last executing test programs: 34m25.966140029s ago: executing program 4 (id=1182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1000, 0x4000, 0x8, 0x0, 0x6, 0x1, 0xd, 0x4, 0x7, 0x4, 0x6, 0x7}, {0x1000, 0x0, 0xd, 0x9, 0x9, 0x5, 0xe1, 0x1, 0x9, 0x3, 0x0, 0x1}, {0x4, 0x100000, 0xd, 0x2, 0xd, 0x9, 0x2, 0xd, 0x4a, 0x2, 0x2, 0x81}, {0x1000, 0x1, 0x8, 0x7, 0x9f, 0x55, 0x6, 0x4, 0x2, 0x3, 0x3f, 0x88}, {0xffff1000, 0x1, 0x3, 0x9, 0x6, 0x5, 0x4, 0x6, 0x6, 0x3, 0x1, 0x2}, {0x2000, 0xeeef0000, 0x3, 0x4, 0x9, 0x9, 0x7, 0xb4, 0x8, 0x6, 0x6, 0x81}, {0x8080000, 0x2, 0xd, 0x0, 0xb1, 0x2, 0x1, 0x8, 0x7, 0x7, 0x8, 0x81}, {0x6000, 0x2, 0xf, 0x8, 0x53, 0xd, 0xb6, 0x0, 0x4, 0x2, 0x6b, 0x6}, {0x3000, 0xaf}, {0x100000, 0x13}, 0x14, 0x0, 0x100000, 0x40000, 0x7, 0x8000, 0x4000, [0x200, 0xb8, 0xf, 0x699]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 34m24.579280594s ago: executing program 4 (id=1186): socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 34m21.885688377s ago: executing program 4 (id=1193): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x4020400) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) flistxattr(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 34m18.288304305s ago: executing program 4 (id=1200): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 34m17.849550145s ago: executing program 4 (id=1202): close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34m16.85403828s ago: executing program 4 (id=1204): socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020600) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000000108010400000000b26d140ea1977a7cee7c8d000000000500000654000480080001400000007f080001400000000208000140fffffffb08000140ffffbcca0800014000000007080001400000000908000140000000040800014000000003080001400000000e08000140000000d006000240000d0000"], 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 34m1.720923865s ago: executing program 32 (id=1204): socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020600) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000000108010400000000b26d140ea1977a7cee7c8d000000000500000654000480080001400000007f080001400000000208000140fffffffb08000140ffffbcca0800014000000007080001400000000908000140000000040800014000000003080001400000000e08000140000000d006000240000d0000"], 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 23.55193217s ago: executing program 0 (id=5731): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e618a08580403701a7a010203010902120001000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) readv(0xffffffffffffffff, &(0x7f0000002400)=[{0x0}], 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8c}}, 0x48810) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0xffff7fff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f76873fe45000000000000f1a5000000f0fff0ff240000000000000095"], &(0x7f0000000180)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2cd, @void, @value}, 0x94) 18.016551315s ago: executing program 0 (id=5736): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010004004146086016328dea800102030000d4510bfb5ba8dc4690d5b90d33b28388e0b632075957c8068922f1af75c6fa7ec301e0abeb6550efa0e28c7d19b24ba5af0c3e54c495f3c8093c157293e1591d1d7d34163249"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r1 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket(0x1e, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000000540)='./file0/../file0/file0\x00') syz_fuse_handle_req(r4, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b7c447bf9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e7fccfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992fecfc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x7fffffd, 0x0, 0x0, 0x81, 0x1000, 0xa0bb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffb, {0x0, 0x4, 0x7f, 0x1b7, 0xd51, 0x0, 0x0, 0x2, 0x0, 0xd000, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c1, 0x82fc, 0x1c, 0x0, 0x0) 17.387137756s ago: executing program 2 (id=5737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc0585604, &(0x7f0000000040)={0x8000}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200), 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0xfffffff8, 0x4, 0x5, 0x52}}) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 17.347329885s ago: executing program 5 (id=5738): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 16.892545733s ago: executing program 1 (id=5739): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x8001, 0x4, {{0x2b, 0x4, 0x0, 0x2c, 0xac, 0x65, 0x0, 0xc4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x52, 0x3, [{0x2, 0x2}, {0x5, 0xf, "0323250719429338c0ecd134d0"}, {0x0, 0x8, "23e28810b724"}, {0x1, 0x6, "afc0db7f"}, {0x7, 0x11, "df6d28b4b3e33f16377e8d4bf3549a"}, {0x5, 0x9, "0c8976a0458441"}, {0x6, 0xd, "209fd47acbc93d1bcda20a"}, {0x5, 0x6, "97f67f17"}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0xd, "76793edc229a1385f25dc5"}, {0x5, 0x4, "5c05"}]}, @noop, @ssrr={0x89, 0x1f, 0x4, [@multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}]}, @end, @ssrr={0x89, 0x7, 0x41, [@rand_addr=0x64010100]}, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x9, 0x1, {{0x16, 0x4, 0x1, 0x33, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x6, 0xfffffffffffffffc}, @timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0x0, [{@loopback, 0x8}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0xffff}]}, @timestamp={0x44, 0x18, 0x50, 0x0, 0x7, [0x0, 0x0, 0x6, 0x3, 0x27]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf25180000001c000180080003000300000008000100", @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="080000000300000014000200697036746e6c300000000000000000008a55c0476293a1ab9d4b520acc9b5267ad7ba004309a2faf646c1eaec035e8be275d901e06cad3d6c393083cf912650d7a96f6691f6552ab8dad581d4bfdd28f3075bc9b992277a6a829f55664def09845e397d3284c82fae76de8d056f04b"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000844) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2e0c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xe38}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0x10000, './file0\x00'}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee", 0x1f) 15.893255102s ago: executing program 1 (id=5740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r1, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000a00)="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", 0xfe5}], 0x1}}], 0x1, 0xf00) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 15.424045702s ago: executing program 3 (id=5741): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r5, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xf6}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x9) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 14.130291927s ago: executing program 2 (id=5742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r1, &(0x7f0000000100)=0x80, &(0x7f0000000280)=@alg, 0x0, 0x800, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x44, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TUNGETVNETLE(r6, 0x4004743b, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) 14.129839276s ago: executing program 5 (id=5743): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 14.12763037s ago: executing program 0 (id=5752): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000280)=0x4545508) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000020", @ANYRES32, @ANYBLOB='\x00'], 0x18, 0x10}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 12.488468011s ago: executing program 5 (id=5744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0xc) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r0, 0x0, 0x0, 0x8, 0x40000003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/87, 0x57}, 0x4}, {{&(0x7f0000001680)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/231, 0xe7}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000001900)=""/171, 0xab}], 0x3, &(0x7f0000001ac0)=""/190, 0xbe}, 0x23da}, {{&(0x7f0000001700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000002080)=""/191, 0xbf}, 0x7}, {{&(0x7f0000002140)=@ax25={{0x3, @rose}, [@netrom, @rose, @bcast, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000003640)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/248, 0xf8}, {&(0x7f00000032c0)=""/16, 0x10}, {&(0x7f0000003300)=""/208, 0xd0}, {&(0x7f0000003400)=""/29, 0x1d}, {&(0x7f0000003440)=""/247, 0xf7}, {&(0x7f0000003540)=""/211, 0xd3}], 0x7, &(0x7f00000036c0)=""/23, 0x17}, 0xef1c}, {{&(0x7f0000003700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000003780)=""/88, 0x58}], 0x1}, 0xc}, {{&(0x7f0000001d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003d40)=[{&(0x7f00000038c0)=""/105, 0x69}, {&(0x7f0000003940)=""/79, 0x4f}, {&(0x7f00000039c0)=""/212, 0xd4}, {&(0x7f0000003ac0)=""/147, 0x93}, {0x0}, {&(0x7f0000003c80)=""/134, 0x86}], 0x6}, 0x4}, {{&(0x7f0000003dc0)=@tipc=@id, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/103, 0x67}, {&(0x7f0000003ec0)=""/104, 0x68}, {&(0x7f0000003f40)=""/115, 0x73}, {&(0x7f0000003fc0)=""/36, 0x24}], 0x4, &(0x7f0000004040)=""/77, 0x4d}, 0x3}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/45, 0x2d}], 0x3, &(0x7f0000005480)=""/152, 0x98}, 0x7}], 0x8, 0x40, &(0x7f0000001cc0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000440)=0x1000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000400)={0xffffffffffffff2b, 0x7, r7, 0x0, 0x1, 0x0, 0x9, 0x356014, 0x2e827b}) close_range(r3, 0xffffffffffffffff, 0x10000000000000) syz_pidfd_open(0x0, 0x0) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 11.766385553s ago: executing program 1 (id=5745): socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup, 0xffffffffffffffff, 0x5, 0x2020, 0xffffffffffffffff, @void, @void, @value}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)=0x1f40) lseek(r4, 0x401, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x33]}, &(0x7f0000000080)={0x0, "69dcaf2086ec9a8545f45826cb35be51ca73845d177dd8dba7221faeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) syz_io_uring_setup(0x39, 0x0, &(0x7f0000000240), &(0x7f0000001880)) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0x31}}], 0x30}, 0x0) 11.624378738s ago: executing program 2 (id=5746): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0xd2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) socket(0x1d, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xdf1, 0xfffd}, 'syz1\x00', 0x2a}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x6, 0x4, 0x34565348, 0x1, 0x5, 0x7, 0xc, 0xfffffffd, 0x0, 0x7, 0x0, 0x6}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@', @ANYRESDEC], 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 10.60530899s ago: executing program 0 (id=5747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048084) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000070000000900010073797a300000000008000240000000032c0000000b0a010400000000000000000700ffff0900010073797a300000"], 0x7c}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001880)) io_setup(0x4082, &(0x7f0000000380)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000019c0)={&(0x7f0000000200), 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10d0}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xff, 0x28bc, 0xf7de]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000180), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f00000000c0)=""/16, 0x10}], 0x6, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 10.588869235s ago: executing program 3 (id=5748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x20104c2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x2, 0x100, 0x7, 0x10, 0x7, 0x80000000}, 0x294, [0xfffffffa, 0x9, 0x3, 0x7, 0x3, 0x99, 0x1, 0xcec2, 0x0, 0xfffffffa, 0x5, 0xa, 0x330, 0x6, 0xffffffff, 0x10000, 0xc0000000, 0x1, 0x0, 0x81, 0x3ff, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x0, 0x2, 0x7, 0x3, 0xa, 0x8, 0x2000, 0x1, 0x6, 0x3, 0xffffffff, 0xfff, 0xe, 0x8dae, 0x7, 0xfffffff8, 0x401, 0xa, 0x5, 0xd3, 0x6, 0xfff, 0xe970, 0x0, 0x7, 0x5, 0x7, 0x9, 0x4, 0xc05e, 0x101, 0x80000000, 0x4, 0x5, 0x1ff, 0x1, 0x401, 0x6482, 0x4, 0x400, 0x9, 0x0, 0x5, 0x6, 0xb, 0x3, 0x10, 0x9, 0xfffffffd, 0x2, 0x6, 0x10, 0xfffffffb, 0x40, 0x6, 0x3, 0xffff, 0x80000000, 0x8b, 0x80000000, 0x8, 0x101, 0xb0ce, 0xe0c, 0xce30, 0xfe, 0x5, 0x2, 0x6, 0x460, 0x6, 0x8, 0xf0d7, 0x200, 0x8, 0x4, 0x67e, 0x5, 0x5, 0x9, 0x3, 0xcb, 0x1, 0x0, 0x85, 0xdba, 0x5, 0x9, 0x1, 0x6, 0x1, 0xf, 0xa, 0x9, 0x1000, 0x480, 0xfffffffe, 0x100, 0x2, 0x7, 0x401, 0x529, 0x4, 0x8, 0x7, 0x6, 0x2, 0x401, 0xe, 0x7, 0x8, 0x8001, 0x2, 0x4, 0x200, 0x4, 0xd69, 0xfffffffb, 0x8, 0x5, 0x6, 0x5, 0x1ff, 0x90000, 0xfa47, 0xc, 0x5, 0x1, 0x7ff, 0xf, 0xcb3, 0xb, 0xffff7590, 0x0, 0x5, 0x2, 0x8000, 0xfffffffa, 0x2, 0x9, 0x4, 0x2, 0xff, 0x400, 0x80000001, 0xfffffc01, 0xff, 0x4, 0x5, 0x6, 0x9, 0xfffffffc, 0x6, 0x100, 0xfffffff7, 0x2, 0x9, 0x4, 0x5, 0x0, 0x5, 0x5db5, 0x7, 0x7, 0xf306, 0x2, 0x3, 0xfffffffe, 0x4, 0x200, 0x36dd, 0x0, 0x2, 0x4, 0xd9, 0x5, 0x2, 0x4, 0x1, 0xffff, 0x7, 0x10, 0x2, 0x6, 0x8, 0x100, 0x50000, 0x1, 0xde9, 0x400, 0x4, 0x9, 0x1, 0xa1, 0x4, 0x6, 0x6, 0x401, 0x5, 0x8, 0x2, 0xc1, 0x4, 0x7, 0x2, 0xd, 0x3, 0x3, 0xd, 0x3, 0x3, 0x6, 0x9a, 0x1, 0x5, 0x3ff, 0x401000, 0x7, 0x7fff, 0x4, 0x9, 0x719, 0x8, 0x8, 0x3, 0x6, 0x8, 0x6, 0x5, 0x9, 0x9, 0x8, 0x2, 0x80000000, 0x2, 0x80000001, 0x8, 0xfc8d, 0x3, 0x5, 0x2, 0x7, 0x9d36, 0x0, 0x5, 0xc08, 0x3, 0xe809, 0xf402, 0x6, 0x5, 0xb72, 0x26f, 0x6f, 0x8, 0x4, 0x1, 0x967, 0x8, 0xffffffff, 0x33, 0x150, 0x3, 0x8, 0xfffffff0, 0x2, 0x9, 0x8f, 0x2, 0x1, 0x1, 0x9, 0x0, 0x3, 0x3, 0x0, 0x5, 0x8, 0x16, 0x3b8b7931, 0x4, 0x5, 0x5, 0x3349b29a, 0xa0b, 0x6, 0x1, 0x5, 0x4, 0x8, 0x487a, 0x4, 0x0, 0x6, 0x9, 0x1, 0x3, 0x7, 0xfffffffc, 0xfffffff7, 0x9, 0x2, 0x6, 0xff53, 0x8, 0x0, 0x2, 0x7, 0xfffffffd, 0x872c, 0x2, 0x4, 0x7, 0x3, 0x6, 0x0, 0x4, 0x1, 0x401, 0xa, 0x15a218ff, 0xfffffff7, 0x5, 0x9, 0x2, 0x4, 0x10001, 0x5, 0x4, 0x7, 0x3, 0x8, 0xd131, 0x4, 0xd, 0x5, 0x7, 0x1, 0x7fff, 0x8, 0x10001, 0xffffffff, 0x0, 0x5, 0x8, 0x9, 0x3, 0x3, 0x4, 0x4, 0x7, 0x1, 0xf, 0x2, 0x5, 0x3, 0x5, 0x186d, 0x55d, 0x10000, 0x8001, 0x7, 0x6, 0x401, 0xe, 0x18000, 0x7, 0x3, 0x18, 0x7, 0x444, 0x3, 0x3, 0x1000, 0x7, 0xd, 0xd, 0xf1, 0x0, 0xc, 0x7, 0x7, 0x28950542, 0x4, 0x7, 0x4317, 0x5, 0xfff, 0x3, 0x0, 0x8, 0xfff, 0x4, 0x9c4, 0x7fe, 0x1, 0x7f, 0x8001, 0x7, 0xd22, 0x3, 0x7, 0x0, 0x9, 0x3, 0x200, 0x3, 0x401, 0x81, 0x4, 0x4, 0x34, 0x0, 0x7, 0x1423, 0x4, 0x8001, 0x6, 0x83, 0x3, 0x6, 0x9, 0x1, 0x3, 0xe7, 0x16c, 0x0, 0x10, 0x1, 0x8, 0x8000, 0x15be, 0x3, 0x0, 0x50, 0x9, 0x10001, 0x8, 0x1, 0x0, 0x1, 0x1, 0xb, 0xfffffffc, 0x0, 0x0, 0x2598a4d0, 0x3, 0x7, 0x5, 0x4, 0x1ff, 0x20000000, 0x4, 0x5, 0x1, 0x1, 0x1, 0x9a7, 0x1, 0x4, 0xff, 0x7ff, 0x0, 0x2, 0xf, 0x400, 0xef1b, 0x3ff, 0x3, 0xe3, 0x7, 0x6, 0x1, 0x5, 0xfffffff8, 0x6, 0x5, 0x8, 0x8, 0x1, 0x5, 0x0, 0x0, 0x2, 0x5, 0xb62, 0x5, 0xffff, 0x6, 0x9, 0x1, 0x800, 0x10, 0x7, 0x1, 0xfffffffb, 0x1ff, 0x3, 0x1, 0x4, 0x3, 0x22a, 0x8, 0x9, 0x9, 0x7, 0x4, 0xf951, 0xffffff27, 0x8, 0x6, 0x0, 0x67, 0x1, 0x5, 0x7f, 0x0, 0x800, 0x400, 0x6, 0xb8bb, 0x6, 0x8, 0x35c, 0x400, 0x4, 0xac, 0x1, 0x0, 0x200, 0x0, 0x9, 0x7, 0x7fffffff, 0x1, 0x2, 0x75bcc24b, 0xffff0da9, 0x1, 0x8, 0x2, 0xe0b0, 0x6, 0x2b24, 0xd, 0xa, 0x3, 0x9, 0xc19, 0x7026, 0x8, 0x3, 0x3, 0x3, 0x5, 0x7, 0x7, 0x5, 0x0, 0x14a6, 0x2, 0x3, 0x5, 0xf, 0x2, 0x2, 0xa3, 0x4, 0xd180, 0x6, 0xfc, 0x83f2, 0x9, 0x1, 0x0, 0x86, 0xa4, 0x2, 0x9, 0xea6d, 0x2, 0xfffffa04, 0x9, 0x7fffffff, 0x50, 0x8, 0xfffffffd, 0x8, 0xff, 0x5, 0x2, 0x2, 0xffffffff, 0x9, 0x3, 0x9b89, 0xd4, 0x7, 0x15b68069, 0x2, 0xf59b, 0x8, 0x4, 0x1, 0x4, 0x8000, 0x4, 0x4, 0x0, 0x6, 0x9, 0x5f1b, 0x1ff, 0x2, 0x4, 0x8b7c, 0x562, 0xd8, 0xffff8001, 0x4, 0x3a04, 0xfff00000, 0xd1e, 0x100, 0x0, 0x5, 0x1000000, 0x10001, 0x9, 0xc, 0x4, 0x1, 0xb152, 0x3, 0x5, 0xb, 0x91, 0x6, 0x46, 0x40000000, 0xa21, 0x6, 0x8, 0xa4, 0x100, 0x7fffffff, 0xb004, 0x7f, 0xf, 0x2, 0x0, 0x4, 0x9, 0x4, 0x8, 0xff, 0x401, 0x8, 0x9, 0x3fe, 0x5, 0x8001, 0x4, 0x29b, 0x1, 0x3ff, 0x7, 0x7ff, 0x7, 0xffffef2e, 0x5, 0x80, 0x8f000, 0x401, 0x7, 0xfdc00000, 0x6, 0x1000, 0xff, 0x8582, 0x10, 0x4, 0x7, 0x8b87, 0xa, 0x9, 0x4, 0x2, 0xfff, 0xffff, 0x7, 0x736b, 0x1, 0x8, 0xdd3, 0x9, 0x8, 0x0, 0xe7, 0x1, 0x4, 0x8, 0x1, 0xed, 0x3e, 0xa7b, 0x6, 0x6, 0x0, 0x4, 0x0, 0x6, 0x5, 0xb, 0xb804, 0x9, 0x1ff, 0xb, 0x1, 0xc6d5e4a, 0x1d, 0x4, 0x1, 0xffffffc0, 0xa, 0x100, 0x7, 0xdb4, 0xcf, 0x8, 0x1, 0x3, 0x1e61, 0x3, 0x72f, 0x6, 0x9, 0x4, 0x2, 0x0, 0x7, 0x0, 0x4, 0x0, 0xfff, 0x10001, 0x4, 0xcb, 0x9, 0x732, 0xea, 0x4, 0x8, 0x750d, 0x800, 0x5, 0x7fb, 0x10, 0x10001, 0x0, 0x2, 0xc57, 0x471bbcf5, 0x8, 0x9798, 0x5, 0x9, 0x0, 0xfffff001, 0x5, 0x3, 0x4, 0xf, 0x9, 0x9, 0x2, 0x779, 0x9, 0x1a, 0x9, 0xb, 0x0, 0x5, 0x3, 0xfc4, 0x4, 0x2, 0x2, 0x6, 0x0, 0xc, 0x19e6, 0x276c, 0x9, 0x3, 0x0, 0x3, 0x80000000, 0x7, 0x8001, 0x6, 0xb2, 0x0, 0xffff, 0x8000, 0x1000, 0x10000, 0xe, 0x2, 0x6, 0xfffffffe, 0x8, 0x0, 0x6, 0x1, 0x7, 0xf, 0xf016, 0x9, 0x3, 0xfffffab2, 0x4, 0x4dd2627b, 0x40, 0x100, 0xb, 0xfd6, 0x5ab, 0x962, 0x1, 0x6, 0x6, 0x9, 0x40, 0x7, 0x7, 0x5, 0x8, 0x6, 0x1, 0xd8, 0x48, 0x5, 0x7ff, 0xb36, 0x5, 0x866f, 0x0, 0x5, 0x100, 0x6b12, 0x6, 0x7, 0x8, 0x1, 0x8, 0x2, 0x55, 0x98, 0x7, 0xc, 0x8, 0x70f, 0x4, 0x0, 0x4, 0x1, 0x0, 0xe, 0x2, 0x7, 0x2, 0x7, 0x46d1, 0x7fff, 0x1, 0x9, 0x3, 0x3, 0xfffffffd, 0x76, 0x7, 0x7, 0x4, 0x2, 0x1, 0x1, 0x4, 0x1, 0x5, 0x2, 0x2, 0x800, 0x9, 0xa, 0x800, 0x0, 0x3, 0x4, 0xa1f, 0x0, 0x6, 0x2c, 0x9b, 0xed, 0xfffffff9, 0x2, 0x10001, 0xc36a, 0x6, 0x81, 0x3, 0x4, 0xa, 0x0, 0x7, 0x200, 0x6, 0x4, 0x3, 0xffff, 0x7, 0x81, 0x401, 0x2, 0x9, 0x529, 0xf76, 0x7fffffff, 0x3, 0x2, 0x5, 0x7b9fe774, 0x9, 0x1, 0xb7, 0xc, 0x8d, 0xa63, 0xaeca, 0xb8, 0x10000, 0x7, 0x27078cce, 0x5, 0x4c5, 0xc, 0x4, 0x6, 0x1ff, 0x8, 0x5, 0x1, 0x100000, 0x0, 0xe6b7, 0x10000, 0x10, 0xffff, 0xfffffffc, 0x84b, 0xfffffff4, 0x8990, 0x2, 0x401, 0x2, 0x1, 0x1, 0x5ea, 0xc0aa, 0x6, 0x1fa840d7, 0x5, 0x200, 0x2, 0x5, 0x400, 0x1, 0xb32d, 0xffff, 0x3, 0x9, 0x6bc, 0x7fff, 0x8000, 0x4, 0x80, 0x2f7, 0x7, 0x9, 0x40, 0x7, 0xde3, 0x7, 0xd, 0x9]}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0xf45c}, 0x7, 0x9, 0x6}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r8, 