last executing test programs: 7m38.912077476s ago: executing program 2 (id=3596): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001, 0x0, 0x0, 0x0, 0xfffffffc}) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async, rerun: 32) io_setup(0x5, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) (async) r4 = eventfd2(0x2, 0x80001) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000040)=""/40, 0x28) (async, rerun: 64) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) (async, rerun: 64) r8 = eventfd2(0x2, 0x1) (async, rerun: 64) r9 = eventfd2(0x0, 0x80800) (rerun: 64) io_submit(r2, 0x8, &(0x7f0000001900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000040)="8fa72a419619075316e82e73a1ddee728289f1c64b16f674147d5560db2fe7b1f8482ec7501bb5ec9e5ad22d51432e9c618d0de117498807e846ee48f64903f393619ca8093cd6c9bd83e7e73908eaf1e4e5c71864881db93afc79bc38ce5ca6e06d9fda75bcaf9507789954ce089340bdfa0f5e3e93d93fbbcb957b83886a7df48b19e5dedc4f99a0f021d0c1bf8226e7b76ef9ba5bb71332542411fae9a92463dcf65777d4ad9e7ad6f9883c653daea678636fd67dcd4db710a61019e62fbcd8", 0xc1, 0x8, 0x0, 0x3, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x800, r0, &(0x7f0000000180)="a0ff27e88e4a2424eee0a8a209e05f8f84c3bd4f24a7a8b217372c3590e498787deb63aa3fecb3a813f3aeb64038b83977333f8d13a14336e02e46b3bb77f94df00411e0dbd94c1994a86ed6ef7ef3174072abfad6ddb0e8d9fe5e32aedb8ba2a1e879d7ee9085f6878d57cb989176b796bfddcd59048daf42cf78819b6c091939de2f3498cd48113a6e9949946dbbd45b62f4aef80edd41726449d83b81536349d6779ea020ad98e910562961399cda28a6777c7e230cf934115db15fbc75e492e6b7a0f261fd9d5c812ed81d28bed5f97ae7bc9229c9f2bd7aa0f2aef1b2dfbd143be8e7ecf4d579d351c1019322b2ac", 0xf1, 0x3, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f00000002c0)="9d51d03c513a68ad802de932583f663fd114c9ea35f56e997781c48f6d4759942c536fd51361f1f2c133f36ddac848a60111315f02a8f931d867a71729503d43ab172524430e413288d7d5e8b9a030e3bd2e1ceb99b253e7b2cacb84d35c3d2e74adb19b0cedc18b4e978220906f3bb3b96e13f5540097e260dfc9978150c5542ae4f307e51915d8e9050f3ffa4a0b3b01984a6e69f445d912a204b843d4b3e168d6147c0f0fa06ad6baac20e5b3fac0cd77f5c4dc59fb59ae5615e3a49ac0798d840cc1b18c466c70c00f07c25693013f48fc780ad5e417d36a4a973547d0ec0ba6ea6a011c418826a2ce7cbd1b5b9548bd149e0909846c26885cfcf2854d", 0xff, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, &(0x7f0000000480)="a02b10eb8844131eed84a9001c2b20e1b41bf91a4606f7fb72a952e0b8593ee3c4c1b3416cb239002cadbfc51f2620f8e36f1e992713a25e706c6bf6c938c8d0d81a55b50465537b50e235419e55da91ca721b51fb7e8887c01e3d70354e68c49d16b72843bee01505e87bbb751d9c181e454a91a729fc3476525e2f867406f699dac164b720a96dbd0e25438579ed30d40e26522bf49781384f992e475b111d5ab96045f93d60b46086561d53d97f075c3046e95d06c1af5322", 0xba, 0x1, 0x0, 0x3, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xb74e, r0, &(0x7f0000000580)="26721f45166be0251ca5148a51bbd05fb6c9659ce8560dac73abb5bf6a1aa80a9fc6c2b5e457df7f92ee1a423066c4ede5b9482593a8d425e7355836767661b83105e13411db4279a9aed677c80dec8f64493772b19cbf7e30fe6eb7f8e180cf12d1b1a088b990eb8492a80e722b4d8fb3f994dc38e897a11a397467003cccae9df1ca57003ffa5a8161210b7781049b9c65ffb9fef70fd5c263c9687aed59713e015f5454417ca62e", 0xa9, 0x376, 0x0, 0x1, r7}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f00000006c0)="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", 0x1000, 0x8, 0x0, 0x0, r8}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000001700)="2faeda9a0763590bb8a8f688d502f95f8739e57b1d42a32235049288ebca0e5e0d5369fb1902bc39b14e63e76c863243b25766b602bde6d1602aa864ea90101f523d12d15b87b37d459070c0baef0f6ad97f4722fabd5b645bf93413c833f2eed50d5792a3102974e818e4e6d250481292f941da0402f5cb076a2c150382f6cce9fd4d2c471de3f56ccc6c91b8751103ab45181eea1883c7c406b7c3bea3e463975227e27a1614aa5bbc8024e6f0d547309307034b7c71d392229913468e398ca76315c6df177b6e694f5a725e71e3a3021241a20da347859e10da77f13e1edccce4e6", 0xe3, 0x0, 0x0, 0x0, r9}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, &(0x7f0000001840)="2b8464f864e802d2c2226ffde15bf529e7d22de4f936f56cad6e0b472f436fe8126ddecf42fafc8034bb3f67f855425f509ba71946a30829e405b34026fdcb4c7ef9558bab9101eb9961326bcbf310f6609cffa3d7a69a8b14fdcef971f1e4c8258122126f7c5f0f4177f6dbd9acc8951c02936f5df0", 0x76, 0x9, 0x0, 0x2}]) 7m38.895749001s ago: executing program 2 (id=3597): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macsec0\x00', @broadcast}) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x1, {0xfb019c76180de43d, 0x1, 0x7}}, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) shutdown(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x165) faccessat(r2, &(0x7f0000000280)='./file0\x00', 0x8a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, [0x6, 0x3, 0xa, 0x40, 0x3, 0x1, 0x5, 0x2, 0x5, 0x6, 0x5, 0x6, 0xe, 0xc21, 0xffffffff]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r3, 0x4, 0x1, [0x3]}, &(0x7f0000000480)=0xa) write$P9_RWALK(r1, &(0x7f00000004c0)={0x30, 0x6f, 0x2, {0x3, [{0x80, 0x0, 0x5}, {0x20, 0x4, 0x1}, {0x0, 0x1, 0x3}]}}, 0x30) getsockopt$sock_buf(r1, 0x1, 0x38, &(0x7f0000000500)=""/181, &(0x7f00000005c0)=0xb5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r1, 0x0, 0x1000, 0x11, &(0x7f0000000600)="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", &(0x7f0000001600)=""/17, 0x4, 0x0, 0xdc, 0x83, &(0x7f0000001640)="f42ba9c0e26ce5a300501962ae9e8c99a67ef9e6de13ded6d2e2ee5dba5c334fa6b3aa96e89087f631754c298f6f4cc6615296747f378def5ae24839e0fadaf4305d71a41b211014745e5364b04fc5f35beb0ff179f8a45c83a43a32b95a868febe6a16f60ce696bdb0887d2f58483ce80475e6443a6774453878906608ddde9f3ae52cf94ed914ccbe4fbdbcaa398d39cfdb564ac794326803ff779853caf1eac39c580d9431556680ef49a249edcb7c761f9defb564ff930d39f95353209deb86908c2427271fc29dd82aa53ab18a23279e879a2c2dd86a3b96fc5", &(0x7f0000001740)="c622cdc474c1609d8c0cd6378f9ed0b26c21d4c435d9d4b4803f423c04436560c80812ded78641b31ed2e14f83f7a1ac12035614784ec8b4d7483aa5abbcd5c24d2d481375f496709f8ba468264a4bf5973ef7e666731152f54f7f3b630b479e6518b54e8aea25fb9184ef8b1057c966a71c2e7c9a38b94b2027006263d9b1ef412df7", 0x6, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000001880)={0x0, r2}, 0x8) getpeername(r1, &(0x7f00000018c0)=@generic, &(0x7f0000001940)=0x80) openat$cgroup_freezer_state(r1, &(0x7f0000001980), 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000019c0)={r4, 0xffffff71, 0x30}, &(0x7f0000001a00)=0xc) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000001a40)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/63, 0x3f}, {&(0x7f0000001b00)=""/22, 0x16}], 0x2, &(0x7f0000001b80)=""/216, 0xd8}, 0x200}, {{&(0x7f0000001c80)=@nl=@unspec, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/145, 0x91}], 0x2, &(0x7f0000002e00)=""/250, 0xfa}, 0x4}, {{&(0x7f0000002f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f80)=""/194, 0xc2}], 0x1, &(0x7f00000030c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000003100)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003180)=""/136, 0x88}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/59, 0x3b}, {&(0x7f0000004280)=""/94, 0x5e}, {&(0x7f0000004300)=""/149, 0x95}, {&(0x7f00000043c0)=""/12, 0xc}, {&(0x7f0000004400)=""/243, 0xf3}, {&(0x7f0000004500)=""/177, 0xb1}, {&(0x7f00000045c0)=""/143, 0x8f}], 0x9, &(0x7f0000004740)=""/251, 0xfb}, 0x1000}, {{&(0x7f0000004840)=@nl=@unspec, 0x80, &(0x7f0000004b40)=[{&(0x7f00000048c0)=""/166, 0xa6}, {&(0x7f0000004980)=""/161, 0xa1}, {&(0x7f0000004a40)=""/217, 0xd9}], 0x3, &(0x7f0000004b80)=""/16, 0x10}, 0x6}], 0x5, 0x200, &(0x7f0000004d00)) r5 = syz_open_dev$vcsn(&(0x7f0000004d40), 0x8, 0x40) syz_open_dev$vim2m(&(0x7f0000004d80), 0x9, 0x2) shutdown(r5, 0x1) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000004dc0), 0x10202, 0x0) mknodat$null(r6, &(0x7f0000004e00)='./file0\x00', 0x40, 0x103) r7 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000004e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r9 = getgid() getgroups(0x4, &(0x7f0000004ec0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fsetxattr$system_posix_acl(r1, &(0x7f0000004e40)='system.posix_acl_default\x00', &(0x7f0000005100)={{}, {0x1, 0x2}, [{0x2, 0x0, r7}, {0x2, 0x3, r8}], {}, [{0x8, 0x1, r9}, {0x8, 0x3, r10}, {0x8, 0x4}, {0x8, 0x7}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x4, 0xee01}], {}, {0x20, 0x1}}, 0x74, 0x3) 7m38.843323911s ago: executing program 2 (id=3598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x41000000}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m38.756147317s ago: executing program 2 (id=3599): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x3) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1, &(0x7f0000000600)=""/251, 0xfb}, 0x2010) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r11, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10000) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "17302134f2faec1c", "3ff6dfdb6f922134316a76a1effc0dcae35a402ba430aa58806cdefc705d10dd", "8ca51ace", "05d1585d44766607"}, 0x38) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9, 0x0, 0x0, 0x3}, {0x8, 0xc}, {0x18, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0xfffffffffffffcd8, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xd9}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x2f}, @IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xeb}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3ffe}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x18, 0x0, 0x0, 0x54}]}}]}]}, 0x134}}, 0x0) 7m37.815306794s ago: executing program 2 (id=3602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 7m36.570426464s ago: executing program 2 (id=3607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000002280)=""/4100, 0x1004) (async) keyctl$read(0xb, r2, &(0x7f0000002280)=""/4100, 0x1004) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 7m35.346274343s ago: executing program 32 (id=3607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000002280)=""/4100, 0x1004) (async) keyctl$read(0xb, r2, &(0x7f0000002280)=""/4100, 0x1004) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 9.389045436s ago: executing program 5 (id=5775): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x50, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0440fca8720000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x61, 0x6a, 0x8, 0xc98, 0x1140, 0xf021, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x3, 0x9a, 0x3e, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002225000000a308b54df4a30ef1a49065747b0000000028672d589b63c0673d57e7d6c3"], 0x0}, 0x0) 9.361480189s ago: executing program 3 (id=5776): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) write$sndseq(r2, &(0x7f0000000280)=[{0x1, 0x7, 0x3, 0x3, @time={0xffffff01, 0x3}, {0x1, 0x9}, {0xe, 0x9}, @result={0x5, 0x9}}, {0x2, 0x7, 0x5, 0x7f, @time={0x101, 0x9}, {0x3, 0x2}, {0x3, 0x5}, @result={0x2, 0xb6700000}}, {0x1, 0x5, 0xd, 0x2, @time={0x4, 0xd9bf}, {0x4, 0xff}, {0x9, 0x3}, @raw8={"d261feb51cc51a29b4f12da3"}}, {0xff, 0x6, 0xc0, 0x0, @tick=0x61c, {0x5, 0x5}, {0xfe, 0xee}, @ext={0xf2, &(0x7f0000000440)="682fc784884a4f6cc767562088f19c23e7bd87abf7a5663da0433ada814e435d7ceca11ce3bbd60283dacaf1b32d98430e4969623650da74387170eb309d635d5f29b1157780b0521beeef3cc1fdaa9742997aea4e7f139015a7d11e726dfac9fde4fbbac314caec6239775142e7fdad3ddd35c578ad546f8c043b9a4cf83c2135aa2faaf000aebbedc6534e1520c638c87873454ff77f3d48eaa3985a5e3606f24531e036152a4487235ed414b98424d28ddf709b5256e8a9dfd2075c82a85bea1021e0726261d0e980492dfecbc83365f8a02ddb54fde7e31c03a24803f6f191bf961a0622cecd6eed880fe34323f5cfd3"}}], 0x70) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.680440529s ago: executing program 0 (id=5779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='s\x01Urce', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x8000288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x10, 0x803, 0x0) 8.680240088s ago: executing program 3 (id=5780): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xfd}, 'port1\x00', 0x511e36599023629, 0xa0400, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) r2 = inotify_init() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x800, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008400}, 0x40820) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x46, r2, 0x0, 0xfffffffffffffd22, 0x0, 0x0, 0x2}]) 8.679881623s ago: executing program 3 (id=5781): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x46ea, 0xf, 0x1, 0xfffffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r10 = socket$packet(0x11, 0x3, 0x300) bind$packet(r10, &(0x7f0000000380)={0x11, 0x8, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 8.008031878s ago: executing program 3 (id=5784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00000000000000ffff000000000000", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 7.480681238s ago: executing program 0 (id=5786): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x10012, r5, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000140), 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x24, &(0x7f0000000300)={[{0x1d, 0x4e00, "e1ee6baaffa61ec0c065b70bc14f1dc3645f6b3690a2e923bc997a81f7"}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040), &(0x7f0000000080)) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x10012, r5, 0x0) (async) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000140), 0x0, 0x4) (async) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x24, &(0x7f0000000300)={[{0x1d, 0x4e00, "e1ee6baaffa61ec0c065b70bc14f1dc3645f6b3690a2e923bc997a81f7"}]}) (async) 6.271618091s ago: executing program 4 (id=5788): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x600, 0x0, 0x4048011}, 0xc800) 6.023444449s ago: executing program 4 (id=5789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x1f, 'pcbc(fcrypt)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x90}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) 5.883569462s ago: executing program 4 (id=5791): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0006000000090000000000000001410000001c0000006574683a738d0600616c6c45723014a42e7b4a0c31c2f31cdd0000000000a378c63ef8a866b08ba8c06abe932f6ade966917e40f5bf9434210e098cae6baf4288cef12baf2ce110fe320"], 0x38}}, 0xd6886fc6293bef1f) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="000000c900"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2000000002, 0x8, 0x0, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x4050804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000003008000000000000000000", @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5}) 5.483306181s ago: executing program 5 (id=5792): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x200}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0xd434b91e66f18cd6, 0x8000, 0xd6}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x40, 0x6e) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) syz_fuse_handle_req(r4, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x80000001, 0xffffffff80100000, 0x63, 0x1, 0x475, 0x9, 0x0, 0x0, 0x1, 0x4000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x26020400) (async) fdatasync(r6) r7 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000200)={0x1, 0x1, 0x8, 0x1, 0x29, 0x8}) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) unshare(0x22020600) (async) unshare(0x2a020400) (async) syz_usb_connect(0x0, 0x62, &(0x7f00000009c0)=ANY=[@ANYBLOB="120150028b59c1083c0b0ac0c74a010203010902500003ff0530080904061d015c62c70309050f0000040d0200090402000384dd141b0905090300040703fa09bcc81e30e383d4050300400005010c09050502ff030508050904"], &(0x7f0000001480)={0x0, 0x0, 0x2e, 0x0}) (async) socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a1400000011000100000000000000f5d6ff70751300000000000ab55b1f0749db1f34a9a95aa52be1a2bbf9f8b9f7f2c1b68584af5f38a76b9bc5ab41c922867480e77c585ef4787269db22f381800c708754f045a7a670e9cfc91aaaee5ce17f76"], 0x28}}, 0x0) 4.602836852s ago: executing program 5 (id=5793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000006940)=[{{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000003b40)="8e79c7f721d304e9dc3d3ec7ef3c677454cb56b0d15319af0a45a895f5166ff88e9e764468c89988b53101057e32e809c0046e934cca14fc9dda1c2227ff4f5dbad0ce75b06e2018b3223a7c5b4a6aae5c3f9bfd609897a3c7818a2afd994a665a7d273b1a33f8cd029e183c71091acaf64e876f50f6ccd09a5213a20594027ef0025f43557b86e82603ad83f69a97c58abc3622bcac3a9bffc9c13dfa3b5114797391bffa9915a489aa00b7fdd18c255049e5ad404fb02a81893b571c220426f50bd9c678dcbcf143cc60389e2ff3163e14fba472a506e0532cad14f7ea49a0a4056b816f268bcf4f74efe27e8f7a931b007ba017fec265f826b03715436e163dc7d7fa54550cbbf6ff76108bfd4d0cf97c2fb35e31016d4f02c9d78e017acaefa9d048a71aef745f8d689a93e1522ad48ced52dc8828fd0ff1af97a2313e9c8476506b1363f0a310ed73b67c2aefaf3d683b783ad4ae8bdd10ed15ed1643a49da9da7521c1184f6f7a214992e877177f3677cd719a15567830eac5c2a5668727db36f3bf634a78ac347e5786542309405835f7fc8bf5c7f04d142fa9808cd2919c45031fffaf88fb2a4d1d4b259a207ab30fca2c56b60dfd46a6776fd40a669f0f58ba454a3727083c3d8d1400f3ea0936c689c369d0a3abdb4dffd28a1dba7a5e021f5ddf0680c9145ebb549058f670555e5b17037ce6042562ad3778c2f40c779c35c21e259c00559c8ed8db32c21389233857abc2f5ef7477e7dd94de0fdc4320e42242cf2cf2e0d269b866eb9fcb3c500d1bd92cdd8dfb7631f93eed511ea01d4c6e1dba65c36b27a21313927201abe1f83ed4e9490598dec2a844307d2905605d4c3fbe8bc91cd7dc51548b986ff459acc83b712394170f176001e006b5f57bdf950b22ca87793569f8aaae278b956e82bdd460e852c856a657d5b1ded90ecee6651da4a9ea2aca707a142ee8112d99a69bb6a3760a86554ab7958bf59da2ef29fd2424b9ab15821781899f01b5277fa8b0121ad2791cde4322167ee3ec697a1c054952f6a7585f439a6a4fa776b080bfcc987a064a8a5259f6a6a5d26a011459f52da8059104dd607ec39d133ef224dd857248a7253cacb9b1dd0228cded4f9c15139c05c14fad1617d1aa1c23d8e8938928232258a0f4ca5302078fa537bdc033a7a97c517dddf4c173d108519a40344b3182b38c74a23ce68129cf3ad9a5354d4b90e0497ca869bff55129f958b8be8e4dac0d8d93f365decc1e7a42403c01c7b7afd0b0fdb2a3f8b22cb593a3485768bd0931bc3710d79b3747339edc0182e5ae7871d5c57fd3d14684ef47158708ba14a882b9d840b786bdb8cc92eca2bb68b40512f12ccfe7322fad0a2b156f60c3137b9ce996db45bde710c6ddeb1a3f0cfb8ac706f87365974520bf3b226076a8fb114244bb8808c4263ce143bcb39fbe7c21753197a89e7e91c7208579cc40b0ac3ba54b377c4c34892a3d2297ac6a27bd9a51e462c9c1b9a4c70c5f94761306e6b748e10f4f80a1348b257a26f8467290a8ec37b65c495aacf978e50393d4c4af8eada1b42a156c8368de7fedd0035270cd830928037b1819433d595d12fce110407f55c16486fe9e052e6d193dda015e7a9fed60fcacccca6beab6924d58dbf3953ccb262fabe1e6034b55b0f0b6742323cd9de3da24eb2daa49de7fd44057cff77d09b388281802c3adf4a772d34878a0729e90b5920b115628c0ec986af6d9d79a2a00432fe913356300a7f5046ce6dd03161fffd4ef6c0f9b5c4c6ed8136ce4dc905d9eca3a4923f9cd0a08c5944ca4fc6d0e2b021cf30f4e0edc624f5662f22cfb86e25f34098665c275a3ca65d465e6bace4ffdd6d48adf65a13f5d7c428f136dc2a5ebd73887b375d9b07b5d58dc5ea14152eaeaf1dc02d5fbe5c4dfed96f2768a0f52efff7e637af95d88026cb51fb27f14a9d80a96a7d1a4cb55769a18f3bfb6e2b4581b42112aa9fa27107d1602cf02d77b57a8bb280656adc6032480d240e12a50aed35a1021735381ff856fe7baa91bf01fb3ee55e696e43be8f7d6af413f20c0a615fde42284b5228be7af41fab21d481d692cbc06ad660121f5852d0591f6935f298b9868fded5f22a6a98898dca43be215c8c90748fe5dc275189a3a26f69b0b379fae785dce54868bddb9a20f317011bf386a0f5513c3da3dce5ed4adc5b2c0d5bfa13bb098ca035c74e458cb6d158fe114b17a31d667dde0704f7d96130ce5e79a67cb80e14b590609960ce0283d31f7f7c3d6d55058776e9a211a2949171027d220be899aa4400062c88a1f288de4b72004dd463a0d343d1101562fcc49320347b93e7d0ef21210ebfc5689779b581f27a1a5a1bc010dc7c6f8111f8379b0e2ce354ffe9c1f57ac11b8899c2a85fca74b3f14b54817308d32119be4be877387916e43b69a37acb57ae0d844ba38daea53564235819632cc6704025e391be6239799d64388675f9c94738e023ec25dca13422bb655c953b8e275afc7888521e6611e79f7ff7380e642b57e144be2c8b5807d2d4c9d26247e09e76d2a374a72d46d2d1281295b3b7aaf6cee8a40d0c416fd808dd31b8ea3dbf79fe59bfb5629c44514586f36424dbbe4866e7d6a0378f582f7b43a58f4b83de399f4abab628755f1c5cede9be4a51b6b072f452c660a2075e0fd20d8f106332d5e4e6d7e5c976a1ce2798110a0e19a24cccfa62da21dbde2ac5b7edb8a34a22458bffc754fd3e0d39c7a561d1959ea26673964096d6a8ce5a33135c37b0cee9f874299ef1a857b0bc538723d4b83e6ace591b08e97910a2e63120e0c10d2c5a83a96baf913531cfc7dff3c5c911448ce3707dad990c3a14b9ef0830a8b8ce06ed454b952ec96b7db35b67e37544ec39f9d1ecab8a738103b47b55e33e76b579584f59ed5f2f7c699a301e36e290dd4bf049a8a7355b49e9174da78834b50c1a8b4fee51d9ffa50af667d7b333e344d648f7b89d7dd6cf18e4c5d57ccf8b865551ead6518753a17a3fb54828edf8096f786a9251bbd22bfc0001ae1a17521747940b5f5f8ec3ccac1b09195ebdc4d7b178529bc830d3eab1c96134fe8ee8052eaa162e3b21389b825ae2c3cca34913e383139e739a647cba4a972cbaf9488f40b4091837b1a953caca32ccbda037c6fb62aa66a27d3d2a57fe90c727f728895e703145df9c19ad9c36de021001e21bdc1fec30e5651327abea11fbc3e6a59db40df568a538a7392d79b9c8ca361389d98f8707f3e4f94e2f6f0eaff9668e281d53b82dc512c2fca7f7efe4f95e09de5376ec9b0d7b0dd4a1cdcd8827aa1f575d9c262d3a559784c3868b863dfe2e7e53437b73ca77b6a0d92da1dd24587f617c21357040ef9c3cd1007435ccb4cdefa1bd333f947e02bbb95d147f2a9b25d8a7d64b1e16f8d9290edd282443cddf0d1e068caf5c5bc033a4a4f84ac238fb8441afc212412acd283c07506499135a965d9581ecde62b080cafd9e88531827174d82cdce54ac0fc389072870db054b0f3fc3b86bdea863a0b1da9c405bce136a9cd049725c6be3dee87f86a1d12610dac62b7a942ff177f7d851eebbcab35c1461680fa385d2a32051739f73dd598557f437a4460f8be16583508d16008b04fd825da915f9ac4caa0a82f62284a1a4f8e6766eb1074e3365e2d928d0a6067a54520ce29c2c32accd9c81c1935148eeac4ace09c3c6469fbc4ea28ecc2ee6cc355b989f009293e33464348595527944a95b4e0dd10ac470aff15c565774436a4747f107108ec3fa6c55f97b4b61bb6861d8f18ef2437232c2304c84a058f8d9f9886df4de895bf0cb2a1c8cbb8eb58dc1cd49685f8027f9d60d01dcdd242499bfe8387be36422143ab07045c7664b21869fa8152f8a36c80bc39ab532983d2c82933b2307eaa2650fcbbaf3eafe20a5c4e2ef7c11b33046a5a859b47520b93b4f74ec59b5b5588cfa42bb25ab5f03d74f977506734dfa5f5d6af8904a6d15e8c60bfd4fdbf7a8efac3fc62d4ab63841f0602cc45b8336c694989b5a2e29bd3b037917cc3e4d20fbcf9cb0eb38e2982256644e3dc7f13f6a58a7ae7d857a06d692ba4026bf0c6d7fbd26087b58f2427095b4d2a092f58be2129362d48efbe091620d136bd2f3cdb11897e1315fb57e11cdbe248c048b8c98ac3a1381a2e58112c60e0f2eb947db06f648cbc2b2ae87672d3cf3d1cf563ffcd9f8dbe9b103fe1709f302b9b94f2c64dae68147a981f2144b6d2b68106176eddd87d4ff60529c23c96cdac63c18635fc6e8ebbef900673a3a992fda7f53bad609b4c405b623f9b4f774b4f1bd4c706882acf8be5d988b4f88e506c9282875d957f7d13378b3762b14c265336b1f5dbdd86483797b4fb8151899b4592e746b599186cc068918c9a2ded0b9af10c77705af141f4d2b444a88012ef3abec2fb518c4217b6ca5fc4eac83ce73f1c3aaa45fbbdc37225aeeff6ecada5e86364aedd3031db31e7bd4074ff2f36df8aa3f3225eca59995692090e987d86bc47321373393f1c0b1e7562fc273ca90c0a847385a252e0ba6e2fbd42d5d8407c2e50fe78755a8d797f1a96abcc2c5dc0464634964510e8e614c2a48a7725800d3c47dbfcc66273cd8bbecec395c3c744bf6d45be343d70310512bcb0dfcbaebdd09ae5b2590136d8c17e1da50c2a89dfe53db5485f026317f846bb1bb7230ed0481e53656758479c5d272323b37c150ea3d5a4ca099c84da8a9b3d50cbacce784bd91e759717319c601a86c3ab843bcbc33c0d96b254c7ab704a9be9e95ce4ccb52510e1cbe08c8947dd48f8a0ced88a96134bcbf5b8f4726bbb9c38e43f8d4f74fcdf9f1cab47c819f60c7c56ac81a3a8ddf2a9a02c93afdc4a415f7a01fb7b97bd105c6ce87ffb7bf165b94529f949a01941d06c054dcf9947f888626c1f868c1e7a190f1d3ab9120e9c276d79dbac6df528fa4bd5e14208a341a0061a5766ef9f0455c07b3e30d6d3ccbbaa485c3d3d7823ed86447688c9e2a0eb9f780c888d7736cf82d5768b605d23e810bfbd9a524e4a5517e5bd6103a9f49079db67a5d5493c82e7ecc1fe2738282bbbe84fa9653ae4a013cf6cc1357d4967da85339614ba4481a286eb7bdfb45d7ae69958313ad10f1be326d3212c678e2a6d3e82e3c1fee96e31fe95230eafe5ea6034ac00a07c2c990b9a6b7163cf914187f03a6b0c1d71e04b73cc2cfda31e4e850a93c40169d8bd2564e2de7c15785d05f2f1148aee938bc20dedfc4069e56f4c869ced870e2e6b4daedd51b0bf9ae5cc3464b70c9c6bce1284bb182f5e31c0c44aac3cc0366476d7d3905f67010589d413613e111bd3582b2606c8ff481841cf3df9e20ae2c2631f191594c3e0e164383104a37051eb5d2ca25094fe2bdec8274885160c01fdd8226290e4ba1ea0f8c0513cecea50c6c0afa45e3c7c9954c1bdd79baeec09df8193cfd3d5c1ccc39f503bf68bf04037aa03869df8800441de2ba2c9f204597878bf13b8f18d9b643d46945629cc1f84681c1afe949f4a0c9a54f61d67207647497095158e6ac9cb9d0e6f05f51ef3e293f15237c89986f345be9cfedd40b0e77a7dcf4d57c83af3eafb5382de9e1fdf6fd4570143f903d924e241beb550988546e089b95d46dc52cecc3052511298f0f94bda37242ef9b83bb4a5bffbca5768608707f727d3cb961500529920389fd580211e9ba956747d5b3656b6091c03c57385bfd5e31341a89243cbb991a01a3f2e4b9e159086299a268e317aa5bdb22158627972ea", 