120/0x360 [ 1909.845939][T25185] _raw_spin_lock+0x2e/0x40 [ 1909.852355][T25185] evdev_pass_values+0xb9/0xbd0 [ 1909.859123][T25185] evdev_events+0x1e6/0x340 [ 1909.865546][T25185] input_pass_values+0x285/0x890 [ 1909.872408][T25185] input_event_dispose+0x330/0x6b0 [ 1909.879608][T25185] input_inject_event+0x1dd/0x340 [ 1909.886542][T25185] evdev_write+0x2fc/0x480 [ 1909.893060][T25185] vfs_write+0x27b/0xb30 [ 1909.899221][T25185] ksys_write+0x145/0x250 [ 1909.905746][T25185] do_syscall_64+0xfa/0x3b0 [ 1909.912253][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.920067][T25185] } [ 1909.922741][T25185] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1909.931069][T25185] ... acquired at: [ 1909.935042][T25185] lock_acquire+0x120/0x360 [ 1909.939730][T25185] _raw_spin_lock+0x2e/0x40 [ 1909.944409][T25185] evdev_pass_values+0xb9/0xbd0 [ 1909.949535][T25185] evdev_events+0x1e6/0x340 [ 1909.954216][T25185] input_pass_values+0x285/0x890 [ 1909.959420][T25185] input_event_dispose+0x330/0x6b0 [ 1909.964713][T25185] input_inject_event+0x1dd/0x340 [ 1909.969918][T25185] evdev_write+0x2fc/0x480 [ 1909.974538][T25185] vfs_write+0x27b/0xb30 [ 1909.978962][T25185] ksys_write+0x145/0x250 [ 1909.983466][T25185] do_syscall_64+0xfa/0x3b0 [ 1909.988147][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.994213][T25185] [ 1909.996546][T25185] -> (&new->fa_lock){....}-{3:3} { [ 1910.001767][T25185] INITIAL USE at: [ 1910.005750][T25185] lock_acquire+0x120/0x360 [ 1910.011997][T25185] _raw_write_lock_irq+0xa2/0xf0 [ 1910.018764][T25185] fasync_remove_entry+0xf1/0x1c0 [ 1910.025699][T25185] lease_modify+0x1ca/0x3c0 [ 1910.032118][T25185] locks_remove_file+0x4bf/0xea0 [ 1910.038801][T25185] __fput+0x3ab/0xa70 [ 1910.044528][T25185] task_work_run+0x1d4/0x260 [ 1910.050863][T25185] do_exit+0x6b5/0x2300 [ 1910.056768][T25185] do_group_exit+0x21c/0x2d0 [ 1910.063188][T25185] get_signal+0x1286/0x1340 [ 1910.069610][T25185] arch_do_signal_or_restart+0x9a/0x750 [ 1910.076999][T25185] exit_to_user_mode_loop+0x75/0x110 [ 1910.084052][T25185] do_syscall_64+0x2bd/0x3b0 [ 1910.090409][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.098132][T25185] INITIAL READ USE at: [ 1910.102550][T25185] lock_acquire+0x120/0x360 [ 1910.109235][T25185] _raw_read_lock_irqsave+0xaf/0x100 [ 1910.116699][T25185] kill_fasync+0x199/0x4d0 [ 1910.123333][T25185] lease_break_callback+0x26/0x30 [ 1910.130534][T25185] __break_lease+0x6a2/0x1620 [ 1910.137559][T25185] do_dentry_open+0x8b7/0x13f0 [ 1910.144510][T25185] vfs_open+0x3b/0x340 [ 1910.151034][T25185] dentry_open+0x61/0xa0 [ 1910.157634][T25185] do_mq_open+0x59e/0x780 [ 1910.164141][T25185] __x64_sys_mq_open+0x16a/0x1c0 [ 1910.171254][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.177955][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.186129][T25185] } [ 1910.188726][T25185] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1910.197680][T25185] ... acquired at: [ 1910.201576][T25185] lock_acquire+0x120/0x360 [ 1910.206264][T25185] _raw_read_lock_irqsave+0xaf/0x100 [ 1910.211818][T25185] kill_fasync+0x199/0x4d0 [ 1910.216414][T25185] evdev_pass_values+0x627/0xbd0 [ 1910.221531][T25185] evdev_events+0x1e6/0x340 [ 1910.226213][T25185] input_pass_values+0x285/0x890 [ 1910.231402][T25185] input_event_dispose+0x330/0x6b0 [ 1910.236695][T25185] input_inject_event+0x1dd/0x340 [ 1910.241894][T25185] evdev_write+0x2fc/0x480 [ 1910.246583][T25185] vfs_write+0x27b/0xb30 [ 1910.251004][T25185] ksys_write+0x145/0x250 [ 1910.255518][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.260211][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.266277][T25185] [ 1910.268597][T25185] -> (&f_owner->lock){....}-{3:3} { [ 1910.273816][T25185] INITIAL USE at: [ 1910.277708][T25185] lock_acquire+0x120/0x360 [ 1910.283783][T25185] _raw_write_lock_irq+0xa2/0xf0 [ 1910.290291][T25185] __f_setown+0x67/0x370 [ 1910.296101][T25185] generic_setlease+0xd60/0x1240 [ 1910.302604][T25185] fcntl_setlease+0x3a2/0x4c0 [ 1910.308861][T25185] do_fcntl+0x6a9/0x1910 [ 1910.314696][T25185] __se_sys_fcntl+0xc8/0x150 [ 1910.320882][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.326967][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.334438][T25185] INITIAL READ USE at: [ 1910.338783][T25185] lock_acquire+0x120/0x360 [ 1910.345314][T25185] _raw_read_lock_irqsave+0xaf/0x100 [ 1910.352613][T25185] send_sigio+0x38/0x370 [ 1910.358861][T25185] kill_fasync+0x24d/0x4d0 [ 1910.365382][T25185] lease_break_callback+0x26/0x30 [ 1910.372413][T25185] __break_lease+0x6a2/0x1620 [ 1910.379090][T25185] do_dentry_open+0x8b7/0x13f0 [ 1910.385849][T25185] vfs_open+0x3b/0x340 [ 1910.391915][T25185] dentry_open+0x61/0xa0 [ 1910.398157][T25185] do_mq_open+0x59e/0x780 [ 1910.404485][T25185] __x64_sys_mq_open+0x16a/0x1c0 [ 1910.411424][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.418017][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.425909][T25185] } [ 1910.428403][T25185] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1910.437266][T25185] ... acquired at: [ 1910.441072][T25185] lock_acquire+0x120/0x360 [ 1910.445754][T25185] _raw_read_lock_irqsave+0xaf/0x100 [ 1910.451215][T25185] send_sigio+0x38/0x370 [ 1910.455631][T25185] kill_fasync+0x24d/0x4d0 [ 1910.460221][T25185] lease_break_callback+0x26/0x30 [ 1910.465427][T25185] __break_lease+0x6a2/0x1620 [ 1910.470284][T25185] do_dentry_open+0x8b7/0x13f0 [ 1910.475241][T25185] vfs_open+0x3b/0x340 [ 1910.479565][T25185] dentry_open+0x61/0xa0 [ 1910.483991][T25185] do_mq_open+0x59e/0x780 [ 1910.488496][T25185] __x64_sys_mq_open+0x16a/0x1c0 [ 1910.493628][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.498335][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.504497][T25185] [ 1910.506826][T25185] [ 1910.506826][T25185] the dependencies between the lock to be acquired [ 1910.506837][T25185] and SOFTIRQ-irq-unsafe lock: [ 1910.520628][T25185] -> (tasklist_lock){.+.