0x541b, 0x0) 9.204531072s ago: executing program 5 (id=5749): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffdf034}, {0x6}]}, 0x10) r7 = fcntl$dupfd(r5, 0x0, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4040060}, 0x40) ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000040)="7ef17527c5c0f635b818aa60aa81203703e5f2322a4f51d378be49dc5effbe") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r8, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082e", 0x26) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.229850783s ago: executing program 0 (id=5750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_io_uring_setup(0x17af, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) r8 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 7.061870207s ago: executing program 2 (id=5751): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1a, 0x4, 0x8, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x42) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21c", 0x2}, {0x0}], 0x3) getresuid(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000680)=[@mss, @mss={0x2, 0x3}, @timestamp, @mss={0x2, 0xffffffff}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x712, 0x0, 0xfffffffffffffd25) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 6.988373037s ago: executing program 1 (id=5753): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010004004146086016328dea800102030000d4510bfb5ba8dc4690d5b90d33b28388e0b632075957c8068922f1af75c6fa7ec301e0abeb6550efa0e28c7d19b24ba5af0c3e54c495f3c8093c157293e1591d1d7d34163249"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r1 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket(0x1e, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000000540)='./file0/../file0/file0\x00') syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x7fffffd, 0x0, 0x0, 0x81, 0x1000, 0xa0bb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffb, {0x0, 0x4, 0x7f, 0x1b7, 0xd51, 0x0, 0x0, 0x2, 0x0, 0xd000, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c1, 0x82fc, 0x1c, 0x0, 0x0) 6.307962749s ago: executing program 3 (id=5754): syz_open_dev$midi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="8907", 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x24008844, 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000494}, 0x91) socket(0x14, 0x80002, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 5.78083005s ago: executing program 1 (id=5755): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) r1 = socket$inet6(0xa, 0x6, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000002e40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="e0000000100021012abd7000fedbdf25647262675f6e6f70725f686d61635f73686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1c400000000000000000000000003000000000000000000000000000000000000000000000000000000000000240000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", r8, r9, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) 4.40834105s ago: executing program 2 (id=5756): syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r5 = mq_open(&(0x7f0000000040)='[@{!%,$,(&!!)@.\x00', 0x40, 0x144, &(0x7f0000000080)={0xfffffffffffffffc, 0x4d8, 0x9, 0xf48e}) r6 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002600)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000002740)={'veth1_vlan\x00', &(0x7f0000002640)=@ethtool_rxnfc={0x18, 0xa, 0xa983, {0xe, @tcp_ip6_spec={@local, @loopback, 0x4e23, 0x4e22, 0xf7}, {0x0, @random="f9cb85a30c7e", 0x7f, 0x7ff, [0xfffffffe, 0x3]}, @esp_ip6_spec={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x7}, {0x0, @link_local, 0x38, 0x1, [0xc00000, 0x1]}, 0x1000, 0x7fff}, 0x1, [0x4]}}) syz_genetlink_get_family_id$wireguard(&(0x7f00000027c0), r9) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002840)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x8080) syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r8}}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x4, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x4, 0x1, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x2df0, 0x0, 0x0, 0x0, 0x0) 3.758151037s ago: executing program 5 (id=5757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x4000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="040f"]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x1000}, @TCA_CODEL_TARGET={0xfffffffffffffff7, 0x1, 0x8001}]}}]}, 0x44}}, 0x40040) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) 3.608691302s ago: executing program 3 (id=5758): socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) readv(r1, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006300)=@newtaction={0x1098, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x1084, 0x1, [@m_xt={0x1080, 0xc, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0x1037, 0x6, "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"/4147}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1098}}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @cgroup_skb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(r3, 0xfffffffffffffff5, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x13, r6, 0x100000000) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x3f) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r4, &(0x7f0000000040)='2', 0x5ac, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) 3.535730507s ago: executing program 3 (id=5759): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903ec", @ANYBLOB="993843f55f"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) readv(r5, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000680)=""/73, 0x49}, {&(0x7f0000000800)=""/207, 0xf6}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000700)=""/14, 0xe}], 0x9) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 2.968734548s ago: executing program 1 (id=5760): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x20003) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) unshare(0x400) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x40084503, &(0x7f0000ffcffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x40000580) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da204020014977470102030109022b000100000000090400"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1c8, 0x2a8, 0x2a8, 0x1c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3, 0x2000000, 0x0, 0x1]}, {0xffffffffffffffff, [], 0x0, 0x6}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x6, 0x7, 0x5, 0x6], 0x6}, {0x0, [0x4, 0x4, 0x1, 0x0, 0x2], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffe, 0x2) 1.868995834s ago: executing program 0 (id=5761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x4, 0x7}}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x20041, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8081) 496.99552ms ago: executing program 5 (id=5763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, 0x0}]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f3000905020200020200000905820c88020000001d22"], 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000002c0)) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) r7 = epoll_create1(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0xfffffffd, &(0x7f0000006680)) r8 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000600)) ioctl$TCSETS(r8, 0x5402, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setuid(0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r9, 0x7289f000) pselect6(0x40, &(0x7f0000000040)={0xfffffffffffffffc, 0x7e20123c, 0x4, 0x8, 0x6, 0x8000000000000001, 0x3, 0xaac}, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7ff]}, 0x8}) 0s ago: executing program 3 (id=5764): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x5d7440, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x80}}, 0x4048884) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3, 0x4098f907, 0x3}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@local, {0x0, 0x800000000, 0x0, 0xfbfffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x7}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x34}}, 0xcbd7649f20e8e19d) kernel console output (not intermixed with test programs): 0 has no altsetting 0 [ 2417.368051][T18273] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2417.377306][T18273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.385510][T18273] usb 6-1: Product: syz [ 2417.389735][T18273] usb 6-1: Manufacturer: syz [ 2417.394722][T18273] usb 6-1: SerialNumber: syz [ 2417.402129][T18273] usb 6-1: config 0 descriptor?? [ 2417.411407][T18273] gs_usb 6-1:0.0: Required endpoints not found [ 2417.461986][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2417.584071][T24886] usb 4-1: USB disconnect, device number 116 [ 2417.690616][T18273] usb 1-1: USB disconnect, device number 121 [ 2417.708359][T28849] netlink: 'syz.3.5282': attribute type 1 has an invalid length. [ 2417.986525][T28858] usb usb8: usbfs: process 28858 (syz.5.5280) did not claim interface 0 before use [ 2418.013539][T28858] usb usb8: selecting invalid altsetting 2048 [ 2418.501984][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2419.541920][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2419.681928][T24886] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2419.841900][T24886] usb 4-1: Using ep0 maxpacket: 32 [ 2419.849365][T24886] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2419.868422][T24886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2419.877745][T24886] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2419.889999][T24886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.906942][T24886] usb 4-1: config 0 descriptor?? [ 2419.975117][ T5899] usb 6-1: USB disconnect, device number 87 [ 2420.071529][ T30] audit: type=1326 audit(1745413777.044:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2420.147086][ T30] audit: type=1326 audit(1745413777.074:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2420.171341][ T30] audit: type=1326 audit(1745413777.074:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2420.199486][ T30] audit: type=1326 audit(1745413777.074:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2420.260457][ T30] audit: type=1326 audit(1745413777.074:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2420.581919][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2420.606477][T24886] uclogic 0003:5543:0781.0069: ignoring exceeding usage max [ 2420.625130][T24886] uclogic 0003:5543:0781.0069: unbalanced collection at end of report description [ 2420.636967][T24886] uclogic 0003:5543:0781.0069: parse failed [ 2420.645398][T24886] uclogic 0003:5543:0781.0069: probe with driver uclogic failed with error -22 [ 2420.658837][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5297'. [ 2420.786186][T27890] usb 4-1: USB disconnect, device number 117 [ 2420.792583][T18273] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2421.081944][T18273] usb 1-1: device descriptor read/64, error -71 [ 2421.322026][T18273] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2421.481957][T18273] usb 1-1: device descriptor read/64, error -71 [ 2421.603465][T18273] usb usb1-port1: attempt power cycle [ 2421.621966][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2421.951922][T18273] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2421.974533][T18273] usb 1-1: device descriptor read/8, error -71 [ 2422.212115][T18273] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2422.238148][T18273] usb 1-1: device descriptor read/8, error -71 [ 2422.356447][T18273] usb usb1-port1: unable to enumerate USB device [ 2422.514601][T28932] netlink: 'syz.5.5305': attribute type 5 has an invalid length. [ 2422.539242][T28932] netlink: 'syz.5.5305': attribute type 5 has an invalid length. [ 2422.661969][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2422.708891][T28936] netlink: 'syz.3.5307': attribute type 1 has an invalid length. [ 2422.776080][T28936] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2422.787827][T28936] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2422.802439][T28936] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2422.811320][T28936] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2422.824965][T28936] bond1: (slave geneve2): making interface the new active one [ 2422.834140][T28936] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2422.868676][T28936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5307'. [ 2422.883690][T28936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2423.701987][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2424.741959][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2425.520317][T28982] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 2425.528136][T28982] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 2425.782439][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2426.821908][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2426.976460][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5324'. [ 2427.144313][ T30] audit: type=1326 audit(1745413784.114:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.172933][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5324'. [ 2427.184659][ T30] audit: type=1326 audit(1745413784.114:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.208212][ T30] audit: type=1326 audit(1745413784.124:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.245876][ T30] audit: type=1326 audit(1745413784.124:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.303887][ T30] audit: type=1326 audit(1745413784.124:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.347256][ T30] audit: type=1326 audit(1745413784.144:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.393529][ T30] audit: type=1326 audit(1745413784.144:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.417542][ T30] audit: type=1326 audit(1745413784.144:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.466865][ T30] audit: type=1326 audit(1745413784.144:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.523533][ T30] audit: type=1326 audit(1745413784.144:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29008 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2427.681935][T23774] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2427.861952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2428.111241][T23774] usb 4-1: config 0 has no interfaces? [ 2428.127982][T23774] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2428.152277][T23774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.175415][T23774] usb 4-1: Product: syz [ 2428.185855][T23774] usb 4-1: Manufacturer: syz [ 2428.198924][T23774] usb 4-1: SerialNumber: syz [ 2428.237872][T23774] usb 4-1: config 0 descriptor?? [ 2428.494067][T29013] AppArmor: change_hat: Invalid input '0x000000' [ 2428.911930][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2429.254329][T29039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5334'. [ 2429.941945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2430.347781][T23774] usb 4-1: USB disconnect, device number 118 [ 2430.981938][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2431.847507][T29069] netlink: 'syz.2.5344': attribute type 4 has an invalid length. [ 2431.896689][T29070] netlink: 'syz.2.5344': attribute type 4 has an invalid length. [ 2432.021918][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2433.061931][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2434.102052][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2435.141906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2435.192267][T23774] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2435.329119][T29125] netlink: 'syz.0.5360': attribute type 10 has an invalid length. [ 2435.337873][T29125] batman_adv: batadv0: Removing interface: dummy0 [ 2435.362304][T23774] usb 4-1: Using ep0 maxpacket: 32 [ 2435.387680][T23774] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.37 [ 2435.408335][T23774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.427488][T24886] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2435.432173][T23774] usb 4-1: Product: syz [ 2435.439225][T23774] usb 4-1: Manufacturer: syz [ 2435.457799][T23774] usb 4-1: SerialNumber: syz [ 2435.481894][T23774] usb 4-1: config 0 descriptor?? [ 2435.497943][T23774] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2435.594504][T24886] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2435.605357][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.616182][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.625410][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.641910][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.650997][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.665512][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.674808][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.698920][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.709961][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.720281][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.729694][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.742677][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.750805][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.765619][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.774771][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.791052][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.799718][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.814181][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.826456][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.841275][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.853681][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.868689][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.880296][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.898521][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.907632][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.922896][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.936449][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.950530][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2435.961953][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.975744][T24886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2435.984857][T24886] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2436.003664][T24886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2436.015073][T24886] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2436.026341][T24886] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2436.038478][T24886] usb 