0x1000}, {&(0x7f0000004b40)="413447ce1135871a0cf65d1ba2f357460e729cfeaae2124a129591e767e0be3a5bdb153d8b4ef05fa0fdd100aaa88e886ee8ad793304132dbdef790f66da20efe057372a566a3a29fa4e359e194fb18475fd042ea87717759b4ed97c013d94db8676bc9cf3b05df92e3632943dc793f486865d186a300294f5635e146c46e2eececaf133139885328a01694a2d0b25b5d9835485bcb0ad3ac396a7782daa882e4662642580b43a07b64476adc70d2cc7b3027830f3ce3f32fb94b64b9af4c03a3f2cef10cb193c38b3d45334f4caf21a1b2093169a89105cfbe504fd18becfd2834e276a41f8b08f878172bb164df9b1f519dfb841a0ce858ddc29f0c550210e675bf3e98642288034dd1d92a1480db7798ce0838f4799fdf2e086bc83a4f8e01b21d3da0fc6b56b76389c59e7b0f8ff0a98d4f7486d10547eba1366c38a8af3c09fed50e984f0705a603f0d0e92b9e91628dc4e375767134c5ddf195838f0a945c63af019f93ed72440ac16f89b9155985d126a88fd90df8cfe0907560a8b3245c27ce908ab67ad977c0057947087c1197094e3376d11fdf19eba5bd8c96f63fb6eda7d52dc351556dd943b1878b723823d80cc45f7fb84784c5a041890d8cad522076e4fe7b0d2244ecb7fe521e705f8dc2acd517c01b6b68322aafc2fbddc156fa272b4ba69803153e647f61b97f3b5c40ddcbbd97df66f113ad002f2a0c77d266b30cbd990c8d167144d1ebe095dc30c1aeeb4deaa89073cd544666dde23b7cb2500bb2e1d1a1f107b2f13f721541672d8ddf7128b29f1350e806d29598b42d551659762ad3fa01dcfa4edec25b181f21a930e9ba649d2d3d229e90447fb1d5df7ed84be727409a978820caf7efe1be1c5e4d32c44506db52714f6b7d6ec30ad9b9db9795c30dd5efeb4b0e492f91bf23bb0ed1cd9259c118c6731b5606718519aeb4d72970c4c273cd3aa894de561ff9d82f46951d063305a9679ad533e993fda747da3f029baaae098cbab855f50333b729e527ba635826238c5c70fb6d0e9103e65d6ae8bb820cd50b522e4975f69f55f2361f42c16d8cc14f27e49de5619e98d91f6e0343be5be01dd2eba54caf6575eff0a0b8b5c87b3af42dff94989b21ce508f0175d5d5b70c90f5887fa434ae1c08acc8b1900230d93eee2caa4a23edd19d6a7a112ab63f125cd67da4ea4228d920565e83a1cc90d94f40efb8c0c75dca0d5361cda27f0667471f7bbc087fee187341ebb64549066fc2605909a20efbcd4ab8997ba89090f0ec5efb6e08505a4e30bcacedbeaf0c5c13e3bd7539908432434dd8c3385db1e9afaeb9f7690f5a0d242b586e3692b41940b9b3393ac9bf0b77c33417610104753320a03eb9bacaa63710e827d28c4b236a356ddca21cc1c431d05ff132236d9f7a84c88282664cd48ab76d4a029727ba6192585e0063ae7473b58774b0aab14e48caaa1cc1bd7e62f848c7b598095ead691b6f98f77d264a645afdc30d9280698d029e5f125b47f6e6209a7cee080066cf9cc349d6ae5bc967af44cbd6ce76b04af86d67f69b01b98f2539d1124e534f3186d2f58740f53596c962eb9a231162c52fe6cbe982664907f7fc02416fc35cce1501a738badff9cb55239da75d0bf79f44759a70cf8cdb3e636b288f0978a7d371e7af9b5d66b3c46b9096ef8ba94b2ae63ec5946b39b51c0db265f075805089e41e7bcd488e22490b5298f8ce2ad4e448a994f747180c3e3c083ae2c37253d0a08f73499374a63dccd3e5fdc2678631b3650f9bd5d7c0a60f62b9c24ae9e0bad09b3a17ac14f1bba428220c866452630670be6dfa4bddcb18d28da7c64428d91dfe83b0bf54b64d275b63503612eb681171649c2b24502f8c15512b23c60cb60dfe0b5db36f2e44411945feeaed0bb8ede6494065f45dff76f20629638fb5e82f8642d99533dac8fd387d8f7e2e71122d2c2f94fcc6e526378218a4056e1580c4b47f570b50c6c8197dd1e7f86c64424694b5dbd6d6d8968416b39fe8263ae5cbeecfce6e911a35a88495dece1bd57e4126d1e1b436871a22ef42637064e89c1a9f0f8ce22547088dcb54e506dcc76ff5a026fbab50f17434b1a7e1ff2ded353d524ba3f30452b4d7b7a0cb83c46ea2cc0e97d393e1b562daba82950a1e8b79ef389e9010181b1e7ec29b178434898f74c7f44961a9392d04125eb4c09fb51c163fab782d05b390ff20439ebc3b7759895cb84e8b658bc7255f3defab698d20d5fe13816dff56208f8d478498c330918e9080619a97e9d5b18b2bed16955e9e113be6aceeea780376ebb2b0eab1c880824c580047f82c2380a2d086ee2b979c81b6139ccb372b40140a8fbb247efb182f13d6da9ef236e752865be9e85f2bf115906b5437a03e77db4ffd7206a861234323d56ac018204f6f89a6d4320d5d5c5136ae22e6e9cd507d0e896584e33a1872d68881f33b2d3f04800cb4a8539aec719cd8e1cb952c56a7c268f4edf6cd21bac7c30b20ce42c62ff046aa442ba7e09a7b99e53a47a610f3719a1e3e453971b8a4cd09d9d52428c0e4c300a7d4be7dade0954cc793f2348f9d0b2cef9573fdb5bb36f2803933ef992a130701101c17d90c964bb3219358ab1b5d0057219b3085d589f9593e955593494f927e798e012cc8a82c769c439e0dd397a2517908551ecfa9e0f8cca580e604937905038ae67f060d1754fe35538ef40306a9d983b90de6524eb11b66b7557535b3713134f9162a619a39bd468800a87546c6e41819e75ee0d15885afb579e17950f1cc8090b9960d6a9eaad11d87ed192502a32f7a7870db9ae9dc0004d285b29ed39a63fedcf22d93e2b9f346acd67805210c95e1712778bfb8943ba06d5b52512b28ec89008a96219c4af3fb5ac5df04c61999e9077c6d5e2bc151c90035e50a8326e14400b831bf2f10edb1e425c9d9dd6f44b42dc4dc309db91826f6277f0a4accdaa150015f29f6e2fe0ba739e596db7fc2e82670d03a2d68846e032db0571ee2ab7a792475aa01644d14282e60c3c6f80902d9110219d5bfc947a06c98583206852e94ca47d6e6ac5d94b129935fb47c5d14433754987ce0c56aa2bcd3ae6026fa59a72167c04e174bf634ad09ce86a1c2b399a69c0c222392f8132c959bec25823955de0bdfbbc09926a12c925402ca4d02ed11964562cace61c05873f740aa3fa1309c1da6d2152c240f5230d70dcea29302b3dcbc8619a145cd08b050545cfdab71ec7bb06ff71c16f06acd68f99c5c3face5e55649cc9a637501aa11121365fb2fb59f5437e911dec7899b69edbd4f542a993a24ea5c5ff241f0da622d784bb64106a6a7d5ba0fbfe96f1c6d0107ee9579231c8fe849b92e0bede439b273505d53c0661a81c38977ef9d4beeac5854542f362e4f8f358d1e08fb3f08a88575a6f36e6dc9bdc7f448e4bb8977fdb6044ad9cbbcc8002a9be6bec420a46fd0943620d97317ca003960760fcd3ad00b67703f311ab0fed36cdf4f743f783804b2ef7c31d312a875c190dbaacee704e47aa0f8ffbef49c51517f2b44a597679db0cc18fa28fb43a81e5d65d36f1dd0d4534d9792eacec248cc81a93505a21832c7c8cd745e1669dca1b1fe424f87447c66e50a62bdd4360fbc85f879bbcf257a2d05d5ba5083f12aea22509e26bcc4418dee7c0b40893047ede4547a187ef451bc1c56482d2ceeed930cc8b9f60b7ec359ccedc9b66f4c116a7d1b3bb04785fd90ff100f44b8daec3503e3eaf2aa435c6c67c9c11e81dbe38c89bdc4a7df158dac550c50f54d606ce77133c2c51c67ed39937bcfaefb72c5feea6053c5d444d867544c38f5b3bafe363310a45afc1422b8caa6f103a0804e7e4c9e2656dc1d7b85d0a4b4db2c254bf7950da048067031179c008e5ba8c261bd61fd740300fd8a031f6b40c6a5a0e9f602a8be945a13b4b1f3f36d82a5dc1902c11a3971df34cb3dfa6eff5328d61e3f012ea2f38c53daf6517f6970703a0cc4b4de83de2bacc6a5bcb306326994df265da29addce99728d1a276bffc34ecf8caa8ac4957756f3e2ce8a89b2229e5c7bfd369551263da6f4bed022f4b33690236005890a5a587c7edba9697a166658286ad7e8a4b9d3d23d3de505659e75755faa059dfc04bdb9578c1d6915567afdb25403492e859c54e1c6fe4675efa9b05f29621e34f294b3a38a9a226784b58285d8498cb0d6ec336dd07768b8ddfd641c421104ee0d7f74801c8b0d0b957409c66dd9ea15033461dfa516c3046a51b269f0904ca8f09be5e80afa6e480970b6aa922d86fc00b6f1c4ecdb1818d6c04cc0b4c6c962f42ab7fad2dd76754cb6157988c0d76451daac3b7d3b79a0520c42fd7e856e2b3b9116ba7293427c18f5fb9da06fad6ad3102767aebc620acecaf65e41925832356c5a3e96045067436b5d1ce27de9d2665baa317a516558846b6ade15324c476969056fb2232e396e8fd84221a255104ed6bf51793e573db01612ee20d493a7ca2400e802f8358966b95f97a0483c4ab0464ba7c3975de245ae68d216de2bc812e74871380f1b6354cd3cbd27e36819b3b5ee8091545091a3962fff911409c446c47d328defcc1193ca2268002d03af2169dbdc59dda99ee7790083742271b93a80d0c6dbf61c1064d739339dc3656910edc58963caa969cacf6fa10af5e35b30d92e561115c0dbc3c4f67fe15921c58726e37291d3e116f59b345217af27b381dd608cd0221695d5adf3e7fb2ecd749b7ca8a2caf0eefb4e8aa36d9b1462ae586d2336c2ef8307bbb8b0f8f70026a255fa1e5e320396f6335c7e1e272bffc9172189a4a079b49e2e92aa6c0cc835c8ab345f66ef1ba3ae637b549d10a57080bd157c7c048f60c0d29f4c6090bbb252413cb11b0f7ee808c836360a1274dda3a1b4390a225d598080a21a5618ac2f41f5c9dc07416b03cea9f4f09cb2b0edb2622034ca29face76f80bce8ac779b8b39818f1bb1783555a870929dc7d9e29186ceab167e9b2f2f009d52b5496cd5107458f72a7b5227bfbba15266295bc0857fdc481502396322e2f4d5547fa97b6ba376446fecd79deaec937e13890e6473f34fba6f00daeef769b0f61923bf1b42ae7e3ad0593a32670f78807f47847c7be008164a3ad3948e87c0525458b120063655a320011eaf859d7f87965cfc0732add0de4e12ba888e3bc58d5f6defe9041a3b35cf6d01a2a169a718028e16ae36169b1fed1fa2197cc946f08f4fcbe105390e47d2b28769a3f9bc8ed8df2e8fdf7ce9b7b572f5fd63b64254328780c4733ff5bf5b36b97a5ddebeb702f9864f388ab0b398e2a6f94724e8237124f17c13c992171bdf881388e9d0ae9ef6f6b2182e798f104a35d1cbc03e6a0da14a9e8e96ea88274ff47a548ae62b73222b28563ee9e00baa6c085d0c8f6c25e560dc5bc1dec5522a47427e5c44f4cf65bf45bfd8ea496c4ee999b7278fb9fe165a495689910d7f0dda73dc6ef9b82e5c4bdaaeebbc8aa890bafc38b4830bb95b7dda0d89bd61ac87e469303b7dba6303b6e6d414c83a04315d2b6cc1ede686acef195fa41b08086c51ccf8e7ee0aaeda5f6a2122f04303d28e6bfffb49e598b47beef8eee0264c9c2e91cd64737cca4195f6c78b0b41b401aab8e45e85cc1d49e299b43e1dce9ad6ab6561997e2337a5477d55e5588f0962d1025d46086577cf7ce3d9ecd0a6218a9de0e07ed931f57c7bf988e5205ad863d69520b1dd97b8aab11cd72bf98b3f0739b55e4e249e0c34ef25d8aada7b2b4d248c835e", 0x1000}, {&(0x7f0000001340)="fee51f48b3dba955215ba8f3fc5b993850f33c037dc42a68f1d72eb2ff182ca046004b7f406806fbe5833f4128b92d81d8f8ebd02534a78c1b3d0a747ac0ae029b315b4f07e2e605fab77ab8d907e935141b035aead2d263e5ea074b2510d2390c7f228a4a583827dccf4818ff4000709510620daf5e8b08e35a4835a8dd082e6ef6a2199f5cc19d3e04f67a78", 0x8d}, {&(0x7f00000011c0)="1c30f7ce01042a601f30bc188eb7c8d47b629c2d1c2e2b42d3b1305663e61c2919501446841d6ce1545e39a126", 0x2d}, {&(0x7f0000001400)="77da68dbbd526006e47c4eeef73e15d1a94f32be55fdcab5285e771ea1bdcde1b5d31c82648fea1957de684ab2c58234943d23c806e6f9e6977f60f403f54f09c1d2afb65d38b8a0bbc42a0ff7b319b8fbf2067799bf5cf393a4459a118209439adc98b4cb5d684505b8", 0x6a}, {&(0x7f0000006a00)="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", 0x1000}], 0x6, &(0x7f0000003640)=[@rights={{0x0, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r1, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xa0, 0x800}}, {{&(0x7f00000063c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000066c0)=[{&(0x7f0000006440)="034f45169affe8b842d4ca29e485cfd0e413926eba016ec80f9056bf4007c11f939f7ffc8c3484f6ee782b88057a76e64e7b537d60fc50a8cc6217128ff78367df2d3864021c6944ea15ca8e7db17cb1fd57eef1373319d1f5ab2fac4988963392a05dc084b439bb9f226676ca4f31281abb1f676953d4109c077105", 0x7c}, {&(0x7f00000035c0)="41c0a0f00bcc52d5d013e3aa1b2e38769eb85a9c724ecaea60d3a4bc8b49f35a7f9299a69ef61a68001f1b9707c9f8fb91ba079539d2000561359ffbdad58d06ff12217b00fb9ffd823db66e2b2a1f", 0x4f}, {&(0x7f0000006540)="393c2eeedb2b608e7aaadde7ef0a821dee6d4ae585798a6b9684eb4c7fa05499cd3413474a40116e9d013028", 0x2c}, {&(0x7f0000006580)="27a684ca7f5badfdbd75bc2ec7fefd286d9002bebd3849c271aa11eb9d00dceac223f67009a566c2cb020f0dc7f5aa0b02d83dd1c5b86d6a7bea6f58b8ee966bc290c65d4d05100954f6e205fb3767f8241f951d50233ed89798abda4ae02822117aecfbe8e5a15e92a859b09db979aa30e9927cc51e807cc0ac9b0e58723399659d7e931b7ae589def6e4af5b0a43794ec2dff78a7b54190dafd06a1e15832c4e9a3b590c1d07920dcd0d1812f68c45dd9af5100936aad3bdf01cba6663aa9ec6f34ce5d2e37baf2c86544509d86544f67ce6e9d5aba5fcab3c7b40928c7f11e3896bf08f", 0xe5}, {&(0x7f0000006680)="699e72f0d3", 0x5}], 0x5, &(0x7f0000006780)=ANY=[@ANYBLOB="20000000fcffffffffffffff00000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x38, 0x20008804}}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f00000067c0)="af6e772b919f68986b46fd3c04049ad1043eb9515cbd4f261e0360d206c00164c79ffdaaa43f138fdddc7371", 0x2c}, {&(0x7f0000006800)="fad14381012f203ae5ca40838afdef15ae7edef4bdf671ee478aeaf225303a56c0d159ce996fadfde5ea47349606efc7d587ef8fc725a42d2c93055d9f74e39d61adf140b9e7d7590e43ff6ef66d3f95482e3ece03d7cc234f2b9a39bf0a2d186793c63cff748ffd2f6d0177b1752c61d6ab6f42bc741eb9b19cc43ac394a9de59f01ae416768200ec68898bf024b916b29c3448b6b689b22957ca08d0e4ffdd7eb91c26e6509f7c0ed393dbccdc79d5310cd5fe98311aa9e476636760c509747ea1ec68ca3f9408cbff3b7e1ddc7bc3ba887c3f94e88b5cfa1106d6d4bb5eceec1abc031afa97", 0x36}], 0x2, 0x0, 0x0, 0x10}}], 0x3, 0x24008040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000010c0)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x3, 0x103, 0x0, {0xffffffff, 0xbda, 0xb, 0x10000}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[], 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406316, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0x0, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4ea0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e20, 0xfffffb77, @dev={0xfe, 0x80, '\x00', 0x39}, 0xfffffff3}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}]}, &(0x7f00000001c0)=0x10) r2 = syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x100}, 0x8) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000008c0)={0x15, 0x1, 0x2, "0e6a60beefe240583e08fd65b728aec1b2e81ba8de67a818a1c85f5a22f39ca6", 0x3132564e}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r9, 0x110, 0x6, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000520001000040002e060000000a0000000c0001c113acf9817800"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x4) 3.652784864s ago: executing program 5 (id=5795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)='\vi', 0x2}], 0x1}], 0x1, 0x40800) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) (async) ftruncate(r3, 0x51a9497) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x7ffffffffffffff9, 0x8, 0x4, 0x10, 0x40, 0x5, 0x7c9, 0x0, 0x9, 0x8, 0x8004, 0x3, 0x1, 0x7, 0xffc, 0x7fd], 0x1, 0x14}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r8, 0x9483}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38008100f05a3c3273797a31000000000c00064000000000000000000c00024000000000000080002d743b519f2aec15bd7eda66af284fbc8ffc3e14bd95658ac9b0d8312ea3cf37ffeb56c450eb8d24748f7dc083d0843cea916f1eaf91cb731d41d0863394c9f80b66934231693edc80a214bff211d9cdb0aa4a4dfc4000038741f0d0575dc2545c5659ac01aa72075b168c081ff17f848b0fa3ca"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000091) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4379a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d049}, 0x0) (rerun: 32) 3.543108485s ago: executing program 5 (id=5796): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x8, @local, 0x413}, @in6={0xa, 0x4e23, 0x401, @remote, 0x200}], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x8, @local, 0x413}, @in6={0xa, 0x4e23, 0x401, @remote, 0x200}], 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10, r0, 0x0) (async) 2.767659157s ago: executing program 3 (id=5797): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0x40, &(0x7f0000000480)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xffff0000, 0x51, 0x0, 0x0, 0x9, 0x8, 0x5, 0x4, 0x3, 0x2, 0x9, 0x1ff, 0x7, 0x9, 0x8, 0x0, {0x8, 0x34}, 0x7, 0x9}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800024000000073797a30000000000900020073797a3200000000140000001100010000000000000000000500000adfff00"/120], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.740455856s ago: executing program 4 (id=5798): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1020000, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000280)={0x1, 'nicvf0\x00'}) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000000)="580000001400ad", 0x7}, {&(0x7f0000000200)="6bdffc7c820612911a8b98a56d63c896b5d43121c06b060c5c8ad4a18d751b4aeebaf542b59edc24ee964376dbf954380a0bb3cfc1e27242c82de17be409c9aa2344920b52a24edf010000000000000024", 0x51}, {&(0x7f0000000580)="7b00d9d94a99b56c3adc8d5844e932bb65a057dbe0037b23962de01dd193a0b2091d1c7bd939da0f5354c59601bcd0270b2aab42a0ca8cb4fc8dc7ce501d64942493e7abc341e9ff8434d451c2821db3e736889ab3", 0x55}, {&(0x7f0000000180)="6645ef144b9f1f195dc4a2b648f2464f5498473bcf6e95140a6e3a928dbe0bf4f9796c58f336ea", 0x27}, {&(0x7f0000000600)="779e9e1523f8782bd4102f62bf71e17a1065d44f4fdeb4232c4a442adecc77b132366c212d06673258cea44f8aaca2e1912397936198ac1f3c775e456d1b920475a17be51b8557585502efd9b678367e51710876757829c00a41ef09ff9bdd3fd5025ab87476c25afb45545bba75ca0fe7e79832328f660d36ed3c791ee8420188a658ed316d5634017da85f7ffe50ed9924a86f405d26d41f440e7151f58686b5833c174ebe1fbe78571e2c12d185448347eb7922bb322f1fb3b0fc25669dd4d619ab7adb91f8640171a2d4525b617c8bce417929274059d89baf22accc19f1e2e423302a96f8e4570000000000", 0xee}, {&(0x7f0000000e80)="de4b3554185bb0699c92fe8c5114336ca79c9e61c0e0da1f41432437de6c2ab79cebdff15c0ac8a9d4ad998e8d0f029c0a66519e2fefdac7131f46db29c8a84675f9921fd8216e2ac6ef8f46d14b2e8b836090211c1d44bed9db1e7767fde633707f2c143b82f96e7fb6b6bb29c84fc96a7c3a75c84f44bec8302f5d1454ab9b7386040aa97d03d0f917941476daaee6b8d918df65200cab546542dda64540907838ff8527ac4c681ee9fa188d4b85898c8d70b141a2026ce50289a9679dae679d2dd03ae3699184c2913e900ecf149aa77f97249933f077a198fa6ed334cebfe419591597df31050f25054ee0014b7b1eeb10ceb7675c99be125afcbf79f28a02b0483d870fc54101bd36aaee74bf41a7172545a76c20466b596226977bbf760d7128525e4ea8a8705ea7b95c7153d67bddd4df7691de1a6c57ca4d75c3989d50bb7c780475deee13b23f6038ed6a5e8f6840e2747069a9f93585a4513f86c119416c841a95899db210c65399557484d186a3258c67560a9de276279ca4d8b49db9cc182aeb7c8f03f30ffbd5c687e20894b30a72dcd6d17448a140b6586bd27e4b3ab08b855d840999d25d70aabae20b5e5384dd7f014e58f7a0734f0c9cf7910203e9db01ad435bee022586a773b0c156a147fd3d64d6d81e4cb45a1eb7fb33dab2278ba66adeb41ab7e3b1d5bc7518d24bc66bcbe0aeae6fa5039ecd9b6f238e2c6ef48b87a1a82f634f82452f75c61aff065cefa52a12b97caf020da1d1132d5ca88c93e543029e8882d94777e5dcaa46ff6b09c9833969c3a82afe46a532dc5a5fadb70b0742acb1a3e824e5456969ac5f5d28a509850b979602febb48a9c4bc583d24d9063cf8c1d6b885ac2d5eb8a32d65f5b5cae0d647a4bfc40d1070b178002f55112bb7377003379f41e31bef57fb0804b38fae49ce39c37d0cfddb9ab48b2be0069dc1048f738ce5e3ef320e6d56cecf4337602810395a56de2b6237728f06d7ee81040eb2c93b9ed50773cb77cb3920bf76748b4c167a3243e636c5604bc5000e5eed6c33c28e09056fd44bb917479751be43f6f85d28f16535ad17587272b834ff98a887324f245727fc94406d11f6f86da332d9cbec30accca29755e26fed7368bc504a8a7e16a84851aa51f5db7d0b87dcfd0c5cb6a7075cff35c0dddf9d0ed9a93eb7a4aa7579649043aa11c70a51c91a9ca9701ddaaee8f5b1a6336f2269a7c7bcb6850bc1406360cf0a64c55e6b45609e1e595178fbba9e870a027c0e9d2529888fa316129b88ee4490ef910d6f7d828284e5c7d03c919e97685b70e7f3c642edaa07262edc9b651c7d28fc958a00d246a8e1b312a7fd319e9388ec586df547267baa8fcfdbafb2055cfef75de18b647b364f6d145373c140e4a2b7b5afc26a838622dc01144b7aeacfd3289bd283a68fadea1bfadb83ba0ffc459ca41c5b5715546808e3d37193019b36f274068cf6381cd73fec1be92aff7e1b6fbf3a535ba657607260e16d2244df5220d3c44c870804a4a83512db2203d1dd9c455bbfa293e0bd32731d202f4afc2ca8bf4cbd484e42557245e59df3bcb19f9d4eabfaf97eeb2bb54c507502f4b70323144d7b61436bb993ac925390bc7896f8aba16ee3e821f8a1c95ed865e487760b4592d68eed30baa15cb7cd6548a43da69c15b12a33256c0aad15a6fb4bf6c58316f078d2d984ac05e27786602275ba4cd59bc7f8941c61665f3f05b5d5ccf87da1234dcc8ecb3a6e9ddf4b612a058c53088899c3d47f6eefaff86e62193beca66b455e0c38bd49a0e9fef0e62e76fbb42e39948836023acffee90e912865cb15e0db7c83684fafbee60e35a90590a20de0f60b9aa902587614f38fb4a2cbb73b2f35aedfa8bcd193b5461833838fa5532e31b1b9bacb93aeaea4e727dc1b1974ee049eb69af009af98a9ca3787bc6ee4dcbfe466d081927ac96de131332ac29695bb4f2dd349d85c6219f20d57d727f1977c09ccabcde9d03bf5e3fee2b2541403337e6bf045d7a0a9265d0d25c266131a1e3b154691db301bc14810105a6b48f8662f4ed3a34247b8950a58a27f65e8edbdb734895f8f6e4646d7556a863b19b81bfb6617ee6eda611ade8dc0d748071ac74dd55b32e24c0926ce8ff11a9699c3850b1b47b9473e2c409706ca75acd39a32874cb640e3777c84640d635672903e2e0bdb3017b54c77fc1aad25b0512382d523a3ff12df7e9996c13b050488ffef6c5a86d1f9706dca87b5cf9944836debf29f3265cb99d3a801c0020356b74126b1d84166a4e68d89315ff62422b8bd91495bb40a02f9ed83093ccbd3bdafe2ea68b61c82a7c07e96b297e1b04e9982d0e917f58433bc383ecf3b36edaaf7fab5e30312d150761fe31718e7cfbf4e9a70c2d5114cad774bbdc955a70a526b265fd76789589c032015b8b405c2aff7b9f3f260ad3aff598f972e98ff10a5a27a36681efaa042f23c009ad794ce017ee7bb27fee4870f8f38393980c31436e28d99f1563a0615d33f04d78b16332fc033af75b03e41b4c3f454d33be2fd90f8c2c3130461d06345c6ee02e586821ea3482c0627a0f8927e158c7db1f0791d2df346d0a1b16e39817c5ee4f7eb4091579088892f2e063fe91f6638eace0b85ebeeb24afed8efaf6b82d198e7ef78fe0ae67abb3a0e43a074e57798c3885cf03798990dccc403bac0e0fcb9b2425c75cb8fd8f603601fdb1ed47226673aad678ac9b77fc8c0b156c6727f5603bfc692fd262c679cbedd65fe24c4ca3ff502e8343c9e0f786f02565d10f48701dd64783647e5443d370aea16cd8ef7e9e72f85458c74421f33f7135cbba88a3cefd7379739f73f35cac78a132e31e498ba462315821a3992ef295faf395e9647a6867a4afdacd5079ccce146ee014ce79b719e77b99adec383e283fc7c895f2bdd616278e67f7a488ec060d18c0dc6584f0dbd375c63286c3f8e666ddf306b0a71c7c12548ba94a5fde451868ba22c74e806d72b1b1693a476e84d7e155ffd3fb443b75986203a96b518d327e80736a64b46ea8f491586966a26f9edebe19245e838ad13ba6dbdb0cbd7e3395a76bdf4b846e475bbfb337cd45a8f49e85c27f6007e30d576bb57b12d8b4b296e73405906157ed424d804a80362c3f2885524c16317baa6c586fac38371fb43e01a3153d49b135b21b09b60c0dfcb69ad7f25d89a36c90715758c38a466b44c9a8be4c12a99cf324c1dfa52071a3da9f6454acc677995bd8544ef4adf9da1aa6d03b43e52f8f1a0aad4135e5f38d0025ba7b551aa4b68586bacfa8cfe833c1393ab215e3c8304ddaf4e9e75e8d0b39dd226e45a27518ca4f383620cf34f1e9fa619b02f1ea8a94ebe3910ceac13b7908a622e43a817c70bda90c6d2e52bac41d2e99bdf3c453c7a1d99259b66195e9916ebecbc2869ea32bc4f3d268efda40e7a699282be0666a05a8a0f6e1f05585f973f6ea9354a9e75fd442b61831343aeaf2146f601866a1e88c0ba30a1dcf7cdfb075b2fd20520644edf1213eba4d7a96a2019ac1d534e5340d353bfc73e32db4099cc73af4966a33417b3fb7f9cfd9fdbd3e7608502c092be943e4ceafb2d26cbf18ea387bd97f55eb3b9b92f6c19626ec0843fce50aed15c94bd5e4d36fab19ff40491a3ca2f3886ee124a694a4e9d9052919d812f90f5ccaecc2d8311dff8bb1ee81136741b3ed4ee84693c72e4e1cfb7be9ea04a670ebf2c16513652ff57fd3c6156b599f3a7fb9340ac9b8d59a691d74acab4468f80a5b9534ab5692729cb311479419fbe22f997e2b35bc7eaeaa7dc433cc9e6a14696e4bc7cb4f56a843ee57304497f2bae5bee300d53708ce302c4b357af0d75ba8b91e8a14ad092590eac60fb3ab9dff03fc2566f497404dfd431ada676bc946a79d4767d3ae491c38afc6501e5ca6709c0fd841f96aa778c52fd8d85ba94be219f679488560fe5e5fc03c9e7deb6d7364d16466bd735259c9a0b4b94b90691bcce625bbc1cf35ea1b89281e85689f77458575841d0487adacbd147d82db72551e9214fd22934b3fb1db62b2bd34a36a66b59e67094375d7a839fdf13ab05a6675bcf408b847a1cda26198326183508ed53ae77f6eed7fd6c5ab17bb34ea6399d7b0ef2a0e46b8fb44e4729f4151d9ffa2c9f4651cdf27cbbd5ed9051fd467c6d71980dcb840e64bd108b376b8d558b94caf8f1afcbd394109eef1492acf3ceeae86bbddc200a01164630085b6e7618504a5164ceccf6126442a98c9d407733fc89645dbd89a70e1acac0eed60f61ef51bab7fb047adff30c2c1c7e24074b6bc293d06ca424ee0a0fcbc0a6c3cf5909bc65cac9179c99bd940642facb6e48d45ff70746e848cf0220a3f63b1d9ad96adf9ce0764760f39cc8c2d13f9e3ca5dc3747ab161f7f0224ba749845f722935b5a689d1dcf6e26d48fce0416b12d94dcf53ba9a5d06cc15e286c124367d042fb041b148870f79ddd8a9bab585277c6076582100cc42ce8899d605f431f7e7edfbf8c8d585ceb32092007dfe4aa24a5126ca8f8ccca63adea37d9bdfec6c51884515bf602493d68ef3374cf2ad7b5f4634ac1e04a2702cb2a914d0045ca2b9f9ac97e2917586a7ab192ee91fabca2fef6bd0a9e9c1a37f420dd965723ce3cfe992d946c18b9847392b5f60efcb8bdb1a885357633b0f9e56332f1a021c8a433fac6b1c3ddbf14b0d20cd37f1755d04513954e4e6c13e82ef2cc41673e34854d3814214d778f5c4caed752519cb2da2e43e4b4125eb02cf2b726c528d32469a3ae9d34cccaaccaf68e77b7021eff8ce1b5fac1fd2573df540cd09398ecf56704cb2a0c82147d05915df934b7a7fc6e61ffc96777d1a464563f951d1d93afdc6e3b5fbcda52dd0da7c3546ea83870d6a4cfc9e1dc6082919e2e26d6320ab8f45a4c7dc58e696102c0276ed7b9d0a9cc6b7fdf209c8186c45a42164df7f6420dbee1b6f839d738fe00378543c9b49470643d16d871cafbc4f92effd917850fda41f9235c50f0690db4aff5ca26a82014b96c0bc6a1379cc7e931a3412d798a0e4846727e2626ff838ef502210632cdbb731de2316e9ffeca15c7183ddbdb86cbe8965de7b31c390afa933576cd047fabb84ac2797f0a01376b6679984127", 0xe3f}], 0x6) r5 = socket$netlink(0x10, 0x3, 0x15) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21", 0x76}], 0x3}], 0x1, 0x40800) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r11, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0xa, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x4, 0xae}) 2.668026048s ago: executing program 3 (id=5799): ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x400, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0xb, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x39f, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x103, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8000006, 0x16, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x226, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x7fffbfef}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x90, 0xe3, 0x20, 0x10fd, 0xde00, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x49, 0x6a}}]}}]}}, 0x0) 2.23569389s ago: executing program 5 (id=5800): r0 = syz_usb_connect(0x0, 0x52e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0xc5, 0x90, 0x20, 0x1bc7, 0x1041, 0x51b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0xe, 0x43, 0x93, 0xd6, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x6, 0x40, 0x3}}, {{0x9, 0x5, 0x4, 0xf1b785b0f95ddf38, 0x400, 0x7, 0x4, 0x8, [@generic={0xa6, 0x30, "d3716d08accbd3badb972eee5b483bbff810e0aaf356d8ee64248f81d1a196bbc2d914575acccba07288b047b3ffdd150998ffbaf38299bde2befeac0fe6839cbdf05d4378e56850222636ea369c3c786006523a231a5d303dc43d188e76b8e93392e9b6db0dff7af36400bf12424b4bbd4666ba11dadd139c1e5cadfce20843e5e4b0e8acae357588f050555af115012b1887ae9cd738e8a40072761ec173a719c13a43"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x292d5584d623247a, 0x81, 