+}-{3:3} { [ 1910.525790][T25185] HARDIRQ-ON-R at: [ 1910.529869][T25185] lock_acquire+0x120/0x360 [ 1910.536207][T25185] _raw_read_lock+0x36/0x50 [ 1910.543232][T25185] __do_wait+0xde/0x740 [ 1910.549048][T25185] do_wait+0x1f8/0x520 [ 1910.554772][T25185] kernel_wait+0xab/0x170 [ 1910.560755][T25185] call_usermodehelper_exec_work+0xbe/0x230 [ 1910.568387][T25185] process_scheduled_works+0xade/0x17b0 [ 1910.575585][T25185] worker_thread+0x8a0/0xda0 [ 1910.581876][T25185] kthread+0x70e/0x8a0 [ 1910.587605][T25185] ret_from_fork+0x3f9/0x770 [ 1910.593982][T25185] ret_from_fork_asm+0x1a/0x30 [ 1910.600403][T25185] SOFTIRQ-ON-R at: [ 1910.604390][T25185] lock_acquire+0x120/0x360 [ 1910.610550][T25185] _raw_read_lock+0x36/0x50 [ 1910.616717][T25185] __do_wait+0xde/0x740 [ 1910.622533][T25185] do_wait+0x1f8/0x520 [ 1910.628264][T25185] kernel_wait+0xab/0x170 [ 1910.634251][T25185] call_usermodehelper_exec_work+0xbe/0x230 [ 1910.641805][T25185] process_scheduled_works+0xade/0x17b0 [ 1910.649101][T25185] worker_thread+0x8a0/0xda0 [ 1910.655426][T25185] kthread+0x70e/0x8a0 [ 1910.661149][T25185] ret_from_fork+0x3f9/0x770 [ 1910.667500][T25185] ret_from_fork_asm+0x1a/0x30 [ 1910.673933][T25185] INITIAL USE at: [ 1910.677853][T25185] lock_acquire+0x120/0x360 [ 1910.684029][T25185] _raw_write_lock_irq+0xa2/0xf0 [ 1910.690801][T25185] copy_process+0x224f/0x3c00 [ 1910.697047][T25185] kernel_clone+0x21e/0x840 [ 1910.703125][T25185] user_mode_thread+0xdd/0x140 [ 1910.709541][T25185] rest_init+0x23/0x300 [ 1910.715270][T25185] start_kernel+0x3a9/0x410 [ 1910.721419][T25185] x86_64_start_reservations+0x24/0x30 [ 1910.728451][T25185] x86_64_start_kernel+0x143/0x1c0 [ 1910.735130][T25185] common_startup_64+0x13e/0x147 [ 1910.741639][T25185] INITIAL READ USE at: [ 1910.745966][T25185] lock_acquire+0x120/0x360 [ 1910.752477][T25185] _raw_read_lock+0x36/0x50 [ 1910.758980][T25185] __do_wait+0xde/0x740 [ 1910.765136][T25185] do_wait+0x1f8/0x520 [ 1910.771297][T25185] kernel_wait+0xab/0x170 [ 1910.777634][T25185] call_usermodehelper_exec_work+0xbe/0x230 [ 1910.785705][T25185] process_scheduled_works+0xade/0x17b0 [ 1910.793424][T25185] worker_thread+0x8a0/0xda0 [ 1910.800024][T25185] kthread+0x70e/0x8a0 [ 1910.806096][T25185] ret_from_fork+0x3f9/0x770 [ 1910.812777][T25185] ret_from_fork_asm+0x1a/0x30 [ 1910.819546][T25185] } [ 1910.822056][T25185] ... key at: [] tasklist_lock+0x18/0x40 [ 1910.829780][T25185] ... acquired at: [ 1910.833581][T25185] lock_acquire+0x120/0x360 [ 1910.838273][T25185] _raw_read_lock+0x36/0x50 [ 1910.842985][T25185] send_sigurg+0x12b/0x420 [ 1910.847581][T25185] sk_send_sigurg+0x6c/0x2e0 [ 1910.852418][T25185] queue_oob+0x420/0x4f0 [ 1910.856849][T25185] unix_stream_sendmsg+0xc3f/0xdf0 [ 1910.862140][T25185] __sock_sendmsg+0x21c/0x270 [ 1910.866990][T25185] ____sys_sendmsg+0x505/0x830 [ 1910.871933][T25185] ___sys_sendmsg+0x21f/0x2a0 [ 1910.876785][T25185] __x64_sys_sendmsg+0x19b/0x260 [ 1910.881897][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.886582][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.892660][T25185] [ 1910.894991][T25185] [ 1910.894991][T25185] stack backtrace: [ 1910.900879][T25185] CPU: 0 UID: 0 PID: 25185 Comm: syz.0.5051 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1910.900901][T25185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1910.900912][T25185] Call