6-1: Product: syz [ 2436.046060][T24886] usb 6-1: Manufacturer: syz [ 2436.050796][T24886] usb 6-1: SerialNumber: syz [ 2436.060723][T24886] usb 6-1: config 0 descriptor?? [ 2436.070725][T24886] yurex 6-1:0.0: Could not find endpoints [ 2436.120922][T29138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2436.131552][T29138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.191921][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2436.279015][T24886] usb 6-1: USB disconnect, device number 88 [ 2437.221969][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2437.282244][T18273] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2437.381996][T27890] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2437.432231][T18273] usb 6-1: Using ep0 maxpacket: 32 [ 2437.439184][T18273] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2437.447386][T18273] usb 6-1: config 0 has no interface number 0 [ 2437.453833][T18273] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2437.463731][T18273] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2437.473017][T18273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.481148][T18273] usb 6-1: Product: syz [ 2437.485485][T18273] usb 6-1: Manufacturer: syz [ 2437.490111][T18273] usb 6-1: SerialNumber: syz [ 2437.498144][T18273] usb 6-1: config 0 descriptor?? [ 2437.537545][T27890] usb 1-1: config 0 has no interfaces? [ 2437.545554][T27890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2437.555229][T27890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.563445][T27890] usb 1-1: Product: syz [ 2437.567666][T27890] usb 1-1: Manufacturer: syz [ 2437.572540][T27890] usb 1-1: SerialNumber: syz [ 2437.579752][T27890] usb 1-1: config 0 descriptor?? [ 2438.128774][T23774] gspca_stk1135: reg_w 0x350 err -71 [ 2438.138008][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.144874][T23774] gspca_stk1135: Sensor write failed [ 2438.150249][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.156957][T23774] gspca_stk1135: Sensor write failed [ 2438.162780][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.169142][T23774] gspca_stk1135: Sensor read failed [ 2438.175053][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.181423][T23774] gspca_stk1135: Sensor read failed [ 2438.187060][T23774] gspca_stk1135: Detected sensor type unknown (0x0) [ 2438.193927][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.200307][T23774] gspca_stk1135: Sensor read failed [ 2438.205842][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.212529][T23774] gspca_stk1135: Sensor read failed [ 2438.217784][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.224311][T23774] gspca_stk1135: Sensor write failed [ 2438.229717][T23774] gspca_stk1135: serial bus timeout: status=0x00 [ 2438.236140][T23774] gspca_stk1135: Sensor write failed [ 2438.241534][T23774] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 2438.254736][T23774] usb 4-1: USB disconnect, device number 119 [ 2438.262205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2438.740799][T29166] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5376'. [ 2439.131919][T27890] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2439.283605][T27890] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.298159][T27890] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 2439.307388][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2439.322070][T27890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.392029][T27890] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2439.417509][T15867] udevd[15867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2439.528467][T29170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.579317][T29170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2439.655616][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2439.655632][ T30] audit: type=1326 audit(1745413796.634:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29169 comm="syz.1.5378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72a1b8e969 code=0x0 [ 2439.721311][T27890] usb 4-1: USB disconnect, device number 120 [ 2440.112200][T23774] usb 1-1: USB disconnect, device number 126 [ 2440.139111][T18273] f81534 6-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 2440.150857][T18273] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2440.158258][T18273] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2440.169686][T18273] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2440.183168][T18273] usb 6-1: USB disconnect, device number 89 [ 2440.211113][T29176] netlink: 'syz.0.5379': attribute type 1 has an invalid length. [ 2440.250511][T29176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2440.276801][T29176] bond5: (slave gretap1): making interface the new active one [ 2440.286097][T29176] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 2440.318616][T29176] bond5: (slave bridge2): Enslaving as an active interface with a down link [ 2440.341945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2440.480308][ T30] audit: type=1326 audit(1745413797.454:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29182 comm="syz.3.5382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x0 [ 2440.585259][ T30] audit: type=1326 audit(1745413797.564:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29182 comm="syz.3.5382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x0 [ 2440.681166][T29189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5384'. [ 2440.828173][ T30] audit: type=1326 audit(1745413797.804:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2440.887858][ T30] audit: type=1326 audit(1745413797.804:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2440.917297][ T30] audit: type=1326 audit(1745413797.804:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2440.940244][ T30] audit: type=1326 audit(1745413797.804:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2440.963213][ T30] audit: type=1326 audit(1745413797.804:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2440.986367][ T30] audit: type=1326 audit(1745413797.804:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2441.025455][ T30] audit: type=1326 audit(1745413797.804:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29195 comm="syz.5.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5378e969 code=0x7ffc0000 [ 2441.381962][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2441.797954][T29211] lo: entered allmulticast mode [ 2442.142459][T18273] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2442.188617][T29227] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5394'. [ 2442.265763][T29221] loop6: detected capacity change from 0 to 67108927 [ 2442.301012][T15867] buffer_io_error: 1150 callbacks suppressed [ 2442.301024][T15867] Buffer I/O error on dev loop6, logical block 8388592, async page read [ 2442.315785][T18273] usb 4-1: Using ep0 maxpacket: 16 [ 2442.341161][T18273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2442.352136][T18273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2442.367995][T18273] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2442.377537][T18273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.401984][T18273] usb 4-1: Product: syz [ 2442.406463][T18273] usb 4-1: Manufacturer: syz [ 2442.411492][T18273] usb 4-1: SerialNumber: syz [ 2442.422014][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2442.734157][T18273] usb 4-1: 0:2 : does not exist [ 2442.764475][T18273] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2442.823273][T29229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2442.856062][T18273] usb 4-1: USB disconnect, device number 121 [ 2443.004370][T29229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.052899][T15867] udevd[15867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2443.183437][T15867] Buffer I/O error on dev loop6, logical block 8388592, async page read [ 2443.461961][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2444.501977][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2444.618621][T29252] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2445.271901][T24886] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2445.425869][T24886] usb 1-1: Using ep0 maxpacket: 32 [ 2445.433119][T24886] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2445.441537][T24886] usb 1-1: config 0 has no interface number 0 [ 2445.450345][T24886] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2445.459913][T24886] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2445.509173][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.526449][T24886] usb 1-1: Product: syz [ 2445.530988][T24886] usb 1-1: Manufacturer: syz [ 2445.536517][T24886] usb 1-1: SerialNumber: syz [ 2445.542001][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2445.545776][T24886] usb 1-1: config 0 descriptor?? [ 2445.558966][T24886] smsc75xx v1.0.0 [ 2445.835411][T29258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5403'. [ 2445.860612][T29258] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2446.582055][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2447.622029][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2448.387237][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2448.387256][ T30] audit: type=1326 audit(1745413805.364:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29293 comm="syz.3.5415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x0 [ 2448.500155][T29296] input: syz1 as /devices/virtual/input/input99 [ 2448.661930][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2449.285385][T24886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2449.311333][T24886] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2449.366485][T24886] usb 1-1: USB disconnect, device number 127 [ 2449.702036][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2450.752015][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2450.765411][T29332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2450.808443][T29332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2451.042439][T18273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2451.181907][T24886] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2451.197365][T18273] usb 1-1: config 0 has no interfaces? [ 2451.208134][T18273] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2451.217957][T18273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.226992][T18273] usb 1-1: Product: syz [ 2451.231384][T18273] usb 1-1: Manufacturer: syz [ 2451.236133][T18273] usb 1-1: SerialNumber: syz [ 2451.245813][T18273] usb 1-1: config 0 descriptor?? [ 2451.331841][T24886] usb 4-1: Using ep0 maxpacket: 16 [ 2451.338670][T24886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2451.350242][T24886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2451.360356][T24886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2451.376602][T24886] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2451.387718][T24886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.400281][T24886] usb 4-1: config 0 descriptor?? [ 2451.410559][T24886] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input100 [ 2451.426027][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.435113][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.444079][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.461206][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.514483][ T5985] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.527557][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.535646][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.552690][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.570607][ T5197] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2451.632480][T29336] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 2451.652298][T23774] usb 4-1: USB disconnect, device number 122 [ 2451.781935][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2452.641988][T24886] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2452.832087][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2452.832193][T24886] usb 6-1: Using ep0 maxpacket: 32 [ 2452.978947][T24886] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2452.996279][T24886] usb 6-1: config 0 has no interface number 0 [ 2453.008706][T24886] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2453.048362][T24886] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2453.062235][T24886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.104320][T24886] usb 6-1: Product: syz [ 2453.111850][T24886] usb 6-1: Manufacturer: syz [ 2453.131059][T24886] usb 6-1: SerialNumber: syz [ 2453.154625][T24886] usb 6-1: config 0 descriptor?? [ 2453.178672][T24886] smsc75xx v1.0.0 [ 2453.453422][T29356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5432'. [ 2453.487109][T29356] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2453.758464][T26179] usb 1-1: USB disconnect, device number 2 [ 2453.862026][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2454.362029][T23774] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2454.662599][T23774] usb 4-1: Using ep0 maxpacket: 16 [ 2454.669574][T23774] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2454.678695][T23774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.688986][T23774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2454.709096][T23774] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2454.718477][T23774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.729206][T23774] usb 4-1: Product: syz [ 2454.736507][T23774] usb 4-1: Manufacturer: syz [ 2454.741208][T23774] usb 4-1: SerialNumber: syz [ 2454.901987][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2455.264492][T23774] usb 4-1: 0:2 : does not exist [ 2455.291344][T24886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2455.338101][T24886] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 2455.381301][T24886] usb 6-1: USB disconnect, device number 90 [ 2455.635837][T29378] kvm: kvm [29377]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5100000800 [ 2455.657497][T29378] kvm: kvm [29377]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd200000000 [ 2455.941964][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2456.360605][T23774] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 2456.405007][T23774] usb 4-1: USB disconnect, device number 123 [ 2456.441207][ T5985] udevd[5985]: setting owner of /dev/bus/usb/004/123 to uid=0, gid=0 failed: No such file or directory [ 2456.642232][T15867] udevd[15867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2456.991928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2457.062434][T18273] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2457.234370][T18273] usb 6-1: Using ep0 maxpacket: 16 [ 2457.242528][T18273] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2457.250780][T18273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2457.265628][T18273] usb 6-1: config 0 has no interface number 0 [ 2457.272321][T18273] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2457.287252][T18273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.309196][T18273] usb 6-1: config 0 descriptor?? [ 2457.325546][T18273] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2457.332690][T18273] usb 6-1: No valid video chain found. [ 2458.021950][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2458.275919][T29398] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 2458.722018][T24886] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2458.952229][T24886] usb 4-1: config 0 has no interfaces? [ 2458.960643][T24886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2458.972418][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.985751][T24886] usb 4-1: Product: syz [ 2458.990869][T24886] usb 4-1: Manufacturer: syz [ 2458.998410][T24886] usb 4-1: SerialNumber: syz [ 2459.010845][T24886] usb 4-1: config 0 descriptor?? [ 2459.062201][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2459.513714][T29421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2459.522533][T29421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2459.562513][T24886] usb 6-1: USB disconnect, device number 91 [ 2460.101906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2460.772029][T29436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2460.792658][T24886] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2460.802786][T24886] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2461.022964][T29436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2461.141921][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2461.215598][T24886] usb 4-1: USB disconnect, device number 124 [ 2461.763026][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'. [ 2462.181998][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2462.266466][T29458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2462.454146][T29458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2462.491867][T18273] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2462.641930][T18273] usb 6-1: Using ep0 maxpacket: 16 [ 2462.657180][T18273] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2462.695328][T18273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.728127][T18273] usb 6-1: config 0 has no interface number 0 [ 2462.745276][T18273] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2462.777083][T18273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.835036][T18273] usb 6-1: config 0 descriptor?? [ 2462.919725][T18273] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2462.995271][T18273] usb 6-1: No valid video chain found. [ 2463.221979][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2464.051860][T24886] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2464.227379][T24886] usb 4-1: Using ep0 maxpacket: 16 [ 2464.242757][T24886] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2464.261344][T24886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2464.261933][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2464.289388][T24886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2464.310826][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.320570][T24886] usb 4-1: Product: syz [ 2464.326818][T24886] usb 4-1: Manufacturer: syz [ 2464.399763][T24886] usb 4-1: SerialNumber: syz [ 2464.714698][T24886] usb 4-1: 0:2 : does not exist [ 2464.725656][T24886] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2464.754098][T24886] usb 4-1: USB disconnect, device number 125 [ 2464.983295][T15867] udevd[15867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2465.301915][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2465.390861][ T30] audit: type=1326 audit(1745413822.364:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.438034][ T30] audit: type=1326 audit(1745413822.414:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.489071][ T30] audit: type=1326 audit(1745413822.414:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.547613][ T30] audit: type=1326 audit(1745413822.414:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.570373][ T30] audit: type=1326 audit(1745413822.414:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.609582][ T30] audit: type=1326 audit(1745413822.414:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.636147][ T30] audit: type=1326 audit(1745413822.414:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.665284][ T30] audit: type=1326 audit(1745413822.414:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.2.