0xb0, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x28, 0xfb, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb9, 0x21b9}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x6, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}, @generic={0xed, 0xc, "1a0ff6e4b34fd3f1aabb1d10407911b35a8c7e95ef520622dcec354b5af23df88c2c596b70ba9a0fbd03bda2ff02d2182d4b4a8fe403b7415209a42266310983f264ec3cfa57729bfbac5420138bbaea14d3226a3495d470d334caa52da1354d6b8ab209919531ce124e2c638f38bc7cdde83d2c4f3fef3128f591230db7f90a97bde94c52cb77a858cac2eccd8c5937804fe47533ca84a094bb23fc4df17232e418554d25b29f4e2a746a1fbcc86b0fb9ed903e1a382d08ab21eb57708fee966880ca8610159c16a253df4121bbf7dd8b80e00e2e104196d94e3b06b110ebfdaf64e6e701ae5f9134ffec"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x0, 0x81, 0x8}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x4, 0x0, 0xd}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x8, 0x2, 0x6, [@generic={0x72, 0x9, "43c83dc46146482f7c7ab2b340a62ee462302e1305ad4f149335ad80e092b73aeedb800bb4d16cc837afeb9ad916b3c337d811c5ad446c2d3e971d64411a4aafa42efa46a09d0b0a34080ec672906a930d73ef51af718738bd4cfacd5a11dbb43929b2aec7754ed73ff47404a41d1fff"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0xe, 0xa, 0x7, [@generic={0x9d, 0x31, "c18fd432ef5956851e62808ced8f4512bd21c1d070d46a2a6bc176190c2a441dbe47a369610b76933a7c1749ce2768e8c3b8603aa1f01babcda6795f837ea4691a70ae9ba247852067d00abe2b41884c98b592337ae305ecf8a6a8321a993b786f7bdd960e55bbe88560b5842a93f9758e78fc26434edb8d62596529e3517c553e1330ca86a4eb614bf5a2aa3fc6603acea98287b3a2bd7eec8649"}, @generic={0xfb, 0x22, "6a85a9961a706536dbe3dddb8fb7bd239bd5a59423efd20a5f04c99202f7462e6080626e3cbeb421feaa3cc445aaa3f2e2cf3e2e46a65a67cae7fc33ff01e0d18aa5d3b76c4b629c1ed0a346279293ee02846020e8bc49e27684aaa1edd8fe96e32e3b863ae012ff277ec1f121c337c39fb690ee11a81ab072fe20745d680a477370befede958b7d3f851be431aefd61dc9669b7987e91eda738648fe9b34ac876d6b8926e8a0ec7355761092449299ebfdd3820d35b6d821ba929f1ed3380b640930c1704d92c9ac515034fab49d9e3ba1b9e278d81b772f68da956cde539d4fe8b538b1aad71635f78ed0227e607997bd51c6fa974c3d2ae"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0x13}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0x4, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x2e, 0x9, 0x2, [@generic={0xcc, 0xd, "94a23bc25a3cd67a7f82fdf04c109b20a133b933f5b0553fce496ed6b9562946b4c594f17dc62f12172b1830284daab7c25f2c92f37b5093cce1f31f3e9f51d4af3c7f868c88dc48429921fb64935a835b67031580e0e2ef7d4f9876c0b82f2edf1a5115fad7f7e1d900573fa7a5c73288c587f9d8c29aa1964b48f3a925adf250418dbfc4fb65ce6a52ad8d9b34f3ced2f300cf270e12fcb39cb55b6d736f2c6ee6251fd0f92a6087996f49f0eb02e0be7317f0f471512750b3a23853552d3fc3ae31972981b7cba14d"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, 0x700, 0x8, 0x8, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@broadcast, @local, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x7800, 0x7, 0x5, 0x9, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x68, 0x0, 0x0, 0x2f, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0xc, 0x9d, 0x0, 0x5, [0x5cb, 0x7]}, @generic={0x94, 0x11, "174f7929c14228883a7c7cd6cb46ac"}, @rr={0x7, 0xb, 0x85, [@remote, @dev={0xac, 0x14, 0x14, 0x3f}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xfb, [@remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x22}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x10, [@local, @rand_addr=0x64010102, @broadcast, @local, @private=0xa010101, @local, @multicast2, @loopback]}, @lsrr={0x83, 0x7, 0xde, [@broadcast]}, @lsrr={0x83, 0xb, 0x6f, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x96, 0x0, 0x5, [0x4000, 0x8, 0xec6, 0xffffffff]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x3, 0xffffffff, 0x41, @empty, @remote, 0x40, 0x1, 0x5, 0x1}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002abd70000000007b280000000c00018008000100", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000b80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x14c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.232367002s ago: executing program 4 (id=5801): openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x181882, 0x0) r0 = syz_io_uring_setup(0x713, &(0x7f00000004c0)={0x0, 0x10005322, 0x10000, 0x3, 0x100002d0}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.127370768s ago: executing program 4 (id=5802): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) close(0xffffffffffffffff) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0xa, 0x9, {0x51, 0x401, 0x800, {0x12, 0x8}, {0x4, 0x1000}, @rumble={0x554, 0x1a}}, {0x52, 0x8, 0x4, {0x1}, {0x4, 0x7}, @const={0x236, {0x4, 0x9, 0x5, 0x716}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010028b97004fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="0200260a06000500040000000a000200ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc010080ff00000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) syz_usb_connect(0x2, 0x52, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.894367317s ago: executing program 1 (id=5803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x105, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xa}}}}}]}}]}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x64, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x3ff, 0x2, 0x1, 0x29}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.221314932s ago: executing program 0 (id=5804): r0 = syz_open_dev$video4linux(&(0x7f0000004f80), 0x1, 0x20002) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000005080)=@multiplanar_mmap={0x6, 0x9, 0x4, 0x900, 0x5, {}, {0x5, 0xc, 0x8, 0x2, 0xa3, 0x80, "1b02d53f"}, 0xfffffffa, 0x1, {0x0}, 0x10001}) 1.104105543s ago: executing program 0 (id=5805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x4, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9}, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x6, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x4, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x6, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x5, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7fff, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x80000047, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xc, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x1, 0x9, 0x334a, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x40, 0x303c, 0x3e7, 0xb, 0x5, 0x2004, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x443, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10003, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0x1, 0xffffeffe, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 444.541458ms ago: executing program 1 (id=5806): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000080)={0x8, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={0x0, 0x8}) (async, rerun: 64) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0xff, "e9d83f9302d8cba236fd1948332fe78d592484827c241365beab4279cfeb5c5f", 0xffffffffffffffff}) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8, 0x4}}, 0x30) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6, 0x100, 0x2, 0x8]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x8, 0xfffffff8, 0x800, 0xc3, 0xb, 0x5, 0x5, 0xffff, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c484}, 0x8044) r8 = fcntl$getown(r2, 0x9) process_vm_writev(r8, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/24, 0x18}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/211, 0xd3}], 0x3, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/146, 0x92}, {&(0x7f0000001800)=""/12, 0xc}, {&(0x7f0000001840)=""/98, 0x62}], 0x5, 0x0) preadv2(r3, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)}], 0x2, 0x51, 0x58e, 0xb) (async) r9 = syz_open_dev$sndpcmp(&(0x7f0000001ac0), 0x6, 0x200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, r6, 0x8, 0x70bd26, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0x4004000) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x64, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "d45f37b2144431d2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044004}, 0x801) (async) io_uring_setup(0x3979, &(0x7f0000001d40)={0x0, 0xaf42, 0x1, 0x1, 0x129, 0x0, r5}) (async) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000001dc0)={0x4, 0x3}) (async) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000001e40)={0x18, 0x1, 0x0, {0xb582}}, 0x18) (async, rerun: 64) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001e80)=0x0) (rerun: 64) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r10, &(0x7f0000001ec0), 0x4001) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000021c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001f40)={0x218, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xdd, 0x8, "218c1d709c38d8e3beb56f7e1b00925acf84332fa57355f55b1cd7ceea2e12f180c4c03947a714b8bcf69e8980e278b522a92bdca7a32b01077acdc8efdbeb6e38fc543456b8dc0362dedf65f20eef92ef2c611271a0c85d2fabaec3798c998f77015579d2431eca6fc429ed535f68b7f15c3d3e601922786f21fa168cec0c9d916ac1ad7b7f469ee31cac59cb03cc89c28f05a31e47a8d2d7de72bce9cfb12342a13145bf87b97644d3e1a8e4a759b24d0242cbea65c18f470ad44b5ed88c883f77e042f4d32759754a268b02364e176afc4d1bc67388d546"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x103, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r5) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002280)={0x1f4, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x795}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a58}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3d, 0x3, "fd68695b2eee53dcfd8faff4838d9aa5d7c31288fcbe8aca323fa0728cc58d799dc8640196cc96324ef879134ee908d651019f37376518dc8f"}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x45}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59a86fa9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1004}, 0x4000) r12 = syz_open_dev$audion(&(0x7f0000002500), 0x7722, 0x1) ioctl$IOMMU_GET_HW_INFO(r12, 0x3b8a, &(0x7f0000002680)={0x28, 0x0, 0x0, 0x95, &(0x7f00000025c0)=""/149}) 385.008035ms ago: executing program 1 (id=5807): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7ffffffffffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac000000000000000000000000000900", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 264.103153ms ago: executing program 1 (id=5808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000200010000000000", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 137.259306ms ago: executing program 1 (id=5809): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x478, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_IE={0x5a, 0x2a, [@tim={0x5, 0x4e, {0xdb, 0xba, 0x6, "fca44498499f1a55751f2339931faaef5f3f994f1de28732f156d0ca22d97e349668a9b26479c87e4a2ddc1f8ff62983a7c5f369a475b76f92aebaa14d7b27e445d9826ddec9a6bdab4cbd"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@prep={0x83, 0x1f, {{}, 0x64, 0xf7, @device_b, 0x2, @void, 0x2325, 0x4, @device_b, 0x5}}, @fast_bss_trans={0x37, 0xe6, {0x7, 0x5, "a431f00c2faa2224d27a69d14676be9a", "d09f826f0eb284548c361455be1df001fab45940c7c2f7864d69afd926e52bce", "cf63f60cfcfaf772e6d66bb86a059dfc737cb2ffc7ff0c696dbfcb3b5ca91c23", [{0x3, 0x13, "060351cee2c1d754191ab9de75a785f80577ea"}, {0x1, 0x1b, "fca9d9ce471c8ad7ac8822c4630f92989705cb33b1333321e740ed"}, {0x1, 0x27, "59c8a91d303d7e33cde6d15bc0901a1c6209d9d90177d34318814d362d4994f4db13b2bc69171d"}, {0x1, 0x15, "0a355ee7ec4b22dd8ec029d25f327a5da94aeccaf3"}, {0x3, 0x20, "95b60cb771306e6dd47cb9f2beac36587bf5b4856524d8b32d0cb48c3e8367d2"}]}}, @challenge={0x10, 0x1, 0x3}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd0, 0xfc, "0c095b03a18f37d2860b4c8523e67adbf97c604bdecb91a68a4752e32a905ed32c12c8e523961b253dd8d65c8187fa8f67c6cacd07d2b6c1347a98cd775c45547147fe5d81717a4d5aa22519432dfe8e75aa6af39bd6bd64305f7e9c33b657d0fe6ac4caa89e4f7333b8849073b80ae84f1665dfc6ffb71659c9416eba83847b0c9c9ea92fcb67ee15b043997428578bc40f0a9207f852ca0c54a0e3769f58d9b936b87ff8fc3a0af2ee08e18cd07d66777c0e05098c3439f6033d056219ee70611789808cc30bdb19071167"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "12c416085e5cca62bdedb9db8d499ff95974ea4a6c8527"}, @NL80211_ATTR_FILS_ERP_RRK={0xa9, 0xfc, "c0da11e4eceaf94badb819e62ec75a89340722ca558dfb9cae11291cfe636f07a2e6e80aadad07627f6d47a1bb9da7d76a2feaa9db00c6830bc48028cc3100adeee435fda02b2c8074f575f02ca5302b05c00f8c12ebfbb842e780cd9024fea2e7d8396e024aee906f5ec3346298b4eb7ec92e76599c829edc92289a0c955c702daff6774924c35255b3625242b1b6de58d5aadb794fc0d8b6b9c2f5d3b89424c91f288588"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_IE={0x11c, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x68, 0x3}}, @challenge={0x10, 0x1, 0x47}, @mic={0x8c, 0x10, {0xae8, "954baa67ccb1", @short="8a66c4d17d30b8be"}}, @measure_req={0x26, 0x38, {0x7, 0x5, 0x2c, "c0fdf30f96d627a209df258038e3c6f7b40c7c13bb4a4cf0d43903810c9f063251a5e8495eda82fccfeba5e69adb1c05cdb93cd9db"}}, @random={0xa0, 0xbf, "1a60ca28db210157f57a0971e959dbfa3eb53a2c689dd01eb8dde1f8df309883961dd2aff38e75def805134589100562aa09ef6cfb1fe9dd436af0bb3d8fc60823fb3d61f3bed42dc99567c2b5beb532d235468a317d72d88b891d22bb340804e53077264d0621cdc008d6133b346f2112364ae363558317a30647868da127c142cc0288fcffc03ea23b87fc082f7c7f3783385d6267e81ef9621373cce469a808c1df73505921e4f2bec03e7a75cebbc6f99cc13db2be4f958c3a4ac52f60"}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x9}}, @challenge={0x10, 0x1, 0xa5}, @challenge={0x10, 0x1, 0xb6}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (rerun: 32) read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_elf32(r5, &(0x7f00000027c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0xf8, 0x80, 0x9, 0x2, 0x3e, 0x7f, 0x12, 0x38, 0x47, 0xffffffff, 0x40, 0x20, 0x2, 0xff, 0xfff7, 0x2}, [{0x0, 0x82, 0x0, 0x7, 0xfff, 0x0, 0x3, 0x1ff}, {0x1, 0x0, 0x7fff, 0xe7, 0x4ac29217, 0x9, 0x2, 0x8}], "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", ['\x00', '\x00']}, 0x1278) (async) r6 = openat(r5, &(0x7f0000003a40)='./file0\x00', 0xac000, 0x29) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003ac0), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b00)={0x68, r7, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008800}, 0x805) r8 = add_key$keyring(&(0x7f0000003d80), &(0x7f0000003dc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000003c00), &(0x7f0000003c40)={'syz', 0x2}, &(0x7f0000003c80)="70c952c9840351d7366670faed5288ce8a9c59394476e34cc44bf510d446a0d5de88fabb73573c945b87e16d2a8251d114842e252234a4fe0cc721980b887e38ab6f199921ef9eeed7066abfe9ca8e5414c5df2fc1fdd650af3cfc43dd2f36aba760e72c20efa263012f1d548247fef06ab3ee7c0c1d522dfd374a423343123a33337336b6451fa0a60a0540f33cdc159068315be907ea0ac4411f4d085a929894086a1e1c7893dde12448df667b88f31d9cbc2b7c352bef119eb73518030f07b422a2bed7cccf4c4793507d92dc2f1c3fe6a83adc4d57eb703f6b4a7a229baa194c0cd6c4d2befde14f5e", 0xeb, r8) add_key$user(&(0x7f0000003e00), &(0x7f0000003e40)={'syz', 0x0}, &(0x7f0000003e80)="5bc7812f82470b1067a6132ee33fb59864e95bc0d88a0a1aab0a842c1b962033fa407c9718e7a46e80c8d3a935740854b7bb7b97a40344e278c82df077637db8acf84a11f718df875eb8744f2d6bc59ef141626b7fd6e78bfdff78ecdc3b8d9f820e667d18c00748a157eaabb58a34b1840c505b054f4b41798896ee295ea81ac54a0cbc54c75862e797255fb1300264", 0x90, r8) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003f40), 0xa0a01) ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000003f80)) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000003fc0)={0x8, 0x4, 0x7fffffff, 0x5, '\x00', 0xcfb}) (async, rerun: 64) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000004000)=@name, &(0x7f0000004040)=0x10, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000004080), &(0x7f00000040c0)=0x4) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000004100)) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r10, 0xc00464af, &(0x7f0000004200)=r11) (async, rerun: 64) r12 = open(&(0x7f0000004240)='./file0\x00', 0x10000, 0x2) (rerun: 64) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r0, 0x52c44000) (async) ioctl$HIDIOCGRAWINFO(r12, 0x80084803, &(0x7f0000004280)=""/223) fsetxattr$security_ima(r10, &(0x7f0000004380), &(0x7f00000043c0)=@ng={0x4, 0xd, "40d34b22631c5002ebf7aa0a1b97bd"}, 0x11, 0x0) 122.100881ms ago: executing program 0 (id=5810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040040}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b80)=@newtfilter={0x26c, 0x2c, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x7}, {0x3}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xd}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x3}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "0bf7adedd763b8854b6a096c5255df45"}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_basic={{0xa}, {0x190, 0x2, [@TCA_BASIC_POLICE={0x8c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb6c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0xa9fc, 0x5, 0x0, {0x1, 0x1, 0xf0, 0x6, 0x1, 0x100}, {0xf, 0x4, 0x7fff, 0x75e2, 0x8, 0x5}, 0x93d, 0x6a, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xa}}, @TCA_BASIC_ACT={0xf8, 0x3, [@m_ct={0xf4, 0x0, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffffe}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x5, 0x2, 0x0, 0x200}}]}, {0x92, 0x6, "a6e990e5aeb6b8bcf1a5f9473e71729a891aaac7aab4fa99b023bc4ebe57329e2303256615159742fcbab2b66337efe3786c3b8dc2025e49eea63d8004a4e5aa0eb16fb74289ff5cbae1276c1bf69cfbbed366f2e31f8c9742847a89d0bd63f3abb01b56d3eea8f0ba32c5d548fd2432ecd0f245bd26d042fcd12cf7392bfb4fc9bdac5e038aa1104073a1338fa0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20044804}, 0x44880) r3 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r3, &(0x7f0000000180)='q', 0x1, 0x100004) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r4, r3, 0x0, 0xd39a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) read$FUSE(r7, 0x0, 0x0) dup2(r7, r6) syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x26, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "012c7960e5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x1, 0x5, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xad, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x53, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x6, 0x9, 0xff, 0x8, 0x9}, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x5bcf78baab6b8107, 0x8, 0x5, 0x5, 0x81}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4d}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4c6a}}, {0x8f, &(0x7f00000009c0)=@string={0x8f, 0x3, "737574bf811fc4af0d4a4836aaf42b90b2556e5440a06eb777d511fd0a248ac46ddd5713bbc4f8c276179a2e1f3e86f8acf52968c03baf93d41b2251a072cc107aaa8d635ae974233cb7e7c4f1f5a3a24dbd5c633c76c6d7ce384ac8e0e7aedfd83d0a6435e5f42567ee5c96711d8268f6ec629558adde2c630e0f421c38e6a0d92853f89003fd174a26858860"}}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018023000140ac14141e0c00148008000140ac1414100c00028008"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000500)) 0s ago: executing program 1 (id=5811): r0 = socket(0x2, 0x80802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) kernel console output (not intermixed with test programs): fx___io_prep_rw+0x10/0x10 [ 1364.024730][T26054] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1364.024747][T26054] io_prep_write+0x36/0x110 [ 1364.024761][T26054] ? io_task_refs_refill+0xba/0x180 [ 1364.024776][T26054] io_submit_sqes+0xad2/0x2130 [ 1364.024806][T26054] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 1364.024830][T26054] ? ksys_write+0x1e6/0x270 [ 1364.024847][T26054] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1364.024861][T26054] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1364.024876][T26054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1364.024889][T26054] ? __fget_files+0x3a0/0x420 [ 1364.024903][T26054] ? fput+0xa0/0xd0 [ 1364.024915][T26054] ? ksys_write+0x242/0x270 [ 1364.024932][T26054] ? __pfx_ksys_write+0x10/0x10 [ 1364.024949][T26054] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1364.024966][T26054] do_syscall_64+0xe2/0xf80 [ 1364.024977][T26054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.024987][T26054] ? trace_irq_disable+0x37/0x100 [ 1364.024996][T26054] ? clear_bhb_loop+0x60/0xb0 [ 1364.025008][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.025018][T26054] RIP: 0033:0x7fb7fd39aeb9 [ 1364.025029][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.025043][T26054] RSP: 002b:00007fb7fe310028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1364.025061][T26054] RAX: ffffffffffffffda RBX: 00007fb7fd615fa0 RCX: 00007fb7fd39aeb9 [ 1364.025073][T26054] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 1364.025084][T26054] RBP: 00007fb7fe310090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.025093][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.025103][T26054] R13: 00007fb7fd616038 R14: 00007fb7fd615fa0 R15: 00007fb7fd73fa48 [ 1364.025128][T26054] [ 1364.108243][ T5896] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1364.307594][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1364.316938][T26058] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1364.375278][ T5896] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 1364.386975][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1364.402880][T26060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.413851][T26060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.421637][ T5896] usb 6-1: can't read configurations, error -61 [ 1364.446044][ T5896] usb usb6-port1: unable to enumerate USB device [ 1364.564614][T26065] syz.4.5196 (26065): attempted to duplicate a private mapping with mremap. This is not supported. [ 1366.600360][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1367.099179][T26110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.108097][ T5896] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1367.122322][T26110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.267833][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1367.277784][ T5896] usb 6-1: config 9 has an invalid interface number: 85 but max is 3 [ 1367.286387][ T5896] usb 6-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 1367.298163][ T5896] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 1367.308228][ T5896] usb 6-1: config 9 has no interface number 0 [ 1367.314443][ T5896] usb 6-1: config 9 has no interface number 1 [ 1367.321066][ T5896] usb 6-1: config 9 interface 85 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1367.332305][ T5896] usb 6-1: config 9 interface 85 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 1367.345937][ T5896] usb 6-1: too many endpoints for config 9 interface 2 altsetting 203: 239, using maximum allowed: 30 [ 1367.370320][ T5896] usb 6-1: config 9 interface 2 altsetting 203 has a duplicate endpoint with address 0x2, skipping [ 1367.382109][ T5896] usb 6-1: config 9 interface 2 altsetting 203 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1367.393571][ T5896] usb 6-1: config 9 interface 2 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 1367.408108][ T5896] usb 6-1: config 9 interface 2 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 1367.419298][ T5896] usb 6-1: config 9 interface 2 altsetting 203 has 4 endpoint descriptors, different from the interface descriptor's value: 239 [ 1367.433423][ T5896] usb 6-1: config 9 interface 85 has no altsetting 0 [ 1367.440820][ T5896] usb 6-1: config 9 interface 2 has no altsetting 0 [ 1367.449709][T26112] loop2: detected capacity change from 0 to 7 [ 1367.456645][T26112] Dev loop2: unable to read RDB block 7 [ 1367.463015][T26112] loop2: unable to read partition table [ 1367.469678][ T5896] usb 6-1: New USB device found, idVendor=1822, idProduct=0001, bcdDevice=4a.54 [ 1367.479227][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.487514][ T5896] usb 6-1: Product: ᅹ豠丛îŠéš©å­­è¢‰çŸ¡ç„§é¢µÚ•䖴䄆䑫 [ 1367.495670][T26112] loop2: partition table beyond EOD, truncated [ 1367.502037][ T5896] usb 6-1: Manufacturer: ш [ 1367.506688][ T5896] usb 6-1: SerialNumber: syz [ 1367.528333][T26112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1367.781651][T26108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.798736][T26108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.858738][ T5896] usb-storage 6-1:9.85: USB Mass Storage device detected [ 1367.868805][ T5896] usb-storage 6-1:9.85: Quirks match for vid 1822 pid 0001: 4 [ 1367.945175][ T5896] usb-storage 6-1:9.2: USB Mass Storage device detected [ 1367.973770][ T5896] usb-storage 6-1:9.2: Quirks match for vid 1822 pid 0001: 4 [ 1368.047589][ T5896] usb 6-1: USB disconnect, device number 98 [ 1368.102218][T26120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.137991][T26120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.283766][T26124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.316189][T26124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.490904][T26130] ALSA: mixer_oss: invalid OSS volume 'VO' [ 1368.517137][T26130] ALSA: mixer_oss: invalid OSS volume 'ÅÊ ' [ 1368.647202][ T5896] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1368.675121][T26135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5219'. [ 1368.809288][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.820735][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.831744][ T5896] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1368.842222][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.863597][ T5896] usb 2-1: config 0 descriptor?? [ 1369.033072][T26142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5221'. [ 1369.033300][T26144] loop2: detected capacity change from 0 to 7 [ 1369.265271][T15294] Dev loop2: unable to read RDB block 7 [ 1369.277503][T15294] loop2: unable to read partition table [ 1369.290641][T15294] loop2: partition table beyond EOD, truncated [ 1369.307910][T26144] Dev loop2: unable to read RDB block 7 [ 1369.313790][T26144] loop2: unable to read partition table [ 1369.320522][T26144] loop2: partition table beyond EOD, truncated [ 1369.326922][T26144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1369.346169][ T5896] hid_parser_main: 91 callbacks suppressed [ 1369.346184][ T5896] hid-led 0003:04D8:F372.0069: unknown main item tag 0x0 [ 1369.362807][ T5896] hid-led 0003:04D8:F372.0069: unknown main item tag 0x0 [ 1369.391433][ T5896] hid-led 0003:04D8:F372.0069: unknown main item tag 0x0 [ 1369.416701][ T5896] hid-led 0003:04D8:F372.0069: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 1369.604160][T26150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.637441][T26150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.721866][ T5896] hid-led 0003:04D8:F372.0069: Greynut Luxafor initialized [ 1369.764734][ T5896] usb 2-1: USB disconnect, device number 50 [ 1369.817647][ T6317] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1369.840768][ T4374] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1369.891051][ T4374] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1369.913518][ T4374] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1369.954752][ T4374] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1369.999340][T25642] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1370.025445][T25642] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1370.039083][T25642] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1370.076749][T25640] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1370.090502][T25640] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1370.108654][T25640] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1370.132368][ T4374] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1370.183146][T25642] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1370.204332][ T4374] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1370.242978][ T4374] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1370.260204][T26180] netlink: 'syz.5.5230': attribute type 9 has an invalid length. [ 1370.272751][ T4374] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1370.296426][T25640] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1370.325483][T26173] syzkaller0: entered promiscuous mode [ 1370.331846][T25640] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1370.352394][T26173] syzkaller0: entered allmulticast mode [ 1370.467228][ T5910] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1370.598870][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1370.845198][ T5910] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1371.008832][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1371.129003][ T5910] usb usb5-port1: attempt power cycle [ 1371.479073][ T5910] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1371.508192][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1371.755155][ T5910] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1371.777944][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1371.898472][ T5910] usb usb5-port1: unable to enumerate USB device [ 1372.815851][T26190] binder: BINDER_SET_CONTEXT_MGR already set [ 1372.823430][T26190] binder: 26189:26190 ioctl 4018620d 200000004a80 returned -16 [ 1372.831381][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1372.831396][ T30] audit: type=1326 audit(1769871969.140:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.3.5233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f873c59aeb9 code=0x0 [ 1373.250230][T26198] netlink: 'syz.3.5234': attribute type 13 has an invalid length. [ 1373.595130][ T5910] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1373.779919][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.795432][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1373.841735][ T5910] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1373.927209][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1373.935484][ T5910] usb 5-1: SerialNumber: syz [ 1374.154297][T26200] PKCS7: Unknown OID: [5] (bad) [ 1374.159813][T26200] PKCS7: Only support pkcs7_signedData type [ 1374.283898][T26202] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5235'. [ 1375.396511][ T30] audit: type=1326 audit(1769871971.720:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26203 comm="syz.5.5236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8539aeb9 code=0x0 [ 1375.757550][ T5923] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1375.939945][ T5923] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1375.967141][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.975260][ T5923] usb 6-1: Product: syz [ 1376.006884][T26214] sctp: [Deprecated]: syz.0.5239 (pid 26214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1376.006884][T26214] Use struct sctp_sack_info instead [ 1376.007895][ T5923] usb 6-1: Manufacturer: syz [ 1376.087094][ T5923] usb 6-1: SerialNumber: syz [ 1376.178012][T26213] syzkaller0: entered promiscuous mode [ 1376.190717][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5240'. [ 1376.201884][T26213] syzkaller0: entered allmulticast mode [ 1376.324306][T26220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1376.365639][ T5923] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1376.380052][ T5910] usb 5-1: 0:2 : does not exist [ 1376.385026][ T5910] usb 5-1: unit 5: unexpected type 0x03 [ 1376.419879][ T5923] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1376.437571][ T5910] usb 5-1: USB disconnect, device number 36 [ 1376.457248][ T5923] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1376.505217][ T5923] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1376.554825][ T5923] usb 6-1: USB disconnect, device number 99 [ 1376.674967][T26235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5244'. [ 1379.435751][T26249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.470582][T26249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.632614][T26253] netlink: 'syz.5.5248': attribute type 13 has an invalid length. [ 1379.692171][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1379.797142][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1379.866882][T26256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.877791][T26256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.989230][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1380.014403][ T5923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1380.040893][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.064939][ T5923] usb 5-1: Product: syz [ 1380.083785][ T5923] usb 5-1: Manufacturer: syz [ 1380.100023][ T5923] usb 5-1: SerialNumber: syz [ 1380.119683][ T5923] usb 5-1: config 0 descriptor?? [ 1382.556486][ T5923] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 1382.597925][ T5923] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 1382.649815][ T5923] usb 5-1: USB disconnect, device number 37 [ 1383.240012][ T5923] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1383.355156][T26309] binder_alloc: 26305: binder_alloc_buf, no vma [ 1383.665557][ T5923] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1383.711113][ T5923] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1383.726979][ T5923] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1383.750691][ T5923] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1383.769032][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.778348][T26311] netlink: 'syz.3.5265': attribute type 13 has an invalid length. [ 1383.793047][ T5923] usb 5-1: Product: syz [ 1383.968072][ T5923] usb 5-1: Manufacturer: syz [ 1383.975961][ T5923] usb 5-1: SerialNumber: syz [ 1384.013715][ T5923] usblp0: Disabling reads from problematic bidirectional printer [ 1384.230189][ T5923] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1384.679968][ T5923] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1384.887101][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 1384.894219][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.901274][T26327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.905798][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.967579][T26327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.075616][ T5923] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1385.154360][ T5910] usb 5-1: USB disconnect, device number 38 [ 1385.170064][ T5910] usblp0: removed [ 1385.190856][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.290686][ T5923] usb 6-1: config 0 descriptor?? [ 1385.839685][T26336] bond10: option lacp_rate: invalid value (223) [ 1385.860635][T26336] bond10 (unregistering): Released all slaves [ 1386.145555][T26322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.157390][T26322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.385480][ T5923] letsketch 0003:6161:4D15.006A: Device info: ᣠ[ 1386.453117][T26349] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1386.496109][T26350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5274'. [ 1386.506407][T26350] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5274'. [ 1386.592882][ T5923] letsketch 0003:6161:4D15.006A: Device info: à° [ 1386.729867][T26359] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 1386.742452][T26359] bond5 (unregistering): Released all slaves [ 1386.876318][ T5923] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 1386.897500][ T5923] letsketch 0003:6161:4D15.006A: probe with driver letsketch failed with error -71 [ 1386.939746][ T5923] usb 6-1: USB disconnect, device number 100 [ 1387.191628][T26369] netlink: 'syz.0.5279': attribute type 13 has an invalid length. [ 1387.253726][ T5910] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1387.300545][ T5881] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1387.559779][ T5881] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1387.607814][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.686144][ T5881] usb 2-1: config 0 descriptor?? [ 1387.718184][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1387.736620][ T5881] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1387.967186][ T5910] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1388.149060][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1388.253293][T26398] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1388.266496][ T5910] usb usb5-port1: attempt power cycle [ 1388.478710][ T5881] gspca_spca508: reg_read err -110 [ 1388.503834][ T5881] gspca_spca508: reg_read err -32 [ 1388.534187][ T5881] gspca_spca508: reg_read err -32 [ 1388.552754][ T5881] gspca_spca508: reg_read err -32 [ 1388.580817][ T5881] gspca_spca508: reg_read err -32 [ 1388.603901][ T5881] gspca_spca508: reg write: error -32 [ 1388.617472][ T5910] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1388.634065][ T5881] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 1388.646732][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1388.907251][ T5910] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1388.929734][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1389.038198][ T5910] usb usb5-port1: unable to enumerate USB device [ 1389.195363][ T9218] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.209165][ T9218] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.229363][ T9218] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.245537][ T9218] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.487124][ T5923] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1389.667466][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 1389.703952][ T5923] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 1389.715501][ T5923] usb 6-1: config 0 has no interface number 0 [ 1389.733084][ T5923] usb 6-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=41.bf [ 1389.756086][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.775403][ T5923] usb 6-1: config 0 descriptor?? [ 1389.799207][ T5923] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 1389.829037][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 1389.858066][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1389.873098][ T5923] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 1389.887822][ T5923] usb 6-1: media controller created [ 1389.916541][T26426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.931294][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1389.940698][T26426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.968254][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 1389.985983][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 1390.003185][T26429] netlink: 488 bytes leftover after parsing attributes in process `syz.4.5295'. [ 1390.015544][ T5923] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 1390.044845][T26433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5291'. [ 1390.058363][T26429] netlink: 488 bytes leftover after parsing attributes in process `syz.4.5295'. [ 1390.073079][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input123 [ 1390.087702][T26433] IPVS: Error connecting to the multicast addr [ 1390.113798][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 1390.168243][ T5923] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 1390.213240][ T5923] usb 6-1: USB disconnect, device number 101 [ 1390.338476][ T5923] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 1390.384168][ T5910] usb 2-1: USB disconnect, device number 51 [ 1390.624671][T26438] program syz.4.5296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1390.712311][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1391.017257][ T5923] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1391.077123][T18773] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1391.167083][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 1391.174201][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1391.183473][ T5923] usb 2-1: config 0 has no interface number 0 [ 1391.196234][ T5923] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1391.207151][T18773] usb 5-1: device descriptor read/64, error -71 [ 1391.220088][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.237123][ T5923] usb 2-1: Product: syz [ 1391.246255][ T5923] usb 2-1: Manufacturer: syz [ 1391.256211][ T5923] usb 2-1: SerialNumber: syz [ 1391.274741][ T5923] usb 2-1: config 0 descriptor?? [ 1391.296479][ T5923] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.447832][T18773] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1391.494386][ T5923] usb 2-1: USB disconnect, device number 52 [ 1391.587852][T18773] usb 5-1: device descriptor read/64, error -71 [ 1391.717665][T18773] usb usb5-port1: attempt power cycle [ 1392.068849][T18773] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1392.099276][T18773] usb 5-1: device descriptor read/8, error -71 [ 1392.286249][T26451] mmap: syz.1.5301 (26451): VmData 37588992 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 1392.347134][T18773] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1392.377940][T18773] usb 5-1: device descriptor read/8, error -71 [ 1392.497489][T18773] usb usb5-port1: unable to enumerate USB device [ 1392.530477][T26455] bond7 (unregistering): Released all slaves [ 1392.595934][T26458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5303'. [ 1393.128624][T26463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1393.135446][T26463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1393.144781][T26463] vhci_hcd vhci_hcd.0: Device attached [ 1393.155773][T26463] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 1393.162408][T26463] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1393.170251][T26463] vhci_hcd vhci_hcd.0: Device attached [ 1393.178869][T26463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 1393.185692][T26463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1393.194515][T26463] vhci_hcd vhci_hcd.0: Device attached [ 1393.387443][ T5910] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 1393.495866][T26483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1393.521733][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1393.530951][T26485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1393.807454][T26468] vhci_hcd: connection closed [ 1393.807864][T26466] vhci_hcd: connection closed [ 1393.813607][T26464] vhci_hcd: connection reset by peer [ 1393.823836][T25638] vhci_hcd vhci_hcd.3: stop threads [ 1393.832457][T25638] vhci_hcd vhci_hcd.3: release socket [ 1393.838455][T25638] vhci_hcd vhci_hcd.3: disconnect device [ 1393.846115][T25638] vhci_hcd vhci_hcd.3: stop threads [ 1393.851936][T25638] vhci_hcd vhci_hcd.3: release socket [ 1393.852233][T18773] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1393.857946][T25638] vhci_hcd vhci_hcd.3: disconnect device [ 1393.874378][T25638] vhci_hcd vhci_hcd.3: stop threads [ 1393.881406][T25638] vhci_hcd vhci_hcd.3: release socket [ 1393.891953][T25638] vhci_hcd vhci_hcd.3: disconnect device [ 1394.018783][T18773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.031025][T18773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1394.045684][T18773] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1394.069831][T18773] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1394.085247][T18773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.100719][T18773] usb 5-1: Product: syz [ 1394.109054][T18773] usb 5-1: Manufacturer: syz [ 1394.117094][T18773] usb 5-1: SerialNumber: syz [ 1394.130371][T18773] usb 5-1: config 0 descriptor?? [ 1394.147699][T18773] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1394.157297][T18773] uvcvideo 5-1:0.0: No valid video chain found. [ 1394.356982][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.366923][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.549579][T26495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.578213][T26495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.764867][T18769] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1394.798364][T26498] netlink: 'syz.3.5311': attribute type 5 has an invalid length. [ 1394.897485][ T39] usb 5-1: USB disconnect, device number 47 [ 1394.907202][T18769] usb 2-1: device descriptor read/64, error -71 [ 1395.149475][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5314'. [ 1395.183922][T18769] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1395.387447][T18769] usb 2-1: device descriptor read/64, error -71 [ 1395.436224][T26509] netlink: 'syz.5.5315': attribute type 9 has an invalid length. [ 1395.497325][T18769] usb usb2-port1: attempt power cycle [ 1395.781468][T26517] program syz.5.5320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1395.792319][T26518] fuse: Bad value for 'fd' [ 1395.877128][T18769] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1395.916777][T18769] usb 2-1: device descriptor read/8, error -71 [ 1396.367909][T18769] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1396.423619][T26529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1396.439546][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1396.449090][T18769] usb 2-1: device descriptor read/8, error -71 [ 1396.485081][T26531] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 1396.491725][T26531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1396.556793][T26534] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 1396.563435][T26534] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1396.580892][T18769] usb usb2-port1: unable to enumerate USB device [ 1396.588200][T26531] vhci_hcd vhci_hcd.0: Device attached [ 1396.594965][T26528] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1396.601588][T26528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1396.852430][T26534] vhci_hcd vhci_hcd.0: Device attached [ 1396.860401][T26528] vhci_hcd vhci_hcd.0: Device attached [ 1396.942016][T18769] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1397.017291][T18769] usb 43-2: new full-speed USB device number 3 using vhci_hcd [ 1397.090624][T26535] vhci_hcd: connection closed [ 1397.091034][ T60] vhci_hcd vhci_hcd.5: stop threads [ 1397.115318][ T60] vhci_hcd vhci_hcd.5: release socket [ 1397.120937][T26532] vhci_hcd: connection reset by peer [ 1397.126646][T26530] vhci_hcd: connection closed [ 1397.136776][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 1397.154581][ T60] vhci_hcd vhci_hcd.5: stop threads [ 1397.161249][ T60] vhci_hcd vhci_hcd.5: release socket [ 1397.166756][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 1397.173009][ T60] vhci_hcd vhci_hcd.5: stop threads [ 1397.179314][ T60] vhci_hcd vhci_hcd.5: release socket [ 1397.186478][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 1397.387132][ T5923] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1397.517115][ T5923] usb 5-1: device descriptor read/64, error -71 [ 1397.787467][ T5923] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1397.937479][ T5923] usb 5-1: device descriptor read/64, error -71 [ 1398.099874][ T5923] usb usb5-port1: attempt power cycle [ 1398.121883][T26559] netlink: 'syz.3.5328': attribute type 9 has an invalid length. [ 1398.221314][T26557] syz.5.5327 (26557): drop_caches: 2 [ 1398.507433][ T5910] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1398.508378][ T5923] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1398.873998][ T5923] usb 5-1: device descriptor read/8, error -71 [ 1399.127758][ T5923] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1399.207902][ T5923] usb 5-1: device descriptor read/8, error -71 [ 1399.344726][ T5923] usb usb5-port1: unable to enumerate USB device [ 1399.569410][T26579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.588274][T26579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.690546][T26581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5332'. [ 1399.907896][ T5881] usb usb40-port1: attempt power cycle [ 1399.959048][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5332'. [ 1400.468746][ T5881] usb usb40-port1: unable to enumerate USB device [ 1400.797659][T26604] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5335'. [ 1400.807985][T26604] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5335'. [ 1400.935567][T26608] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5338'. [ 1401.481934][T26618] netlink: 'syz.4.5339': attribute type 9 has an invalid length. [ 1401.907189][ T5923] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1402.074865][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 1402.093992][ T5923] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1402.103130][ T5923] usb 2-1: config 0 has no interface number 0 [ 1402.107175][T18769] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1402.109501][ T5923] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1402.167939][ T5923] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1402.177637][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.186505][ T5923] usb 2-1: Product: syz [ 1402.241830][ T5923] usb 2-1: Manufacturer: syz [ 1402.254676][ T5923] usb 2-1: SerialNumber: syz [ 1402.278195][ T5923] usb 2-1: config 0 descriptor?? [ 1402.292295][T26623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1402.513386][T26623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1403.368483][T18773] usb usb44-port1: attempt power cycle [ 1403.432679][T26652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5350'. [ 1403.457731][T26652] syzkaller0: entered promiscuous mode [ 1403.463530][T26652] syzkaller0: entered allmulticast mode [ 1403.595677][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5352'. [ 1403.779051][T26666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5356'. [ 1403.789472][T26666] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1403.928646][T18773] usb usb44-port1: unable to enumerate USB device [ 1404.857186][T18773] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1405.097190][T18773] usb 6-1: Using ep0 maxpacket: 16 [ 1405.106027][T18773] usb 6-1: config 0 has no interfaces? [ 1405.114299][T18773] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1405.123527][T18773] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1405.146202][T18773] usb 6-1: Manufacturer: syz [ 1405.176474][T18773] usb 6-1: config 0 descriptor?? [ 1405.337221][T18764] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1405.561855][T18764] usb 5-1: Using ep0 maxpacket: 16 [ 1405.569732][T18764] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1405.587356][T18764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1405.769884][T18764] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1405.779065][T18764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.787253][T18764] usb 5-1: Product: syz [ 1405.794230][T18764] usb 5-1: Manufacturer: syz [ 1405.803590][T18764] usb 5-1: SerialNumber: syz [ 1405.818643][T18764] usb 5-1: config 0 descriptor?? [ 1405.835133][T18764] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1405.850514][T18764] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1405.982998][ T5923] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1406.025768][ T5923] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1406.046450][T26698] netlink: 'syz.3.5365': attribute type 13 has an invalid length. [ 1406.175680][ T5923] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1406.247493][T26702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1406.271650][ T5923] usb 2-1: USB disconnect, device number 57 [ 1406.273784][T26702] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1406.873151][T18764] em28xx 5-1:0.0: chip ID is em2710 [ 1407.437244][ T5923] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1407.637126][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.658761][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1407.672919][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1407.695837][ T5923] usb 2-1: Manufacturer: syz [ 1407.721690][ T5923] usb 2-1: config 0 descriptor?? [ 1407.874747][T18769] usb 6-1: USB disconnect, device number 102 [ 1407.947477][T18764] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1407.955396][T18764] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1407.966274][T18764] em28xx 5-1:0.0: No AC97 audio processor [ 1407.984503][ T5881] usb 2-1: USB disconnect, device number 58 [ 1408.314120][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5379'. [ 1408.364847][T26745] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1408.534141][ T5881] usb 5-1: USB disconnect, device number 52 [ 1408.550466][ T5881] em28xx 5-1:0.0: Disconnecting em28xx [ 1408.561776][ T5881] em28xx 5-1:0.0: Freeing device [ 1408.599609][T26755] netlink: 'syz.3.5382': attribute type 13 has an invalid length. [ 1408.639821][ T5923] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1408.682403][T26762] input: syz1 as /devices/virtual/input/input125 [ 1408.797344][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 1408.825899][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1408.876465][ T5923] usb 6-1: config 4 has an invalid interface number: 210 but max is 0 [ 1408.941222][ T5923] usb 6-1: config 4 has no interface number 0 [ 1408.958342][ T5923] usb 6-1: config 4 interface 210 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1408.983061][ T5923] usb 6-1: config 4 interface 210 has no altsetting 0 [ 1409.009308][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=5520, bcdDevice=fd.63 [ 1409.031285][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.055896][ T5923] usb 6-1: Product: Ћ [ 1409.076236][ T5923] usb 6-1: Manufacturer: 畜剩텖瑌饀喆방驅éºî¶¬â”纠ç…䃲霠䈲ეᎅ戀æ¦í•­î–œä™‘ꌺ톧䆂꭮틹롤êŽç¥’䴷䮨链⭂䌎颡쪳⇊십䕮厙蚇ﹽḌ湣 [ 1409.367164][T18764] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1409.481561][ T5923] smsusb:smsusb_probe: board id=8, interface number 210 [ 1409.502967][ T5923] usb 6-1: USB disconnect, device number 103 [ 1409.528445][T18764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.539913][T18764] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1409.605330][T18764] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1409.637311][T18764] usb 2-1: Manufacturer: syz [ 1409.712927][T18764] usb 2-1: config 0 descriptor?? [ 1409.765279][T26774] netlink: 'syz.4.5389': attribute type 9 has an invalid length. [ 1409.937230][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1409.959408][ T5923] usb 2-1: USB disconnect, device number 59 [ 1410.006498][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1410.046682][T26785] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1410.865357][T26814] netlink: 'syz.3.5399': attribute type 9 has an invalid length. [ 1411.149460][T26816] netlink: 'syz.1.5400': attribute type 13 has an invalid length. [ 1411.519506][T26805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5398'. [ 1411.777932][T26824] netlink: 'syz.3.5402': attribute type 9 has an invalid length. [ 1412.056486][T26828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5403'. [ 1412.144246][T26830] syzkaller0: entered promiscuous mode [ 1412.160454][T26830] syzkaller0: entered allmulticast mode [ 1412.192998][T26834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.252831][T26834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.406246][T26838] netlink: 'syz.1.5406': attribute type 7 has an invalid length. [ 1412.486879][T25638] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.496844][T26838] netlink: 'syz.1.5406': attribute type 7 has an invalid length. [ 1412.518328][T25638] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.552657][T25638] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.562481][T25638] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.948020][T26859] netlink: 'syz.0.5413': attribute type 9 has an invalid length. [ 1413.130062][T26861] netlink: 'syz.1.5412': attribute type 9 has an invalid length. [ 1413.236932][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5415'. [ 1413.237830][T26867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5415'. [ 1413.354350][ T5923] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1413.460617][T26869] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1413.529367][ T5923] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1413.560355][ T5923] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1413.579119][ T5923] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.603629][ T5923] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1413.613011][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.621650][ T5923] usb 6-1: Product: syz [ 1413.625911][ T5923] usb 6-1: Manufacturer: syz [ 1413.632792][ T5923] usb 6-1: SerialNumber: syz [ 1413.654737][ T5923] usblp0: Disabling reads from problematic bidirectional printer [ 1413.814207][T26880] netlink: 'syz.4.5417': attribute type 13 has an invalid length. [ 1414.089722][ T5923] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1414.457136][ T5923] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1414.607090][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 1414.617876][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.631695][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.654065][T18764] usb 6-1: USB disconnect, device number 104 [ 1414.662266][T18764] usblp0: removed [ 1414.673720][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1414.705970][ T5923] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1414.725687][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.751102][ T5923] usb 2-1: config 0 descriptor?? [ 1415.027885][T26898] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1415.067346][T18764] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1415.168673][T26902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5424'. [ 1415.238804][ T5923] microsoft 0003:045E:07DA.006B: ignoring exceeding usage max [ 1415.255819][T26906] netlink: 'syz.5.5425': attribute type 9 has an invalid length. [ 1415.303735][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.006B/input/input126 [ 1415.419358][T18773] microsoft 0003:045E:07DA.006B: implement() called with too large value 1 (n: 0)! (kworker/0:12) [ 1415.545979][ T5923] microsoft 0003:045E:07DA.006B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1415.607436][ T5923] usb 2-1: USB disconnect, device number 60 [ 1415.869846][T26914] fido_id[26914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1416.157420][T26929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.173317][T26929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.449409][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5430'. [ 1416.626573][T26940] netlink: 'syz.4.5432': attribute type 13 has an invalid length. [ 1416.933004][T26945] netlink: 'syz.5.5429': attribute type 9 has an invalid length. [ 1417.129544][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 1417.542888][T26954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.564811][T26954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.720282][T26959] netlink: 'syz.5.5436': attribute type 9 has an invalid length. [ 1418.203483][T18769] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1418.283025][T26968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5439'. [ 1418.346323][ T30] audit: type=1326 audit(1769872014.670:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26967 comm="syz.4.5439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc036d9aeb9 code=0x0 [ 1418.383759][T18769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.414828][T18769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.443594][T18769] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1418.454006][T18769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.456171][T26973] tipc: Enabled bearer , priority 0 [ 1418.474741][T18769] usb 6-1: config 0 descriptor?? [ 1418.594585][T26973] kvm: kvm [26972]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1418.700253][T26972] tipc: Disabling bearer [ 1419.511483][T26993] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5444'. [ 1420.456828][T27001] netlink: 'syz.4.5447': attribute type 9 has an invalid length. [ 1421.035015][T18769] usbhid 6-1:0.0: can't add hid device: -71 [ 1421.041252][T18769] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1421.074732][T18769] usb 6-1: USB disconnect, device number 105 [ 1421.337461][T18764] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1421.539653][T18764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.566285][T18764] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1421.577615][T27021] input: syz0 as /devices/virtual/input/input127 [ 1421.587502][T18764] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1421.614367][T18764] usb 2-1: Manufacturer: syz [ 1421.656386][T18764] usb 2-1: config 0 descriptor?? [ 1421.702793][T27024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1421.760725][T27024] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1421.857234][T18764] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1422.019146][T18764] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1422.028411][T18764] usb 6-1: not running at top speed; connect to a high speed hub [ 1422.044645][T18764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.061675][T27027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.066735][T18764] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1422.078852][T27027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.097093][T18764] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1422.123777][T18764] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1422.143159][T18764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.167169][T18764] usb 6-1: Product: syz [ 1422.171375][T18764] usb 6-1: Manufacturer: syz [ 1422.176022][T18764] usb 6-1: SerialNumber: syz [ 1422.412008][T18764] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1422.431866][T18764] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1422.446122][T18764] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1422.472363][T18764] usb 6-1: USB disconnect, device number 106 [ 1422.512152][T26923] udevd[26923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.017778][T27032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.400117][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.406814][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.486210][T27041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5460'. [ 1423.497113][T27041] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5460'. [ 1423.987576][T27045] netlink: 'syz.4.5462': attribute type 21 has an invalid length. [ 1424.005770][T27045] netlink: 'syz.4.5462': attribute type 1 has an invalid length. [ 1424.033565][T27045] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1424.059277][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1424.146575][T18769] usb 2-1: USB disconnect, device number 61 [ 1424.497159][T18764] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1425.044417][T27074] netlink: 'syz.4.5468': attribute type 9 has an invalid length. [ 1425.077548][T18764] usb 6-1: Using ep0 maxpacket: 8 [ 1425.084569][T18764] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1425.097710][T18764] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1425.108310][T18764] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1425.139731][T18764] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.172037][T18764] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1425.199015][T18764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.476738][T18764] usb 6-1: GET_CAPABILITIES returned 0 [ 1425.507145][T18764] usbtmc 6-1:16.0: can't read capabilities [ 1425.682112][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1425.694767][T18769] usb 6-1: USB disconnect, device number 107 [ 1425.866539][T27088] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1425.878086][T27088] openvswitch: netlink: Flow key attr not present in new flow. [ 1426.094608][T27080] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1426.189317][T27095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5477'. [ 1426.413827][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.423856][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.433727][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.443230][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.451233][T18769] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1426.463707][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.474661][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.489163][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.499975][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.514078][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.524347][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.534427][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.542882][ T5881] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1426.553507][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.609308][T18769] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1426.618990][T18769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.630037][T18769] usb 2-1: config 0 descriptor?? [ 1426.639051][T18769] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1426.697233][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 1426.704264][ T5881] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1426.713031][ T5881] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1426.721330][ T5881] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1426.730441][ T5881] usb 6-1: config 0 has no interface number 0 [ 1426.736571][ T5881] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1426.748422][ T5881] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1426.758202][ T5881] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1426.767557][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.775628][ T5881] usb 6-1: Product: syz [ 1426.780141][ T5881] usb 6-1: Manufacturer: syz [ 1426.784855][ T5881] usb 6-1: SerialNumber: syz [ 1426.791897][ T5881] usb 6-1: config 0 descriptor?? [ 1426.799863][ T5881] asix 6-1:0.104: probe with driver asix failed with error -22 [ 1426.846775][T18769] gspca_spca508: reg_read err -71 [ 1426.852667][T18769] gspca_spca508: reg_read err -71 [ 1426.858512][T18769] gspca_spca508: reg_read err -71 [ 1426.863851][T18769] gspca_spca508: reg_read err -71 [ 1426.869644][T18769] gspca_spca508: reg_read err -71 [ 1426.875086][T18769] gspca_spca508: reg write: error -71 [ 1426.881116][T18769] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1426.891601][T18769] usb 2-1: USB disconnect, device number 62 [ 1426.999102][T27101] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5478'. [ 1427.014157][ T9218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.028358][T27101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.036299][ T9218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.048432][ T9218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.056557][T27101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.057944][ T9218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.086934][T18769] usb 6-1: USB disconnect, device number 108 [ 1427.113538][T27110] IPVS: set_ctl: invalid protocol: 195 100.1.1.0:20001 [ 1427.144302][T27112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.156317][T27112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.454678][T27122] netlink: 'syz.0.5485': attribute type 4 has an invalid length. [ 1427.472944][T27122] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5485'. [ 1427.487658][T27122] .`: renamed from bond0 [ 1427.732170][T27128] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1427.807127][T18764] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1427.972687][T18764] usb 2-1: Using ep0 maxpacket: 8 [ 1428.004775][T18764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1428.073936][T18764] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1428.083892][T18764] usb 2-1: config 8 has no interface number 0 [ 1428.094136][T18764] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1428.115331][T18764] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1428.124909][T18764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.133078][T18764] usb 2-1: Product: syz [ 1428.138426][T18764] usb 2-1: Manufacturer: syz [ 1428.145196][T18764] usb 2-1: SerialNumber: syz [ 1428.217295][ T5923] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1428.382405][ T5923] usb 6-1: unable to get BOS descriptor set [ 1428.388630][T18764] catc 2-1:8.255: Can't set altsetting 1. [ 1428.395920][T18764] catc 2-1:8.255: probe with driver catc failed with error -5 [ 1428.405950][ T5923] usb 6-1: not running at top speed; connect to a high speed hub [ 1428.425360][T18764] usb 2-1: USB disconnect, device number 63 [ 1428.437228][ T5923] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1428.458020][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1428.467353][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.476090][ T5923] usb 6-1: Product: syz [ 1428.483051][ T5923] usb 6-1: Manufacturer: syz [ 1428.488558][ T5923] usb 6-1: SerialNumber: syz [ 1428.716472][ T5923] usb 6-1: USB disconnect, device number 109 [ 1429.167232][ T5923] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1429.236599][T27165] input: syz0 as /devices/virtual/input/input128 [ 1429.318949][ T5923] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1429.329894][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.340805][ T5923] usb 2-1: config 0 descriptor?? [ 1429.349015][ T5923] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1429.527157][T18764] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1429.553403][ T5923] gspca_spca508: reg_read err -71 [ 1429.559993][ T5923] gspca_spca508: reg_read err -71 [ 1429.565381][ T5923] gspca_spca508: reg_read err -71 [ 1429.571199][ T5923] gspca_spca508: reg_read err -71 [ 1429.576545][ T5923] gspca_spca508: reg_read err -71 [ 1429.582276][ T5923] gspca_spca508: reg write: error -71 [ 1429.588189][ T5923] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1429.598793][ T5923] usb 2-1: USB disconnect, device number 64 [ 1429.677175][T18764] usb 6-1: Using ep0 maxpacket: 8 [ 1429.699624][T18764] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1429.708865][T18764] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1429.718868][T18764] usb 6-1: Product: syz [ 1429.723181][T18764] usb 6-1: Manufacturer: syz [ 1429.730276][T18764] usb 6-1: SerialNumber: syz [ 1429.738705][T18764] usb 6-1: config 0 descriptor?? [ 1429.760004][T18764] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1429.770577][T27169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1429.900363][T27175] netlink: 'syz.4.5501': attribute type 13 has an invalid length. [ 1429.989756][T27177] ip6t_rpfilter: unknown options [ 1430.347871][T27186] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1430.427386][T18764] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 1430.689330][T18764] usb 6-1: USB disconnect, device number 110 [ 1431.367140][T18764] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1432.135627][T27221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.144507][T27221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.307251][ T5923] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1432.325230][T27223] syzkaller0: entered promiscuous mode [ 1432.330904][T27223] syzkaller0: entered allmulticast mode [ 1432.479699][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.491115][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.501863][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1432.515564][ T5923] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1432.525038][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.541955][ T5923] usb 6-1: config 0 descriptor?? [ 1432.966244][T27217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.990405][T27236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.990723][T27217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.999588][T27236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.587370][T27236] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5516'. [ 1433.617573][ T5923] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1433.660688][T18769] usb 6-1: USB disconnect, device number 111 [ 1433.776643][T27243] fido_id[27243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1433.860162][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1433.915841][T27246] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1434.069240][T27245] bridge_slave_1: left allmulticast mode [ 1434.086879][T27245] bridge_slave_1: left promiscuous mode [ 1434.118153][T27253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'. [ 1434.135835][T27253] openvswitch: netlink: Message has 8 unknown bytes. [ 1434.160961][T27245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.215728][T27244] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1434.337485][T27263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.401910][T27263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.746400][T27245] bridge_slave_0: left allmulticast mode [ 1434.775037][T27245] bridge_slave_0: left promiscuous mode [ 