Trace: [ 1910.900920][T25185] [ 1910.900927][T25185] dump_stack_lvl+0x189/0x250 [ 1910.900950][T25185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1910.900969][T25185] ? __pfx__printk+0x10/0x10 [ 1910.900994][T25185] validate_chain+0x1f05/0x2140 [ 1910.901019][T25185] __lock_acquire+0xab9/0xd20 [ 1910.901044][T25185] ? send_sigurg+0x12b/0x420 [ 1910.901061][T25185] lock_acquire+0x120/0x360 [ 1910.901083][T25185] ? send_sigurg+0x12b/0x420 [ 1910.901101][T25185] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1910.901124][T25185] _raw_read_lock+0x36/0x50 [ 1910.901142][T25185] ? send_sigurg+0x12b/0x420 [ 1910.901158][T25185] send_sigurg+0x12b/0x420 [ 1910.901176][T25185] sk_send_sigurg+0x6c/0x2e0 [ 1910.901197][T25185] queue_oob+0x420/0x4f0 [ 1910.901217][T25185] ? __pfx_queue_oob+0x10/0x10 [ 1910.901235][T25185] ? __schedule+0x17ae/0x4cc0 [ 1910.901256][T25185] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1910.901277][T25185] unix_stream_sendmsg+0xc3f/0xdf0 [ 1910.901298][T25185] ? __lock_acquire+0xab9/0xd20 [ 1910.901323][T25185] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1910.901343][T25185] ? aa_sock_msg_perm+0xda/0x1d0 [ 1910.901370][T25185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1910.901387][T25185] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1910.901405][T25185] __sock_sendmsg+0x21c/0x270 [ 1910.901426][T25185] ____sys_sendmsg+0x505/0x830 [ 1910.901443][T25185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1910.901461][T25185] ? import_iovec+0x74/0xa0 [ 1910.901480][T25185] ___sys_sendmsg+0x21f/0x2a0 [ 1910.901495][T25185] ? __pfx____sys_sendmsg+0x10/0x10 [ 1910.901528][T25185] ? __fget_files+0x2a/0x420 [ 1910.901542][T25185] ? __fget_files+0x3a0/0x420 [ 1910.901558][T25185] __x64_sys_sendmsg+0x19b/0x260 [ 1910.901575][T25185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1910.901600][T25185] ? rcu_is_watching+0x15/0xb0 [ 1910.901618][T25185] ? do_syscall_64+0xbe/0x3b0 [ 1910.901641][T25185] do_syscall_64+0xfa/0x3b0 [ 1910.901663][T25185] ? lockdep_hardirqs_on+0x9c/0x150 [ 1910.901684][T25185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.901700][T25185] ? clear_bhb_loop+0x60/0xb0 [ 1910.901717][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.901734][T25185] RIP: 0033:0x7f738238ebe9 [ 1910.901749][T25185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1910.901764][T25185] RSP: 002b:00007f73832dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.901783][T25185] RAX: ffffffffffffffda RBX: 00007f73825b5fa0 RCX: 00007f738238ebe9 [ 1910.901796][T25185] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000008 [ 1910.901807][T25185] RBP: 00007f7382411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1910.901818][T25185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.901828][T25185] R13: 00007f73825b6038 R14: 00007f73825b5fa0 R15: 00007f73826dfa28 [ 1910.901845][T25185] [ 1914.852659][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.858971][ T1303] ieee802154 phy1 wpan1: encryption failed: -22