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3ff8e969 code=0x7ffc0000 [ 2465.756610][ T5899] usb 6-1: USB disconnect, device number 92 [ 2466.341914][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2466.442304][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2466.601933][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 2466.626111][ T5899] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 2466.646746][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.676756][ T5899] usb 1-1: config 0 has no interface number 0 [ 2466.695098][ T5899] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2466.726771][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.806935][ T5899] usb 1-1: config 0 descriptor?? [ 2466.896269][ T5899] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 2466.918376][ T5899] usb 1-1: No valid video chain found. [ 2467.232280][T18273] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2467.386417][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2467.411201][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.417558][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.428588][T18273] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2467.442043][T18273] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2467.462450][T18273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2467.482648][T18273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2467.527908][T18273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2467.605108][T18273] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2467.626910][T18273] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2467.653932][T18273] usb 4-1: Product: syz [ 2467.670803][T18273] usb 4-1: Manufacturer: syz [ 2467.690756][T18273] cdc_wdm 4-1:1.0: skipping garbage [ 2467.709303][T18273] cdc_wdm 4-1:1.0: skipping garbage [ 2467.722455][T18273] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2467.738657][T18273] cdc_wdm 4-1:1.0: Unknown control protocol [ 2467.997516][T18273] usb 4-1: USB disconnect, device number 126 [ 2468.421922][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2468.846881][T18273] usb 1-1: USB disconnect, device number 3 [ 2468.921932][T27890] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 2469.098006][T27890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2469.113110][T27890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2469.131514][T27890] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2469.168101][T27890] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2469.185114][T27890] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2469.206062][T27890] usb 6-1: Manufacturer: syz [ 2469.226530][T27890] usb 6-1: config 0 descriptor?? [ 2469.311844][T18273] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2469.461893][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2469.469088][T18273] usb 1-1: Using ep0 maxpacket: 16 [ 2469.501170][T18273] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2469.524992][T18273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2469.559350][T18273] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2469.583814][T18273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.608278][T18273] usb 1-1: Product: syz [ 2469.628720][T18273] usb 1-1: Manufacturer: syz [ 2469.643638][T18273] usb 1-1: SerialNumber: syz [ 2469.887627][T27890] usb 6-1: USB disconnect, device number 93 [ 2469.918356][T18273] usb 1-1: 0:2 : does not exist [ 2469.949173][T18273] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2470.030237][T18273] usb 1-1: USB disconnect, device number 4 [ 2470.125760][T29535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.146037][T29535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2470.502021][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2471.541994][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2471.851944][T18273] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2472.013496][T18273] usb 6-1: Using ep0 maxpacket: 16 [ 2472.024017][T18273] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2472.053177][T18273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2472.096304][T18273] usb 6-1: config 0 has no interface number 0 [ 2472.120006][T18273] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2472.145834][T18273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.242154][T18273] usb 6-1: config 0 descriptor?? [ 2472.256255][T18273] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2472.271872][T18273] usb 6-1: No valid video chain found. [ 2472.313038][ T30] audit: type=1326 audit(1745413829.284:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee2172ab39 code=0x7ffc0000 [ 2472.359813][ T30] audit: type=1326 audit(1745413829.284:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee2172ab39 code=0x7ffc0000 [ 2472.429740][ T30] audit: type=1326 audit(1745413829.284:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x7ffc0000 [ 2472.545982][ T30] audit: type=1326 audit(1745413829.294:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee2172ab39 code=0x7ffc0000 [ 2472.572089][ T30] audit: type=1326 audit(1745413829.294:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x7ffc0000 [ 2472.594714][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2472.612583][ T30] audit: type=1326 audit(1745413829.294:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x7ffc0000 [ 2472.665442][ T30] audit: type=1326 audit(1745413829.314:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee2172ab39 code=0x7ffc0000 [ 2472.711464][ T30] audit: type=1326 audit(1745413829.314:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x7ffc0000 [ 2472.785240][ T30] audit: type=1326 audit(1745413829.314:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2178e969 code=0x7ffc0000 [ 2472.855670][ T30] audit: type=1326 audit(1745413829.314:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29564 comm="syz.3.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee2172ab39 code=0x7ffc0000 [ 2473.621924][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2474.285426][T26179] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2474.502078][T26179] usb 4-1: Using ep0 maxpacket: 32 [ 2474.511720][T26179] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2474.552104][T26179] usb 4-1: config 0 has no interface number 0 [ 2474.561094][T26179] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2474.571247][T26179] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2474.583702][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.593601][T26179] usb 4-1: Product: syz [ 2474.597911][T26179] usb 4-1: Manufacturer: syz [ 2474.605951][T26179] usb 4-1: SerialNumber: syz [ 2474.618880][T26179] usb 4-1: config 0 descriptor?? [ 2474.631305][T26179] smsc75xx v1.0.0 [ 2474.661883][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2474.976782][ T5899] usb 6-1: USB disconnect, device number 94 [ 2475.630382][T29578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.701953][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2475.722385][T29578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2476.741933][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2476.935397][T26179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2476.992778][T26179] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2477.026991][T26179] usb 4-1: USB disconnect, device number 127 [ 2477.125163][T29601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5497'. [ 2477.156858][T29601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 2477.177387][T29601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.198938][T29601] dummy0: entered promiscuous mode [ 2477.214303][T29601] dummy0: left promiscuous mode [ 2477.781913][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2477.811878][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2478.010733][ T5899] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.056604][ T5899] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2478.090530][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2478.111220][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.404255][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2478.452051][ T5899] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2478.550049][T15867] udevd[15867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2478.821908][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2478.881947][T29605] vlan2: entered promiscuous mode [ 2478.887602][T29605] bond0: entered promiscuous mode [ 2478.893254][T29605] bond_slave_0: entered promiscuous mode [ 2478.900166][T29605] bond_slave_1: entered promiscuous mode [ 2479.861898][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2480.262962][T29619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2480.286186][T29619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2480.901926][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2481.232144][T27890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2481.394863][T27890] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2481.409946][T27890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2481.419560][T27890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.428376][T27890] usb 1-1: Product: syz [ 2481.432794][T27890] usb 1-1: Manufacturer: syz [ 2481.437445][T27890] usb 1-1: SerialNumber: syz [ 2481.658530][T27890] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2481.941900][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2481.998535][T18273] usb 4-1: USB disconnect, device number 2 [ 2482.981925][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2483.663517][ T5899] usb 1-1: USB disconnect, device number 5 [ 2483.674691][ T5899] usblp0: removed [ 2484.021941][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2484.520791][T29670] netlink: 'syz.3.5516': attribute type 39 has an invalid length. [ 2484.825573][T14575] Bluetooth: hci3: command 0x0406 tx timeout [ 2485.061906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2485.441963][T18273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2485.651995][T18273] usb 4-1: Using ep0 maxpacket: 8 [ 2486.012054][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2486.111911][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2486.174625][ T5899] usb 1-1: config 0 has no interfaces? [ 2486.191495][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2486.208033][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.222113][ T5899] usb 1-1: Product: syz [ 2486.230424][ T5899] usb 1-1: Manufacturer: syz [ 2486.235663][ T5899] usb 1-1: SerialNumber: syz [ 2486.262867][ T5899] usb 1-1: config 0 descriptor?? [ 2486.490783][T29694] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2486.562768][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2486.594261][ T30] kauditd_printk_skb: 781 callbacks suppressed [ 2486.594279][ T30] audit: type=1800 audit(1745413843.574:3886): pid=29697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5522" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2486.626554][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2486.635735][T26179] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2486.653309][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2486.815480][T26179] usb 6-1: Using ep0 maxpacket: 32 [ 2486.838188][T26179] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2486.852393][T26179] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2486.861560][T26179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.871581][T26179] usb 6-1: Product: syz [ 2486.875841][T26179] usb 6-1: Manufacturer: syz [ 2486.889667][T26179] usb 6-1: SerialNumber: syz [ 2486.905810][T26179] usb 6-1: config 0 descriptor?? [ 2486.983258][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.003094][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.017497][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.141906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2487.194195][T29702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2487.238968][T29702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2487.353857][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.367491][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.394051][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5519'. [ 2487.421047][T26179] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 2487.429052][T26179] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 2487.568786][T29706] fuse: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000' [ 2488.181904][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2488.917526][T21244] usb 1-1: USB disconnect, device number 6 [ 2489.068967][T26179] usb 6-1: USB disconnect, device number 95 [ 2489.221880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2489.467803][T18273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2489.476146][T18273] usb 4-1: no configurations [ 2489.483583][T18273] usb 4-1: can't read configurations, error -22 [ 2489.801871][T26179] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2490.051819][T26179] usb 6-1: Using ep0 maxpacket: 16 [ 2490.074763][T26179] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 2490.087895][T26179] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.133889][T26179] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 2490.144315][T26179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.163622][T26179] usb 6-1: Product: syz [ 2490.184554][T26179] usb 6-1: Manufacturer: syz [ 2490.199364][T26179] usb 6-1: SerialNumber: syz [ 2490.222534][T26179] usb 6-1: config 0 descriptor?? [ 2490.261911][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2490.336804][T26179] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2490.852031][T26179] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2490.858973][T26179] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2491.059837][T29731] xt_cgroup: invalid path, errno=-2 [ 2491.066700][T29731] usb usb8: usbfs: process 29731 (syz.3.5531) did not claim interface 7 before use [ 2491.301906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2491.531834][T21244] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2491.691039][T21244] usb 4-1: config 0 has no interfaces? [ 2491.699321][T21244] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2491.716864][T21244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.728110][T21244] usb 4-1: Product: syz [ 2491.732636][T21244] usb 4-1: Manufacturer: syz [ 2491.738062][T21244] usb 4-1: SerialNumber: syz [ 2491.755665][T21244] usb 4-1: config 0 descriptor?? [ 2491.890634][T29728] dns_resolver: Unsupported server list version (0) [ 2492.341904][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2493.381898][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2493.493298][T18273] usb 6-1: USB disconnect, device number 96 [ 2493.902111][T21244] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2494.102239][T21244] usb 1-1: Using ep0 maxpacket: 16 [ 2494.113960][T21244] usb 1-1: config 1 has an invalid interface number: 253 but max is 2 [ 2494.141813][T21244] usb 1-1: config 1 has an invalid interface number: 87 but max is 2 [ 2494.180469][T21244] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2494.190550][T21244] usb 1-1: config 1 has an invalid interface number: 111 but max is 2 [ 2494.202999][T21244] usb 1-1: config 1 has no interface number 0 [ 2494.211567][T21244] usb 1-1: config 1 has no interface number 1 [ 2494.220765][T21244] usb 1-1: config 1 has no interface number 2 [ 2494.237031][T26179] usb 4-1: USB disconnect, device number 5 [ 2494.241998][T21244] usb 1-1: config 1 interface 253 altsetting 7 bulk endpoint 0xF has invalid maxpacket 16 [ 2494.257648][T21244] usb 1-1: config 1 interface 253 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 2494.275523][T21244] usb 1-1: config 1 interface 253 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2494.292274][T24886] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2494.320983][T21244] usb 1-1: config 1 interface 253 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2494.336216][T21244] usb 1-1: config 1 interface 253 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 2494.351539][T21244] usb 1-1: config 1 interface 253 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2494.372165][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 2494.391883][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 2494.407971][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 2494.421894][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2494.430521][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 2494.442391][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 2494.460006][T21244] usb 1-1: config 1 interface 87 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 2494.476851][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 2494.488108][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0x8E, skipping [ 2494.506282][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 2494.524129][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 2494.551660][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 2494.602649][T24886] usb 6-1: Using ep0 maxpacket: 8 [ 2494.611016][T21244] usb 1-1: config 1 interface 111 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2494.626845][T21244] usb 1-1: config 1 interface 111 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 2494.661556][T21244] usb 1-1: config 1 interface 111 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 2494.690302][T21244] usb 1-1: config 1 interface 253 has no altsetting 0 [ 2494.719296][T21244] usb 1-1: config 1 interface 87 has no altsetting 0 [ 2494.729418][T21244] usb 1-1: config 1 interface 111 has no altsetting 0 [ 2494.887020][T21244] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=b5.3e [ 2494.896374][T21244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.904504][T21244] usb 1-1: Product: syz [ 2494.908700][T21244] usb 1-1: Manufacturer: syz [ 2494.913465][T21244] usb 1-1: SerialNumber: syz [ 2494.984101][T29756] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2495.006076][T27890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2495.212017][T27890] usb 4-1: Using ep0 maxpacket: 16 [ 2495.244873][T27890] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2495.274009][T27890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.298753][T27890] usb 4-1: config 0 has no interface number 0 [ 2495.313647][T27890] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2495.373122][T27890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.404662][T27890] usb 4-1: config 0 descriptor?? [ 2495.433363][T27890] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 2495.443715][T27890] usb 4-1: No valid video chain found. [ 2495.461916][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2495.484638][T29756] netlink: 'syz.0.5537': attribute type 6 has an invalid length. [ 2495.499884][T29756] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5537'. [ 2496.501984][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2496.647171][T21244] aqc111 1-1:1.253: probe with driver aqc111 failed with error -22 [ 2496.693172][T21244] aqc111 1-1:1.111: probe with driver aqc111 failed with error -22 [ 2496.710363][T21244] usb 1-1: USB disconnect, device number 7 [ 2497.098419][T24886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2497.106949][T24886] usb 6-1: no configurations [ 2497.114983][T24886] usb 6-1: can't read configurations, error -22 [ 2497.487405][T23774] usb 4-1: USB disconnect, device number 6 [ 2497.531879][T24886] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2497.541883][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2497.610020][T29794] dummy0: entered promiscuous mode [ 2497.623564][T29794] vlan2: entered promiscuous mode [ 2497.724772][T24886] usb 6-1: Using ep0 maxpacket: 8 [ 2497.738966][T24886] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2497.750057][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2497.767909][T24886] usb 6-1: config 0 has no interface number 0 [ 2497.781005][T24886] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2497.797031][T24886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.820634][T24886] usb 6-1: Product: syz [ 2497.826944][T24886] usb 6-1: Manufacturer: syz [ 2497.836659][T24886] usb 6-1: SerialNumber: syz [ 2497.849386][T24886] usb 6-1: config 0 descriptor?? [ 2498.012046][T23774] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2498.182071][T24886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2498.245535][T23774] usb 1-1: Using ep0 maxpacket: 8 [ 2498.423721][T24886] usb 4-1: config 0 has no interfaces? [ 2498.438264][T24886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2498.526670][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.545127][T24886] usb 4-1: Product: syz [ 2498.565116][T24886] usb 4-1: Manufacturer: syz [ 2498.581911][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2498.602386][T24886] usb 4-1: SerialNumber: syz [ 2498.663054][T24886] usb 4-1: config 0 descriptor?? [ 2499.621897][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2500.247192][T27890] usb 6-1: USB disconnect, device number 98 [ 2500.661883][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2501.056250][T29813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5551'. [ 2501.078865][T29813] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2501.429179][T27890] usb 4-1: USB disconnect, device number 7 [ 2501.542046][T21244] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2501.701911][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2501.709264][T21244] usb 6-1: Using ep0 maxpacket: 16 [ 2501.717262][T21244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2501.747467][T21244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2501.789316][T21244] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2501.821481][T21244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.868840][T21244] usb 6-1: config 0 descriptor?? [ 2502.741909][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2503.104336][T23774] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2503.113689][T23774] usb 1-1: no configurations [ 2503.119265][T23774] usb 1-1: can't read configurations, error -22 [ 2503.791908][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2503.819821][T29842] ip6t_rpfilter: unknown options [ 2504.069044][T21244] usbhid 6-1:0.0: can't add hid device: -71 [ 2504.080730][T21244] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2504.098548][T21244] usb 6-1: USB disconnect, device number 99 [ 2504.555916][T29852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.821862][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2504.986650][T29852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2505.471920][T21244] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2505.622261][T21244] usb 6-1: Using ep0 maxpacket: 16 [ 2505.629404][T21244] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2505.665886][T21244] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2505.693201][T21244] usb 6-1: config 0 has no interface number 0 [ 2505.699390][T21244] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2505.712798][T21244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.725657][T21244] usb 6-1: config 0 descriptor?? [ 2505.735726][T21244] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2505.746072][T21244] usb 6-1: No valid video chain found. [ 2505.861885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2506.212132][T21244] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2506.416935][T21244] usb 4-1: config 0 has no interfaces? [ 2506.428183][T21244] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2506.464932][T21244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.489026][T21244] usb 4-1: Product: syz [ 2506.521921][T21244] usb 4-1: Manufacturer: syz [ 2506.531258][T21244] usb 4-1: SerialNumber: syz [ 2506.546888][T21244] usb 4-1: config 0 descriptor?? [ 2506.901902][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2507.941884][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2508.579792][T24886] usb 6-1: USB disconnect, device number 100 [ 2508.761095][T23774] usb 4-1: USB disconnect, device number 8 [ 2508.981979][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2509.282077][T21244] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2509.290435][T23774] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2509.443143][T21244] usb 6-1: Using ep0 maxpacket: 8 [ 2509.450128][T21244] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2509.461511][T21244] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2509.472974][T21244] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2509.491157][T21244] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2509.506252][T21244] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2509.521285][T21244] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2509.554911][T23774] usb 4-1: Using ep0 maxpacket: 32 [ 2509.562828][T21244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.584840][T23774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.603068][T23774] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2509.635662][T18273] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2509.664103][T23774] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2509.673389][T23774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.695886][T23774] usb 4-1: config 0 descriptor?? [ 2509.959374][T21244] usb 6-1: usb_control_msg returned -32 [ 2509.971173][T18273] usb 1-1: Using ep0 maxpacket: 16 [ 2509.977986][T21244] usbtmc 6-1:16.0: can't read capabilities [ 2509.992337][T18273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 2510.019939][T18273] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2510.030218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2510.085168][T18273] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2510.112898][T18273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.133329][T18273] usb 1-1: Product: syz [ 2510.142231][T18273] usb 1-1: Manufacturer: syz [ 2510.146829][T18273] usb 1-1: SerialNumber: syz [ 2510.166791][T18273] usb 1-1: config 0 descriptor?? [ 2510.178712][T29889] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2510.344367][T18273] hub 1-1:0.0: bad descriptor, ignoring hub [ 2510.371804][T18273] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2510.481051][T18273] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input102 [ 2511.017621][T29898] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned da [ 2511.061947][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2511.088916][T29898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2511.104201][T29898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2512.101995][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2512.274802][T24886] usb 6-1: USB disconnect, device number 101 [ 2512.576894][T29888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.655226][T18273] usb 4-1: USB disconnect, device number 9 [ 2512.672219][T26179] usb 1-1: USB disconnect, device number 10 [ 2512.898833][T29932] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2513.142014][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2513.501840][T26179] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2513.687895][T26179] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2513.706052][T26179] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2513.719798][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2513.735580][T26179] usb 4-1: Product: syz [ 2513.748612][T26179] usb 4-1: Manufacturer: syz [ 2513.759269][T26179] usb 4-1: SerialNumber: syz [ 2514.181941][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2514.342512][T23774] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2514.464487][T26179] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2514.501974][T23774] usb 1-1: Using ep0 maxpacket: 16 [ 2514.526190][T23774] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 2514.541292][T23774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.562317][T23774] usb 1-1: config 0 has no interface number 0 [ 2514.582752][T23774] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2514.612144][T23774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.626211][T23774] usb 1-1: config 0 descriptor?? [ 2514.662544][T23774] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 2514.701681][T23774] usb 1-1: No valid video chain found. [ 2514.873281][ C1] usblp0: nonzero write bulk status received: -71 [ 2514.886997][T26179] usb 4-1: USB disconnect, device number 10 [ 2514.960694][T29951] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5584'. [ 2515.099659][T29937] usblp0: removed [ 2515.221943][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2515.223777][T29955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'. [ 2515.252095][T29955] macvtap1: entered promiscuous mode [ 2515.259603][T29955] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2516.049213][T29962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5587'. [ 2516.087561][T29962] macvtap1: entered promiscuous mode [ 2516.093166][T29962] batadv0: entered promiscuous mode [ 2516.107663][T29962] macvtap1: entered allmulticast mode [ 2516.118347][T29962] batadv0: entered allmulticast mode [ 2516.148016][T29962] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2516.185368][T29963] batadv0: left allmulticast mode [ 2516.190987][T29963] batadv0: left promiscuous mode [ 2516.262069][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2516.548884][T26179] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2516.559138][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2516.692010][T26179] usb 4-1: device descriptor read/64, error -32 [ 2516.729100][T24886] usb 1-1: USB disconnect, device number 11 [ 2516.992630][T26179] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2517.301973][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2517.809386][T26179] usb 4-1: config 0 has no interfaces? [ 2517.823381][T26179] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2517.832696][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2517.844654][T26179] usb 4-1: Product: syz [ 2517.874822][T26179] usb 4-1: Manufacturer: syz [ 2517.880304][T26179] usb 4-1: SerialNumber: syz [ 2517.919722][T26179] usb 4-1: config 0 descriptor?? [ 2518.005229][T29993] netlink: 'syz.0.5593': attribute type 10 has an invalid length. [ 2518.281981][T23774] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2518.341927][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2518.440318][T29998] netlink: 'syz.5.5596': attribute type 2 has an invalid length. [ 2518.448717][T29998] netlink: 'syz.5.5596': attribute type 3 has an invalid length. [ 2518.452129][T23774] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2518.468513][T23774] usb 1-1: config 0 has no interfaces? [ 2518.476188][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5596'. [ 2518.492299][T23774] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 2518.521455][T23774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.541279][T23774] usb 1-1: Product: syz [ 2518.585790][T23774] usb 1-1: Manufacturer: syz [ 2518.612247][T23774] usb 1-1: SerialNumber: syz [ 2518.614267][T30000] @: renamed from vlan0 (while UP) [ 2518.681622][T23774] usb 1-1: config 0 descriptor?? [ 2518.714116][T23774] usb 4-1: USB disconnect, device number 12 [ 2518.931184][T29993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5593'. [ 2518.981462][T29993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5593'. [ 2519.062173][T24886] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2519.233954][T24886] usb 6-1: config 0 has no interfaces? [ 2519.249006][T24886] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2519.259994][T24886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.270085][T24886] usb 6-1: Product: syz [ 2519.276047][T24886] usb 6-1: Manufacturer: syz [ 2519.280807][T24886] usb 6-1: SerialNumber: syz [ 2519.296868][T24886] usb 6-1: config 0 descriptor?? [ 2519.381942][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2520.431880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2521.374304][T21244] usb 1-1: USB disconnect, device number 12 [ 2521.461928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2521.582016][T24886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2521.750299][T24886] usb 4-1: config 0 has no interfaces? [ 2521.760955][T24886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2521.784086][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.793765][T24886] usb 4-1: Product: syz [ 2521.798552][T24886] usb 4-1: Manufacturer: syz [ 2521.805437][T24886] usb 4-1: SerialNumber: syz [ 2521.814967][T24886] usb 4-1: config 0 descriptor?? [ 2521.882021][T26179] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2522.008051][T30026] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2522.033833][T26179] usb 1-1: Using ep0 maxpacket: 8 [ 2522.040549][T26179] usb 1-1: config 0 has no interfaces? [ 2522.047118][T26179] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2522.058526][T26179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.074733][T26179] usb 1-1: config 0 descriptor?? [ 2522.135625][T30028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2522.201203][T26179] usb 6-1: USB disconnect, device number 102 [ 2522.501922][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2523.541893][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2524.463537][T24886] usb 4-1: USB disconnect, device number 13 [ 2524.581895][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2524.876974][T24886] usb 1-1: USB disconnect, device number 13 [ 2525.269822][T30063] netlink: 'syz.5.5611': attribute type 4 has an invalid length. [ 2525.359087][T30062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'. [ 2525.621923][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2525.784882][T30067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5610'. [ 