1434.786705][T27245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.208416][T27273] syzkaller0: entered promiscuous mode [ 1435.214008][T27273] syzkaller0: entered allmulticast mode [ 1435.222770][T27277] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1435.426335][T27282] netlink: 'syz.3.5532': attribute type 13 has an invalid length. [ 1435.886522][T27286] netlink: 'syz.0.5533': attribute type 21 has an invalid length. [ 1439.124365][T27286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5533'. [ 1440.004464][T27339] xt_l2tp: v2 sid > 0xffff: 67108864 [ 1440.131179][T27344] netlink: 'syz.1.5550': attribute type 21 has an invalid length. [ 1440.477100][T18764] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1440.492722][T27346] syzkaller0: entered promiscuous mode [ 1440.519322][T27346] syzkaller0: entered allmulticast mode [ 1440.660417][T18764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.670823][T18764] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1440.680033][T18764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.690730][T18764] usb 5-1: config 0 descriptor?? [ 1440.702714][T18764] pwc: Askey VC010 type 2 USB webcam detected. [ 1440.830477][T18769] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1441.009934][T18769] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 1441.030992][T18769] usb 2-1: config 0 has no interface number 0 [ 1441.034738][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'. [ 1441.037651][T18769] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1441.046663][T27358] openvswitch: netlink: Message has 8 unknown bytes. [ 1441.056877][T18769] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1441.099615][T18764] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1441.103368][T18769] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1441.117494][T18764] pwc: recv_control_msg error -32 req 02 val 2700 [ 1441.127986][T18764] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1441.128282][T18769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.136389][T18764] pwc: recv_control_msg error -32 req 04 val 1000 [ 1441.150632][T18769] usb 2-1: Product: syz [ 1441.157345][T18764] pwc: recv_control_msg error -32 req 04 val 1300 [ 1441.168781][T18769] usb 2-1: Manufacturer: syz [ 1441.173404][T18769] usb 2-1: SerialNumber: syz [ 1441.192755][T18769] usb 2-1: config 0 descriptor?? [ 1441.214999][T18769] spcp8x5 2-1:0.201: SPCP8x5 converter detected [ 1441.224034][T18769] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1441.465030][T18769] usb 2-1: USB disconnect, device number 65 [ 1441.477515][T18769] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1441.505782][T18769] spcp8x5 2-1:0.201: device disconnected [ 1441.579424][T18764] pwc: recv_control_msg error -71 req 02 val 2100 [ 1441.586493][T18764] pwc: recv_control_msg error -71 req 04 val 1500 [ 1441.595126][T18764] pwc: recv_control_msg error -71 req 02 val 2500 [ 1441.604691][ T5896] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1441.617143][T18764] pwc: recv_control_msg error -71 req 02 val 2400 [ 1441.627396][T18764] pwc: recv_control_msg error -71 req 02 val 2600 [ 1441.638142][T18764] pwc: recv_control_msg error -71 req 02 val 2900 [ 1441.657426][T18764] pwc: recv_control_msg error -71 req 02 val 2800 [ 1441.664629][T18764] pwc: recv_control_msg error -71 req 04 val 1100 [ 1441.675126][T18764] pwc: recv_control_msg error -71 req 04 val 1200 [ 1441.685046][T18764] pwc: Registered as video103. [ 1441.701333][T18764] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input133 [ 1441.737684][T18764] usb 5-1: USB disconnect, device number 55 [ 1441.768497][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 1441.775469][ T5896] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1441.807039][ T5896] usb 6-1: config 0 has no interface number 0 [ 1441.813200][ T5896] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1441.827676][ T5896] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1441.902593][ T5896] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1441.912143][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.920200][ T5896] usb 6-1: Product: syz [ 1441.924485][ T5896] usb 6-1: Manufacturer: syz [ 1441.929619][ T5896] usb 6-1: SerialNumber: syz [ 1441.953848][ T5896] usb 6-1: config 0 descriptor?? [ 1441.961842][ T5896] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1442.175072][ T5896] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 1442.195745][ T5896] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 1442.557143][ T5896] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1442.690348][T27362] use of bytesused == 0 is deprecated and will be removed in the future, [ 1442.699141][T27362] use the actual size instead. [ 1442.749164][ T5896] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1442.769873][ T5896] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1442.779715][ T5896] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.816081][ T5896] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1442.826555][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.836852][ T5896] usb 2-1: Product: syz [ 1442.844509][ T5896] usb 2-1: Manufacturer: syz [ 1442.849333][ T5896] usb 2-1: SerialNumber: syz [ 1442.873945][ T5896] usblp0: Disabling reads from problematic bidirectional printer [ 1442.950078][T27376] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1443.090164][ T5896] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1443.884560][T18769] usb 2-1: USB disconnect, device number 66 [ 1443.894684][T18769] usblp0: removed [ 1444.245332][ T30] audit: type=1326 audit(1769872040.570:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.273064][ T30] audit: type=1326 audit(1769872040.600:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.296647][ T30] audit: type=1326 audit(1769872040.600:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.321834][ T30] audit: type=1326 audit(1769872040.600:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.358352][ T30] audit: type=1326 audit(1769872040.600:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.382306][ T30] audit: type=1326 audit(1769872040.600:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.405375][ T30] audit: type=1326 audit(1769872040.600:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.428707][ T30] audit: type=1326 audit(1769872040.600:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.451857][ T30] audit: type=1326 audit(1769872040.600:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.474904][ T30] audit: type=1326 audit(1769872040.600:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.1.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1444.513000][T27370] tc_dump_action: action bad kind [ 1444.585783][T18769] usb 6-1: USB disconnect, device number 112 [ 1444.823815][T27401] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1445.450677][T27422] syzkaller0: entered promiscuous mode [ 1445.459934][T27422] syzkaller0: entered allmulticast mode [ 1445.773857][T27431] loop9: detected capacity change from 0 to 7 [ 1445.791651][T27431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1445.804785][T27431] vivid-001: disconnect [ 1445.851324][T27433] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1446.166860][T27437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1446.205772][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.260322][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.314164][T27444] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.5583'. [ 1446.492167][T27426] vivid-001: reconnect [ 1447.007100][ T5896] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1447.160931][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1447.531561][ T5896] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1447.557345][ T5896] usb 6-1: config 0 has no interface number 0 [ 1447.583896][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1447.609790][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1447.624826][ T5896] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1447.679761][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1447.697096][ T5896] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1447.706175][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.718688][T27478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.763805][ T5896] usb 6-1: config 0 descriptor?? [ 1447.779367][T27478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.796659][ T5896] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1448.454196][T27490] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1448.462342][T27490] tipc: Enabled bearer , priority 10 [ 1448.587288][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1448.637584][T27492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.646349][T27492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.727237][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1448.867173][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.007186][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.157214][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.197292][T18769] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1449.297285][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.359458][T18769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.369999][T18769] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1449.427314][T18769] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1449.436394][T18769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.452782][ T5896] tipc: Node number set to 1086415498 [ 1449.466309][T18769] usb 2-1: config 0 descriptor?? [ 1449.587160][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.832037][T27503] netlink: 'syz.3.5601': attribute type 9 has an invalid length. [ 1449.857154][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1450.170723][ T5881] usb 6-1: USB disconnect, device number 113 [ 1450.181814][ T5881] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1450.193845][T18769] kovaplus 0003:1E7D:2D50.006D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1450.397163][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1450.749603][T27524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.762920][T27524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.977183][ T5896] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1451.168990][ T5896] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1451.178456][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.200802][ T5896] usb 5-1: config 0 descriptor?? [ 1451.239384][ T5896] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1451.393527][T27533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5610'. [ 1451.435915][ T5896] gspca_spca508: reg_read err -71 [ 1451.456293][ T5896] gspca_spca508: reg_read err -71 [ 1451.462670][ T5896] gspca_spca508: reg_read err -71 [ 1451.472114][ T5896] gspca_spca508: reg_read err -71 [ 1451.478912][ T5896] gspca_spca508: reg_read err -71 [ 1451.511468][ T5896] gspca_spca508: reg write: error -71 [ 1451.528094][ T5896] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1451.578367][ T5896] usb 5-1: USB disconnect, device number 56 [ 1451.919310][T18769] kovaplus 0003:1E7D:2D50.006D: couldn't init struct kovaplus_device [ 1451.967176][T18769] kovaplus 0003:1E7D:2D50.006D: couldn't install mouse [ 1451.980693][T27541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.033227][T27541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.038123][T18769] kovaplus 0003:1E7D:2D50.006D: probe with driver kovaplus failed with error -71 [ 1452.082533][T27545] tipc: Enabling of bearer rejected, failed to enable media [ 1452.097823][T18769] usb 2-1: USB disconnect, device number 67 [ 1452.204326][T27545] fuse: Invalid gid '00000000000000000000003' [ 1452.446481][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1452.446498][ T30] audit: type=1326 audit(1769872048.770:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1452.457333][T18769] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1452.513889][ T30] audit: type=1326 audit(1769872048.770:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1452.565361][ T30] audit: type=1326 audit(1769872048.770:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1452.995732][T18769] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1453.006327][ T30] audit: type=1326 audit(1769872048.770:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.036722][ T30] audit: type=1326 audit(1769872048.770:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.063076][T18769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1453.082877][T18769] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1453.105927][T18769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.140501][T18769] usb 2-1: Product: syz [ 1453.141029][ T30] audit: type=1326 audit(1769872048.780:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.259613][T18769] usb 2-1: Manufacturer: syz [ 1453.265765][T18769] usb 2-1: SerialNumber: syz [ 1453.297098][ T30] audit: type=1326 audit(1769872048.780:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.305221][T18769] usb 2-1: config 0 descriptor?? [ 1453.333943][T18769] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1453.351535][ T30] audit: type=1326 audit(1769872048.780:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.424937][ T30] audit: type=1326 audit(1769872048.780:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.480810][T27575] loop8: detected capacity change from 0 to 8 [ 1453.491906][T27575] Dev loop8: unable to read RDB block 8 [ 1453.499577][T27575] loop8: unable to read partition table [ 1453.512781][T27575] loop8: partition table beyond EOD, truncated [ 1453.536353][T27575] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1453.557151][ C0] net_ratelimit: 3 callbacks suppressed [ 1453.557171][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1453.576912][ T30] audit: type=1326 audit(1769872048.840:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27561 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc036d9aeb9 code=0x7ffc0000 [ 1453.596797][T27577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1454.127159][T18769] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1454.257190][T18769] usb 6-1: device descriptor read/64, error -71 [ 1454.357362][ T5910] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1454.497956][T18769] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1454.520131][ T5910] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1454.562776][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.587153][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1454.605535][ T5896] usb 2-1: USB disconnect, device number 68 [ 1454.686680][ T5910] usb 5-1: config 0 descriptor?? [ 1454.692794][T18769] usb 6-1: device descriptor read/64, error -71 [ 1454.724694][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1454.817858][T18769] usb usb6-port1: attempt power cycle [ 1454.941404][ T5910] gspca_spca508: reg_read err -71 [ 1454.978092][ T5910] gspca_spca508: reg_read err -71 [ 1455.003489][ T5910] gspca_spca508: reg_read err -71 [ 1455.035584][ T5910] gspca_spca508: reg_read err -71 [ 1455.045595][ T5910] gspca_spca508: reg_read err -71 [ 1455.056839][ T5910] gspca_spca508: reg write: error -71 [ 1455.075825][ T5910] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1455.137147][ T5910] usb 5-1: USB disconnect, device number 57 [ 1455.157319][T18769] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1455.188738][T18769] usb 6-1: device descriptor read/8, error -71 [ 1455.427674][T18769] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1455.477763][T18769] usb 6-1: device descriptor read/8, error -71 [ 1455.597495][T18769] usb usb6-port1: unable to enumerate USB device [ 1455.637132][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1455.649814][T27615] syzkaller0: entered promiscuous mode [ 1455.655859][T27615] syzkaller0: entered allmulticast mode [ 1455.817339][ T5910] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1455.895850][T27615] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1455.990955][ T5910] usb 5-1: config 0 has no interfaces? [ 1455.996718][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1455.997571][T27615] bond5 (unregistering): Released all slaves [ 1456.022359][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.056116][ T5910] usb 5-1: config 0 descriptor?? [ 1456.667614][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1456.790160][T27643] IPVS: set_ctl: invalid protocol: 15 100.1.1.1:20001 [ 1456.853606][T18764] usb 5-1: USB disconnect, device number 58 [ 1457.134086][T27650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.166687][T27650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.421315][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5645'. [ 1457.707332][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1457.767130][T18764] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1457.787563][ T5896] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1457.939853][T18764] usb 6-1: Using ep0 maxpacket: 16 [ 1457.960963][T18764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.993009][T18764] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1458.033244][ T5896] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1458.061661][T18764] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1458.073565][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.089663][T18764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.110396][T18764] usb 6-1: Product: syz [ 1458.129421][ T5896] usb 5-1: config 0 descriptor?? [ 1458.149540][T18764] usb 6-1: Manufacturer: syz [ 1458.174437][T18764] usb 6-1: SerialNumber: syz [ 1458.187892][ T5896] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1458.390402][ T5896] gspca_spca508: reg_read err -71 [ 1458.406150][ T5896] gspca_spca508: reg_read err -71 [ 1458.417450][ T5896] gspca_spca508: reg_read err -71 [ 1458.424652][ T5896] gspca_spca508: reg_read err -71 [ 1458.467425][ T5896] gspca_spca508: reg_read err -71 [ 1458.512354][ T5896] gspca_spca508: reg write: error -71 [ 1458.521932][ T5896] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1458.540845][ T5896] usb 5-1: USB disconnect, device number 59 [ 1458.747162][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1459.152216][T27679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1459.171709][T27679] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1459.300236][T27679] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1459.352336][T27684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.787430][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1459.866350][T27684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.917655][T27684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.928563][T27684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.097935][T27693] netlink: 'syz.1.5657': attribute type 8 has an invalid length. [ 1460.127272][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5657'. [ 1460.167169][T27693] netlink: 'syz.1.5657': attribute type 8 has an invalid length. [ 1460.320449][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5657'. [ 1460.436721][T18764] usb 6-1: 0:2 : does not exist [ 1460.459338][T18764] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.485218][T18764] usb 6-1: USB disconnect, device number 118 [ 1460.550484][T26923] udevd[26923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.683470][T27704] syzkaller0: entered promiscuous mode [ 1460.689588][T27704] syzkaller0: entered allmulticast mode [ 1460.837211][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1460.856756][T27712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.870219][T27713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.888493][T27713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.896467][T27712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.923845][T27715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5664'. [ 1461.037403][T18769] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1461.189121][T18769] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1461.198545][T18769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.211161][T18769] usb 5-1: config 0 descriptor?? [ 1461.223123][T18769] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1461.337809][T18764] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 1461.425933][T18769] gspca_spca508: reg_read err -71 [ 1461.437730][T18769] gspca_spca508: reg_read err -71 [ 1461.451800][T18769] gspca_spca508: reg_read err -71 [ 1461.476026][T18769] gspca_spca508: reg_read err -71 [ 1461.489380][T18764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1461.493722][T18769] gspca_spca508: reg_read err -71 [ 1461.503405][T18764] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1461.514091][T18769] gspca_spca508: reg write: error -71 [ 1461.521025][T18764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.529401][T18769] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1461.532327][T18769] usb 5-1: USB disconnect, device number 60 [ 1461.539094][T18764] usb 6-1: Product: syz [ 1461.549415][T18764] usb 6-1: Manufacturer: syz [ 1461.554193][T18764] usb 6-1: SerialNumber: syz [ 1461.586666][T18764] usb 6-1: config 0 descriptor?? [ 1461.601038][T18764] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 1461.841445][T18764] usb 6-1: USB disconnect, device number 119 [ 1461.867148][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1462.307113][T18764] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1462.422722][T27745] syzkaller0: entered promiscuous mode [ 1462.429127][T27745] syzkaller0: entered allmulticast mode [ 1462.467112][T18764] usb 5-1: Using ep0 maxpacket: 8 [ 1462.479234][T18764] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 1462.504096][T18764] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1462.525335][T18764] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1462.540004][T18764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.567852][T18764] usb 5-1: Product: syz [ 1462.577612][T18764] usb 5-1: Manufacturer: syz [ 1462.591073][T18764] usb 5-1: SerialNumber: syz [ 1462.671756][T27749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5675'. [ 1462.684300][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1462.698077][T27747] : entered promiscuous mode [ 1462.707544][T27749] Unknown options in mask b7f2 [ 1462.820909][T27743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.843363][T27743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.907200][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1462.920097][T18764] usbhid 5-1:1.0: can't add hid device: -71 [ 1462.930559][T18764] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1462.953392][T18764] usb 5-1: USB disconnect, device number 61 [ 1463.247212][T18769] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1463.289936][T27773] tap0: tun_chr_ioctl cmd 1074025677 [ 1463.295451][T27773] tap0: linktype set to 0 [ 1463.411548][T18769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1463.425366][T18769] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1463.435603][T18769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.446877][T18769] usb 6-1: config 0 descriptor?? [ 1463.453923][T27760] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1463.526539][T27784] syzkaller0: entered promiscuous mode [ 1463.532497][T27784] syzkaller0: entered allmulticast mode [ 1463.621967][T27786] netlink: 'syz.3.5684': attribute type 13 has an invalid length. [ 1463.872892][T18769] bigben 0003:146B:0902.006E: unexpected rdesc, please submit for review [ 1463.905672][T18769] bigben 0003:146B:0902.006E: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 1463.917776][T18769] bigben 0003:146B:0902.006E: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1463.926956][T18769] bigben 0003:146B:0902.006E: no output report found [ 1463.957243][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1463.985813][T27792] program syz.4.5687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.087179][T18769] usb 6-1: USB disconnect, device number 120 [ 1464.217442][T27797] tipc: Started in network mode [ 1464.232463][T27797] tipc: Node identity , cluster identity 4711 [ 1464.257867][T27797] tipc: Failed to obtain node identity [ 1464.271349][T27797] tipc: Enabling of bearer rejected, failed to enable media [ 1464.349763][T27797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1464.866617][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1464.866635][ T30] audit: type=1326 audit(1769872061.160:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1464.900243][ T30] audit: type=1326 audit(1769872061.160:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1464.926009][ T30] audit: type=1326 audit(1769872061.160:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1464.952634][ T30] audit: type=1326 audit(1769872061.160:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1464.987167][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1464.995466][T27812] program syz.1.5691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.204623][ T30] audit: type=1326 audit(1769872061.160:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.284028][ T30] audit: type=1326 audit(1769872061.160:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.347088][ T30] audit: type=1326 audit(1769872061.160:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.377458][ T5910] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1465.386277][ T30] audit: type=1326 audit(1769872061.160:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.657889][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 1465.663273][ T30] audit: type=1326 audit(1769872061.160:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.665019][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1465.717124][ T5896] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1465.728792][T27807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.738297][T27807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.746352][ T5910] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1465.765505][ T30] audit: type=1326 audit(1769872061.160:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.1.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f0122d9aeb9 code=0x7ffc0000 [ 1465.827748][ T5910] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1465.847788][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1465.858669][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1465.878867][ T5910] usb 6-1: Product: syz [ 1465.888992][ T5910] usb 6-1: Manufacturer: syz [ 1465.902644][ T5910] usb 6-1: SerialNumber: syz [ 1465.919727][ T5910] usb 6-1: config 0 descriptor?? [ 1465.976182][ T5910] hub 6-1:0.0: bad descriptor, ignoring hub [ 1465.983563][ T5910] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1466.027143][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1466.122367][ T5896] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1466.236943][T27829] fuse: Unknown parameter 'fd20x0000000000000003' [ 1466.317190][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1466.367482][T18764] usb 6-1: USB disconnect, device number 121 [ 1466.437705][ T5896] usb usb5-port1: attempt power cycle [ 1466.707083][T18764] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1466.797197][ T5896] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1466.827667][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1466.867092][T18764] usb 6-1: Using ep0 maxpacket: 32 [ 1466.873926][T18764] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1466.890954][T18764] usb 6-1: config 0 has no interface number 0 [ 1466.907954][T18764] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1466.925961][T18764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.943749][T18764] usb 6-1: Product: syz [ 1466.954454][T18764] usb 6-1: Manufacturer: syz [ 1466.964239][T18764] usb 6-1: SerialNumber: syz [ 1466.975202][T18764] usb 6-1: config 0 descriptor?? [ 1466.986538][T18764] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1467.067175][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1467.087728][ T5896] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1467.156418][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1467.196588][T18764] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1467.237885][T18764] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1467.279097][ T5896] usb usb5-port1: unable to enumerate USB device [ 1467.595488][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1467.603538][ T5896] usb 6-1: USB disconnect, device number 122 [ 1467.627331][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1467.658266][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1467.677723][ T5896] quatech2 6-1:0.51: device disconnected [ 1467.754364][T27843] macvlan0: entered promiscuous mode [ 1468.117142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1468.621103][ T5896] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1468.777806][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 1468.785197][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1468.794078][ T5896] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1468.802717][ T5896] usb 2-1: can't read configurations, error -22 [ 1468.947824][ T5896] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1469.117218][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 1469.125931][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1469.135797][ T5896] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1469.145357][ T5896] usb 2-1: can't read configurations, error -22 [ 1469.151870][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1469.161471][ T5896] usb usb2-port1: attempt power cycle [ 1469.287145][T18764] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1469.458906][T18764] usb 6-1: Using ep0 maxpacket: 32 [ 1469.469863][T18764] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1469.480474][T18764] usb 6-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.494281][ T5923] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1469.502448][T18764] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1469.517143][ T5896] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1469.531137][T18764] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1469.540470][T18764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.549929][T18764] usb 6-1: Product: syz [ 1469.554294][T18764] usb 6-1: Manufacturer: syz [ 1469.559655][T18764] usb 6-1: SerialNumber: syz [ 1469.564481][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 1469.589326][T27901] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1469.591096][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1469.606962][T27901] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1469.625020][ T5896] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1469.636875][ T5896] usb 2-1: can't read configurations, error -22 [ 1469.677129][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1469.684793][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.698644][ T5923] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1469.708177][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.716188][ T5923] usb 5-1: Product: syz [ 1469.721134][ T5923] usb 5-1: Manufacturer: syz [ 1469.725750][ T5923] usb 5-1: SerialNumber: syz [ 1469.738206][ T5923] usb 5-1: config 0 descriptor?? [ 1469.748420][ T5923] usb 5-1: selecting invalid altsetting 1 [ 1469.754183][ T5923] usb 5-1: Can not set alternate setting to 1, error: -22 [ 1469.764223][ T5923] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1469.787314][ T5896] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1469.808925][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 1469.819338][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1469.829430][ T5896] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1469.838171][ T5896] usb 2-1: can't read configurations, error -22 [ 1469.844989][ T5896] usb usb2-port1: unable to enumerate USB device [ 1469.968143][T27903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.986693][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.036506][T18764] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1470.064858][T18764] usb 6-1: USB disconnect, device number 123 [ 1470.102899][T27933] syzkaller0: entered promiscuous mode [ 1470.108625][T27933] syzkaller0: entered allmulticast mode [ 1470.187307][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1470.203325][T27903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.212132][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.280022][T27903] syz.4.5720(27903): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1470.297070][T18764] usb 5-1: USB disconnect, device number 66 [ 1470.746151][T27953] xt_hashlimit: max too large, truncated to 1048576 [ 1470.817375][ T5910] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1470.839231][T27957] netlink: 'syz.3.5740': attribute type 8 has an invalid length. [ 1470.927153][T18769] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1470.977195][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 1470.983975][ T5910] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 1470.992504][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.003305][ T5910] usb 5-1: config 0 has no interface number 0 [ 1471.009619][ T5910] usb 5-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1471.019886][ T5910] usb 5-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.033074][ T5910] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 1471.042260][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.052173][ T5910] usb 5-1: config 0 descriptor?? [ 1471.077384][T18769] usb 6-1: Using ep0 maxpacket: 16 [ 1471.084392][T18769] usb 6-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 1471.095611][T18769] usb 6-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1471.109293][T18769] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1471.115987][T18769] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1471.125296][T18769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.135199][T18769] usb 6-1: config 0 descriptor?? [ 1471.227135][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1471.279824][T18764] usb 5-1: USB disconnect, device number 67 [ 1471.342206][T27967] syzkaller0: entered promiscuous mode [ 1471.349456][T27967] syzkaller0: entered allmulticast mode [ 1471.357627][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1471.573142][T18769] elecom 0003:056E:011C.006F: report_id 2473884707 is invalid [ 1471.581161][T18769] elecom 0003:056E:011C.006F: item 0 4 1 8 parsing failed [ 1471.589304][T18769] elecom 0003:056E:011C.006F: probe with driver elecom failed with error -22 [ 1471.784104][ T5896] usb 6-1: USB disconnect, device number 124 [ 1471.897429][T18764] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1472.047251][T18764] usb 5-1: Using ep0 maxpacket: 32 [ 1472.116934][T18764] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.125057][T18764] usb 5-1: config 0 has no interface number 0 [ 1472.192260][T18764] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1472.216692][T18764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.235251][T18764] usb 5-1: Product: syz [ 1472.263093][T18764] usb 5-1: Manufacturer: syz [ 1472.267865][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1472.278969][T18764] usb 5-1: SerialNumber: syz [ 1472.306910][T18764] usb 5-1: config 0 descriptor?? [ 1472.369413][T27986] FAULT_INJECTION: forcing a failure. [ 1472.369413][T27986] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.397443][T27986] CPU: 0 UID: 0 PID: 27986 Comm: syz.1.5747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.397475][T27986] Tainted: [L]=SOFTLOCKUP [ 1472.397481][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1472.397496][T27986] Call Trace: [ 1472.397503][T27986] [ 1472.397511][T27986] dump_stack_lvl+0xe8/0x150 [ 1472.397540][T27986] should_fail_ex+0x412/0x560 [ 1472.397566][T27986] should_failslab+0xa8/0x100 [ 1472.397586][T27986] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1472.397612][T27986] ? prepare_creds+0x30/0x820 [ 1472.397636][T27986] prepare_creds+0x30/0x820 [ 1472.397654][T27986] ? get_ruleset_from_fd+0x1a5/0x220 [ 1472.397678][T27986] __se_sys_landlock_restrict_self+0x18e/0x750 [ 1472.397710][T27986] do_syscall_64+0xe2/0xf80 [ 1472.397728][T27986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.397745][T27986] ? trace_irq_disable+0x37/0x100 [ 1472.397762][T27986] ? clear_bhb_loop+0x60/0xb0 [ 1472.397782][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.397798][T27986] RIP: 0033:0x7f0122d9aeb9 [ 1472.397815][T27986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.397830][T27986] RSP: 002b:00007f0123c4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1472.397849][T27986] RAX: ffffffffffffffda RBX: 00007f0123015fa0 RCX: 00007f0122d9aeb9 [ 1472.397862][T27986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1472.397872][T27986] RBP: 00007f0123c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.397883][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.397894][T27986] R13: 00007f0123016038 R14: 00007f0123015fa0 R15: 00007f012313fa48 [ 1472.397922][T27986] [ 1472.886198][T18764] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1472.916503][T18764] usb 5-1: selecting invalid altsetting 1 [ 1472.950393][T18764] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1472.951333][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1472.968225][T28004] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1473.044804][T18764] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1473.067757][T18764] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1473.087503][T18764] usb 5-1: media controller created [ 1473.127806][ T5910] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1473.132477][T18764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1473.233533][T28007] sctp: [Deprecated]: syz.0.5755 (pid 28007) Use of int in max_burst socket option. [ 1473.233533][T28007] Use struct sctp_assoc_value instead [ 1473.307142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1473.337150][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 1473.344082][ T5910] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1473.352934][ T5910] usb 6-1: config 0 has no interface number 0 [ 1473.361307][ T5910] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1473.373837][ T5910] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1473.411999][ T5910] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1473.447545][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.460567][ T5910] usb 6-1: Product: syz [ 1473.464942][ T5910] usb 6-1: Manufacturer: syz [ 1473.470053][ T5910] usb 6-1: SerialNumber: syz [ 1473.475258][T28021] FAULT_INJECTION: forcing a failure. [ 1473.475258][T28021] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.491990][ T5910] usb 6-1: config 0 descriptor?? [ 1473.520217][T28021] CPU: 1 UID: 0 PID: 28021 Comm: syz.3.5760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.520246][T28021] Tainted: [L]=SOFTLOCKUP [ 1473.520253][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1473.520263][T28021] Call Trace: [ 1473.520271][T28021] [ 1473.520278][T28021] dump_stack_lvl+0xe8/0x150 [ 1473.520309][T28021] should_fail_ex+0x412/0x560 [ 1473.520333][T28021] should_failslab+0xa8/0x100 [ 1473.520354][T28021] __kmalloc_noprof+0xde/0x7e0 [ 1473.520370][T28021] ? rcu_is_watching+0x15/0xb0 [ 1473.520385][T28021] ? security_prepare_creds+0x52/0x360 [ 1473.520406][T28021] security_prepare_creds+0x52/0x360 [ 1473.520426][T28021] prepare_creds+0x57d/0x820 [ 1473.520451][T28021] __se_sys_landlock_restrict_self+0x18e/0x750 [ 1473.520482][T28021] do_syscall_64+0xe2/0xf80 [ 1473.520500][T28021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.520517][T28021] ? trace_irq_disable+0x37/0x100 [ 1473.520533][T28021] ? clear_bhb_loop+0x60/0xb0 [ 1473.520552][T28021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.520567][T28021] RIP: 0033:0x7f873c59aeb9 [ 1473.520584][T28021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.520598][T28021] RSP: 002b:00007f873d3b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1473.520616][T28021] RAX: ffffffffffffffda RBX: 00007f873c815fa0 RCX: 00007f873c59aeb9 [ 1473.520628][T28021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1473.520638][T28021] RBP: 00007f873d3b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.520648][T28021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.520658][T28021] R13: 00007f873c816038 R14: 00007f873c815fa0 R15: 00007f873c93fa48 [ 1473.520685][T28021] [ 1473.731271][ T5910] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1473.799470][ T5910] cx231xx 6-1:0.1: Not found matching IAD interface [ 1473.832204][ T5910] usb 6-1: USB disconnect, device number 125 [ 1473.852649][T28025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.877336][T28025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.157117][ T5896] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1474.267319][T18764] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1474.275462][T18764] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1474.322311][ T5896] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1474.347120][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1474.362088][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.401724][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1474.426557][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.487421][ T5896] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1474.510147][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1474.538247][ T5896] usb 2-1: Product: syz [ 1474.551544][ T5896] usb 2-1: Manufacturer: syz [ 1474.586215][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 1474.605620][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 1474.613605][ T5896] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1474.790330][T28022] openvswitch: netlink: IPv4 tun info is not correct [ 1474.806521][ T5896] usb 5-1: USB disconnect, device number 68 [ 1474.831617][T18769] usb 2-1: USB disconnect, device number 73 [ 1475.037485][ T5910] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1475.234841][T28046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.244193][T28046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.258123][T28046] fuse: Unknown parameter 'rootmod' [ 1475.329141][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1475.387182][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1475.577254][ T5910] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1475.767556][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1475.888179][ T5910] usb usb6-port1: attempt power cycle [ 1476.427208][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1476.567380][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1477.019754][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1477.307508][ T5910] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1477.327927][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1477.437630][ T5910] usb usb6-port1: unable to enumerate USB device [ 1477.467150][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1478.507131][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1478.550849][T28075] syzkaller0: entered promiscuous mode [ 1478.560939][T28075] syzkaller0: entered allmulticast mode [ 1478.983896][T28086] fuse: Bad value for 'fd' [ 1479.036093][T28087] IPv6: NLM_F_CREATE should be specified when creating new route [ 1479.060321][T28086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1479.079147][T28086] bridge0: entered promiscuous mode [ 1479.285042][T28086] bridge0: entered allmulticast mode [ 1479.292255][ T5896] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1479.458789][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.479321][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1479.503240][ T5896] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1479.528454][ T5896] usb 5-1: Manufacturer: syz [ 1479.547284][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1479.563400][ T5896] usb 5-1: config 0 descriptor?? [ 1479.783081][ T5896] usb 5-1: USB disconnect, device number 69 [ 1479.867310][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1479.876234][T28093] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1480.013141][T28100] netdevsim netdevsim5: Direct firmware load for / [ 1480.013141][T28100] failed with error -2 [ 1480.025853][T28100] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1480.025853][T28100] [ 1480.186590][T28107] kAFS: unable to lookup cell '(,c¾Ì' [ 1480.286197][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1480.347082][ T5910] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1480.363913][T28111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1480.509635][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1480.518052][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 1480.567504][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50612, setting to 1024 [ 1480.579913][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1480.587250][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1480.601846][T28115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1480.629452][ T5910] usb 6-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 1480.644471][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.665800][ T5910] usb 6-1: config 0 descriptor?? [ 1480.682429][T28104] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1480.896203][T28104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.905351][T28104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.130593][ T5910] hid-generic 0003:045E:FC40.0070: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.5-1/input0 [ 1481.531642][T28123] syzkaller0: entered promiscuous mode [ 1481.548772][T28123] syzkaller0: entered allmulticast mode [ 1481.627483][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1482.181625][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1482.181645][ T30] audit: type=1800 audit(1769872078.470:3695): pid=28137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5787" name="file1" dev="tmpfs" ino=2986 res=0 errno=0 [ 1482.673943][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1483.001832][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1483.042470][T28139] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1483.646735][ T5910] usb 6-1: USB disconnect, device number 4 [ 1483.687115][ T5896] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1483.707169][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1483.877137][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 1483.928091][ T5896] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 1483.947366][ T5896] usb 2-1: config 0 has no interface number 0 [ 1483.953501][ T5896] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1483.964618][ T5896] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1483.987231][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.007489][ T5896] usb 2-1: config 0 descriptor?? [ 1484.656369][T28164] binder: 28161:28164 unknown command 1077961494 [ 1484.663575][T28164] binder: 28161:28164 ioctl c0306201 200000000100 returned -22 [ 1484.757159][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1484.830186][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.836562][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.920903][T28166] sctp: [Deprecated]: syz.0.5794 (pid 28166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1484.920903][T28166] Use struct sctp_sack_info instead [ 1485.792362][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1485.871218][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1486.027107][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1486.044966][ T5896] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.127800][ T5896] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1486.153756][ T5896] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1486.164221][ T5896] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.177915][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1486.189857][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.375119][T28175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1486.417987][ T5896] usb 6-1: GET_CAPABILITIES