2525.871887][T24886] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2525.880152][T30067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5610'. [ 2525.956494][T30077] raw_sendmsg: syz.3.5614 forgot to set AF_INET. Fix it! [ 2526.081933][T24886] usb 6-1: Using ep0 maxpacket: 32 [ 2526.109078][T24886] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2526.118525][T24886] usb 6-1: config 0 has no interface number 0 [ 2526.135594][T24886] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2526.152625][T30067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5610'. [ 2526.182786][T24886] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2526.230841][T24886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.262586][T24886] usb 6-1: Product: syz [ 2526.273646][T24886] usb 6-1: Manufacturer: syz [ 2526.289178][T24886] usb 6-1: SerialNumber: syz [ 2526.308409][T24886] usb 6-1: config 0 descriptor?? [ 2526.336763][T24886] smsc75xx v1.0.0 [ 2526.575121][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5612'. [ 2526.620669][T30068] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2526.661875][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2527.041867][T23774] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2527.192199][T23774] usb 1-1: Using ep0 maxpacket: 16 [ 2527.199197][T23774] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 2527.213798][T23774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.227867][T23774] usb 1-1: config 0 has no interface number 0 [ 2527.234779][T23774] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2527.244385][T23774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.273283][T23774] usb 1-1: config 0 descriptor?? [ 2527.285136][T23774] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 2527.292405][T23774] usb 1-1: No valid video chain found. [ 2527.701926][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2527.940480][T30095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.957436][T30095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2528.439484][T24886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2528.496359][T24886] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 2528.578356][T24886] usb 6-1: USB disconnect, device number 103 [ 2528.742029][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2528.842608][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.849335][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.896466][T30099] netlink: 'syz.1.5620': attribute type 1 has an invalid length. [ 2528.958529][T30099] bond7: entered promiscuous mode [ 2528.964073][T30099] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2528.998871][T30103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2529.006670][T30103] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2529.021416][T30103] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 2529.152101][T21244] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2529.321959][T21244] usb 6-1: Using ep0 maxpacket: 8 [ 2529.334256][T21244] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2529.356250][T21244] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2529.366175][T21244] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 2529.374624][T21244] usb 6-1: Product: syz [ 2529.382129][T21244] usb 6-1: Manufacturer: syz [ 2529.386749][T21244] usb 6-1: SerialNumber: syz [ 2529.394116][T21244] usb 6-1: config 0 descriptor?? [ 2529.404043][T21244] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2529.525954][T18273] usb 1-1: USB disconnect, device number 14 [ 2529.774085][T30111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5623'. [ 2529.783175][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2530.295794][T30111] veth1_vlan (unregistering): left allmulticast mode [ 2530.424317][T23774] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2530.466316][T21244] gspca_zc3xx: reg_w_i err -71 [ 2530.617706][T23774] usb 1-1: config 0 has no interfaces? [ 2530.636012][T23774] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2530.647307][T23774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2530.656698][T23774] usb 1-1: Product: syz [ 2530.662245][T23774] usb 1-1: Manufacturer: syz [ 2530.691984][T23774] usb 1-1: SerialNumber: syz [ 2530.709949][T23774] usb 1-1: config 0 descriptor?? [ 2530.717412][T30101] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5621'. [ 2530.732309][T24886] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2530.822000][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2531.014614][T24886] usb 4-1: config 0 has no interfaces? [ 2531.023754][T24886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2531.047005][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.051915][T21244] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2531.071317][T24886] usb 4-1: Product: syz [ 2531.083165][T24886] usb 4-1: Manufacturer: syz [ 2531.094621][T24886] usb 4-1: SerialNumber: syz [ 2531.113482][T24886] usb 4-1: config 0 descriptor?? [ 2531.143001][T21244] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2531.167281][T21244] usb 6-1: USB disconnect, device number 104 [ 2531.861849][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2532.302098][T24886] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2532.473146][T24886] usb 6-1: Using ep0 maxpacket: 16 [ 2532.484801][T24886] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2532.505860][T24886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2532.528336][T24886] usb 6-1: config 0 has no interface number 0 [ 2532.543383][T24886] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2532.566331][T24886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.595340][T24886] usb 6-1: config 0 descriptor?? [ 2532.621268][T24886] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2532.640184][T24886] usb 6-1: No valid video chain found. [ 2532.902084][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2533.095668][T24886] usb 1-1: USB disconnect, device number 15 [ 2533.205586][ T30] audit: type=1804 audit(1745413890.184:3887): pid=30142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5631" name="file0" dev="ramfs" ino=126681 res=1 errno=0 [ 2533.589944][T26179] usb 4-1: USB disconnect, device number 14 [ 2533.702436][T24886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2533.755005][T30152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2533.795033][T30152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2533.873625][T24886] usb 1-1: Using ep0 maxpacket: 32 [ 2533.881425][T24886] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2533.889913][T24886] usb 1-1: config 0 has no interface number 0 [ 2533.899656][T24886] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2533.914825][T24886] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2533.929943][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.941934][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2533.956623][T24886] usb 1-1: Product: syz [ 2534.007445][T24886] usb 1-1: Manufacturer: syz [ 2534.028874][T24886] usb 1-1: SerialNumber: syz [ 2534.038798][T24886] usb 1-1: config 0 descriptor?? [ 2534.048723][T24886] smsc75xx v1.0.0 [ 2534.316628][T30145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5630'. [ 2534.329113][T30145] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2534.823636][T30161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2534.860266][T30161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2534.932236][T21244] usb 6-1: USB disconnect, device number 105 [ 2534.981881][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2535.662256][T23774] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2535.839445][T23774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2535.849663][T23774] usb 4-1: can't read configurations, error -61 [ 2535.982173][T23774] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2536.021865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2536.150411][T30173] xt_CT: No such helper "snmp" [ 2536.319326][T30177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2536.382641][T23774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2536.422168][T23774] usb 4-1: can't read configurations, error -61 [ 2536.434225][T24886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2536.448814][T24886] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2536.466062][T24886] usb 1-1: USB disconnect, device number 16 [ 2536.505170][T23774] usb usb4-port1: attempt power cycle [ 2536.892091][T23774] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2536.973759][T23774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2537.027589][T23774] usb 4-1: can't read configurations, error -61 [ 2537.062003][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2537.172573][T23774] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2537.214327][T23774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2537.259619][T23774] usb 4-1: can't read configurations, error -61 [ 2537.282299][T23774] usb usb4-port1: unable to enumerate USB device [ 2537.852124][T23774] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2538.054039][T23774] usb 6-1: config 0 has no interfaces? [ 2538.101928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2538.142438][T23774] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2538.172826][T23774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2538.192279][T23774] usb 6-1: Product: syz [ 2538.206939][T23774] usb 6-1: Manufacturer: syz [ 2538.212388][T23774] usb 6-1: SerialNumber: syz [ 2538.316620][T23774] usb 6-1: config 0 descriptor?? [ 2538.801665][T30189] openvswitch: netlink: Message has 3 unknown bytes. [ 2538.809246][T30189] openvswitch: netlink: Actions may not be safe on all matching packets [ 2539.142060][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2539.791893][T26179] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2539.952378][T26179] usb 4-1: Using ep0 maxpacket: 32 [ 2540.000415][T26179] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.010802][T30208] vlan0: entered promiscuous mode [ 2540.023110][T26179] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2540.033106][T26179] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2540.043911][T26179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.054817][T26179] usb 4-1: config 0 descriptor?? [ 2540.059933][T30208] veth0: entered promiscuous mode [ 2540.182062][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2540.464799][T30215] netlink: 'syz.2.5648': attribute type 2 has an invalid length. [ 2540.501833][T30215] netlink: 46 bytes leftover after parsing attributes in process `syz.2.5648'. [ 2540.612927][T30216] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5648'. [ 2540.680787][T30202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2540.696320][T18273] usb 4-1: USB disconnect, device number 19 [ 2540.858382][T30187] syz.0.5640 (30187): drop_caches: 1 [ 2541.031195][T26179] usb 6-1: USB disconnect, device number 106 [ 2541.221880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2541.498622][T26179] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2541.673851][T26179] usb 6-1: Using ep0 maxpacket: 8 [ 2541.719054][T26179] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2541.741394][T26179] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 2541.781968][T26179] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2541.813989][T26179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.262002][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2543.082165][T23774] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2543.255217][T23774] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2543.269561][T23774] usb 1-1: can't read configurations, error -61 [ 2543.302146][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2543.401997][T23774] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2543.559682][T23774] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2543.570438][T23774] usb 1-1: can't read configurations, error -61 [ 2543.577672][T23774] usb usb1-port1: attempt power cycle [ 2544.102171][T23774] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2544.197147][T26179] usb 6-1: USB disconnect, device number 107 [ 2544.342112][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2544.382164][T18273] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2544.510946][T23774] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2544.520835][T23774] usb 1-1: can't read configurations, error -61 [ 2544.722003][T18273] usb 4-1: config 0 has no interfaces? [ 2544.778340][T18273] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2544.791168][T18273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2544.799295][T18273] usb 4-1: Product: syz [ 2544.843518][T23774] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2544.882421][T18273] usb 4-1: Manufacturer: syz [ 2544.887129][T18273] usb 4-1: SerialNumber: syz [ 2544.993975][T18273] usb 4-1: config 0 descriptor?? [ 2545.381875][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2546.285266][T23774] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2546.293166][T23774] usb 1-1: can't read configurations, error -71 [ 2546.299666][T23774] usb usb1-port1: unable to enumerate USB device [ 2546.341992][T21244] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2546.421895][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2546.498403][T21244] usb 6-1: config 0 has no interfaces? [ 2546.508876][T21244] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2546.526478][T21244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.538372][T21244] usb 6-1: Product: syz [ 2546.546895][T21244] usb 6-1: Manufacturer: syz [ 2546.551627][T21244] usb 6-1: SerialNumber: syz [ 2546.560134][T21244] usb 6-1: config 0 descriptor?? [ 2546.793974][T30271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5659'. [ 2546.874784][T30271] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2547.461874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2547.504070][T30280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2547.515764][T30280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2547.581114][T30280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2547.859684][T18273] usb 4-1: USB disconnect, device number 20 [ 2547.929840][T30283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5663'. [ 2547.947586][T30283] batman_adv: batadv0: Adding interface: dummy0 [ 2547.956647][T30283] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2547.994331][T30283] batman_adv: batadv0: Interface activated: dummy0 [ 2548.019585][T30285] batadv0: mtu less than device minimum [ 2548.028822][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.040693][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.052377][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.063633][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.074930][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.086273][T30285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2548.239243][T30290] delete_channel: no stack [ 2548.641842][T26179] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2548.884909][T18273] usb 6-1: USB disconnect, device number 108 [ 2548.953236][T26179] usb 4-1: config 0 has no interfaces? [ 2548.964545][T26179] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2548.991927][ T5899] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2549.162312][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2549.192089][T26179] usb 4-1: Product: syz [ 2549.199355][T26179] usb 4-1: Manufacturer: syz [ 2549.204052][T26179] usb 4-1: SerialNumber: syz [ 2549.302546][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2549.318752][T26179] usb 4-1: config 0 descriptor?? [ 2549.326274][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2549.336400][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2549.353757][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.372172][T30295] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 2549.387847][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2549.749831][T30294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2549.770798][T30294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2550.591853][ C0] net_ratelimit: 15 callbacks suppressed [ 2550.591873][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2551.621855][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2551.877854][T18273] usb 4-1: USB disconnect, device number 21 [ 2552.133575][T21244] usb 1-1: USB disconnect, device number 21 [ 2552.662012][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2552.813664][T30312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2553.492050][T30337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.513664][T30337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2553.562820][T30339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5672'. [ 2553.582714][T30339] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2553.702118][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2554.741873][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2554.982001][ T5899] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2554.991925][T18273] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2555.247493][T18273] usb 6-1: Using ep0 maxpacket: 16 [ 2555.293942][T18273] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2555.312677][T18273] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2555.340827][T18273] usb 6-1: Product: syz [ 2555.357965][T18273] usb 6-1: Manufacturer: syz [ 2555.370532][T18273] usb 6-1: SerialNumber: syz [ 2555.394996][T18273] usb 6-1: config 0 descriptor?? [ 2555.781925][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2556.071884][ T5899] usb 1-1: config 0 has no interfaces? [ 2556.402388][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2556.442256][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.450359][ T5899] usb 1-1: Product: syz [ 2556.455099][ T5899] usb 1-1: Manufacturer: syz [ 2556.459752][ T5899] usb 1-1: SerialNumber: syz [ 2556.482037][ T5899] usb 1-1: config 0 descriptor?? [ 2556.821873][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2557.036865][T30369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5674'. [ 2557.121907][T30369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5674'. [ 2557.158644][T30372] sctp: [Deprecated]: syz.3.5680 (pid 30372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2557.158644][T30372] Use struct sctp_sack_info instead [ 2557.635519][ T5899] usb 6-1: USB disconnect, device number 109 [ 2557.861971][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2558.117593][T30383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.160839][T30383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.901897][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2559.539862][T18273] usb 1-1: USB disconnect, device number 22 [ 2559.941877][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2560.051829][T18273] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2560.200201][T30407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5688'. [ 2560.370085][T30399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.386965][T30399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.405037][T30399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.418236][T30399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.556777][T30399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2560.572206][T30399] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2560.981940][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2561.436573][T18273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2561.449552][T18273] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2561.460389][T18273] usb 4-1: can't read configurations, error -71 [ 2562.021844][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2562.572080][T18273] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2562.953629][T18273] usb 4-1: Using ep0 maxpacket: 8 [ 2563.061944][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2563.254775][T30430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2563.434393][T30442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.456567][T30442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2564.101874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2564.671892][T21244] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2564.850851][T21244] usb 1-1: config 0 has no interfaces? [ 2564.859215][T21244] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2564.868886][T21244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2564.922178][T21244] usb 1-1: Product: syz [ 2564.927597][T21244] usb 1-1: Manufacturer: syz [ 2564.940144][T21244] usb 1-1: SerialNumber: syz [ 2564.958995][T21244] usb 1-1: config 0 descriptor?? [ 2565.141880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2565.983900][T18273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2566.008979][T18273] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2566.016734][T18273] usb 4-1: can't read configurations, error -71 [ 2566.181943][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2567.221872][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2568.062480][T18273] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2568.261904][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2568.292049][T18273] usb 6-1: Using ep0 maxpacket: 16 [ 2568.318898][T18273] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2568.329602][T18273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2568.359958][T18273] usb 6-1: config 0 has no interface number 0 [ 2568.391925][T18273] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2568.420758][T18273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.504490][T18273] usb 6-1: config 0 descriptor?? [ 2568.528426][T18273] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 2568.564051][T18273] usb 6-1: No valid video chain found. [ 2569.213869][ T5899] usb 1-1: USB disconnect, device number 23 [ 2569.301865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2569.328811][T30485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2569.486174][T30486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5704'. [ 2570.341952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2570.591142][T18273] usb 6-1: USB disconnect, device number 110 [ 2570.699340][T30502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5709'. [ 2570.759275][T30502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2570.773831][T30502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2571.381912][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2571.412021][T30504] futex_wake_op: syz.5.5711 tries to shift op by -33; fix this program [ 2572.172150][T18273] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2572.371274][T18273] usb 6-1: config 0 has no interfaces? [ 2572.421919][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2572.459736][T18273] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2572.502215][T18273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.510271][T18273] usb 6-1: Product: syz [ 2572.566132][T18273] usb 6-1: Manufacturer: syz [ 2572.578633][T18273] usb 6-1: SerialNumber: syz [ 2572.603165][T18273] usb 6-1: config 0 descriptor?? [ 2573.059358][T30517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2573.108140][T30517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2573.461967][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2574.501884][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2574.685135][T30528] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8' [ 2574.902012][T18273] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2575.194087][T18273] usb 4-1: Using ep0 maxpacket: 8 [ 2575.322024][T18273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2575.345599][T18273] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2575.364249][T18273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.394633][T18273] usb 4-1: config 0 descriptor?? [ 2575.541901][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2576.389701][T21244] usb 6-1: USB disconnect, device number 111 [ 2576.581889][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2576.956521][ T5899] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2577.621853][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2577.965663][ T5899] usb 1-1: no configurations [ 2577.970419][ T5899] usb 1-1: can't read configurations, error -22 [ 2578.131944][ T5899] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2578.150707][T18273] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2578.272349][T18273] usb 4-1: USB disconnect, device number 26 [ 2578.461956][T23774] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2578.491619][ T5899] usb 1-1: no configurations [ 2578.496593][ T5899] usb 1-1: can't read configurations, error -22 [ 2578.500578][T30562] syz.3.5723 (30562): drop_caches: 2 [ 2578.510672][ T5899] usb usb1-port1: attempt power cycle [ 2578.661842][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2578.922788][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2578.948930][T23774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.003513][ T5899] usb 1-1: no configurations [ 2579.026438][T23774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2579.037534][ T5899] usb 1-1: can't read configurations, error -22 [ 2579.061855][T23774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2579.149837][T23774] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2579.163290][T23774] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 2579.186120][T23774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.201956][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2579.249657][T23774] usb 6-1: config 0 descriptor?? [ 2579.266732][T23774] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2579.280483][T23774] usb 6-1: MIDIStreaming interface descriptor not found [ 2579.568120][T30560] netlink: 'syz.5.5722': attribute type 2 has an invalid length. [ 2579.701917][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2579.711416][T30560] 0: entered promiscuous mode [ 2580.741883][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2581.781912][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2581.851913][ T5899] usb 1-1: device descriptor read/all, error -71 [ 2581.860477][ T5899] usb usb1-port1: unable to enumerate USB device [ 2582.239219][T23774] usb 6-1: USB disconnect, device number 112 [ 2582.592855][T30592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.606375][T30592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.707264][ T5899] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 2582.821838][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2583.071978][ T5899] usb 6-1: not running at top speed; connect to a high speed hub [ 2583.168801][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2583.182177][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2583.191519][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2583.276479][ T5899] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2583.286024][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.363929][ T5899] usb 6-1: Product: syz [ 2583.378382][ T5899] usb 6-1: Manufacturer: syz [ 2583.383651][ T5899] usb 6-1: SerialNumber: syz [ 2583.671961][T24886] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2583.832112][T26179] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2583.839788][T24886] usb 1-1: Using ep0 maxpacket: 8 [ 2583.847828][T24886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2583.861951][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2584.000806][T24886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2584.057117][T24886] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 2584.113629][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.126695][T24886] usb 1-1: Product: syz [ 2584.131041][T24886] usb 1-1: Manufacturer: syz [ 2584.136071][T24886] usb 1-1: SerialNumber: syz [ 2584.165791][T24886] usb 1-1: config 0 descriptor?? [ 2584.175242][T26179] usb 4-1: config 0 has no interfaces? [ 2584.270470][T26179] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2584.279771][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.288133][T26179] usb 4-1: Product: syz [ 2584.292773][T26179] usb 4-1: Manufacturer: syz [ 2584.297654][T26179] usb 4-1: SerialNumber: syz [ 2584.305082][T26179] usb 4-1: config 0 descriptor?? [ 2584.716146][T30607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2584.732144][T30607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2584.771415][T30606] netlink: 'syz.0.5731': attribute type 10 has an invalid length. [ 2584.789663][T30606] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2584.901865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2585.941905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2586.579225][T30617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.588448][T30617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2586.981885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2587.251293][T21244] usb 4-1: USB disconnect, device number 27 [ 2587.662141][T21244] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2587.829789][T21244] usb 4-1: config 0 has no interfaces? [ 2587.956195][T21244] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2587.969973][T21244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.016039][T21244] usb 4-1: Product: syz [ 2588.021972][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2588.042490][T21244] usb 4-1: Manufacturer: syz [ 2588.049343][T21244] usb 4-1: SerialNumber: syz [ 2588.063432][T21244] usb 4-1: config 0 descriptor?? [ 2588.528625][ T5899] usb 6-1: 0:2 : does not exist [ 2588.737939][T21244] usb 1-1: USB disconnect, device number 28 [ 2588.768058][T30624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2589.061890][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2589.307194][ T5899] usb 6-1: USB disconnect, device number 113 [ 2589.501853][T21244] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2589.691885][T21244] usb 1-1: Using ep0 maxpacket: 8 [ 2589.722080][ T5899] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2589.899045][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.915821][ T5899] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2589.926275][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.941510][ T5899] usb 6-1: config 0 descriptor?? [ 2589.952201][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 2590.111853][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2590.270181][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.277216][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.558231][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2590.575375][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 2590.598268][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2590.621357][T30637] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 2590.632513][T30637] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 2590.656907][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 2590.669342][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 2590.683595][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 2590.705283][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 2590.716244][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 2590.737138][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 2590.744910][ T5899] pwc: recv_control_msg error -32 req 02 val 2500 [ 2590.752836][ T5899] pwc: recv_control_msg error -32 req 02 val 2400 [ 2590.760022][ T5899] pwc: recv_control_msg error -32 req 02 val 2600 [ 2590.954982][T21244] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2590.968160][T21244] usb 1-1: no configurations [ 2590.968776][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 2590.974851][T21244] usb 1-1: can't read configurations, error -22 [ 2590.988307][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 2590.996755][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 2591.012173][ T5899] pwc: Registered as video103. [ 2591.018322][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input105 [ 2591.087544][ T5899] usb 6-1: USB disconnect, device number 114 [ 2591.117955][T30644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2591.128271][T30644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2591.141895][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2591.202722][T30645] delete_channel: no stack [ 2591.349185][T23774] usb 4-1: USB disconnect, device number 28 [ 2592.181849][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2592.218791][T23774] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2592.732825][T23774] usb 4-1: Using ep0 maxpacket: 16 [ 2592.744993][T23774] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2592.754108][T23774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2592.768554][T23774] usb 4-1: config 0 has no interface number 0 [ 2592.776458][T23774] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2592.790748][T23774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.809169][T23774] usb 4-1: config 0 descriptor?? [ 2592.994505][T23774] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 2593.001403][T23774] usb 4-1: No valid video chain found. [ 2593.038353][T30660] netlink: 'syz.5.5743': attribute type 12 has an invalid length. [ 2593.221851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2594.261837][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2594.701929][ T5899] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2594.971819][ T5899] usb 6-1: device descriptor read/64, error -71 [ 2595.301862][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2595.303475][ T5899] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2595.417080][T30679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2595.469388][ T5899] usb 6-1: device descriptor read/64, error -71 [ 2595.524466][T30679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.558280][T30682] can: request_module (can-proto-0) failed. [ 2595.576333][T30682] input: syz1 as /devices/virtual/input/input106 [ 2595.585164][ T5899] usb usb6-port1: attempt power cycle [ 2595.932157][ T5899] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2596.043666][ T5899] usb 6-1: device descriptor read/8, error -71 [ 2596.151662][T23774] usb 4-1: USB disconnect, device number 29 [ 2596.341881][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2596.351906][ T5899] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2596.374619][ T5899] usb 6-1: device descriptor read/8, error -71 [ 2596.492157][ T5899] usb usb6-port1: unable to enumerate USB device [ 2596.641812][T18273] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2596.709816][T30692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5747'. [ 2596.792013][T18273] usb 4-1: Using ep0 maxpacket: 32 [ 2596.802325][T18273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2596.818787][T18273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2596.828827][T18273] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2596.842371][T18273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.882916][T18273] usb 4-1: config 0 descriptor?? [ 2597.331427][T18273] savu 0003:1E7D:2D5A.006B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2597.381879][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2598.087043][ T5899] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2598.421845][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2598.781778][T26179] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 2598.884270][ T5899] usb 6-1: config 0 has no interfaces? [ 2598.898436][ T5899] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2598.919928][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.968874][ T5899] usb 6-1: Product: syz [ 2598.985177][ T5899] usb 6-1: Manufacturer: syz [ 2599.001508][ T5899] usb 6-1: SerialNumber: syz [ 2599.027309][ T5899] usb 6-1: config 0 descriptor?? [ 2599.461847][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2599.955210][T30708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.986830][T30708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.041962][ T5899] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2600.202289][ T5899] usb 1-1: config 0 has no interfaces? [ 2600.225880][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2600.238750][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.247031][ T5899] usb 1-1: Product: syz [ 2600.251437][ T5899] usb 1-1: Manufacturer: syz [ 2600.260478][ T5899] usb 1-1: SerialNumber: syz [ 2600.285803][ T5899] usb 1-1: config 0 descriptor?? [ 2600.502383][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2601.090803][T30720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5750'. [ 2601.221375][T30720] bridge0: entered promiscuous mode [ 2601.263479][ T6719] usb 4-1: USB disconnect, device number 30 [ 2601.541849][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2602.528014][T30727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.537062][T30727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2602.581890][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2603.026721][T23774] usb 6-1: USB disconnect, device number 119 [ 2603.192208][T30736] netlink: 'syz.5.5757': attribute type 10 has an invalid length. [ 2603.452071][T23774] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2603.606618][T23774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2603.621862][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2603.632364][T23774] usb 6-1: config 0 has no interfaces? [ 2603.642027][T23774] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 2603.661370][T23774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.674502][T23774] usb 6-1: Product: syz [ 2603.678687][T23774] usb 6-1: Manufacturer: syz [ 2603.683724][T23774] usb 6-1: SerialNumber: syz [ 2603.702655][T23774] usb 6-1: config 0 descriptor?? [ 2603.937298][T30736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5757'. [ 2604.015299][T30744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5757'. [ 2604.024600][ T6719] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2604.033200][T30744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5757'. [ 2604.205197][ T6719] usb 4-1: Using ep0 maxpacket: 16 [ 2604.307101][ T6719] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2604.319784][ T6719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2604.338791][ T6719] usb 4-1: config 0 has no interface number 0 [ 2604.352519][ T6719] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 2604.371174][ T6719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2604.396976][ T6719] usb 4-1: config 0 descriptor?? [ 2604.428691][ T6719] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 2604.449728][T30746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2604.459608][ T6719] usb 4-1: No valid video chain found. [ 2604.661858][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2604.669258][T30746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2604.755877][T23774] usb 1-1: USB disconnect, device number 31 [ 2604.847804][T30747] Cannot find add_set index 3 as target [ 2605.271777][T18273] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2605.421904][T18273] usb 1-1: Using ep0 maxpacket: 32 [ 2605.428974][T18273] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2605.441036][T18273] usb 1-1: config 0 has no interface number 0 [ 2605.448362][T18273] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2605.467231][T18273] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2605.486338][T18273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.498094][T18273] usb 1-1: Product: syz [ 2605.503121][T18273] usb 1-1: Manufacturer: syz [ 2605.517977][T18273] usb 1-1: SerialNumber: syz [ 2605.529020][T18273] usb 1-1: config 0 descriptor?? [ 2605.545656][T18273] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2605.558167][T18273] em28xx 1-1:0.132: Video interface 132 found: [ 2605.701900][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2605.938822][T18273] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 2606.286981][ T6719] usb 6-1: USB disconnect, device number 120 [ 2606.350945][T18273] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2606.364713][T18273] em28xx 1-1:0.132: board has no eeprom [ 2606.431449][T23774] usb 4-1: USB disconnect, device number 31 [ 2606.442400][T18273] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2606.451611][T18273] em28xx 1-1:0.132: analog set to bulk mode. [ 2606.460057][T21244] em28xx 1-1:0.132: Registering V4L2 extension [ 2606.590122][T30750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.629160][T30750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.709801][T21244] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2606.718919][T21244] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2606.736386][T18273] usb 1-1: USB disconnect, device number 32 [ 2606.742491][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2606.751575][T21244] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2606.772739][T18273] em28xx 1-1:0.132: Disconnecting em28xx [ 2606.802234][ T6719] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2606.868931][T21244] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 2606.878211][T21244] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 2606.887127][T21244] em28xx 1-1:0.132: No AC97 audio processor [ 2606.898862][T21244] usb 1-1: Decoder not found [ 2606.926239][T21244] em28xx 1-1:0.132: failed to create media graph [ 2606.950783][T21244] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 2606.961789][ T6719] usb 6-1: Using ep0 maxpacket: 8 [ 2606.969265][ T6719] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 2606.988946][ T6719] usb 6-1: config 2 has no interface number 0 [ 2606.997711][ T6719] usb 6-1: config 2 interface 31 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 2607.005170][T21244] em28xx 1-1:0.132: Remote control support is not available for this card. [ 2607.019439][T18273] em28xx 1-1:0.132: Closing input extension [ 2607.026090][T18273] ================================================================== [ 2607.034160][T18273] BUG: KASAN: slab-use-after-free in media_device_unregister+0x154/0x470 [ 2607.042568][T18273] Read of size 8 at addr ffff8880338f8210 by task kworker/0:9/18273 [ 2607.050530][T18273] [ 2607.052854][T18273] CPU: 0 UID: 0 PID: 18273 Comm: kworker/0:9 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 2607.052872][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2607.052881][T18273] Workqueue: usb_hub_wq hub_event [ 2607.052903][T18273] Call Trace: [ 2607.052910][T18273] [ 2607.052916][T18273] dump_stack_lvl+0x241/0x360 [ 2607.052939][T18273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2607.052958][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.052976][T18273] ? rcu_is_watching+0x15/0xb0 [ 2607.052988][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.053005][T18273] ? lock_release+0x4e/0x3e0 [ 2607.053024][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.053041][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.053058][T18273] print_report+0x16e/0x5b0 [ 2607.053071][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.053087][T18273] ? __virt_addr_valid+0x183/0x530 [ 2607.053102][T18273] ? __virt_addr_valid+0x45f/0x530 [ 2607.053119][T18273] ? __phys_addr+0xba/0x170 [ 2607.053135][T18273] ? media_device_unregister+0x154/0x470 [ 2607.053149][T18273] kasan_report+0x143/0x180 [ 2607.053162][T18273] ? media_device_unregister+0x154/0x470 [ 2607.053177][T18273] media_device_unregister+0x154/0x470 [ 2607.053193][T18273] em28xx_release_resources+0xa7/0x230 [ 2607.053216][T18273] em28xx_usb_disconnect+0x1cc/0x530 [ 2607.053239][T18273] usb_unbind_interface+0x25b/0x940 [ 2607.053255][T18273] ? kernfs_find_ns+0x202/0x310 [ 2607.053272][T18273] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2607.053285][T18273] device_release_driver_internal+0x503/0x7c0 [ 2607.053306][T18273] bus_remove_device+0x34f/0x420 [ 2607.053328][T18273] device_del+0x57c/0x9b0 [ 2607.053343][T18273] ? kobject_put+0x272/0x480 [ 2607.053359][T18273] ? __pfx_device_del+0x10/0x10 [ 2607.053372][T18273] ? kobject_put+0x44d/0x480 [ 2607.053389][T18273] usb_disable_device+0x3c5/0x860 [ 2607.053413][T18273] usb_disconnect+0x340/0x960 [ 2607.053434][T18273] hub_event+0x1d2a/0x50f0 [ 2607.053457][T18273] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2607.053477][T18273] ? __pfx_hub_event+0x10/0x10 [ 2607.053489][T18273] ? __lock_acquire+0xad5/0xd80 [ 2607.053515][T18273] ? process_scheduled_works+0x9cb/0x18e0 [ 2607.053535][T18273] process_scheduled_works+0xac3/0x18e0 [ 2607.053564][T18273] ? __pfx_process_scheduled_works+0x10/0x10 [ 2607.053587][T18273] ? assign_work+0x367/0x3d0 [ 2607.053609][T18273] worker_thread+0x870/0xd50 [ 2607.053625][T18273] ? __kthread_parkme+0x1a8/0x200 [ 2607.053639][T18273] ? __pfx_worker_thread+0x10/0x10 [ 2607.053651][T18273] kthread+0x7b7/0x940 [ 2607.053667][T18273] ? __pfx_worker_thread+0x10/0x10 [ 2607.053679][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053693][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053712][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053727][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053741][T18273] ? _raw_spin_unlock_irq+0x23/0x50 [ 2607.053761][T18273] ? lockdep_hardirqs_on+0x9d/0x150 [ 2607.053774][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053789][T18273] ret_from_fork+0x4b/0x80 [ 2607.053802][T18273] ? __pfx_kthread+0x10/0x10 [ 2607.053817][T18273] ret_from_fork_asm+0x1a/0x30 [ 2607.053834][T18273] [ 2607.053840][T18273] [ 2607.353944][T18273] Allocated by task 21244: [ 2607.358344][T18273] kasan_save_track+0x3f/0x80 [ 2607.363021][T18273] __kasan_kmalloc+0x9d/0xb0 [ 2607.367620][T18273] __kmalloc_cache_noprof+0x236/0x370 [ 2607.372982][T18273] em28xx_v4l2_init+0xfd/0x2f70 [ 2607.377820][T18273] em28xx_init_extension+0x120/0x1c0 [ 2607.383123][T18273] process_scheduled_works+0xac3/0x18e0 [ 2607.388670][T18273] worker_thread+0x870/0xd50 [ 2607.393340][T18273] kthread+0x7b7/0x940 [ 2607.397431][T18273] ret_from_fork+0x4b/0x80 [ 2607.401857][T18273] ret_from_fork_asm+0x1a/0x30 [ 2607.406638][T18273] [ 2607.408969][T18273] Freed by task 21244: [ 2607.413058][T18273] kasan_save_track+0x3f/0x80 [ 2607.417758][T18273] kasan_save_free_info+0x40/0x50 [ 2607.422796][T18273] __kasan_slab_free+0x59/0x70 [ 2607.427580][T18273] kfree+0x198/0x430 [ 2607.431493][T18273] em28xx_v4l2_init+0x16fc/0x2f70 [ 2607.436541][T18273] em28xx_init_extension+0x120/0x1c0 [ 2607.441851][T18273] process_scheduled_works+0xac3/0x18e0 [ 2607.447418][T18273] worker_thread+0x870/0xd50 [ 2607.452024][T18273] kthread+0x7b7/0x940 [ 2607.456112][T18273] ret_from_fork+0x4b/0x80 [ 2607.460531][T18273] ret_from_fork_asm+0x1a/0x30 [ 2607.465321][T18273] [ 2607.467660][T18273] The buggy address belongs to the object at ffff8880338f8000 [ 2607.467660][T18273] which belongs to the cache kmalloc-8k of size 8192 [ 2607.481728][T18273] The buggy address is located 528 bytes inside of [ 2607.481728][T18273] freed 8192-byte region [ffff8880338f8000, ffff8880338fa000) [ 2607.495641][T18273] [ 2607.497970][T18273] The buggy address belongs to the physical page: [ 2607.504392][T18273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x338f8 [ 2607.513153][T18273] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2607.521652][T18273] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2607.529736][T18273] page_type: f5(slab) [ 2607.533725][T18273] raw: 00fff00000000040 ffff88801b042280 ffffea0001717000 dead000000000005 [ 2607.542321][T18273] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2607.550918][T18273] head: 00fff00000000040 ffff88801b042280 ffffea0001717000 dead000000000005 [ 2607.559586][T18273] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2607.568269][T18273] head: 00fff00000000003 ffffea0000ce3e01 00000000ffffffff 00000000ffffffff [ 2607.576936][T18273] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2607.585680][T18273] page dumped because: kasan: bad access detected [ 2607.592095][T18273] page_owner tracks the page as allocated [ 2607.597800][T18273] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6198, tgid 6198 (kworker/u8:9), ts 2450315180223, free_ts 2449971528254 [ 2607.618808][T18273] post_alloc_hook+0x1f4/0x240 [ 2607.623572][T18273] get_page_from_freelist+0x360a/0x37a0 [ 2607.629116][T18273] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 2607.634940][T18273] alloc_pages_mpol+0x339/0x690 [ 2607.639784][T18273] allocate_slab+0x8f/0x3b0 [ 2607.644279][T18273] ___slab_alloc+0xc3b/0x1500 [ 2607.648945][T18273] __slab_alloc+0x58/0xa0 [ 2607.653262][T18273] __kmalloc_noprof+0x2ea/0x4d0 [ 2607.658112][T18273] n_hdlc_tty_receive+0x1ce/0x4e0 [ 2607.663141][T18273] tty_ldisc_receive_buf+0x11f/0x170 [ 2607.668427][T18273] tty_port_default_receive_buf+0x6d/0xa0 [ 2607.674142][T18273] flush_to_ldisc+0x32b/0x860 [ 2607.678806][T18273] process_scheduled_works+0xac3/0x18e0 [ 2607.684356][T18273] worker_thread+0x870/0xd50 [ 2607.688935][T18273] kthread+0x7b7/0x940 [ 2607.692990][T18273] ret_from_fork+0x4b/0x80 [ 2607.697392][T18273] page last free pid 27840 tgid 27840 stack trace: [ 2607.703877][T18273] register_dummy_stack+0x8e/0xe0 [ 2607.708900][T18273] init_page_owner+0x3e/0x790 [ 2607.713563][T18273] page_ext_init+0x731/0x790 [ 2607.718146][T18273] mm_core_init+0x5b/0x70 [ 2607.722470][T18273] [ 2607.724781][T18273] Memory state around the buggy address: [ 2607.730411][T18273] ffff8880338f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2607.738457][T18273] ffff8880338f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2607.746508][T18273] >ffff8880338f8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2607.754552][T18273] ^ [ 2607.759121][T18273] ffff8880338f8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2607.767165][T18273] ffff8880338f8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2607.775210][T18273] ================================================================== [ 2607.784269][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2607.798416][ T6719] usb 6-1: config 2 interface 31 has no altsetting 0 [ 2607.820371][ T6719] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2607.881639][ T6719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.900386][ T6719] usb 6-1: Product: syz [ 2607.909636][ T6719] usb 6-1: Manufacturer: syz [ 2607.920153][ T6719] usb 6-1: SerialNumber: syz [ 2607.957334][T18273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2607.964612][T18273] CPU: 0 UID: 0 PID: 18273 Comm: kworker/0:9 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 2607.976791][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2607.986886][T18273] Workqueue: usb_hub_wq hub_event [ 2607.991928][T18273] Call Trace: [ 2607.995228][T18273] [ 2607.998169][T18273] dump_stack_lvl+0x241/0x360 [ 2608.002867][T18273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2608.008066][T18273] ? __pfx__printk+0x10/0x10 [ 2608.012669][T18273] ? vscnprintf+0x5d/0x90 [ 2608.017006][T18273] panic+0x349/0x880 [ 2608.020900][T18273] ? check_panic_on_warn+0x21/0xb0 [ 2608.026021][T18273] ? __pfx_panic+0x10/0x10 [ 2608.030462][T18273] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 2608.036465][T18273] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2608.042818][T18273] ? print_report+0x519/0x5b0 [ 2608.047511][T18273] check_panic_on_warn+0x86/0xb0 [ 2608.052466][T18273] ? media_device_unregister+0x154/0x470 [ 2608.058106][T18273] end_report+0x77/0x160 [ 2608.062351][T18273] kasan_report+0x154/0x180 [ 2608.066870][T18273] ? media_device_unregister+0x154/0x470 [ 2608.072509][T18273] media_device_unregister+0x154/0x470 [ 2608.077973][T18273] em28xx_release_resources+0xa7/0x230 [ 2608.083449][T18273] em28xx_usb_disconnect+0x1cc/0x530 [ 2608.088777][T18273] usb_unbind_interface+0x25b/0x940 [ 2608.093994][T18273] ? kernfs_find_ns+0x202/0x310 [ 2608.098867][T18273] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2608.104615][T18273] device_release_driver_internal+0x503/0x7c0 [ 2608.110714][T18273] bus_remove_device+0x34f/0x420 [ 2608.115675][T18273] device_del+0x57c/0x9b0 [ 2608.120015][T18273] ? kobject_put+0x272/0x480 [ 2608.124652][T18273] ? __pfx_device_del+0x10/0x10 [ 2608.129537][T18273] ? kobject_put+0x44d/0x480 [ 2608.134142][T18273] usb_disable_device+0x3c5/0x860 [ 2608.139176][T18273] usb_disconnect+0x340/0x960 [ 2608.143875][T18273] hub_event+0x1d2a/0x50f0 [ 2608.148310][T18273] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2608.153526][T18273] ? __pfx_hub_event+0x10/0x10 [ 2608.158302][T18273] ? __lock_acquire+0xad5/0xd80 [ 2608.163183][T18273] ? process_scheduled_works+0x9cb/0x18e0 [ 2608.168915][T18273] process_scheduled_works+0xac3/0x18e0 [ 2608.174482][T18273] ? __pfx_process_scheduled_works+0x10/0x10 [ 2608.180482][T18273] ? assign_work+0x367/0x3d0 [ 2608.185095][T18273] worker_thread+0x870/0xd50 [ 2608.189727][T18273] ? __kthread_parkme+0x1a8/0x200 [ 2608.194765][T18273] ? __pfx_worker_thread+0x10/0x10 [ 2608.199885][T18273] kthread+0x7b7/0x940 [ 2608.204000][T18273] ? __pfx_worker_thread+0x10/0x10 [ 2608.209118][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.213712][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.218310][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.222921][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.227518][T18273] ? _raw_spin_unlock_irq+0x23/0x50 [ 2608.232752][T18273] ? lockdep_hardirqs_on+0x9d/0x150 [ 2608.237955][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.242563][T18273] ret_from_fork+0x4b/0x80 [ 2608.246982][T18273] ? __pfx_kthread+0x10/0x10 [ 2608.251592][T18273] ret_from_fork_asm+0x1a/0x30 [ 2608.256370][T18273] [ 2608.259903][T18273] Kernel Offset: disabled [ 2608.264237][T18273] Rebooting in 86400 seconds..