returned 0 [ 1486.423683][ T5896] usbtmc 6-1:16.0: can't read capabilities [ 1486.541441][T28177] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1486.580755][T28177] kvm: pic: level sensitive irq not supported [ 1486.581089][T28177] kvm: pic: level sensitive irq not supported [ 1486.589574][T28177] kvm: pic: single mode not supported [ 1486.595733][T28177] kvm: pic: level sensitive irq not supported [ 1486.618657][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.633823][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.642872][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.652269][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.661344][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.670416][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.679495][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.693990][T28182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.703154][T28182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.717933][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.727077][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.736914][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.746041][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.755160][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.764318][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.775379][T28177] program syz.4.5798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1486.779041][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.793901][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.802969][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1486.827198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1486.858654][ T5896] usb 6-1: USB disconnect, device number 5 [ 1487.240369][ T5910] usb 2-1: USB disconnect, device number 74 [ 1487.267377][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1487.325712][T28196] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5803'. [ 1487.418809][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 1487.430035][ T5896] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 1487.439472][ T5896] usb 6-1: config 0 has no interface number 0 [ 1487.445863][ T5896] usb 6-1: config 0 interface 37 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 1487.456485][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1487.470586][ T5896] usb 6-1: config 0 interface 37 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1487.482235][ T5896] usb 6-1: config 0 interface 37 altsetting 0 endpoint 0xC has invalid maxpacket 9338, setting to 64 [ 1487.494028][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1487.505288][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1487.516751][ T5896] usb 6-1: config 0 interface 37 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1487.529291][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1487.541039][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1487.552897][ T5896] usb 6-1: config 0 interface 37 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1487.565114][ T5896] usb 6-1: config 0 interface 37 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1487.576846][ T5896] usb 6-1: config 0 interface 37 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1487.591171][ T5896] usb 6-1: Dual-Role OTG device on HNP port [ 1487.599064][ T5896] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice= 5.1b [ 1487.610124][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.618929][ T5896] usb 6-1: Product: syz [ 1487.623511][ T5896] usb 6-1: Manufacturer: syz [ 1487.628901][ T5896] usb 6-1: SerialNumber: syz [ 1487.638551][ T5896] usb 6-1: config 0 descriptor?? [ 1487.649447][T28188] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1487.666294][ T5896] option 6-1:0.37: GSM modem (1-port) converter detected [ 1487.717236][ T5910] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1487.867151][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1487.875908][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1487.889237][ T5910] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1487.898668][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.911863][ T5910] usb 2-1: config 0 descriptor?? [ 1488.137720][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 1488.156097][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1488.175372][ T5910] usb 2-1: USB disconnect, device number 75 [ 1488.734797][T28205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1488.789449][T28209] loop2: detected capacity change from 0 to 7 [ 1488.796594][T28209] Dev loop2: unable to read RDB block 7 [ 1488.803532][T28209] loop2: unable to read partition table [ 1488.810003][T28209] loop2: partition table beyond EOD, truncated [ 1488.816171][T28209] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1488.891556][T28211] syzkaller0: entered promiscuous mode [ 1488.897266][T28211] syzkaller0: entered allmulticast mode [ 1488.907136][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1489.149480][T28219] [ 1489.151830][T28219] ===================================================== [ 1489.158757][T28219] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1489.166300][T28219] syzkaller #0 Tainted: G L [ 1489.172260][T28219] ----------------------------------------------------- [ 1489.179174][T28219] syz.1.5811/28219 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1489.186888][T28219] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1489.195576][T28219] [ 1489.195576][T28219] and this task is already holding: [ 1489.202928][T28219] ffff88806c75a0a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1489.211618][T28219] which would create a new lock dependency: [ 1489.217573][T28219] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1489.225208][T28219] [ 1489.225208][T28219] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1489.234631][T28219] (&dev->event_lock#2){..-.}-{3:3} [ 1489.234655][T28219] [ 1489.234655][T28219] ... which became SOFTIRQ-irq-safe at: [ 1489.247517][T28219] lock_acquire+0x106/0x330 [ 1489.252094][T28219] _raw_spin_lock_irqsave+0x40/0x60 [ 1489.257367][T28219] input_event+0x76/0xe0 [ 1489.261687][T28219] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1489.267384][T28219] __usb_hcd_giveback_urb+0x376/0x540 [ 1489.272827][T28219] dummy_timer+0xbbd/0x45d0 [ 1489.277398][T28219] __hrtimer_run_queues+0x527/0xc30 [ 1489.282663][T28219] hrtimer_run_softirq+0x182/0x5a0 [ 1489.288012][T28219] handle_softirqs+0x22a/0x7c0 [ 1489.292835][T28219] __irq_exit_rcu+0x5f/0x150 [ 1489.297486][T28219] irq_exit_rcu+0x9/0x30 [ 1489.301791][T28219] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1489.307495][T28219] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1489.313631][T28219] x2apic_send_IPI+0x73/0xe0 [ 1489.318375][T28219] __smp_call_single_queue+0x1df/0x390 [ 1489.323907][T28219] generic_exec_single+0x191/0x430 [ 1489.329104][T28219] smp_call_function_single+0x341/0x580 [ 1489.334716][T28219] sync_rcu_exp_select_node_cpus+0x68e/0xbb0 [ 1489.340768][T28219] rcu_exp_sel_wait_wake+0x2bb/0xe50 [ 1489.346121][T28219] kthread_worker_fn+0x4ee/0xb00 [ 1489.351122][T28219] kthread+0x726/0x8b0 [ 1489.355256][T28219] ret_from_fork+0x51b/0xa40 [ 1489.359913][T28219] ret_from_fork_asm+0x1a/0x30 [ 1489.364747][T28219] [ 1489.364747][T28219] to a SOFTIRQ-irq-unsafe lock: [ 1489.371742][T28219] (tasklist_lock){.+.+}-{3:3} [ 1489.371762][T28219] [ 1489.371762][T28219] ... which became SOFTIRQ-irq-unsafe at: [ 1489.384350][T28219] ... [ 1489.384358][T28219] lock_acquire+0x106/0x330 [ 1489.391491][T28219] _raw_read_lock+0x36/0x50 [ 1489.396065][T28219] __do_wait+0xde/0x740 [ 1489.400289][T28219] do_wait+0x1e7/0x4f0 [ 1489.404427][T28219] kernel_wait+0xd6/0x1c0 [ 1489.408873][T28219] call_usermodehelper_exec_work+0xbe/0x230 [ 1489.414840][T28219] process_scheduled_works+0xaec/0x17a0 [ 1489.420455][T28219] worker_thread+0xda6/0x1360 [ 1489.425206][T28219] kthread+0x726/0x8b0 [ 1489.429353][T28219] ret_from_fork+0x51b/0xa40 [ 1489.434011][T28219] ret_from_fork_asm+0x1a/0x30 [ 1489.438844][T28219] [ 1489.438844][T28219] other info that might help us debug this: [ 1489.438844][T28219] [ 1489.449050][T28219] Chain exists of: [ 1489.449050][T28219] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1489.449050][T28219] [ 1489.462067][T28219] Possible interrupt unsafe locking scenario: [ 1489.462067][T28219] [ 1489.470371][T28219] CPU0 CPU1 [ 1489.475710][T28219] ---- ---- [ 1489.481053][T28219] lock(tasklist_lock); [ 1489.485274][T28219] local_irq_disable(); [ 1489.492005][T28219] lock(&dev->event_lock#2); [ 1489.499184][T28219] lock(&f_owner->lock); [ 1489.506029][T28219] [ 1489.509459][T28219] lock(&dev->event_lock#2); [ 1489.514386][T28219] [ 1489.514386][T28219] *** DEADLOCK *** [ 1489.514386][T28219] [ 1489.522505][T28219] 2 locks held by syz.1.5811/28219: [ 1489.527718][T28219] #0: ffff888070333b60 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1489.536222][T28219] #1: ffff88806c75a0a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1489.545331][T28219] [ 1489.545331][T28219] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1489.555717][T28219] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1489.561530][T28219] IN-SOFTIRQ-W at: [ 1489.565747][T28219] lock_acquire+0x106/0x330 [ 1489.572416][T28219] _raw_spin_lock_irqsave+0x40/0x60 [ 1489.579807][T28219] input_event+0x76/0xe0 [ 1489.586212][T28219] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1489.594215][T28219] __usb_hcd_giveback_urb+0x376/0x540 [ 1489.602171][T28219] dummy_timer+0xbbd/0x45d0 [ 1489.608845][T28219] __hrtimer_run_queues+0x527/0xc30 [ 1489.616210][T28219] hrtimer_run_softirq+0x182/0x5a0 [ 1489.623477][T28219] handle_softirqs+0x22a/0x7c0 [ 1489.630426][T28219] __irq_exit_rcu+0x5f/0x150 [ 1489.637180][T28219] irq_exit_rcu+0x9/0x30 [ 1489.643584][T28219] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1489.651383][T28219] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1489.659517][T28219] x2apic_send_IPI+0x73/0xe0 [ 1489.666292][T28219] __smp_call_single_queue+0x1df/0x390 [ 1489.673906][T28219] generic_exec_single+0x191/0x430 [ 1489.681261][T28219] smp_call_function_single+0x341/0x580 [ 1489.688991][T28219] sync_rcu_exp_select_node_cpus+0x68e/0xbb0 [ 1489.697239][T28219] rcu_exp_sel_wait_wake+0x2bb/0xe50 [ 1489.704771][T28219] kthread_worker_fn+0x4ee/0xb00 [ 1489.711862][T28219] kthread+0x726/0x8b0 [ 1489.718082][T28219] ret_from_fork+0x51b/0xa40 [ 1489.724830][T28219] ret_from_fork_asm+0x1a/0x30 [ 1489.731772][T28219] INITIAL USE at: [ 1489.735911][T28219] lock_acquire+0x106/0x330 [ 1489.742482][T28219] _raw_spin_lock_irqsave+0x40/0x60 [ 1489.749750][T28219] input_inject_event+0xa5/0x340 [ 1489.756778][T28219] kbd_led_trigger_activate+0xbc/0x100 [ 1489.764395][T28219] led_trigger_set+0x535/0x960 [ 1489.771252][T28219] led_trigger_set_default+0x260/0x2a0 [ 1489.778805][T28219] led_classdev_register_ext+0x787/0x9c0 [ 1489.786593][T28219] input_leds_connect+0x517/0x790 [ 1489.793698][T28219] input_register_device+0xd00/0x1160 [ 1489.801151][T28219] atkbd_connect+0x731/0xa50 [ 1489.807815][T28219] serio_driver_probe+0x82/0xd0 [ 1489.814749][T28219] really_probe+0x267/0xaf0 [ 1489.821325][T28219] __driver_probe_device+0x18c/0x320 [ 1489.828677][T28219] driver_probe_device+0x4f/0x240 [ 1489.835768][T28219] __driver_attach+0x349/0x640 [ 1489.842597][T28219] bus_for_each_dev+0x23b/0x2c0 [ 1489.849520][T28219] serio_handle_event+0x232/0x10d0 [ 1489.856699][T28219] process_scheduled_works+0xaec/0x17a0 [ 1489.864309][T28219] worker_thread+0xda6/0x1360 [ 1489.871066][T28219] kthread+0x726/0x8b0 [ 1489.877204][T28219] ret_from_fork+0x51b/0xa40 [ 1489.883863][T28219] ret_from_fork_asm+0x1a/0x30 [ 1489.890693][T28219] } [ 1489.893437][T28219] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1489.902708][T28219] -> (&client->buffer_lock){....}-{3:3} { [ 1489.908595][T28219] INITIAL USE at: [ 1489.912636][T28219] lock_acquire+0x106/0x330 [ 1489.919119][T28219] _raw_spin_lock+0x2e/0x40 [ 1489.925516][T28219] evdev_pass_values+0xb9/0xbd0 [ 1489.932261][T28219] evdev_events+0x1e6/0x340 [ 1489.938660][T28219] input_pass_values+0x288/0x890 [ 1489.945491][T28219] input_event_dispose+0x330/0x6b0 [ 1489.952491][T28219] input_inject_event+0x1dd/0x340 [ 1489.959418][T28219] evdev_write+0x325/0x4c0 [ 1489.965733][T28219] vfs_write+0x29a/0xb90 [ 1489.971875][T28219] ksys_write+0x150/0x270 [ 1489.978095][T28219] do_syscall_64+0xe2/0xf80 [ 1489.984483][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.992267][T28219] } [ 1489.994944][T28219] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1490.003251][T28219] ... acquired at: [ 1490.007208][T28219] _raw_spin_lock+0x2e/0x40 [ 1490.011931][T28219] evdev_pass_values+0xb9/0xbd0 [ 1490.017113][T28219] evdev_events+0x1e6/0x340 [ 1490.021877][T28219] input_pass_values+0x288/0x890 [ 1490.026970][T28219] input_event_dispose+0x330/0x6b0 [ 1490.032252][T28219] input_inject_event+0x1dd/0x340 [ 1490.037430][T28219] evdev_write+0x325/0x4c0 [ 1490.042001][T28219] vfs_write+0x29a/0xb90 [ 1490.046425][T28219] ksys_write+0x150/0x270 [ 1490.050912][T28219] do_syscall_64+0xe2/0xf80 [ 1490.055565][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.061618][T28219] [ 1490.063922][T28219] -> (&new->fa_lock){....}-{3:3} { [ 1490.069113][T28219] INITIAL USE at: [ 1490.073078][T28219] lock_acquire+0x106/0x330 [ 1490.079300][T28219] _raw_write_lock_irq+0x3d/0x50 [ 1490.085957][T28219] fasync_remove_entry+0xf1/0x1c0 [ 1490.092698][T28219] sock_fasync+0x85/0xf0 [ 1490.098654][T28219] __fput+0x8a5/0xa70 [ 1490.104357][T28219] task_work_run+0x1d9/0x270 [ 1490.110666][T28219] exit_to_user_mode_loop+0xed/0x480 [ 1490.117670][T28219] do_syscall_64+0x2b7/0xf80 [ 1490.123987][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.131680][T28219] INITIAL READ USE at: [ 1490.136075][T28219] lock_acquire+0x106/0x330 [ 1490.142921][T28219] _raw_read_lock_irqsave+0x48/0x60 [ 1490.150273][T28219] kill_fasync+0x199/0x4d0 [ 1490.156842][T28219] vcs_notifier+0x14b/0x1f0 [ 1490.163586][T28219] notifier_call_chain+0x19d/0x3a0 [ 1490.170849][T28219] atomic_notifier_call_chain+0xda/0x180 [ 1490.178635][T28219] vcs_scr_updated+0x94/0xe0 [ 1490.185402][T28219] vcs_write+0xfc9/0x11c0 [ 1490.191880][T28219] vfs_write+0x29a/0xb90 [ 1490.198283][T28219] ksys_write+0x150/0x270 [ 1490.204769][T28219] do_syscall_64+0xe2/0xf80 [ 1490.211426][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.219470][T28219] } [ 1490.222044][T28219] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1490.230781][T28219] ... acquired at: [ 1490.234733][T28219] _raw_read_lock_irqsave+0x48/0x60 [ 1490.240172][T28219] kill_fasync+0x199/0x4d0 [ 1490.244742][T28219] evdev_pass_values+0x627/0xbd0 [ 1490.249833][T28219] evdev_events+0x1e6/0x340 [ 1490.254486][T28219] input_pass_values+0x288/0x890 [ 1490.259577][T28219] input_event_dispose+0x330/0x6b0 [ 1490.264841][T28219] input_inject_event+0x1dd/0x340 [ 1490.270017][T28219] evdev_write+0x325/0x4c0 [ 1490.274588][T28219] vfs_write+0x29a/0xb90 [ 1490.279075][T28219] ksys_write+0x150/0x270 [ 1490.283559][T28219] do_syscall_64+0xe2/0xf80 [ 1490.288213][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.294270][T28219] [ 1490.296601][T28219] -> (&f_owner->lock){....}-{3:3} { [ 1490.302135][T28219] INITIAL USE at: [ 1490.306013][T28219] lock_acquire+0x106/0x330 [ 1490.312071][T28219] _raw_write_lock_irq+0x3d/0x50 [ 1490.318552][T28219] __f_setown+0x67/0x370 [ 1490.324337][T28219] fcntl_dirnotify+0x3f9/0x6a0 [ 1490.330739][T28219] do_fcntl+0x77e/0x1a20 [ 1490.336546][T28219] __se_sys_fcntl+0xc8/0x150 [ 1490.342698][T28219] do_syscall_64+0xe2/0xf80 [ 1490.348755][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.356200][T28219] INITIAL READ USE at: [ 1490.360512][T28219] lock_acquire+0x106/0x330 [ 1490.367088][T28219] _raw_read_lock_irqsave+0x48/0x60 [ 1490.374265][T28219] send_sigio+0x38/0x370 [ 1490.380491][T28219] dnotify_handle_event+0x169/0x440 [ 1490.387681][T28219] fsnotify+0x1831/0x1ae0 [ 1490.394009][T28219] path_openat+0x1ae3/0x3e20 [ 1490.400600][T28219] do_filp_open+0x22d/0x490 [ 1490.407152][T28219] do_sys_openat2+0x12f/0x220 [ 1490.413830][T28219] __x64_sys_openat+0x138/0x170 [ 1490.420667][T28219] do_syscall_64+0xe2/0xf80 [ 1490.427159][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.435035][T28219] } [ 1490.437522][T28219] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1490.446356][T28219] ... acquired at: [ 1490.450146][T28219] _raw_read_lock_irqsave+0x48/0x60 [ 1490.455496][T28219] send_sigio+0x38/0x370 [ 1490.459923][T28219] kill_fasync+0x24d/0x4d0 [ 1490.464514][T28219] lease_break_callback+0x26/0x30 [ 1490.469693][T28219] __break_lease+0x741/0x1b80 [ 1490.474527][T28219] path_openat+0x17ca/0x3e20 [ 1490.479541][T28219] do_filp_open+0x22d/0x490 [ 1490.484198][T28219] do_sys_openat2+0x12f/0x220 [ 1490.489200][T28219] __x64_sys_openat+0x138/0x170 [ 1490.494203][T28219] do_syscall_64+0xe2/0xf80 [ 1490.498871][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.504916][T28219] [ 1490.507224][T28219] [ 1490.507224][T28219] the dependencies between the lock to be acquired [ 1490.507231][T28219] and SOFTIRQ-irq-unsafe lock: [ 1490.520695][T28219] -> (tasklist_lock){.+.+}-{3:3} { [ 1490.525798][T28219] HARDIRQ-ON-R at: [ 1490.529757][T28219] lock_acquire+0x106/0x330 [ 1490.535987][T28219] _raw_read_lock+0x36/0x50 [ 1490.542120][T28219] __do_wait+0xde/0x740 [ 1490.547911][T28219] do_wait+0x1e7/0x4f0 [ 1490.553638][T28219] kernel_wait+0xd6/0x1c0 [ 1490.559599][T28219] call_usermodehelper_exec_work+0xbe/0x230 [ 1490.567131][T28219] process_scheduled_works+0xaec/0x17a0 [ 1490.574308][T28219] worker_thread+0xda6/0x1360 [ 1490.580620][T28219] kthread+0x726/0x8b0 [ 1490.586329][T28219] ret_from_fork+0x51b/0xa40 [ 1490.592674][T28219] ret_from_fork_asm+0x1a/0x30 [ 1490.599163][T28219] SOFTIRQ-ON-R at: [ 1490.603212][T28219] lock_acquire+0x106/0x330 [ 1490.609347][T28219] _raw_read_lock+0x36/0x50 [ 1490.615476][T28219] __do_wait+0xde/0x740 [ 1490.621265][T28219] do_wait+0x1e7/0x4f0 [ 1490.626969][T28219] kernel_wait+0xd6/0x1c0 [ 1490.632962][T28219] call_usermodehelper_exec_work+0xbe/0x230 [ 1490.640492][T28219] process_scheduled_works+0xaec/0x17a0 [ 1490.647673][T28219] worker_thread+0xda6/0x1360 [ 1490.654012][T28219] kthread+0x726/0x8b0 [ 1490.659709][T28219] ret_from_fork+0x51b/0xa40 [ 1490.665934][T28219] ret_from_fork_asm+0x1a/0x30 [ 1490.672332][T28219] INITIAL USE at: [ 1490.676205][T28219] lock_acquire+0x106/0x330 [ 1490.682267][T28219] _raw_write_lock_irq+0x3d/0x50 [ 1490.688747][T28219] copy_process+0x2199/0x3980 [ 1490.694973][T28219] kernel_clone+0x248/0x870 [ 1490.701016][T28219] user_mode_thread+0x110/0x180 [ 1490.707410][T28219] rest_init+0x23/0x300 [ 1490.713109][T28219] start_kernel+0x380/0x3d0 [ 1490.719155][T28219] x86_64_start_reservations+0x24/0x30 [ 1490.726154][T28219] x86_64_start_kernel+0x143/0x1c0 [ 1490.732805][T28219] common_startup_64+0x13e/0x147 [ 1490.739288][T28219] INITIAL READ USE at: [ 1490.743594][T28219] lock_acquire+0x106/0x330 [ 1490.750079][T28219] _raw_read_lock+0x36/0x50 [ 1490.756560][T28219] __do_wait+0xde/0x740 [ 1490.762694][T28219] do_wait+0x1e7/0x4f0 [ 1490.768768][T28219] kernel_wait+0xd6/0x1c0 [ 1490.775074][T28219] call_usermodehelper_exec_work+0xbe/0x230 [ 1490.782947][T28219] process_scheduled_works+0xaec/0x17a0 [ 1490.790487][T28219] worker_thread+0xda6/0x1360 [ 1490.797152][T28219] kthread+0x726/0x8b0 [ 1490.803215][T28219] ret_from_fork+0x51b/0xa40 [ 1490.809786][T28219] ret_from_fork_asm+0x1a/0x30 [ 1490.816532][T28219] } [ 1490.819022][T28219] ... key at: [] tasklist_lock+0x18/0x40 [ 1490.826720][T28219] ... acquired at: [ 1490.830499][T28219] _raw_read_lock+0x36/0x50 [ 1490.835152][T28219] send_sigurg+0x12b/0x420 [ 1490.839771][T28219] sk_send_sigurg+0x6c/0x2e0 [ 1490.844512][T28219] queue_oob+0x42c/0x4f0 [ 1490.848955][T28219] unix_stream_sendmsg+0xcb1/0xe80 [ 1490.854388][T28219] ____sys_sendmsg+0xa68/0xad0 [ 1490.859305][T28219] ___sys_sendmsg+0x2a5/0x360 [ 1490.864156][T28219] __sys_sendmmsg+0x27c/0x4e0 [ 1490.869004][T28219] __x64_sys_sendmmsg+0xa0/0xc0 [ 1490.874018][T28219] do_syscall_64+0xe2/0xf80 [ 1490.878677][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.884720][T28219] [ 1490.887027][T28219] [ 1490.887027][T28219] stack backtrace: [ 1490.892910][T28219] CPU: 0 UID: 0 PID: 28219 Comm: syz.1.5811 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.892926][T28219] Tainted: [L]=SOFTLOCKUP [ 1490.892931][T28219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1490.892938][T28219] Call Trace: [ 1490.892944][T28219] [ 1490.892950][T28219] dump_stack_lvl+0xe8/0x150 [ 1490.892966][T28219] __lock_acquire+0x2a94/0x2cf0 [ 1490.892986][T28219] ? send_sigurg+0x12b/0x420 [ 1490.892999][T28219] lock_acquire+0x106/0x330 [ 1490.893013][T28219] ? send_sigurg+0x12b/0x420 [ 1490.893029][T28219] _raw_read_lock+0x36/0x50 [ 1490.893039][T28219] ? send_sigurg+0x12b/0x420 [ 1490.893051][T28219] send_sigurg+0x12b/0x420 [ 1490.893065][T28219] sk_send_sigurg+0x6c/0x2e0 [ 1490.893076][T28219] queue_oob+0x42c/0x4f0 [ 1490.893087][T28219] ? __pfx_queue_oob+0x10/0x10 [ 1490.893099][T28219] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1490.893112][T28219] unix_stream_sendmsg+0xcb1/0xe80 [ 1490.893122][T28219] ? finish_task_switch+0x2fd/0x920 [ 1490.893137][T28219] ? rcu_is_watching+0x15/0xb0 [ 1490.893148][T28219] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.893162][T28219] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1490.893173][T28219] ? aa_sock_msg_perm+0xda/0x1b0 [ 1490.893187][T28219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1490.893198][T28219] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1490.893207][T28219] ____sys_sendmsg+0xa68/0xad0 [ 1490.893221][T28219] ? __might_fault+0xaf/0x130 [ 1490.893237][T28219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1490.893252][T28219] ? import_iovec+0x73/0xa0 [ 1490.893268][T28219] ___sys_sendmsg+0x2a5/0x360 [ 1490.893281][T28219] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.893296][T28219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1490.893311][T28219] ? __pfx_futex_wake_mark+0x10/0x10 [ 1490.893327][T28219] ? __fget_files+0x2a/0x420 [ 1490.893338][T28219] ? __fget_files+0x3a0/0x420 [ 1490.893351][T28219] __sys_sendmmsg+0x27c/0x4e0 [ 1490.893365][T28219] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1490.893378][T28219] ? do_futex+0x333/0x420 [ 1490.893393][T28219] ? __pfx_do_fcntl+0x10/0x10 [ 1490.893409][T28219] ? __fget_files+0x2a/0x420 [ 1490.893420][T28219] ? __pfx___se_sys_futex+0x10/0x10 [ 1490.893436][T28219] __x64_sys_sendmmsg+0xa0/0xc0 [ 1490.893451][T28219] do_syscall_64+0xe2/0xf80 [ 1490.893462][T28219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.893472][T28219] ? trace_irq_disable+0x37/0x100 [ 1490.893482][T28219] ? clear_bhb_loop+0x60/0xb0 [ 1490.893493][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.893504][T28219] RIP: 0033:0x7f0122d9aeb9 [ 1490.893514][T28219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.893524][T28219] RSP: 002b:00007f0123c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1490.893536][T28219] RAX: ffffffffffffffda RBX: 00007f0123015fa0 RCX: 00007f0122d9aeb9 [ 1490.893544][T28219] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000004 [ 1490.893551][T28219] RBP: 00007f0122e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1490.893558][T28219] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1490.893564][T28219] R13: 00007f0123016038 R14: 00007f0123015fa0 R15: 00007f012313fa48 [ 1490.893576][T28219] [ 1491.206488][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1491.240003][ T5881] usb 6-1: USB disconnect, device number 6 [ 1491.249637][ T5881] option 6-1:0.37: device disconnected [ 1492.277389][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1493.317531][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1494.347189][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1495.387173][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1496.427519][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1497.467533][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1498.507268][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available